---
title: Credential Sets
---

[Skip to content](#_top)

[API Reference](https://developers.cloudflare.com/api)

[Vulnerability Scanner](https://developers.cloudflare.com/api/resources/vulnerability_scanner)

Copy Markdown

Open in **Claude**Open in **ChatGPT**Open in **Cursor**

---

**Copy Markdown****View as Markdown**

# Credential Sets

##### [List credential sets](https://developers.cloudflare.com/api/resources/vulnerability_scanner/subresources/credential_sets/methods/list)

GET/accounts/{account\_id}/vuln\_scanner/credential\_sets

##### [Create credential set](https://developers.cloudflare.com/api/resources/vulnerability_scanner/subresources/credential_sets/methods/create)

POST/accounts/{account\_id}/vuln\_scanner/credential\_sets

##### [Get credential set](https://developers.cloudflare.com/api/resources/vulnerability_scanner/subresources/credential_sets/methods/get)

GET/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}

##### [Update credential set](https://developers.cloudflare.com/api/resources/vulnerability_scanner/subresources/credential_sets/methods/update)

PUT/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}

##### [Edit credential set](https://developers.cloudflare.com/api/resources/vulnerability_scanner/subresources/credential_sets/methods/edit)

PATCH/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}

##### [Delete credential set](https://developers.cloudflare.com/api/resources/vulnerability_scanner/subresources/credential_sets/methods/delete)

DELETE/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}

##### ModelsExpand Collapse

<details>

<summary>

CredentialSetListResponse object {id, name }

</summary>

id: string

Credential set identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_list_response%20%3E%20(schema)%20%3E%20(property)%20id">Link to this property</a>

name: string

Human-readable name.

<a href="#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_list_response%20%3E%20(schema)%20%3E%20(property)%20name">Link to this property</a>

</details>

[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_list_response%20%3E%20(schema)>)

<details>

<summary>

CredentialSetCreateResponse object {id, name }

</summary>

id: string

Credential set identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_create_response%20%3E%20(schema)%20%3E%20(property)%20id">Link to this property</a>

name: string

Human-readable name.

<a href="#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_create_response%20%3E%20(schema)%20%3E%20(property)%20name">Link to this property</a>

</details>

[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_create_response%20%3E%20(schema)>)

<details>

<summary>

CredentialSetGetResponse object {id, name }

</summary>

id: string

Credential set identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_get_response%20%3E%20(schema)%20%3E%20(property)%20id">Link to this property</a>

name: string

Human-readable name.

<a href="#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_get_response%20%3E%20(schema)%20%3E%20(property)%20name">Link to this property</a>

</details>

[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_get_response%20%3E%20(schema)>)

<details>

<summary>

CredentialSetUpdateResponse object {id, name }

</summary>

id: string

Credential set identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_update_response%20%3E%20(schema)%20%3E%20(property)%20id">Link to this property</a>

name: string

Human-readable name.

<a href="#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_update_response%20%3E%20(schema)%20%3E%20(property)%20name">Link to this property</a>

</details>

[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_update_response%20%3E%20(schema)>)

<details>

<summary>

CredentialSetEditResponse object {id, name }

</summary>

id: string

Credential set identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_edit_response%20%3E%20(schema)%20%3E%20(property)%20id">Link to this property</a>

name: string

Human-readable name.

<a href="#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_edit_response%20%3E%20(schema)%20%3E%20(property)%20name">Link to this property</a>

</details>

[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_edit_response%20%3E%20(schema)>)

CredentialSetDeleteResponse = unknown

[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_delete_response%20%3E%20(schema)>)

#### Credential SetsCredentials

##### [List credentials](https://developers.cloudflare.com/api/resources/vulnerability_scanner/subresources/credential_sets/subresources/credentials/methods/list)

GET/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}/credentials

##### [Create credential](https://developers.cloudflare.com/api/resources/vulnerability_scanner/subresources/credential_sets/subresources/credentials/methods/create)

