---
title: "List credentials for user and team"
method: GET
path: "/v2/teams/{teamId}/browser-agent/credentials/{userId}"
tags: ["Credentials"]
---

# List credentials for user and team

`GET /v2/teams/{teamId}/browser-agent/credentials/{userId}`

List browser-login credentials visible to the caller for the current team — team-shared (user_id IS NULL) plus the caller's own personal logins. Optionally filter by `domain`. Passwords and OTP secrets are never returned; only metadata flags indicating whether they are set.

## Path parameters

- `userId` string, uuid, required
- `teamId` string, uuid, required

## Query parameters

- `domain` string

## Response `200`

Default Response

- object[]
  - `id` string, uuid, required — Credential ID
  - `domain` string, required — Domain for the credential
  - `username` string, nullable, required — Username (if any)
  - `hasEnabledTOTP` boolean, required — Whether TOTP is enabled
  - `hasPassword` boolean, required — Whether a password is stored
  - `user_id` string, nullable, required — Owner user id; null when shared with the team

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/duvo/apis/duvo-public-api.md) · [All operations](https://skmtc.net/duvo/apis/duvo-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/duvo/duvo-public-api/revisions/dafcf3d868a9/schema)