> ## Documentation Index > Fetch the complete documentation index at: https://docs.labelbox.com/llms.txt > Use this file to discover all available pages before exploring further. # List a vault's credential references > Returns the credential references in one vault, each with its type, injection locations, and egress bounds. Only references are returned; the secret values themselves are never exposed by this API. ## OpenAPI ````yaml /managed-agents/openapi.yaml get /managed-agents/v1/vaults/{vault_id}/credentials openapi: 3.1.0 info: title: Managed Agents API version: 0.14.0 description: >- The Recursion Managed Agents REST API. Authenticate with a Recursion API key as a bearer token. An organization-scoped key acts in its own organization and needs nothing else; a tenant-scoped key must also send `x-organization-id` with an organization id or `default`. Field names follow each operation's published schema. servers: - url: https://api.recursion.labelbox.com security: - bearerAuth: [] paths: /managed-agents/v1/vaults/{vault_id}/credentials: get: tags: - Vaults summary: List a vault's credential references description: >- Returns the credential references in one vault, each with its type, injection locations, and egress bounds. Only references are returned; the secret values themselves are never exposed by this API. operationId: managedAgentsListVaultCredentials parameters: - description: Vault id (UUID) as returned by createVault or listVaults. in: path name: vault_id required: true schema: description: Vault id (UUID) as returned by createVault or listVaults. format: uuid type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsVaultCredentialListResponse' description: >- Response body of GET /v1/vaults/{vault_id}/credentials. Unlike the other list envelopes this one is deliberately lossy: each row describes a credential and points at its secret-manager reference, and the secret material is never returned by any read endpoint. To learn whether a credential actually works, probe with POST /v1/mcp/probe. '400': description: The request was rejected by schema or semantic validation. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorInvalidRequest' '401': description: The caller is unauthenticated. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorUnauthorized' '403': description: The caller lacks a required permission or capability. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorForbidden' '404': description: No such resource is reachable for this caller. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorNotFound' '429': headers: Retry-After: description: When to retry, as delay seconds or an HTTP date. schema: type: string description: A rate limit is exhausted. Honor `Retry-After`. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorRateLimitExceeded' '500': description: An unexpected server-side failure. content: application/json: schema: oneOf: - $ref: '#/components/schemas/ManagedAgentsApiErrorInternalError' - $ref: >- #/components/schemas/ManagedAgentsApiErrorInvariantViolation discriminator: propertyName: code mapping: internal_error: $ref: '#/components/schemas/ManagedAgentsApiErrorInternalError' invariant_violation: $ref: >- #/components/schemas/ManagedAgentsApiErrorInvariantViolation '502': description: The service returned an invalid response. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorBadGateway' '503': description: >- A dependency is unavailable. Consult details.retryable and Retry-After when present before retrying. content: application/json: schema: oneOf: - $ref: >- #/components/schemas/ManagedAgentsApiErrorManagedAgentsUnavailable - $ref: >- #/components/schemas/ManagedAgentsApiErrorServiceUnavailable discriminator: propertyName: code mapping: managed_agents_unavailable: $ref: >- #/components/schemas/ManagedAgentsApiErrorManagedAgentsUnavailable service_unavailable: $ref: >- #/components/schemas/ManagedAgentsApiErrorServiceUnavailable '504': description: The service did not respond before the timeout. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorGatewayTimeout' components: schemas: ManagedAgentsVaultCredentialListResponse: description: >- Response body of GET /v1/vaults/{vault_id}/credentials. Unlike the other list envelopes this one is deliberately lossy: each row describes a credential and points at its secret-manager reference, and the secret material is never returned by any read endpoint. To learn whether a credential actually works, probe with POST /v1/mcp/probe. properties: vault_credentials: description: >- Credentials held by the vault named in the path, newest first. Null rather than an empty array when the vault is empty. Soft-deleted credentials are omitted, and no row carries a secret value. items: $ref: '#/components/schemas/ManagedAgentsVaultCredential' type: - array - 'null' required: - vault_credentials type: object example: vault_credentials: - allowed_hosts: - example created_at: '2026-02-18T09:30:00.000Z' credential_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d credential_type: example display_name: example-name injection_locations: - example integration_connection_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d integration_permission: example integration_resources: - example labelbox_scope: mode: projects organization_id: organization-id project_ids: - project-id mcp_server_url: https://example.com metadata: key: example network_mode: limited organization_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d platform_mcp_service: slack_tools secret_name: example secret_ref: example updated_at: '2026-02-18T09:30:00.000Z' vault_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d ManagedAgentsApiErrorInvalidRequest: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - invalid_request message: type: string minLength: 1 description: Human-readable error message. details: $ref: '#/components/schemas/ManagedAgentsApiErrorDetails' description: >- Optional structured error details. Reserved transport fields are typed; code-specific fields remain forward compatible. required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorUnauthorized: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - unauthorized message: type: string minLength: 1 description: Human-readable error message. details: $ref: '#/components/schemas/ManagedAgentsApiErrorDetails' description: >- Optional structured error details. Reserved transport fields are typed; code-specific fields remain forward compatible. required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorForbidden: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - forbidden message: type: string minLength: 1 description: Human-readable error message. details: $ref: '#/components/schemas/ManagedAgentsApiErrorDetails' description: >- Optional structured error details. Reserved transport fields are typed; code-specific fields remain forward compatible. required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorNotFound: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - not_found message: type: string minLength: 1 description: Human-readable error message. details: $ref: '#/components/schemas/ManagedAgentsApiErrorDetails' description: >- Optional structured error details. Reserved transport fields are typed; code-specific fields remain forward compatible. required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorRateLimitExceeded: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - rate_limit_exceeded message: type: string minLength: 1 description: Human-readable error message. details: $ref: '#/components/schemas/ManagedAgentsApiErrorDetails' description: >- Optional structured error details. Reserved transport fields are typed; code-specific fields remain forward compatible. required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorInternalError: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - internal_error message: type: string minLength: 1 description: Human-readable error message. details: $ref: '#/components/schemas/ManagedAgentsApiErrorDetails' description: >- Optional structured error details. Reserved transport fields are typed; code-specific fields remain forward compatible. required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorInvariantViolation: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - invariant_violation message: type: string minLength: 1 description: Human-readable error message. details: $ref: '#/components/schemas/ManagedAgentsApiErrorDetails' description: >- Optional structured error details. Reserved transport fields are typed; code-specific fields remain forward compatible. required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorBadGateway: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - bad_gateway message: type: string minLength: 1 description: Human-readable error message. details: $ref: '#/components/schemas/ManagedAgentsApiErrorDetails' description: >- Optional structured error details. Reserved transport fields are typed; code-specific fields remain forward compatible. required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorManagedAgentsUnavailable: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - managed_agents_unavailable message: type: string minLength: 1 description: Human-readable error message. details: $ref: '#/components/schemas/ManagedAgentsApiErrorDetails' description: >- Optional structured error details. Reserved transport fields are typed; code-specific fields remain forward compatible. required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorServiceUnavailable: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - service_unavailable message: type: string minLength: 1 description: Human-readable error message. details: $ref: '#/components/schemas/ManagedAgentsApiErrorDetails' description: >- Optional structured error details. Reserved transport fields are typed; code-specific fields remain forward compatible. required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorGatewayTimeout: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - gateway_timeout message: type: string minLength: 1 description: Human-readable error message. details: $ref: '#/components/schemas/ManagedAgentsApiErrorDetails' description: >- Optional structured error details. Reserved transport fields are typed; code-specific fields remain forward compatible. required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsVaultCredential: description: >- One credential in a vault, described without its secret value — no field on this shape can carry secret material, which is what makes it safe to list over the API. Returned when managing a vault's contents; the value itself is opened only inside a running session. properties: allowed_hosts: description: >- Hosts the credential may be sent to when network_mode is limited. Ignored under unrestricted. items: type: string type: array created_at: description: RFC 3339 timestamp of when this record was created. Server-assigned. format: date-time type: string credential_id: description: >- Identifier for this credential (UUID). Server-assigned, and unique only within its vault. type: string credential_type: description: >- How the credential is used: bearer_token, env_var, or webhook_secret. Legacy rows may report mcp_oauth or integration, so this remains a string rather than a closed response enum. type: string display_name: description: >- Operator-facing label for the credential. Optional: a credential is identifiable by its secret_name or MCP server without one. type: string injection_locations: description: >- Where the credential is attached to an outbound request: headers, body, or both. Headers alone is recommended; a secret in a request body is far easier to log by accident. Meaningful only for the MCP OAuth and bearer-token kinds: env_var is injected into the sandbox environment, and integration mints its own token per session. items: type: string type: array integration_connection_id: description: >- Organization integration connection this credential grants a session (UUID). Set only for the integration kind, where it replaces sealed material: the provider mints a short-lived token per session. type: string integration_permission: description: >- Permission preset applied when a token is minted for this grant; see the provider's scope table. An unknown value is rejected on write rather than at mint time. type: string integration_resources: description: >- Resources within the connection the grant is narrowed to — repositories, for GitHub. Empty means every resource the connection itself can reach, which is broader than most grants should be. items: type: string type: array labelbox_scope: $ref: '#/components/schemas/ManagedAgentsLabelboxToolsScope' description: >- Labelbox product-state authorization ceiling: either exact projects or organization-wide access, optionally restricted