List authentication credentials

Retrieve all authentication credentials registered on an Embedded Wallet internal account.

The response is not paginated: an internal account is expected to have a small, bounded number of credentials (typically 1–5), so all results are returned inline. Additional per-credential detail (such as active session expiry) is available on GET /auth/sessions.

GET /auth/credentials

List authentication credentials

cURL

curl --request GET \
  --url https://api.lightspark.com/grid/2025-10-13/auth/credentials \
  --header 'Authorization: Basic <encoded-value>'

200

multipleCredentials

{
  "data": [
    {
      "id": "AuthMethod:019542f5-b3e7-1d02-0000-000000000001",
      "accountId": "InternalAccount:019542f5-b3e7-1d02-0000-000000000002",
      "type": "EMAIL_OTP",
      "nickname": "[e-mail]",
      "createdAt": "2026-04-08T15:30:01Z",
      "updatedAt": "2026-04-08T15:30:01Z"
    },
    {
      "id": "AuthMethod:019542f5-b3e7-1d02-0000-000000000004",
      "accountId": "InternalAccount:019542f5-b3e7-1d02-0000-000000000002",
      "type": "OAUTH",
      "nickname": "[e-mail]",
      "createdAt": "2026-04-08T15:35:00Z",
      "updatedAt": "2026-04-08T15:35:00Z"
    },
    {
      "id": "AuthMethod:019542f5-b3e7-1d02-0000-000000000003",
      "accountId": "InternalAccount:019542f5-b3e7-1d02-0000-000000000002",
      "type": "PASSKEY",
      "credentialId": "KEbWNCc7NgaYnUyrNeFGX9_3Y-8oJ3KwzjnaiD1d1LVTxR7v3CaKfCz2Vy_g_MHSh7yJ8yL0Pxg6jo_o0hYiew",
      "nickname": "iPhone Face-ID",
      "createdAt": "2026-04-09T10:15:00Z",
      "updatedAt": "2026-04-09T10:15:00Z"
    }
  ]
}

Authorizations

Authorization · string · header · required

API token authentication using format <api token id>:<api client secret>

Query Parameters

accountId · string · required

Internal account id whose authentication credentials to list.

Response

200

application/json

Authentication credentials registered on the internal account. Returns an empty data array when the internal account has no credentials or when accountId does not match any internal account visible to the caller.

data · object[] · required

List of authentication credentials registered on the internal account.

Show child attributes