---
title: "Get datasource instance credential status"
method: GET
path: "/rest/api/v1/datasource/{datasourceInstanceId}/credentialstatus"
tags: ["Datasources"]
---

# Get datasource instance credential status

`GET /rest/api/v1/datasource/{datasourceInstanceId}/credentialstatus`

Returns the current credential status for a datasource instance. Access is limited to callers with the ADMIN scope; the handler enforces this check.

## Path parameters

- `datasourceInstanceId` string, required

## Response `200`

OK

- DatasourceCredentialStatusResponse — Status of the credentials currently installed for a datasource instance.
  - `status` 'VALID' | 'VALID_WITH_WARNINGS' | 'VALIDATING' | 'INVALID' | 'MISSING', required — Lifecycle state of the credentials installed for a datasource instance. Mirrors the internal admin Status enum so the handler can surface the same health signals already tracked today. EXPIRING_SOON is represented as VALID_WITH_WARNINGS (with detail in `message`); EXPIRED is surfaced as INVALID plus a non-null `expiresAt` in the past.
  - `lastRotatedAt` string, date-time — When the credentials were last rotated. Omitted when not known.
  - `expiresAt` string, date-time — When the active credentials expire. Omitted when not known or not applicable to this credential type.
  - `message` string — Optional human-readable detail about the current credential status.

## Other responses

- `400` — Invalid request
- `401` — Not authorized
- `403` — Forbidden
- `404` — Datasource instance not found

---

[API](https://skmtc.net/gleanwork/apis/glean-rest-admin-api.md) · [All operations](https://skmtc.net/gleanwork/apis/glean-rest-admin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gleanwork/glean-rest-admin-api/versions/228416989e7f/schema)