# Credential maintenance

> Inspect connection health, refresh introspection, maintain labels and notes, and disconnect safely.

Source: https://docs.generalinput.com/cli/credential/maintenance



These commands print JSON and operate through your member session. Secret entry and reauthorization stay in the human connection flow.

```sh
geni credential health <id>
geni credential refresh <id>
geni credential rename <id> "Production account"
geni credential notes <id> --text "Used by the daily billing workflow"
geni credential notes <id> --clear
geni credential history --limit 50 --offset 0
geni credential dependents <id>
geni credential delete <id> --confirm
```

`health` reads stored connection metadata, including status, expiry and introspection time. It does not probe the provider. `refresh` runs introspection against the existing connection, then returns its updated metadata. Neither returns secrets.

Renaming and updating notes require ownership. Names set with `rename` survive later introspection refreshes. Choose one of `--text` and `--clear` for notes; never put secrets in notes.

`history` returns access reasons and sources for credentials you own. `--limit` accepts 1–100 (default 50); `--offset` defaults to 0.

Before disconnecting, use `dependents` to inspect affected workflows and apps. `delete` (alias `disconnect`) requires ownership and `--confirm`; it uses the regular revocation and cleanup flow and disables dependent workflows and polling. Reconnecting later requires the human connection flow.