to one exact Slack audience with an explicit internal or Slack Connect classification. Required for a bearer_token credential whose mcp_server_url is that service; rejected for any other server. Replaced as a whole on update and kept when omitted. mcp_server_url: description: >- MCP server this credential may be sent to. Required for bearer_token and immutable afterwards, so a stored secret cannot be repointed at a different service. type: string metadata: additionalProperties: {} description: >- Free-form caller-supplied key/value labels. Stored verbatim and never interpreted by the service. The key labelbox_scope is reserved for the typed field of that name. type: object network_mode: description: >- How far the credential may travel: limited confines it to allowed_hosts, unrestricted permits any host. limited is the safe default. enum: - limited - unrestricted type: string organization_id: description: >- Organization that owns this record. Resolved from the API key; never accepted from the caller. type: string platform_mcp_service: description: >- Deployment-derived identity of the exact platform MCP service this credential targets. Present as slack_tools only when mcp_server_url matches the configured Slack tools endpoint; never caller-controlled or stored. enum: - slack_tools type: string secret_name: description: >- Environment variable or header name the secret binds to inside the sandbox. Required for the env_var kind. type: string secret_ref: description: >- Pointer to material stored in an external secret manager, carrying a provider prefix such as kms: or vault:. Opaque to this service, and empty on the normal path where the value is sealed into the credential itself. type: string updated_at: description: >- RFC 3339 timestamp of the last change to this record. Server-assigned. format: date-time type: string vault_id: description: Vault this credential belongs to (UUID). type: string required: - organization_id - vault_id - credential_id - credential_type - created_at - updated_at type: object example: allowed_hosts: - example created_at: '2026-02-18T09:30:00.000Z' credential_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d credential_type: example display_name: example-name injection_locations: - example integration_connection_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d integration_permission: example integration_resources: - example labelbox_scope: mode: projects organization_id: organization-id project_ids: - project-id mcp_server_url: https://example.com metadata: key: example network_mode: limited organization_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d platform_mcp_service: slack_tools secret_name: example secret_ref: example updated_at: '2026-02-18T09:30:00.000Z' vault_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d ManagedAgentsApiErrorDetails: type: object properties: field: description: >- Request field or header responsible for the error, when one can be identified. type: string issues: description: >- Boundary-validation failures as path-prefixed human-readable messages. type: array items: type: string requestId: description: Request correlation identifier for support and log lookup. type: string retryable: description: >- Server advice about failure transience. `true` means transient, `false` means non-transient, and absence gives no advice. Automatic replay is allowed only when this field is not `false` and the operation-specific retry and idempotency contract permits replay. type: boolean additionalProperties: {} description: >- Optional structured error details. Reserved transport fields are typed; code-specific fields remain forward compatible. ManagedAgentsLabelboxToolsScope: description: >- Labelbox product-state authorization ceiling. The organization always equals the credential's owner. Projects mode permits one exact project set; organization mode permits organization-wide reads only from one exact Slack binding whose internal or Slack Connect classification is explicit. examples: - mode: projects organization_id: organization-id project_ids: - project-id properties: audience: $ref: '#/components/schemas/ManagedAgentsLabelboxToolsAudience' description: >- Optional organization-mode audience: pins the credential to one exact Slack binding and its internal-or-Slack-Connect classification; without it the scope follows the vault wherever the vault is granted. Forbidden in projects mode. mode: description: Scope mode. Omitted legacy values are canonicalized to projects. enum: - projects - organization type: string organization_id: description: >- Labelbox organization the projects belong to. Must equal the organization that owns the credential; filled in from it when omitted on write. type: string project_ids: description: >- Projects-mode ceiling: exactly 1 to 100 project ids, each up to 128 characters of letters, digits, hyphen, or underscore. Forbidden in organization mode; validated as unique and sorted on write. items: type: string maxItems: 100 minItems: 1 type: array uniqueItems: true required: - organization_id type: object example: mode: projects organization_id: organization-id project_ids: - project-id ManagedAgentsLabelboxToolsAudience: description: >- Exact Slack trigger binding authorized to use an organization-wide Labelbox product-state credential, with an explicit internal or Slack Connect classification. properties: binding_id: description: Exact Slack trigger binding id authorized to use this credential. type: string channel_id: description: >- Exact Slack channel id used by the binding. The signed webhook receipt's sharing classification must match kind. type: string connection_id: description: Exact Slack integration connection id used by the binding. type: string kind: description: >- Trusted session audience kind. internal_slack_binding requires a non-shared channel; slack_connect_binding is an explicit opt-in to one externally shared channel. enum: - internal_slack_binding - slack_connect_binding type: string required: - kind - binding_id - connection_id - channel_id type: object example: binding_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d channel_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d connection_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d kind: internal_slack_binding securitySchemes: bearerAuth: type: http scheme: bearer description: A Recursion API key, created in the console under API keys. ````