List tool credential metadata
Browse tool credential metadata, versions counts and reference counts. Never returns values. Includes secrets created inline during tool or MCP setup. Excludes platform API keys and telephony provider credentials. ID-list filters use repeated query names. Raw supplied ID count across fields is at most 100. Cursor binds normalized filters; filtered lists are not exact batch retrieval.
Authentication
Create and manage workspace-owned keys through the existing app session routes, outside this public API. Creator and manager identities are audit actors only. Key validity follows workspace policy, expiry and explicit revocation, independently of creator membership. Do not include a workspace-selection header.
Query parameters
Page size; 50 by default, at most 200.
Repeat the query name for multiple IDs. OR within this field; AND across fields. Maximum 100 raw ID entries total across all ID filters. Blank values are invalid. Unknown/inaccessible IDs produce no rows, not an existence disclosure. An empty array is invalid and refused: SDKs refuse it before sending, and the server refuses an empty or blank value. Omission means no filter.
Repeat for OR. Omitted returns every non-deleted secret. An empty array is invalid and refused: SDKs refuse it before sending, and the server refuses an empty or blank value. Omission means no filter.
Exact resource-key lookup. Repeat the name for several keys (OR). Each key matches zero or one resource of this type. A resource_key filter ignores the default owner and archive scoping of this list: it returns the resource in any owner and any state, so reconciliation never misses an existing resource. Counts toward the 100 raw filter values per request. Unknown keys yield no rows. An empty array is invalid and refused: SDKs refuse it before sending, and the server refuses an empty or blank value. Omission means no filter.