Get one credential reference
Returns one credential reference with its type, injection locations, and egress bounds. The credential must belong to the vault in the path, and the secret value is never included.
Authorizations
A Recursion API key, created in the console under API keys.
Headers
Optional tenant consistency check. When present, it must name the tenant bound to the API key, including when x-organization-id is default.
1Organization in which to act. Required for a tenant-scoped API key. Optional for an organization-scoped key, where it must name that same organization. The value may be an organization id or default.
1Path Parameters
Vault id (UUID) that owns the credential.
Credential reference id (UUID) within the vault, as returned by managedAgentsListVaultCredentials.
Response
OK
Server-assigned RFC 3339 creation time.
Server-assigned credential identifier (UUID), unique within the vault.
How the credential is used. Legacy rows may report additional kinds.
Organization that owns this record, resolved from the authenticated principal.
Server-assigned RFC 3339 last update time.
Vault that owns this credential (UUID).
Recorded host intent for limited network mode.
Optional operator-facing credential label.
Organization integration connection granted by this credential (UUID).
Validated provider permission preset.
Provider resources the integration grant is narrowed to.
MCP server this credential may be sent to.
Caller-supplied labels, with compatibility-only scope data excluded.
Deployment-derived identity of an exact platform MCP service; never caller-controlled or stored.
slack_tools Catalog service for a proxied env_var credential, absent for credentials supplied directly to the sandbox.
anthropic, openai, slack, stripe Environment variable or header name the secret binds to.
Opaque pointer to externally stored secret material.