Skip to main content
GET /v1/vaults/{vault_id}/credentials Lists credentials under the specified vault. Archived credentials are excluded by default.

​
Path parameters

ParameterTypeRequiredDescription
vault_idstringYesVault unique identifier

​
Headers

HeaderRequiredDescription
AuthorizationYesBearer $QODER_PAT

​
Query parameters

ParameterTypeRequiredDescription
limitintegerNoMaximum number of records per page
after_idstringNoCursor pagination: return records after this ID
before_idstringNoCursor pagination: return records before this ID
include_archivedbooleanNoSet to true to include archived credentials
namestringNoSearch credentials by MCP server URL
created_at[gte]stringNoInclude credentials created at or after this RFC 3339 timestamp
created_at[lte]stringNoInclude credentials created at or before this RFC 3339 timestamp

​
Example request

curl -X GET https://api.qoder.com/api/v1/cloud/vaults/vault_019e3bb940277f0db05ab74291acf6ef/credentials \
  -H "Authorization: Bearer $QODER_PAT"

​
Example response

HTTP 200 OK 
{
  "data": [
    {
      "id": "vcred_019e3bb940297658a632dbf920057eff",
      "vault_id": "vault_019e3bb940277f0db05ab74291acf6ef",
      "mcp_server_url": "https://example.com/mcp",
      "protocol": "streamable_http",
      "type": "static_bearer",
      "status": "active",
      "created_at": "2026-05-18T15:34:16.876188Z",
      "updated_at": "2026-05-18T15:34:16.876188Z"
    }
  ],
  "first_id": "vcred_019e3bb940297658a632dbf920057eff",
  "last_id": "vcred_019e3bb940297658a632dbf920057eff",
  "has_more": false
}

​
Response fields

FieldTypeDescription
dataarrayArray of Vault credential objects
first_idstring | nullID of the first record on the current page
last_idstring | nullID of the last record on the current page
has_morebooleanWhether more pages are available

​
VaultCredential object

FieldTypeDescription
idstringCredential unique identifier with the vcred_ prefix
vault_idstringOwning Vault ID
mcp_server_urlstringMCP server URL
protocolstringProtocol: streamable_http
typestringCredential type: static_bearer
statusstringStatus: active or archived
archived_atstringArchive time; present only when archived
created_atstringCreation time (ISO 8601)
updated_atstringLast update time (ISO 8601)

​
Errors

HTTPTypeTrigger
401TOKEN_INVALIDMissing or invalid authentication token
404not_found_errorVault does not exist or is not accessible

​
Notes

  • The credential list does not return the value of access_token (for security reasons).
  • Archived credentials are excluded by default. Pass include_archived=true to include them.
See Errors for the full error envelope.

Authenticate with vaults

Store and inject secrets safely into agent sessions.