# geni credential get (/cli/credential/get)



```sh
geni credential get <id> [flags]
```

Returns one credential's details: service, title, OAuth scopes, the env var names that get set when you use it with [`geni exec bash`](/cli/exec/bash), and ownership.

## Synopsis [#synopsis]

```sh
geni credential get cred_01HX…
geni credential get cred_01HX… --json
geni credential get cred_01HX… --field envVars
```

| Flag             | Notes                                                    |
| ---------------- | -------------------------------------------------------- |
| `<id>`           | Credential id.                                           |
| `--json`         | Machine-readable output.                                 |
| `--field <path>` | Print one dotted-path field instead of the whole record. |

## Output [#output]

```
cred_01HX…    Salesforce, Acme prod
provider:     Salesforce
type:         oauth2
created:      2025-09-01 (jack@generalinput.com)
shared:       no

envVars:
  SALESFORCE_ACCESS_TOKEN_01HX…
  SALESFORCE_INSTANCE_URL_01HX…

scopes:       api, refresh_token
```