# CredentialSnapshotEntry

One entry of a run's credential stack as it stood when the run started: which credential, and this stack's rules for it. It names the credential but holds none of its secrets; those are read live at each call, so a rotated key is picked up straight away.

**Kind:** an object, used in responses.

## Fields

Every field is present in a response; empty ones are `null`.

| Field | Type | Description |
|---|---|---|
| `credentialId` | `uuid` |  |
| `credentialName` | `string` | The credential's name when the run started, for the run's record. |
| `provider` | [`ModelKeyProvider`](https://docs.maitento.com/reference/types/model-key-provider.md) |  |
| `endpointKind` | [`CredentialEndpointKind`](https://docs.maitento.com/reference/types/credential-endpoint-kind.md) |  |
| `allowedModels` | `string[] \| null` |  |
| `allowedEndpointKinds` | [`CredentialEndpointKind`](https://docs.maitento.com/reference/types/credential-endpoint-kind.md)`[] \| null` |  |
| `enabled` | `boolean` |  |
| `keyHints` | `string[]` | The hints of the credential's keys when the run started, for the run's record. |

## Example

```json
{
  "credentialId": "3f2b8c1e-5d4a-4e6b-9c7d-2a1b0c9d8e7f",
  "credentialName": "...",
  "provider": "Anthropic",
  "endpointKind": "Public",
  "allowedModels": [
    "..."
  ],
  "allowedEndpointKinds": [
    "Public"
  ],
  "enabled": false,
  "keyHints": [
    "..."
  ]
}
```

## Where it's used

- Inside [`CredentialStackSnapshot`](https://docs.maitento.com/reference/types/credential-stack-snapshot.md)