from line 1
1---
2title: List Credentials
3url: https://platform.claude.com/docs/en/api/beta/vaults/credentials/list
4---
1# List Credentials
52
6## List Credentials
3**GET** `/v1/vaults/{vault_id}/credentials`
74
8**get** `/v1/vaults/{vault_id}/credentials`
9
105List Credentials
116
12### Path Parameters
7## Path parameters
138
149- `vault_id: string`
1510
16### Query Parameters
11## Query parameters
1712
1813- `include_archived: optional boolean`
1914
from line 18
2318
2419 Maximum number of credentials to return per page. Defaults to 20, maximum 100.
2520
21 format: int32
22
2623- `page: optional string`
2724
2825 Opaque pagination token from a previous `list_credentials` response.
2926
30### Header Parameters
27## Headers
3128
3229- `"anthropic-beta": optional array of AnthropicBeta`
3330
from line 102
105102
106103 - `"mid-conversation-tool-changes-2026-07-01"`
107104
108### Returns
105## Returns
109106
110107- `data: optional array of BetaManagedAgentsCredential`
111108
from line 116
119116
120117 A timestamp in RFC 3339 format
121118
119 format: date-time
120
122121 - `auth: BetaManagedAgentsMCPOAuthAuthResponse or BetaManagedAgentsStaticBearerAuthResponse or BetaManagedAgentsEnvironmentVariableAuthResponse`
123122
124123 Authentication details for a credential.
125124
126 - `BetaManagedAgentsMCPOAuthAuthResponse object { mcp_server_url, type, expires_at, refresh }`
125 - `BetaManagedAgentsMCPOAuthAuthResponse object`
127126
128127 OAuth credential details for an MCP server.
129128
from line 132
133132
134133 - `type: "mcp_oauth"`
135134
136 - `"mcp_oauth"`
137
138135 - `expires_at: optional string or null`
139136
140137 A timestamp in RFC 3339 format
141138
139 format: date-time
140
142141 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshResponse or null`
143142
144143 OAuth refresh token configuration returned in credential responses.
from line 154
155154
156155 Token endpoint requires no client authentication.
157156
158 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object { type }`
157 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object`
159158
160159 Token endpoint requires no client authentication.
161160
162161 - `type: "none"`
163162
164 - `"none"`
163 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object`
165164
166 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object { type }`
167
168165 Token endpoint uses HTTP Basic authentication with client credentials.
169166
170167 - `type: "client_secret_basic"`
171168
172 - `"client_secret_basic"`
169 - `BetaManagedAgentsTokenEndpointAuthPostResponse object`
173170
174 - `BetaManagedAgentsTokenEndpointAuthPostResponse object { type }`
175
176171 Token endpoint uses POST body authentication with client credentials.
177172
178173 - `type: "client_secret_post"`
179174
180 - `"client_secret_post"`
181
182175 - `resource: optional string or null`
183176
184177 OAuth resource indicator.
from line 180
187180
188181 OAuth scope for the refresh request.
189182
190 - `BetaManagedAgentsStaticBearerAuthResponse object { mcp_server_url, type }`
183 - `BetaManagedAgentsStaticBearerAuthResponse object`
191184
192185 Static bearer token credential details for an MCP server.
193186
from line 190
197190
198191 - `type: "static_bearer"`
199192
200 - `"static_bearer"`
193 - `BetaManagedAgentsEnvironmentVariableAuthResponse object`
201194
202 - `BetaManagedAgentsEnvironmentVariableAuthResponse object { injection_location, networking, secret_name, type }`
203
204195 Environment variable credential details. The secret value is never returned.
205196
206197 - `injection_location: BetaManagedAgentsInjectionLocationResponse`
from line 210
219210
220211 Outbound hosts the secret value is substituted on.
221212
222 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object { type }`
213 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object`
223214
224215 The secret is substituted on any host the session's Environment network policy permits egress to.
225216
226217 - `type: "unrestricted"`
227218
228 - `"unrestricted"`
219 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object`
229220
230 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object { allowed_hosts, type }`
231
232221 The secret is substituted only on requests to the listed hosts.
233222
234223 - `allowed_hosts: array of string`
from line 226
237226
238227 - `type: "limited"`
239228
240 - `"limited"`
241
242229 - `secret_name: string`
243230
244231 Name of the environment variable.
from line 232
245232
246233 - `type: "environment_variable"`
247234
248 - `"environment_variable"`
249
250235 - `created_at: string`
251236
252237 A timestamp in RFC 3339 format
253238
239 format: date-time
240
254241 - `metadata: map[string]`
255242
256243 Arbitrary key-value metadata attached to the credential.
from line 244
257244
258245 - `type: "vault_credential"`
259246
260 - `"vault_credential"`
261
262247 - `updated_at: string`
263248
264249 A timestamp in RFC 3339 format
265250
251 format: date-time
252
266253 - `vault_id: string`
267254
268255 Identifier of the vault this credential belongs to.
from line 262
275262
276263 Pagination token for the next page, or null if no more results.
277264
278### Example
265## Example
279266
280```http
267```bash
281268curl https://api.anthropic.com/v1/vaults/$VAULT_ID/credentials \
282269 -H 'anthropic-version: 2023-06-01' \
283270 -H 'anthropic-beta: managed-agents-2026-04-01' \
from line 271
284271 -H "X-Api-Key: $ANTHROPIC_API_KEY"
285272```
286273
287#### Response
274### Response (200)
288275
289276```json
290277{
No line in this hunk matches that.