Skip to navigation
API referenceSecrets

List credential consumers

Which authored tools, MCP servers and published agent versions pin which version of this secret, and whether each published version is live. Paged, ordered by version descending then consumer. Metadata only.

Authentication

AuthorizationBearer

Create and manage workspace-owned keys through the existing app session routes, outside this public API. Creator and manager identities are audit actors only. Key validity follows workspace policy, expiry and explicit revocation, independently of creator membership. Do not include a workspace-selection header.

Path parameters

secret_idstringRequired1-128 characters
Resource identity within the authenticated workspace.

Query parameters

limitintegerOptional1-200Defaults to 50

Page size; 50 by default, at most 200.

cursorstringOptional
Opaque cursor bound to the workspace, every filter, grouping and limit. Send them unchanged with it. Expires after 24 hours.
versionintegerOptional>=1
Only references to this version.
scopeenumOptional
Only draft or only published references. Omitted returns both.
Allowed values:

Response headers

X-Request-IdstringOptional
Safe server request correlation ID.
RateLimit-LimitintegerOptional
Requests allowed in the current window for the tightest applicable limit.
RateLimit-RemainingintegerOptional
Requests left in the current window.
RateLimit-ResetintegerOptional
Seconds until the current window resets.

Response

List credential consumers.
itemslist of objects
next_cursorstring or null
Opaque continuation cursor. Null means the last page.

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
429
Too Many Requests Error
500
Internal Server Error
503
Service Unavailable Error