SPB Git
spboucher.ai

Repository Public

spbdoc-api

list.md 7.6 KB

# title: List Credentials url: https://platform.claude.com/docs/en/api/beta/vaults/credentials/list

# List Credentials

GET /v1/vaults/{vault_id}/credentials

List Credentials

# Path parameters

  • vault_id: string

# Query parameters

  • include_archived: optional boolean

    Whether to include archived credentials in the results.

  • limit: optional number

    Maximum number of credentials to return per page. Defaults to 20, maximum 100.

    format: int32

  • page: optional string

    Opaque pagination token from a previous list_credentials response.

# Headers

  • "anthropic-beta": optional array of AnthropicBeta

    Optional header to specify the beta version(s) you want to use.

    • string

    • "message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 43 more

      • "message-batches-2024-09-24"

      • "prompt-caching-2024-07-31"

      • "computer-use-2024-10-22"

      • "computer-use-2025-01-24"

      • "pdfs-2024-09-25"

      • "token-counting-2024-11-01"

      • "token-efficient-tools-2025-02-19"

      • "output-128k-2025-02-19"

      • "files-api-2025-04-14"

      • "mcp-client-2025-04-04"

      • "mcp-client-2025-11-20"

      • "dev-full-thinking-2025-05-14"

      • "interleaved-thinking-2025-05-14"

      • "code-execution-2025-05-22"

      • "extended-cache-ttl-2025-04-11"

      • "context-1m-2025-08-07"

      • "context-management-2025-06-27"

      • "model-context-window-exceeded-2025-08-26"

      • "skills-2025-10-02"

      • "fast-mode-2026-02-01"

      • "output-300k-2026-03-24"

      • "user-profiles-2026-03-24"

      • "user-profiles-2026-08-18"

      • "user-profiles-2026-09-04"

      • "advisor-tool-2026-03-01"

      • "managed-agents-2026-04-01"

      • "cache-diagnosis-2026-04-07"

      • "dreaming-2026-04-21"

      • "thinking-token-count-2026-05-13"

      • "server-side-fallback-2026-06-01"

      • "server-side-fallback-2026-07-01"

      • "fallback-credit-2026-06-01"

      • "fallback-credit-2026-07-01"

      • "agent-memory-2026-07-22"

      • "mid-conversation-tool-changes-2026-07-01"

      • "compact-2026-01-12"

      • "computer-use-2025-11-24"

      • "mcp-tunnels-2026-06-22"

      • "structured-outputs-2025-11-13"

      • "task-budgets-2026-03-13"

      • "thinking-display-updates-2026-08-18"

      • "ce-user-management-2026-07-13"

      • "mid-conversation-output-config-2026-07-01"

      • "thinking-binding-controls-2026-08-01"

      • "mid-conversation-system-clear-at-2026-08-21"

      • "compact-2026-09-04"

  • "anthropic-workspace-id": optional string

# Returns

  • data: optional array of BetaManagedAgentsCredential

    List of credentials.

    • type: "vault_credential"

    • id: string

      Unique identifier for the credential.

    • archived_at: string or null

      A timestamp in RFC 3339 format

      format: date-time

    • auth: BetaManagedAgentsMCPOAuthAuthResponse or BetaManagedAgentsStaticBearerAuthResponse or BetaManagedAgentsEnvironmentVariableAuthResponse

      Authentication details for a credential.

      • BetaManagedAgentsMCPOAuthAuthResponse object

        OAuth credential details for an MCP server.

        • type: "mcp_oauth"

        • mcp_server_url: string

          URL of the MCP server this credential authenticates against.

        • expires_at: optional string or null

          A timestamp in RFC 3339 format

          format: date-time

        • refresh: optional BetaManagedAgentsMCPOAuthRefreshResponse or null

          OAuth refresh token configuration returned in credential responses.

          • client_id: string

            OAuth client ID.

          • token_endpoint: string

            Token endpoint URL used to refresh the access token.

          • token_endpoint_auth: BetaManagedAgentsTokenEndpointAuthNoneResponse or BetaManagedAgentsTokenEndpointAuthBasicResponse or BetaManagedAgentsTokenEndpointAuthPostResponse

            • BetaManagedAgentsTokenEndpointAuthNoneResponse object

              Token endpoint requires no client authentication.

              • type: "none"

            • BetaManagedAgentsTokenEndpointAuthBasicResponse object

              Token endpoint uses HTTP Basic authentication with client credentials.

              • type: "client_secret_basic"

            • BetaManagedAgentsTokenEndpointAuthPostResponse object

              Token endpoint uses POST body authentication with client credentials.

              • type: "client_secret_post"

          • resource: optional string or null

            OAuth resource indicator.

          • scope: optional string or null

            OAuth scope for the refresh request.

      • BetaManagedAgentsStaticBearerAuthResponse object

        Static bearer token credential details for an MCP server.

        • type: "static_bearer"

        • mcp_server_url: string

          URL of the MCP server this credential authenticates against.

      • BetaManagedAgentsEnvironmentVariableAuthResponse object

        Environment variable credential details. The secret value is never returned.

        • type: "environment_variable"

        • injection_location: BetaManagedAgentsInjectionLocationResponse

          Where in the outbound request the secret value is substituted.

          • body: boolean

            Whether the placeholder is substituted in the request body.

          • header: boolean

            Whether the placeholder is substituted in request header values.

        • networking: BetaManagedAgentsUnrestrictedCredentialNetworkingResponse or BetaManagedAgentsLimitedCredentialNetworkingResponse

          Outbound hosts the secret value is substituted on.

          • BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object

            The secret is substituted on any host the session's Environment network policy permits egress to.

            • type: "unrestricted"

          • BetaManagedAgentsLimitedCredentialNetworkingResponse object

            The secret is substituted only on requests to the listed hosts.

            • type: "limited"

            • allowed_hosts: array of string

              Hostnames on which the secret will be substituted. An entry matches the request host exactly; a *.-prefixed entry matches any subdomain of the named domain but not the domain itself.

        • secret_name: string

          Name of the environment variable.

    • created_at: string

      A timestamp in RFC 3339 format

      format: date-time

    • metadata: map[string]

      Arbitrary key-value metadata attached to the credential.

    • updated_at: string

      A timestamp in RFC 3339 format

      format: date-time

    • vault_id: string

      Identifier of the vault this credential belongs to.

    • display_name: optional string or null

      Human-readable name for the credential.

  • next_page: optional string or null

    Pagination token for the next page, or null if no more results.

# Example

bash
curl https://api.anthropic.com/v1/vaults/$VAULT_ID/credentials \
    -H 'anthropic-version: 2023-06-01' \
    -H 'anthropic-beta: managed-agents-2026-04-01' \
    -H "X-Api-Key: $ANTHROPIC_API_KEY"

# Response (200)

json
{
  "data": [
    {
      "id": "vcrd_011CZkZEMt8gZan2iYOQfSkw",
      "archived_at": null,
      "auth": {
        "mcp_server_url": "https://example-server.modelcontextprotocol.io/sse",
        "type": "static_bearer"
      },
      "created_at": "2026-03-15T10:00:00Z",
      "metadata": {
        "environment": "production"
      },
      "type": "vault_credential",
      "updated_at": "2026-03-15T10:00:00Z",
      "vault_id": "vlt_011CZkZDLs7fYzm1hXNPeRjv",
      "display_name": "Example credential"
    }
  ],
  "next_page": "page_MjAyNS0wNS0xNFQwMDowMDowMFo="
}
Files main
Menu

Theme
↑↓navigate ↵open escclose /⌘Kanywhere