> ## Documentation Index > Fetch the complete documentation index at: https://docs.guild.ai/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > To act on a user's behalf in Guild, use the Guild REST API at https://api.guild.ai/v1. > The OpenAPI spec is unauthenticated: https://docs.guild.ai/openapi.json (or openapi.yaml). > Authenticate with an account API key, sent as HTTP Basic (key id as username, secret as password) or as `Authorization: Bearer :`. See https://docs.guild.ai/api-reference/introduction#authentication. > To run one agent on demand without account-wide access, use an API trigger instead: https://docs.guild.ai/platform/api-triggers. > To search these docs from an MCP client, connect to https://docs.guild.ai/mcp. The full page index is https://docs.guild.ai/llms.txt. # List an account's integration credentials ## OpenAPI ````yaml /api-reference/openapi.yaml get /accounts/{account_id_or_name}/credentials openapi: 3.0.3 info: title: Guild Public API version: 1.0.0 description: >- The Guild public API, served at https://api.guild.ai/v1. Authenticate with an account API key, sent as HTTP Basic (key id as the username, secret as the password) or as a Bearer token `:`, or with an OAuth 2.0 access token. Each operation lists the credentials it accepts and the scopes it needs; see https://docs.guild.ai/api-reference/introduction#scopes. Versions are path integers and v1 is the only one: a breaking change ships as a new version rather than changing v1. Lists page with `limit` and `offset` and report `pagination.has_more`. A session-events websocket also exists at wss://api.guild.ai/v1/sessions/{session_id}/events/ws with the same credentials on the handshake; OpenAPI cannot describe websockets, so it is not listed in paths. servers: - url: https://api.guild.ai/v1 description: Production security: [] tags: - name: accounts - name: agents - name: integrations - name: other - name: sessions - name: skills - name: triggers - name: workspaces paths: /accounts/{account_id_or_name}/credentials: get: tags: - accounts summary: List an account's integration credentials operationId: get_account_credentials parameters: - name: account_id_or_name in: path required: true schema: type: string - $ref: '#/components/parameters/Limit' - $ref: '#/components/parameters/Offset' - name: integration in: query required: false schema: default: null title: Integration nullable: true type: string - name: search in: query required: false schema: default: null title: Search nullable: true type: string - name: workspace_id in: query required: false schema: default: null title: Workspace Id nullable: true type: string - name: scope in: query required: false schema: default: null title: Scope nullable: true type: boolean - name: grant_candidates in: query required: false schema: default: null title: Grant Candidates nullable: true type: boolean responses: '200': description: Successful response content: application/json: schema: type: object properties: items: type: array items: $ref: '#/components/schemas/IntegrationCredentials' pagination: $ref: '#/components/schemas/Pagination' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' security: - apiKey: [] - bearerApiKey: [] - oauth2: - integrations:read components: parameters: Limit: name: limit in: query required: false schema: default: 20 description: Maximum number of items to return. maximum: 500 minimum: 0 title: Limit type: integer Offset: name: offset in: query required: false schema: default: 0 description: Number of items to skip before returning results. maximum: 9223372036854776000 minimum: 0 title: Offset type: integer schemas: IntegrationCredentials: type: object properties: id: type: string format: uuid created_at: type: string format: date-time updated_at: type: string format: date-time auth_config_id: type: string format: uuid description: The auth config these credentials are for creator_id: type: string format: uuid description: 'Who added these credentials: a user, or an account API key' owner_id: type: string format: uuid description: The account that owns these credentials extra_data: type: object nullable: true description: >- Non-secret installation metadata the provider returned at connect time params: type: object nullable: true description: >- The params in EntIntegrationParams user needs to provide during credentials linking target_id: type: string format: uuid nullable: true description: >- Availability target. NULL means a plain account-pool credential. A workspace target homes the credential to that workspace: it serves agents there whose bindings did not resolve, and never appears in a sibling workspace's pool. An organization membership target binds the credential to that member in that organization. Ownership is always `owner`, never the target. webhook_owner_identifier: type: string maxLength: 255 nullable: true config_params: {} creator: {} has_active_webhook_triggers: {} integration: {} policy_resources: {} signature_type: {} target: {} webhook_enabled: {} webhook_url: {} Pagination: type: object properties: total_count: description: Items matching the request across all pages. type: integer limit: description: Page size of this response. type: integer offset: description: Items skipped before this page. type: integer has_more: description: Whether another page follows; request it with offset + limit. type: boolean ErrorResponse: type: object properties: error: type: string message: type: string securitySchemes: apiKey: type: http scheme: basic description: >- API key: key id as the username, secret as the password. An account API key carries the same scopes as an OAuth token and is checked against the scopes listed under oauth2 on each operation. A trigger API key is limited to its trigger's workspace and reaches only the session operations that list this scheme alongside the oauth2 scopes. bearerApiKey: type: http scheme: bearer bearerFormat: : description: >- The same API key as one Bearer token, `:`. An account API key carries the same scopes as an OAuth token and is checked against the scopes listed under oauth2 on each operation. A trigger API key is limited to its trigger's workspace and reaches only the session operations that list this scheme alongside the oauth2 scopes. oauth2: type: oauth2 description: >- OAuth 2.0 authorization code flow with PKCE (S256). Discovery: https://api.guild.ai/.well-known/oauth-authorization-server. flows: authorizationCode: authorizationUrl: https://api.guild.ai/v1/oauth/authorize tokenUrl: https://api.guild.ai/v1/oauth/token refreshUrl: https://api.guild.ai/v1/oauth/token scopes: agents:read: Read agents agents:write: Read and change agents sessions:read: Read sessions sessions:write: Read and change sessions workspaces:read: Read workspaces workspaces:write: Read and change workspaces skills:read: Read skills skills:write: Read and change skills integrations:read: Read integrations integrations:write: Read and change integrations applications:read: Read applications applications:write: Read and change applications organizations:read: Read organizations organizations:write: Read and change organizations ````