The provider connections, from the file and the console
The operator (installation.settings.manage, the workspace owner), signed in; an API key is 403 whatever its scopes. The database's rows, disabled ones included, by id. A credential is shown as stored with its last4, or as the name of the env or Secrets Manager reference; never a value. state: needs_value (stored, no value yet), unresolved (the credential did not resolve on the replica that answered), disabled, else active. Changes nothing.
Auth: cookie session only; no scope.
cookieSession__Host-werft_session<token>For the web console: the browser session cookie set by POST /v1/auth/login. It holds the scopes of the user's workspace role (owner: all; admin and member: all but sessions:recover). Requests other than GET must also send X-Requested-With: werft-web.
Every connection, by id.
application/json- response
items*array<>credential_hosts*array<string>|nullendpoint_defaults*curl -X GET 'https://example.com/v1/installation/settings/connections'{ "items": [ { "id": "anthropic-console", "origin": "console", "state": "active", "kind": "anthropic", "endpoint": "https://api.anthropic.com", "billing": "per_token", "auth_kind": "api_key", "auto_mode": "unknown", "credential": { "source": "stored", "last4": "x9Qa" }, "created_at": "2026-11-04T03:00:00.000Z", "disabled_at": null } ], "credential_hosts": [ "api.anthropic.com:443" ], "endpoint_defaults": { "anthropic": "https://api.anthropic.com" }}