---
title: "Validate a credential-request token without consuming it"
method: POST
path: "/v1/credential-requests/peek"
tags: ["credential-requests"]
---

# Validate a credential-request token without consuming it

`POST /v1/credential-requests/peek`

Returns the service/field/label the link collects. The token travels in the body so it never appears in URLs or access logs.

## Request body

- object
  - `token` string, required

## Response `200`

Successful response

- union
  - object
    - `service` string, required
    - `field` string, required
    - `label` string, nullable, required
    - `expiresAt` number, required
  - object
    - `error` object, required
      - `code` 'INVALID' | 'EXPIRED' | 'USED', required
      - `message` string, required

---

[API](https://skmtc.net/vellum-ai/apis/vellum-gateway-api.md) · [All operations](https://skmtc.net/vellum-ai/apis/vellum-gateway-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/vellum-ai/vellum-gateway-api/versions/0ce2a9dec32d/schema)