> ## Documentation Index
> Fetch the complete documentation index at: https://docs.apinizer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Credentials API

> The Credentials API provides endpoints for managing credentials in Apinizer. Credentials are used for authentication and authorization, allowing users or applications to access API Proxies and API Proxy Groups.

## Endpoints

### CRUD Operations

* [List Credentials](/api-reference/credentials/crud/list-credentials) - Get all credentials for a project
* [Create Credential](/api-reference/credentials/crud/create-credential) - Create a new credential
* [Update Credential](/api-reference/credentials/crud/update-credential) - Update an existing credential
* [Change Credential Password](/api-reference/credentials/crud/change-credential-password) - Change credential password
* [Delete Credential](/api-reference/credentials/crud/delete-credential) - Delete a credential

### Access Management

* [Get Granted Access List](/api-reference/credentials/access/get-granted-access-list) - Get list of API Proxies/Groups granted to credential
* [Grant Access](/api-reference/credentials/access/grant-access) - Grant access to API Proxy or API Proxy Group
* [Revoke Access](/api-reference/credentials/access/revoke-access) - Revoke access from API Proxy or API Proxy Group

### Secrets Management

* [Secrets Management](/api-reference/credentials/secrets) - Manage secret keys, certificates, keys, keystores, and truststores for credentials

### JWK Settings

* [JWK Settings](/api-reference/credentials/jwk-settings) - Manage JWK settings for validation, signing, decryption, and encryption

### Token Settings

* [Token Settings](/api-reference/credentials/token-settings) - Configure token expiration, refresh tokens, grant types, and JWT signature algorithms

## Authentication

All endpoints require authentication using a Personal API Access Token.

## Permissions

### GET Operations (List Credentials, Get Granted Access List)

* User must have **`IDENTITY` + `VIEW`** permission in the project
* If the asset category does not exist, user must have **at least one permission** in the project

### POST/PUT/DELETE Operations (Create/Update/Delete Credential, Grant/Revoke Access)

* User must have **`IDENTITY` + `MANAGE`** permission in the project
* For deployment operations (when granting/revoking access with deploy), user must also have **`IDENTITY` + `DEPLOY_UNDEPLOY`** permission

### Permission Requirements

| Operation                                 | Required Permission                                               |
| ----------------------------------------- | ----------------------------------------------------------------- |
| List Credentials, Get Granted Access List | `IDENTITY` + `VIEW` (or any permission if category doesn't exist) |
| Create/Update/Delete Credential           | `IDENTITY` + `MANAGE`                                             |
| Grant/Revoke Access (with deploy)         | `IDENTITY` + `DEPLOY_UNDEPLOY`                                    |

## Related Documentation

* [Authentication Guide](/api-reference/getting-started/authentication) - How to obtain and use API tokens
* [Error Handling](/api-reference/getting-started/error-handling) - Error response formats