Skip to main content

Get Credential

Retrieves the details of a specified Credential. The response is a Credential object with sensitive values masked in the auth field.

Prerequisites

Endpoint and authentication configured. For details, see Overview and authentication.

Endpoint

GET /vaults/{vault_id}/credentials/{credential_id}

Path parameters

FieldRequiredTypeDescription
vault_idYesstringVault ID, format vlt_xxx
credential_idYesstringCredential ID, format cred_xxx

Request example

curl -X GET "$AGENTSTUDIO_URL/vaults/vlt_xxx/credentials/cred_xxx" \
  -H "Authorization: Bearer $DASHSCOPE_API_KEY"

Response example

{
  "id": "cred_xxx",
  "type": "credential",
  "vault_id": "vlt_xxx",
  "display_name": "Third-party API key",
  "auth": {
    "type": "environment_variable",
    "secret_name": "API_KEY",
    "networking": {
      "allowed_hosts": [
        "api.example.com",
        "*.example.com"
      ]
    },
    "injection_location": {
      "header": true
    }
  },
  "metadata": {},
  "archived_at": null,
  "created_at": "2026-07-10T08:00:00Z",
  "updated_at": "2026-07-10T08:00:00Z",
  "request_id": "req_xxx"
}

Response fields

FieldTypeDescription
idstringCredential ID, format cred_xxx
typestringAlways credential
vault_idstringVault ID that the Credential belongs to
display_namestringHuman-readable name of the Credential
authobjectAuthentication information with sensitive values masked (e.g. secret_value is not returned)
auth.typestringAuth type; currently only environment_variable
auth.secret_namestringEnvironment variable name
auth.networkingobjectNetwork policy
auth.networking.allowed_hostsarrayList of hosts allowed for real-key substitution
auth.injection_locationobjectInjection location. Currently only the Authorization header is supported; writing into the request body is not yet supported
auth.injection_location.headerbooleanWhether to write into the Authorization header
metadataobjectCustom key-value pairs
archived_atstring | nullArchive timestamp; null if not archived
created_atstringCreation time, ISO 8601
updated_atstringLast update time, ISO 8601
request_idstringUnique request identifier

Error codes

HTTP statusError codeDescription
400InvalidParameterRequired parameter missing or invalid
401InvalidApiKeyInvalid API key provided
Managed Agent API
Flow Agent API
Sandbox API
RAG API
Long-term Memory
ParseX API
Security API
Framework Integration