List an org's registry credentials (no secrets)
Returns the org's container-registry credentials with id, name, server, auth type and creation time. Stored passwords and keys are never returned.
Required permission
Requires the registry.read permission. See Permissions for the roles and API key permissions that include it.
Command line
The orl CLI wraps this endpoint:
orl registry-credentials listapiKeyAuthorizationBearer <token>OpenRelay API key. Send it as Authorization: Bearer or_… (legacy vl_… keys still work).
orgId*stringRegistry credentials
application/json- response
[index: integer]?curl -X GET 'https://api.openrelay.inc/v1/orgs/string/registry-credentials'[ { "id": "string", "name": "string", "server": "string", "authType": "string", "createdAt": "string" }]Overview
Private container-registry credentials for pulling images: basic auth, AWS ECR or GCP GCR. Secrets are stored encrypted and never returned.
Create a registry credential POST
Saves a registry login for the org: basic takes username and password; aws_ecr takes accessKeyId, secretAccessKey and region; gcp_gcr takes serviceAccountKey. A missing credential field, or an unknown authType, returns 400. The credentials are stored encrypted, and the response is the credential's summary without them.