---
title: "List callback credentials"
method: GET
path: "/v1/exceptions/callbacks/credentials"
tags: ["Exception"]
---

# List callback credentials

`GET /v1/exceptions/callbacks/credentials`

Lists the caller tenant's callback credentials (live and revoked), newest first. Returns metadata only — never the token or its hash.

## Response `200`

OK

- ListResponse
  - `credentials` CredentialMetadata[], nullable, required — The tenant's callback credentials (live and revoked), newest first. Metadata only — never the token or hash.
    - `createdAt` string, required — Mint time (RFC 3339, UTC)
    - `externalSystem` string — Operator-legible external-system label
    - `id` string, uuid, required — Surrogate id of the credential
    - `lastUsedAt` string — When this credential last authenticated an inbound callback (RFC 3339, UTC); absent until first use
    - `revokedAt` string — When this credential was revoked (RFC 3339, UTC); absent if live
    - `rotatedAt` string — When this credential superseded a prior one via rotation (RFC 3339, UTC); absent if minted fresh

## Other responses

- `default` — Error

---

[API](https://skmtc.net/lerian/apis/identity-plugin.md) · [All operations](https://skmtc.net/lerian/apis/identity-plugin/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lerian/identity-plugin/versions/25daba385532/schema)