---
title: "Where a repository's credential comes from"
method: GET
path: "/w/{workspace}/git_sync/credential/origin"
tags: ["Git Sync"]
---

# Where a repository's credential comes from

`GET /w/{workspace}/git_sync/credential/origin`

## Request

- Base URL: `/api` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/w/{workspace}/git_sync/credential/origin`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `token`

Whether Windmill holds this repository's access token, and which host it talks to. `held` means this workspace stores it, `borrowed` means an ancestor does and it is not this workspace's to replace. Both absent means the repository authenticates with whatever its URL carries. Returns no secret. Requires workspace admin.

## Path parameters

- `workspace` string, required

## Query parameters

- `path` string, required

## Response `200`

where the credential comes from

- object
  - `origin` 'held' | 'borrowed'
  - `provider` 'gitlab'

## Changes

- **2026-09-08** `2544d864d84d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/windmill/apis/windmill-api/changes/w/:workspace/git_sync/credential/origin/get.md)

---

[API](https://skmtc.dev/windmill/apis/windmill-api.md) - [All operations](https://skmtc.dev/windmill/apis/windmill-api/llms.txt) - [OpenAPI document](https://skmtc.dev/windmill/apis/windmill-api/revisions/2b1f8bcee7bf?raw)