POST/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}/credentials

##### [Get credential](https://developers.cloudflare.com/api/resources/vulnerability_scanner/subresources/credential_sets/subresources/credentials/methods/get)

GET/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}/credentials/{credential\_id}

##### [Update credential](https://developers.cloudflare.com/api/resources/vulnerability_scanner/subresources/credential_sets/subresources/credentials/methods/update)

PUT/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}/credentials/{credential\_id}

##### [Edit credential](https://developers.cloudflare.com/api/resources/vulnerability_scanner/subresources/credential_sets/subresources/credentials/methods/edit)

PATCH/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}/credentials/{credential\_id}

##### [Delete credential](https://developers.cloudflare.com/api/resources/vulnerability_scanner/subresources/credential_sets/subresources/credentials/methods/delete)

DELETE/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}/credentials/{credential\_id}

##### ModelsExpand Collapse

<details>

<summary>

CredentialListResponse object {id, credential\_set\_id, location, 2 more }

A credential attached to API requests during scanning. The credential <code>value</code> is write-only and never returned in responses.

</summary>

id: string

Credential identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_list_response%20%3E%20(schema)%20%3E%20(property)%20id">Link to this property</a>

credential\_set\_id: string

Parent credential set identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_list_response%20%3E%20(schema)%20%3E%20(property)%20credential_set_id">Link to this property</a>

<details>

<summary>

location: "header"or "cookie"

Where the credential is attached in outgoing requests.

</summary>

One of the following:

"header"

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_list_response%20%3E%20(schema)%20%3E%20(property)%20location%20%3E%20(member)%200">Link to this property</a>

"cookie"

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_list_response%20%3E%20(schema)%20%3E%20(property)%20location%20%3E%20(member)%201">Link to this property</a>

</details>

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_list_response%20%3E%20(schema)%20%3E%20(property)%20location">Link to this property</a>

location\_name: string

Name of the header or cookie where the credential is attached.

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_list_response%20%3E%20(schema)%20%3E%20(property)%20location_name">Link to this property</a>

name: string

Human-readable name.

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_list_response%20%3E%20(schema)%20%3E%20(property)%20name">Link to this property</a>

</details>

[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_list_response%20%3E%20(schema)>)

<details>

<summary>

CredentialCreateResponse object {id, credential\_set\_id, location, 2 more }

A credential attached to API requests during scanning. The credential <code>value</code> is write-only and never returned in responses.

</summary>

id: string

Credential identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_create_response%20%3E%20(schema)%20%3E%20(property)%20id">Link to this property</a>

credential\_set\_id: string

Parent credential set identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_create_response%20%3E%20(schema)%20%3E%20(property)%20credential_set_id">Link to this property</a>

<details>

<summary>

location: "header"or "cookie"

Where the credential is attached in outgoing requests.

</summary>

One of the following:

"header"

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_create_response%20%3E%20(schema)%20%3E%20(property)%20location%20%3E%20(member)%200">Link to this property</a>

"cookie"

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_create_response%20%3E%20(schema)%20%3E%20(property)%20location%20%3E%20(member)%201">Link to this property</a>

</details>

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_create_response%20%3E%20(schema)%20%3E%20(property)%20location">Link to this property</a>

location\_name: string

Name of the header or cookie where the credential is attached.

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_create_response%20%3E%20(schema)%20%3E%20(property)%20location_name">Link to this property</a>

name: string

Human-readable name.

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_create_response%20%3E%20(schema)%20%3E%20(property)%20name">Link to this property</a>

</details>

[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_create_response%20%3E%20(schema)>)

<details>

<summary>

CredentialGetResponse object {id, credential\_set\_id, location, 2 more }

A credential attached to API requests during scanning. The credential <code>value</code> is write-only and never returned in responses.

