GET /v1/vaults/{vault_id}/credentials
GET
/v1/vaults/{vault_id}/credentialsAuthorization
AuthorizationBearer token · headerrequiredPath parameters
vault_idstring<uuid>requiredVault id
Query parameters
limitinteger<int64>min 1 · max 200
afterstring<uuid>orderOrderParamNewest first when omitted.
Allowed:
ascdescResponses
200Credential metadata, newest first unless order=asc; never payloads.
itemsCredentialBody[]requiredShow propertiesHide properties
Array of
CredentialBodyauth_schemeAuthSchemeBodyrequiredResponse-side twin of `ProtocolBody`, for the same reason.
Allowed:
oauthstatic_bearerdisplay_namestringrequiredidstring<uuid>requiredprotocolProtocolBodyrequiredMirrors `Protocol`'s spellings rather than deriving serde on the domain type:
renaming a domain variant must not silently change the wire.
Allowed:
mcptargetstringrequiredvault_idstring<uuid>requirednext_cursorstring<uuid> | nullrequired`None` on the last page.
400Bad limit, cursor, or order.
errorErrorDetailrequiredShow propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired401Missing, malformed, or invalid bearer token.
errorErrorDetailrequiredShow propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired403Caller lacks credential.read.
errorErrorDetailrequiredShow propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired404No such vault, or the caller cannot see it.
errorErrorDetailrequiredShow propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired