Credentials / API reference
List institution credential metadata
Request and response reference for GET /v1/credentials.
GET
/v1/credentialsAuthentication: API key
Use the base URL and access configuration provided to your institution. Examples are request templates, not transaction results. Field tables focus on client fields; preserve additional metadata returned by the configured service.
Request
Keep API keys in your backend. Required entitlements and institution scope still apply.
curl -X GET "$OSAI_API_BASE_URL/v1/credentials" \
-H "Authorization: ApiKey $OSAI_PUBLIC_ID:$OSAI_API_SECRET"Parameters
| Name | Location | Requirement | Description |
|---|---|---|---|
Authorization | header · string | Required | Use the value defined for this resource. |
X-Request-Id | header · string | Optional | Use the value defined for this resource. |
Request body
This operation does not define a JSON request body.
Responses
Inspect HTTP status before parsing a body. These tables describe client response fields rather than invented successful transaction payloads.
200 · Credential metadata; secret material is never returned
| Field | Type | Description & constraints |
|---|---|---|
credentialsRequired in parent object | array | Defined by the resource contract. |
credentials[].public_idRequired in parent object | string | Defined by the resource contract. |
credentials[].labelRequired in parent object | string | Defined by the resource contract. |
credentials[].environmentRequired in parent object | string | Defined by the resource contract. |
credentials[].statusRequired in parent object | string | Defined by the resource contract.Values: ACTIVE, REVOKED, EXPIRED |
credentials[].created_atRequired in parent object | stringdate-time | Defined by the resource contract. |
request_idRequired in parent object | string | Defined by the resource contract. |
403 · Credential reads are not entitled
No client body fields are defined for this response.
Retries & recovery
Keep the original request identifiers and any required idempotency key. A timeout does not establish failure. Read the original resource or command before another financial write; use expected versions for concurrent changes.