# CredentialEndpointKind

What kind of endpoint a credential calls. It's worked out from the provider and the endpoint, never set by hand, so a stack rule such as "Foundry only" can't be dodged by labelling.

**Kind:** a string enum, used in requests and responses.

## Values

| Value | Description |
|---|---|
| `"Public"` | The provider's own public API (no endpoint given). |
| `"Foundry"` | An Azure AI Foundry account. |
| `"AzureOpenAi"` | An Azure OpenAI resource. |
| `"Custom"` | Any other endpoint: an OpenAI- or Anthropic-compatible host the tenant named. |
| `"Bedrock"` | Claude on Amazon Bedrock, in the credential's `cloud.awsRegion`. Code pipelines' Claude Code only. |
| `"Vertex"` | Claude on Google Vertex AI, in the credential's `cloud` project and region. Code pipelines' Claude Code only. |

New values can appear, so treat one you don't know as "something else", not as an error.

## Where it's used

- Inside [`CredentialSnapshotEntry`](https://docs.maitento.com/reference/types/credential-snapshot-entry.md)
- Inside [`CredentialStackEntry`](https://docs.maitento.com/reference/types/credential-stack-entry.md)
- Inside [`ModelCredential`](https://docs.maitento.com/reference/types/model-credential.md)