--- title: Get Credential url: https://platform.claude.com/docs/en/api/python/beta/vaults/credentials/retrieve --- # Get Credential `beta.vaults.credentials.retrieve(credential_id, **kwargs) -> BetaManagedAgentsCredential` **GET** `/v1/vaults/{vault_id}/credentials/{credential_id}` Get Credential ## Parameters - `vault_id: str` (path parameter) Identifier of the vault containing the credential. - `credential_id: str` (path parameter) Unique identifier of the credential to retrieve. - `betas: Optional[List[AnthropicBetaParam]]` (header parameter) Optional header to specify the beta version(s) you want to use. - `str` - `"message-batches-2024-09-24"` - `"prompt-caching-2024-07-31"` - `"computer-use-2024-10-22"` - `"computer-use-2025-01-24"` - `"pdfs-2024-09-25"` - `"token-counting-2024-11-01"` - `"token-efficient-tools-2025-02-19"` - `"output-128k-2025-02-19"` - `"files-api-2025-04-14"` - `"mcp-client-2025-04-04"` - `"mcp-client-2025-11-20"` - `"dev-full-thinking-2025-05-14"` - `"interleaved-thinking-2025-05-14"` - `"code-execution-2025-05-22"` - `"extended-cache-ttl-2025-04-11"` - `"context-1m-2025-08-07"` - `"context-management-2025-06-27"` - `"model-context-window-exceeded-2025-08-26"` - `"skills-2025-10-02"` - `"fast-mode-2026-02-01"` - `"output-300k-2026-03-24"` - `"user-profiles-2026-03-24"` - `"user-profiles-2026-08-18"` - `"user-profiles-2026-09-04"` - `"advisor-tool-2026-03-01"` - `"managed-agents-2026-04-01"` - `"cache-diagnosis-2026-04-07"` - `"dreaming-2026-04-21"` - `"thinking-token-count-2026-05-13"` - `"server-side-fallback-2026-06-01"` - `"server-side-fallback-2026-07-01"` - `"fallback-credit-2026-06-01"` - `"fallback-credit-2026-07-01"` - `"agent-memory-2026-07-22"` - `"mid-conversation-tool-changes-2026-07-01"` - `"compact-2026-01-12"` - `"computer-use-2025-11-24"` - `"mcp-tunnels-2026-06-22"` - `"structured-outputs-2025-11-13"` - `"task-budgets-2026-03-13"` - `"thinking-display-updates-2026-08-18"` - `"ce-user-management-2026-07-13"` - `"mid-conversation-output-config-2026-07-01"` - `"thinking-binding-controls-2026-08-01"` - `"mid-conversation-system-clear-at-2026-08-21"` - `"compact-2026-09-04"` - `"inline-tools-2026-09-15"` - `"mcp-client-2026-09-15"` - `"ce-plugins-2026-09-01"` - `"spend-limit-reads-2026-09-26"` - `workspace_id: Optional[str]` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ## Returns - `class BetaManagedAgentsCredential` A credential stored in a vault. Sensitive fields are never returned in responses. - `type: Literal["vault_credential"]` - `id: str` Unique identifier for the credential. - `archived_at: Optional[datetime]` When the credential was archived. Null if not archived. format: date-time - `auth: Auth` Authentication configuration for this credential. - `class BetaManagedAgentsMCPOAuthAuthResponse` OAuth credential details for an MCP server. - `type: Literal["mcp_oauth"]` - `mcp_server_url: str` URL of the MCP server this credential authenticates against. - `expires_at: Optional[datetime]` A timestamp in RFC 3339 format format: date-time - `refresh: Optional[BetaManagedAgentsMCPOAuthRefreshResponse]` Refresh token configuration, if the credential supports token refresh. - `client_id: str` OAuth client ID. - `token_endpoint: str` Token endpoint URL used to refresh the access token. - `token_endpoint_auth: TokenEndpointAuth` - `class BetaManagedAgentsTokenEndpointAuthNoneResponse` Token endpoint requires no client authentication. - `type: Literal["none"]` - `class BetaManagedAgentsTokenEndpointAuthBasicResponse` Token endpoint uses HTTP Basic authentication with client credentials. - `type: Literal["client_secret_basic"]` - `class BetaManagedAgentsTokenEndpointAuthPostResponse` Token endpoint uses POST body authentication with client credentials. - `type: Literal["client_secret_post"]` - `resource: Optional[str]` OAuth resource indicator. - `scope: Optional[str]` OAuth scope for the refresh request. - `class BetaManagedAgentsStaticBearerAuthResponse` Static bearer token credential details for an MCP server. - `type: Literal["static_bearer"]` - `mcp_server_url: str` URL of the MCP server this credential authenticates against. - `class BetaManagedAgentsEnvironmentVariableAuthResponse` Environment variable credential details. The secret value is never returned. - `type: Literal["environment_variable"]` - `injection_location: BetaManagedAgentsInjectionLocationResponse` Where in the outbound request the secret value is substituted. - `body: bool` Whether the placeholder is substituted in the request body. - `header: bool` Whether the placeholder is substituted in request header values. - `networking: Networking` Outbound hosts the secret value is substituted on. - `class BetaManagedAgentsUnrestrictedCredentialNetworkingResponse` The secret is substituted on any host the session's Environment network policy permits egress to. - `type: Literal["unrestricted"]` - `class BetaManagedAgentsLimitedCredentialNetworkingResponse` The secret is substituted only on requests to the listed hosts. - `type: Literal["limited"]` - `allowed_hosts: List[str]` Hostnames on which the secret will be substituted. An entry matches the request host exactly; a `*.`-prefixed entry matches any subdomain of the named domain but not the domain itself. - `secret_name: str` Name of the environment variable. - `created_at: datetime` A timestamp in RFC 3339 format format: date-time - `metadata: Dict[str, str]` Arbitrary key-value metadata attached to the credential. - `updated_at: datetime` A timestamp in RFC 3339 format format: date-time - `vault_id: str` Identifier of the vault this credential belongs to. - `display_name: Optional[str]` Human-readable name for the credential. ## Example ```python import os from anthropic import Anthropic client = Anthropic( api_key=os.environ.get( "ANTHROPIC_API_KEY" ), # This is the default and can be omitted ) beta_managed_agents_credential = client.beta.vaults.credentials.retrieve( credential_id="vcrd_011CZkZEMt8gZan2iYPQfSkw", vault_id="vlt_011CZkZDLs7fYzm1hXNPeRjv", ) print(beta_managed_agents_credential.id) ``` ### Response (200) ```json { "id": "vcrd_011CZkZEMt8gZan2iYPQfSkw", "archived_at": null, "auth": { "mcp_server_url": "https://example-server.modelcontextprotocol.io/sse", "type": "static_bearer" }, "created_at": "2026-03-15T10:00:00Z", "metadata": { "environment": "production" }, "type": "vault_credential", "updated_at": "2026-03-15T10:00:00Z", "vault_id": "vlt_011CZkZDLs7fYzm1hXNPeRjv", "display_name": "Example credential" } ```