</summary>

id: string

Credential identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_get_response%20%3E%20(schema)%20%3E%20(property)%20id">Link to this property</a>

credential\_set\_id: string

Parent credential set identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_get_response%20%3E%20(schema)%20%3E%20(property)%20credential_set_id">Link to this property</a>

<details>

<summary>

location: "header"or "cookie"

Where the credential is attached in outgoing requests.

</summary>

One of the following:

"header"

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_get_response%20%3E%20(schema)%20%3E%20(property)%20location%20%3E%20(member)%200">Link to this property</a>

"cookie"

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_get_response%20%3E%20(schema)%20%3E%20(property)%20location%20%3E%20(member)%201">Link to this property</a>

</details>

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_get_response%20%3E%20(schema)%20%3E%20(property)%20location">Link to this property</a>

location\_name: string

Name of the header or cookie where the credential is attached.

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_get_response%20%3E%20(schema)%20%3E%20(property)%20location_name">Link to this property</a>

name: string

Human-readable name.

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_get_response%20%3E%20(schema)%20%3E%20(property)%20name">Link to this property</a>

</details>

[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_get_response%20%3E%20(schema)>)

<details>

<summary>

CredentialUpdateResponse object {id, credential\_set\_id, location, 2 more }

A credential attached to API requests during scanning. The credential <code>value</code> is write-only and never returned in responses.

</summary>

id: string

Credential identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_update_response%20%3E%20(schema)%20%3E%20(property)%20id">Link to this property</a>

credential\_set\_id: string

Parent credential set identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_update_response%20%3E%20(schema)%20%3E%20(property)%20credential_set_id">Link to this property</a>

<details>

<summary>

location: "header"or "cookie"

Where the credential is attached in outgoing requests.

</summary>

One of the following:

"header"

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_update_response%20%3E%20(schema)%20%3E%20(property)%20location%20%3E%20(member)%200">Link to this property</a>

"cookie"

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_update_response%20%3E%20(schema)%20%3E%20(property)%20location%20%3E%20(member)%201">Link to this property</a>

</details>

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_update_response%20%3E%20(schema)%20%3E%20(property)%20location">Link to this property</a>

location\_name: string

Name of the header or cookie where the credential is attached.

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_update_response%20%3E%20(schema)%20%3E%20(property)%20location_name">Link to this property</a>

name: string

Human-readable name.

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_update_response%20%3E%20(schema)%20%3E%20(property)%20name">Link to this property</a>

</details>

[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_update_response%20%3E%20(schema)>)

<details>

<summary>

CredentialEditResponse object {id, credential\_set\_id, location, 2 more }

A credential attached to API requests during scanning. The credential <code>value</code> is write-only and never returned in responses.

</summary>

id: string

Credential identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_edit_response%20%3E%20(schema)%20%3E%20(property)%20id">Link to this property</a>

credential\_set\_id: string

Parent credential set identifier.

formatuuid

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_edit_response%20%3E%20(schema)%20%3E%20(property)%20credential_set_id">Link to this property</a>

<details>

<summary>

location: "header"or "cookie"

Where the credential is attached in outgoing requests.

</summary>

One of the following:

"header"

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_edit_response%20%3E%20(schema)%20%3E%20(property)%20location%20%3E%20(member)%200">Link to this property</a>

"cookie"

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_edit_response%20%3E%20(schema)%20%3E%20(property)%20location%20%3E%20(member)%201">Link to this property</a>

</details>

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_edit_response%20%3E%20(schema)%20%3E%20(property)%20location">Link to this property</a>

location\_name: string

Name of the header or cookie where the credential is attached.

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_edit_response%20%3E%20(schema)%20%3E%20(property)%20location_name">Link to this property</a>

name: string

Human-readable name.

<a href="#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_edit_response%20%3E%20(schema)%20%3E%20(property)%20name">Link to this property</a>

</details>

[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_edit_response%20%3E%20(schema)>)

CredentialDeleteResponse = unknown

[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_delete_response%20%3E%20(schema)>)