Credential maintenance
Inspect connection health, refresh introspection, maintain labels and notes, and disconnect safely.
These commands print JSON and operate through your member session. Secret entry and reauthorization stay in the human connection flow.
geni credential health <id>
geni credential refresh <id>
geni credential rename <id> "Production account"
geni credential notes <id> --text "Used by the daily billing workflow"
geni credential notes <id> --clear
geni credential history --limit 50 --offset 0
geni credential dependents <id>
geni credential delete <id> --confirmhealth reads stored connection metadata, including status, expiry and introspection time. It does not probe the provider. refresh runs introspection against the existing connection, then returns its updated metadata. Neither returns secrets.
Renaming and updating notes require ownership. Names set with rename survive later introspection refreshes. Choose one of --text and --clear for notes; never put secrets in notes.
history returns access reasons and sources for credentials you own. --limit accepts 1–100 (default 50); --offset defaults to 0.
Before disconnecting, use dependents to inspect affected workflows and apps. delete (alias disconnect) requires ownership and --confirm; it uses the regular revocation and cleanup flow and disables dependent workflows and polling. Reconnecting later requires the human connection flow.