Get one credential reference

curl --request GET \
  --url https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId} \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId}"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId}"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId}")
  .header("Authorization", "Bearer <token>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "created_at": "2023-11-07T05:31:56Z",
  "credential_id": "<string>",
  "credential_type": "<string>",
  "organization_id": "<string>",
  "updated_at": "2023-11-07T05:31:56Z",
  "vault_id": "<string>",
  "display_name": "<string>",
  "integration_connection_id": "<string>",
  "integration_permission": "<string>",
  "integration_resources": [
    "<string>"
  ],
  "mcp_server_url": "<string>",
  "metadata": {},
  "platform_mcp_service": "slack_tools",
  "provider": "anthropic",
  "secret_name": "<string>",
  "secret_ref": "<string>"
}

{
  "code": "invalid_request",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "unauthorized",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "forbidden",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "not_found",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "payload_too_large",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "rate_limit_exceeded",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "internal_error",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "bad_gateway",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "managed_agents_unavailable",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "gateway_timeout",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

GET

managed-agents

vaults

{vaultId}

credentials

{credentialId}

Get one credential reference

curl --request GET \
  --url https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId} \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId}"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId}"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId}")
  .header("Authorization", "Bearer <token>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vaultId}/credentials/{credentialId}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "created_at": "2023-11-07T05:31:56Z",
  "credential_id": "<string>",
  "credential_type": "<string>",
  "organization_id": "<string>",
  "updated_at": "2023-11-07T05:31:56Z",
  "vault_id": "<string>",
  "display_name": "<string>",
  "integration_connection_id": "<string>",
  "integration_permission": "<string>",
  "integration_resources": [
    "<string>"
  ],
  "mcp_server_url": "<string>",
  "metadata": {},
  "platform_mcp_service": "slack_tools",
  "provider": "anthropic",
  "secret_name": "<string>",
  "secret_ref": "<string>"
}

{
  "code": "invalid_request",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "unauthorized",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "forbidden",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "not_found",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "payload_too_large",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "rate_limit_exceeded",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "internal_error",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "bad_gateway",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "managed_agents_unavailable",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

{
  "code": "gateway_timeout",
  "message": "<string>",
  "details": {
    "field": "<string>",
    "issues": [
      "<string>"
    ],
    "requestId": "<string>",
    "retryable": true
  }
}

Authorizations

Authorization

string

header

required

A Recursion API key, created in the console under API keys.

Headers

x-tenant-id

string

Optional tenant consistency check. When present, it must name the tenant bound to the API key, including when x-organization-id is default.

Minimum string length: 1

x-organization-id

string

Organization in which to act. Required for a tenant-scoped API key. Optional for an organization-scoped key, where it must name that same organization. The value may be an organization id or default.

Minimum string length: 1

Path Parameters

vaultId

string<uuid>

required

Vault id (UUID) that owns the credential.

credentialId

string<uuid>

required

Credential reference id (UUID) within the vault, as returned by managedAgentsListVaultCredentials.

Response

created_at

string<date-time>

required

RFC 3339 timestamp of when this record was created. Server-assigned.

credential_id

string

required

Identifier for this credential (UUID). Server-assigned, and unique only within its vault.

credential_type

string

required

How the credential is used. Legacy rows may report additional kinds, so this remains a string rather than a closed response enum.

organization_id

string

required

Organization that owns this record. Resolved from the authenticated principal; never accepted from the caller.

updated_at

string<date-time>

required

RFC 3339 timestamp of the last change to this record. Server-assigned.

vault_id

string

required

Vault this credential belongs to (UUID).

display_name

string

Operator-facing label for the credential.

integration_connection_id

string

Organization integration connection this credential grants a session (UUID).

integration_permission

string

Permission preset applied when a token is minted for this grant.

integration_resources

string[]

Resources within the connection the grant is narrowed to.

mcp_server_url

string

MCP server this credential may be sent to.

metadata

object

Free-form caller-supplied labels, excluding compatibility metadata reserved by another contract.

Show child attributes

platform_mcp_service

enum<string>

Deployment-derived identity of an exact platform MCP service this credential targets; never caller-controlled or stored.

Available options:

slack_tools

provider

enum<string>

The catalog service an env_var credential is used with; the agent never sees its value. Absent when the value is in the sandbox environment.

Available options:

anthropic,

openai,

slack,

stripe

secret_name

string

Environment variable or header name the secret binds to inside the sandbox.

secret_ref

string

Pointer to material stored in an external secret manager. Opaque to this service.

API reference

Endpoints

Get one credential reference

Authorizations

Headers

Path Parameters

Response