List credentials

List credentials in the resolved project. Credential values are not returned.

GET /credentials

List credentials

cURL

curl --request GET \
  --url https://api.onkernel.com/credentials \
  --header 'Authorization: Bearer <token>'

200

[
  {
    "created_at": "2025-01-15T10:30:00Z",
    "domain": "netflix.com",
    "id": "cred_abc123xyz",
    "name": "my-netflix-login",
    "updated_at": "2025-01-15T10:30:00Z",
    "has_totp_secret": false,
    "has_values": true,
    "sso_provider": "google",
    "totp_code": "847291",
    "totp_code_expires_at": "2025-01-15T10:30:30Z",
    "value_keys": [
      "username",
      "password"
    ]
  }
]

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Query Parameters

domain · string

Filter by domain

limit · integer · default: 20

Maximum number of results to return

Required range: x <= 100

offset · integer · default: 0

Number of results to skip

query · string

Case-insensitive substring match against credential name or domain. IDs match by exact value.

Response

200

application/json

List of credentials

created_at · string<date-time> · required

When the credential was created

Example:

"2025-01-15T10:30:00Z"

domain · string · required

Target domain this credential is for

Example:

"netflix.com"

id · string · required

Unique identifier for the credential

Example:

"cred_abc123xyz"

name · string · required

Unique name for the credential within the project

Example:

"my-netflix-login"

updated_at · string<date-time> · required

When the credential was last updated

Example:

"2025-01-15T10:30:00Z"

has_totp_secret · boolean

Whether this credential has a TOTP secret configured for automatic 2FA

Example:

false

has_values · boolean

Whether this credential has stored values (email, password, etc.)

Example:

true

sso_provider · string | null

If set, indicates this credential should be used with the specified SSO provider (e.g., google, github, microsoft). When the target site has a matching SSO button, it will be clicked first before filling credential values on the identity provider's login page.

Example:

"google"

totp_code · string

Current 6-digit TOTP code. Only included in create/update responses when totp_secret was just set.

Example:

"847291"

totp_code_expires_at · string<date-time>

When the totp_code expires. Only included when totp_code is present.

Example:

"2025-01-15T10:30:30Z"

value_keys · string[]

The field names stored in this credential's values (e.g., username, password). Values themselves are never returned. Included on single-credential responses (create, get by id or name, update); omitted from list responses.

Example:

["username", "password"]