> ## Documentation Index > Fetch the complete documentation index at: https://www.c1.ai/docs/llms.txt > Use this file to discover all available pages before exploring further. # Search My Vended Credentials > Lists credentials C1 issued to the signed-in requester. This is separate from the general secret inventory because a connector can discover other secret resources on the same account. ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples post /api/v1/search/app-secrets/my-vended-credentials openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/search/app-secrets/my-vended-credentials: post: tags: - App Secrets summary: Search My Vended Credentials description: |- Lists credentials C1 issued to the signed-in requester. This is separate from the general secret inventory because a connector can discover other secret resources on the same account. operationId: c1.api.app.v1.AppSecretSearch.SearchMyVendedCredentials requestBody: content: application/json: schema: $ref: >- #/components/schemas/c1.api.app.v1.SearchMyVendedCredentialsRequest responses: '200': content: application/json: schema: $ref: >- #/components/schemas/c1.api.app.v1.SearchAppSecretsWithAlertCountResponse description: Successful response components: schemas: c1.api.app.v1.SearchMyVendedCredentialsRequest: description: |- SearchMyVendedCredentialsRequest has the same filters as the general inventory search, but its distinct type carries the self-only permission. The server always scopes results to the signed-in requester's issuance tickets; callers cannot provide an identity-user filter. properties: appId: description: The appId field. type: string expandMask: oneOf: - $ref: '#/components/schemas/c1.api.app.v1.AppSecretExpandMask' - type: 'null' pageSize: description: The pageSize field. format: int32 type: integer pageToken: description: The pageToken field. type: string query: description: The query field. type: string refs: description: The refs field. items: $ref: '#/components/schemas/c1.api.app.v1.AppSecretRef' type: - array - 'null' resourceTypeIds: description: The resourceTypeIds field. items: type: string type: - array - 'null' title: Search My Vended Credentials Request type: object x-speakeasy-name-override: SearchMyVendedCredentialsRequest c1.api.app.v1.SearchAppSecretsWithAlertCountResponse: description: The SearchAppSecretsWithAlertCountResponse message. properties: expanded: description: The expanded field. items: additionalProperties: true description: >- Contains an arbitrary serialized message along with a @type that describes the type of the serialized message. properties: '@type': description: The type of the serialized message. type: string type: object type: - array - 'null' list: description: The list field. items: $ref: '#/components/schemas/c1.api.app.v1.AppSecretResourceView' type: - array - 'null' nextPageToken: description: The nextPageToken field. type: string title: Search App Secrets With Alert Count Response type: object x-speakeasy-name-override: SearchAppSecretsWithAlertCountResponse c1.api.app.v1.AppSecretExpandMask: description: The AppSecretExpandMask message. properties: paths: description: The paths field. items: type: string type: - array - 'null' title: App Secret Expand Mask type: object x-speakeasy-name-override: AppSecretExpandMask c1.api.app.v1.AppSecretRef: description: The AppSecretRef message. properties: appId: description: The appId field. type: string appResourceTypeId: description: The appResourceTypeId field. type: string id: description: The id field. type: string title: App Secret Ref type: object x-speakeasy-name-override: AppSecretRef c1.api.app.v1.AppSecretResourceView: description: > The AppSecretResourceView message. This message contains a oneof named destination. Only a single field of the following list may be set at a time: - paperVaultId - fullKnowledgeVaultId properties: alertCount: description: The alertCount field. format: int32 type: integer appPath: description: The appPath field. type: string appSecret: oneOf: - $ref: '#/components/schemas/c1.api.app.v1.AppSecretResource' - type: 'null' credentialRevocation: oneOf: - $ref: '#/components/schemas/c1.api.app.v1.CredentialRevocation' - type: 'null' fullKnowledgeVaultId: description: >- The fullKnowledgeVaultId field. This field is part of the `destination` oneof. See the documentation for `c1.api.app.v1.AppSecretResourceView` for more details. type: - string - 'null' paperVaultId: description: >- The paperVaultId field. This field is part of the `destination` oneof. See the documentation for `c1.api.app.v1.AppSecretResourceView` for more details. type: - string - 'null' resourceTypePath: description: The resourceTypePath field. type: string title: App Secret Resource View type: object x-speakeasy-name-override: AppSecretResourceView c1.api.app.v1.AppSecretResource: description: The AppSecretResource message. properties: appId: description: The app that this secret belongs to. type: string appResourceTypeId: description: The secret type that this secret is. type: string createdAt: format: date-time readOnly: true type: - string - 'null' deletedAt: format: date-time readOnly: true type: - string - 'null' displayName: description: The display name for this secret. type: string id: description: The id of the secret. type: string identityAppUserId: description: The ID of the user that is associated with the AppSecret. type: string lastUsedAt: format: date-time readOnly: true type: - string - 'null' secretCreatedAt: format: date-time readOnly: true type: - string - 'null' secretExpiresAt: format: date-time readOnly: true type: - string - 'null' updatedAt: format: date-time readOnly: true type: - string - 'null' title: App Secret Resource type: object x-speakeasy-name-override: AppSecretResource c1.api.app.v1.CredentialRevocation: description: |- CredentialRevocation describes the current revoke eligibility of a credential C1 issued through credential vending. properties: state: description: The state field. enum: - CREDENTIAL_REVOCATION_STATE_UNSPECIFIED - CREDENTIAL_REVOCATION_STATE_READY - CREDENTIAL_REVOCATION_STATE_REVOKING - CREDENTIAL_REVOCATION_STATE_REVOKE_FAILED - CREDENTIAL_REVOCATION_STATE_UNAVAILABLE - CREDENTIAL_REVOCATION_STATE_REVOKED type: string x-speakeasy-unknown-values: allow title: Credential Revocation type: object x-speakeasy-name-override: CredentialRevocation securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````