Programmatic Credential

programmatic_credential

The Programmatic Credential object describes service-specific credentials used for direct API access and system integration. These credentials are typically issued by individual services or platforms for accessing their APIs and resources, focusing on credential lifecycle management and usage tracking. Examples include API keys, service account keys, client certificates, and vendor-specific access tokens.

Attributes

CaptionNameTypeDescription
Last Used Timelast_used_timeTimestamp

The timestamp when this programmatic credential was last used for authentication or API access. This helps track credential usage patterns, identify dormant credentials that may pose security risks, and support credential lifecycle management. The timestamp should reflect the most recent successful authentication or API call using this credential.

Raw Dataraw_dataJSON

Group:context
The event data as received from the event source.

Record IDrecord_idString

Group:primary
Unique identifier for the object

TypetypeString

The type or category of programmatic credential, normalized to the caption of the type_id value. In the case of 'Other', it is defined by the event source. Examples include 'API Key', 'Service Account Key', 'Access Token', 'Client Certificate', 'OAuth Token', 'Personal Access Token', etc.

Unique IDuidString

The unique identifier of the programmatic credential. This could be an API key ID, service account key ID, access token identifier, certificate serial number, or other unique identifier that distinguishes this credential from others. Examples: AWS Access Key ID, GCP Service Account Key ID, Azure Application ID, or OAuth2 token identifier.

UnmappedunmappedUnmapped[]

Data from the source that was not mapped into the schema.

Relationships

Programmatic Credential shown in context

Inbound Relationships

These objects and events reference Programmatic Credential in their attributes:

Outbound Relationships

Programmatic Credential references the following objects and events in its attributes:

This page describes qdm-1.5.1+ocsf-1.6.0