> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sidenet.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# List runtime auth providers

> Lists the organization's tool providers and, for each, the credential fields a `tools_auth` entry should carry — the map sent to POST /v1/token or `PATCH /v1/users/{userId}`. Key entries by `providerId`; provider names can change, ids do not.

Runtime auth is organization-scoped: the list is the same for every copilot. No secrets are returned — this is shape metadata only.



## OpenAPI

````yaml /api-reference/openapi.json get /v1/tools-auth
openapi: 3.1.0
info:
  title: Sidenet API
  version: 1.0.0
  description: >-
    Sidenet HTTP endpoints exposed by the Sidenet Studio. All routes require an
    api key that can be generated through the studio in studio.sidenet.ai.
servers:
  - url: https://api.sidenet.ai
security:
  - bearerAuth: []
paths:
  /v1/tools-auth:
    get:
      tags:
        - Authentication
      summary: List runtime auth providers
      description: >-
        Lists the organization's tool providers and, for each, the credential
        fields a `tools_auth` entry should carry — the map sent to POST
        /v1/token or `PATCH /v1/users/{userId}`. Key entries by `providerId`;
        provider names can change, ids do not.


        Runtime auth is organization-scoped: the list is the same for every
        copilot. No secrets are returned — this is shape metadata only.
      parameters: []
      responses:
        '200':
          description: The org's providers and their credential shapes
          content:
            application/json:
              schema:
                type: object
                properties:
                  providers:
                    type: array
                    items:
                      type: object
                      properties:
                        providerId:
                          type: string
                          description: Key `tools_auth` entries by this.
                        providerName:
                          type: string
                        description:
                          type: string
                          nullable: true
                        authType:
                          type: string
                          description: bearer | api-key | basic | oauth2 | custom
                        authFields:
                          type: array
                          items:
                            type: string
                          description: Credential keys to send for this provider.
                        optionalFields:
                          type: array
                          items:
                            type: string
                          description: >-
                            Optional keys the entry also accepts (e.g.
                            base_url).
        '400':
          description: Organization could not be resolved
      security:
        - bearerAuth: []
        - sessionToken: []
components:
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: >-
        Organization API key, generated in studio.sidenet.ai. Backend only —
        never in a browser.
    sessionToken:
      type: http
      scheme: bearer
      description: >-
        Session token (`snat_…`) minted by POST /v1/token. Carries the
        organization and the end user; safe in a browser.

````