CredentialSnapshotEntry

One entry of a run’s credential stack as it stood when the run started: which credential, and this stack’s rules for it. It names the credential but holds none of its secrets; those are read live at each call, so a rotated key is picked up straight away.

Kind: an object, used in responses.

Fields

Every field is present in a response; empty ones are null.

Field	Type	Description
`credentialId`	`uuid`
`credentialName`	`string`	The credential’s name when the run started, for the run’s record.
`provider`	`ModelKeyProvider`
`endpointKind`	`CredentialEndpointKind`
`allowedModels`	`string[] \| null`
`allowedEndpointKinds`	`CredentialEndpointKind[] \| null`
`enabled`	`boolean`
`keyHints`	`string[]`	The hints of the credential’s keys when the run started, for the run’s record.

Example

{
  "credentialId": "3f2b8c1e-5d4a-4e6b-9c7d-2a1b0c9d8e7f",
  "credentialName": "...",
  "provider": "Anthropic",
  "endpointKind": "Public",
  "allowedModels": [
    "..."
  ],
  "allowedEndpointKinds": [
    "Public"
  ],
  "enabled": false,
  "keyHints": [
    "..."
  ]
}

Where it’s used

Inside CredentialStackSnapshot