Skip to content
Extrovert Extrovert Docs

List independently surviving agent keys and enrollment tokens created by a connection

GET
/v1/admin/connections/{connection_id}/created-credentials

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Path Parameters

Section titled “Path Parameters ”
connection_id
required
string

Query Parameters

Section titled “Query Parameters ”
limit
integer
default: 50 >= 1 <= 100

Page size for the cursor-paginated agent surface (default 50; clamped to the 1-100 range).

cursor
string

Opaque pagination cursor echoed back from a prior next_cursor. Treat it as an opaque token; pass it back verbatim as ?cursor to fetch the next page.

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Bounded page of public credential metadata and current status.

object
object
required
string
Allowed values: list
data
required
Array<object>

Provenance and current status of an independently surviving agent key or enrollment token. Contains no secret or hash.

object
id
required
string
created_by_connection_id
required
string
authorizer_id
required
string
kind
required
string
Allowed values: agent_key enrollment_token
org_id
required
string
project_id
required
string
agent_id
string
created_via_enrollment_id
string
name
required
string
scopes
required
Array<string>
created_at_ms
required
integer format: int64
expires_at_ms
required

Zero means until revoked.

integer format: int64
revoked
required
boolean
consumed
required

A non-reusable enrollment token has already been redeemed. Its issued keys survive.

boolean
has_more
required
boolean
next_cursor
required
string
nullable

401

Section titled “401 ”

Missing or invalid credential.

The canonical error envelope. error is a stable machine code.

object
error
required

Stable error code (e.g. unauthorized, forbidden, not_found, invalid, quota_exceeded, rate_limited).

string
Example
forbidden
message

Human-readable detail (never leaks internals).

string
Example
missing required scope
reason

Machine-readable quota reason. inbox_limit_exceeded means billing account inbox capacity across all organizations and projects sharing that account; enrollment_token_mailbox_budget_exhausted means the enrollment key lifetime creation allowance. Read message for recovery; inbox counts are separate from sending quotas.

string
used

Consumed plus reserved units.

integer format: int64
delta

Requested additional units.

integer format: int64
limit
integer format: int64
remaining
integer format: int64
consumed
integer format: int64
reserved
integer format: int64
next_reset_at

Next UTC usage-period boundary; pending reservations survive this boundary.

string format: date-time
upgrade_required
boolean

403

Section titled “403 ”

Authenticated but lacking the required scope, or out of quota.

The canonical error envelope. error is a stable machine code.

object
error
required

Stable error code (e.g. unauthorized, forbidden, not_found, invalid, quota_exceeded, rate_limited).

string
Example
forbidden
message

Human-readable detail (never leaks internals).

string
Example
missing required scope
reason

Machine-readable quota reason. inbox_limit_exceeded means billing account inbox capacity across all organizations and projects sharing that account; enrollment_token_mailbox_budget_exhausted means the enrollment key lifetime creation allowance. Read message for recovery; inbox counts are separate from sending quotas.

string
used

Consumed plus reserved units.

integer format: int64
delta

Requested additional units.

integer format: int64
limit
integer format: int64
remaining
integer format: int64
consumed
integer format: int64
reserved
integer format: int64
next_reset_at

Next UTC usage-period boundary; pending reservations survive this boundary.

string format: date-time
upgrade_required
boolean