Programmatic Credential

programmatic_credential

The Programmatic Credential object describes service-specific credentials used for direct API access and system integration. These credentials are typically issued by individual services or platforms for accessing their APIs and resources, focusing on credential lifecycle management and usage tracking. Examples include API keys, service account keys, client certificates, and vendor-specific access tokens.

Attributes

CaptionNameTypeDescription
Last Used Time last_used_time Timestamp The timestamp when this programmatic credential was last used for authentication or API access. This helps track credential usage patterns, identify dormant credentials that may pose security risks, and support credential lifecycle management. The timestamp should reflect the most recent successful authentication or API call using this credential.
Raw Data raw_data JSON Group:context
The event data as received from the event source.
Record ID record_id String Group:primary
Unique identifier for the object
Type type String The type or category of programmatic credential, normalized to the caption of the type_id value. In the case of 'Other', it is defined by the event source. Examples include 'API Key', 'Service Account Key', 'Access Token', 'Client Certificate', 'OAuth Token', 'Personal Access Token', etc.
Unique ID uid String The unique identifier of the programmatic credential. This could be an API key ID, service account key ID, access token identifier, certificate serial number, or other unique identifier that distinguishes this credential from others. Examples: AWS Access Key ID, GCP Service Account Key ID, Azure Application ID, or OAuth2 token identifier.
Unmapped unmapped Unmapped[] Data from the source that was not mapped into the schema.

Relationships

Programmatic Credential shown in context

Inbound Relationships

These objects and events reference Programmatic Credential in their attributes:

Outbound Relationships

Programmatic Credential references the following objects and events in its attributes:

This page describes qdm-1.5.1+ocsf-1.6.0