---
title: "List Bridge Credentials"
method: GET
path: "/api/v1/iam/tunnel/bridges/{bridge_id}/credentials"
tags: ["Tunnel"]
---

# List Bridge Credentials

`GET /api/v1/iam/tunnel/bridges/{bridge_id}/credentials`

ListBridgeCredentials returns every credential (active + revoked) for
 one bridge.

## Path parameters

- `bridge_id` string, required — The bridge whose credentials to list.

## Response `200`

Successful response

- C1ApiIamV1TunnelCredentialsServiceListBridgeCredentialsResponse — The TunnelCredentialsServiceListBridgeCredentialsResponse message.
  - `list` C1ApiIamV1TunnelCredential[], nullable — The list field.
    - `bridgeId` string — The bridge this credential belongs to.
    - `clientId` string — The client_id (full ${id}@${tenant_domain}/tcc form).
    - `clientSecret` string — The plaintext client_secret. ONLY populated on the CreateBridgeCredential response; empty on Get / List.
    - `createdAt` string, date-time, nullable
    - `credentialStatus` 'TUNNEL_CREDENTIAL_STATUS_UNSPECIFIED' | 'TUNNEL_CREDENTIAL_STATUS_ACTIVE' | 'TUNNEL_CREDENTIAL_STATUS_REVOKED' | 'TUNNEL_CREDENTIAL_STATUS_EXPIRED' — Lifecycle status of this credential record.
    - `deletedAt` string, date-time, nullable
    - `expiresTime` string, date-time, nullable
    - `id` string — The id field.
    - `lastUsedAt` string, date-time, nullable
    - `revokedAt` string, date-time, nullable
    - `updatedAt` string, date-time, nullable
  - `nextPageToken` string — The nextPageToken field.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)