> ## Documentation Index
> Fetch the complete documentation index at: https://docs.en.amplopay.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify credentials

> Validate the API credentials sent in the request headers

Validates the credentials sent in the request headers.

<Info>
  This endpoint requires the `x-public-key` and `x-secret-key` headers.
</Info>

## Request example

<RequestExample>
  ```bash theme={null}
  curl --request GET \
    --url https://app.amplopay.com/api/v1/gateway/producer/credentials \
    --header 'x-public-key: SUA_CHAVE_PUBLICA_AQUI' \
    --header 'x-secret-key: SUA_CHAVE_PRIVADA_AQUI'
  ```
</RequestExample>

## Response

<ResponseField name="name" type="string" required>
  Credential name.
</ResponseField>

<ResponseField name="permissions" type="string[]" required>
  List of permissions assigned to the credential. Possible values include `PRODUCER_DATA`, `PRODUCER_TRANSACTIONS`, `PRODUCER_WITHDRAWS`, and `PRODUCER_CHECKOUT`.
</ResponseField>

<ResponseField name="grantAllPermissions" type="boolean" required>
  Indicates whether the credential has all permissions. When `true`, `permissions` may be empty while still granting full access.
</ResponseField>

<ResponseField name="expiresAt" type="string">
  Credential expiration date in ISO 8601 format. Returns `null` if the credential has no expiration date.
</ResponseField>

<ResponseExample>
  ```json theme={null}
  {
    "name": "Credencial de produção",
    "permissions": ["PRODUCER_TRANSACTIONS", "PRODUCER_DATA"],
    "grantAllPermissions": false,
    "expiresAt": "2026-08-20T00:00:00.000Z"
  }
  ```
</ResponseExample>

## Error responses

<ResponseField name="statusCode" type="number" required>
  HTTP status code.
</ResponseField>

<ResponseField name="errorCode" type="string" required>
  API error code.
</ResponseField>

<ResponseField name="message" type="string" required>
  Error message.
</ResponseField>

<ResponseExample>
  ```json theme={null}
  {
    "statusCode": 401,
    "errorCode": "GATEWAY_INVALID_CREDENTIALS",
    "message": "Credenciais inválidas"
  }
  ```
</ResponseExample>