Get credential secrets

Retrieve decrypted credential secrets for integration use.

Returns the actual credential data (passwords, tokens, keys) in decrypted form. This endpoint is restricted to service accounts only for security. Regular users cannot retrieve plaintext credentials after creation.

Context: This endpoint provides access to sensitive credential data for system-level operations. It is primarily used by: - Service accounts executing workflows that need integration credentials - Internal services performing integration health checks - System processes that need to establish external connections - Automated credential rotation and renewal workflows

Regular user accounts cannot access this endpoint to prevent credential exposure.

Use Cases: Service account retrieves SFTP credentials to execute file download task in workflow.

Internal health check service validates PostgreSQL credential by attempting connection.

Automated token refresh service retrieves OAuth refresh_token for renewal.

Related Endpoints: - GET /integrations/credentials - List credentials (metadata only, no secrets) - POST /integrations/credentials - Create new credential - PATCH /integrations/credentials/{credential_id} - Update credential

Security: - Service accounts only - regular users cannot retrieve plaintext credentials - Credentials are decrypted in-memory only (never logged or persisted unencrypted) - Organization isolation enforced at query level - Audit logging recommended for production use - Consider rotating credentials if this endpoint is compromised

Notes: - This endpoint is intended for internal system use, not direct customer API calls - Sensitive data should be handled securely and never exposed in logs or responses - OAuth tokens are automatically refreshed if expired before returning