Get an AI Credential
Get one saved BYOK AI credential.
Authentication
AuthorizationBearer
Use Bearer <api-key>.
Path parameters
credentialId
Headers
BCTRL-Version
Dated API version. Defaults to the release pinned when the API key was created.
Allowed values:
BCTRL-Space
Select one authorized Space by its opaque ID or unique name. Omission uses the operation default.
BCTRL-Subaccount-Id
Optional effective subaccount context for organization API keys. Subaccount API keys are already scoped and cannot use this header to act as another subaccount.
Response headers
BCTRL-Request-Id
Current request identifier, also echoed in errors.
BCTRL-Version
Negotiated dated API version.
RateLimit-Limit
Evaluated policy limit; zero when no finite policy was evaluated.
RateLimit-Remaining
Remaining policy budget; zero when no finite policy was evaluated.
RateLimit-Reset
Seconds until reset; zero when no finite policy was evaluated.
Response
OK
apiKeyReference
The secret: reference the key is read from, or null when a literal key is stored.
createdAt
RFC 3339 timestamp with a UTC offset.
hasApiKey
id
name
object
provider
status
Allowed values:
updatedAt
RFC 3339 timestamp with a UTC offset.
baseUrl
defaultModel
subaccountId
Opaque identifier for a BCTRL subaccount.
Errors
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error

