> ## Documentation Index > Fetch the complete documentation index at: https://conductorone-leet-slack-mcp-docs.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Search > Search credential inventory policies by name, or fetch a specific set by ID. Returns one page of matching policies at a time. ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples post /api/v1/search/credential-inventory-policies openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/search/credential-inventory-policies: post: tags: - Credential Inventory summary: Search description: |- Search credential inventory policies by name, or fetch a specific set by ID. Returns one page of matching policies at a time. operationId: c1.api.credential_inventory.v1.CredentialInventoryPolicyService.Search requestBody: content: application/json: schema: $ref: >- #/components/schemas/c1.api.credential_inventory.v1.CredentialInventoryPolicyServiceSearchRequest responses: '200': content: application/json: schema: $ref: >- #/components/schemas/c1.api.credential_inventory.v1.CredentialInventoryPolicyServiceSearchResponse description: Successful response x-codeSamples: - lang: go label: Search source: "package main\n\nimport(\n\t\"context\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/shared\"\n\tconductoronesdkgo \"github.com/conductorone/conductorone-sdk-go\"\n\t\"log\"\n)\n\nfunc main() {\n ctx := context.Background()\n\n s := conductoronesdkgo.New(\n conductoronesdkgo.WithSecurity(shared.Security{\n BearerAuth: \"\",\n Oauth: \"\",\n }),\n )\n\n res, err := s.CredentialInventoryPolicy.Search(ctx, nil)\n if err != nil {\n log.Fatal(err)\n }\n if res.CredentialInventoryPolicyServiceSearchResponse != nil {\n // handle response\n }\n}" components: schemas: c1.api.credential_inventory.v1.CredentialInventoryPolicyServiceSearchRequest: description: The CredentialInventoryPolicyServiceSearchRequest message. properties: pageSize: description: The maximum number of results to return per page. format: int32 type: integer pageToken: description: A pagination token from a previous Search response. type: string query: description: Free-text search over the policy name. Empty matches all policies. type: string refs: description: >- Restrict results to these specific policies. Empty matches all policies. items: $ref: >- #/components/schemas/c1.api.credential_inventory.v1.CredentialInventoryPolicyRef type: - array - 'null' title: Credential Inventory Policy Service Search Request type: object x-speakeasy-name-override: CredentialInventoryPolicyServiceSearchRequest c1.api.credential_inventory.v1.CredentialInventoryPolicyServiceSearchResponse: description: The CredentialInventoryPolicyServiceSearchResponse message. properties: list: description: The page of matching policies. items: $ref: >- #/components/schemas/c1.api.credential_inventory.v1.CredentialInventoryPolicy type: - array - 'null' nextPageToken: description: >- A token to fetch the next page, or empty if there are no more results. type: string title: Credential Inventory Policy Service Search Response type: object x-speakeasy-name-override: CredentialInventoryPolicyServiceSearchResponse c1.api.credential_inventory.v1.CredentialInventoryPolicyRef: description: >- CredentialInventoryPolicyRef is a lightweight reference to a policy by ID. properties: id: description: The id field. type: string title: Credential Inventory Policy Ref type: object x-speakeasy-name-override: CredentialInventoryPolicyRef c1.api.credential_inventory.v1.CredentialInventoryPolicy: description: |- CredentialInventoryPolicy defines which credential types your users may enroll and the rules for each type. properties: createdAt: format: date-time readOnly: true type: - string - 'null' delegated: oneOf: - $ref: >- #/components/schemas/c1.api.credential_inventory.v1.DelegatedConstraints - type: 'null' deletedAt: format: date-time readOnly: true type: - string - 'null' displayName: description: A human-readable name for the policy. type: string emailOtp: oneOf: - $ref: >- #/components/schemas/c1.api.credential_inventory.v1.EmailOTPConstraints - type: 'null' enabledTypes: description: >- The credential types users are permitted to enroll under this policy. items: enum: - CREDENTIAL_TYPE_UNSPECIFIED - CREDENTIAL_TYPE_PASSKEY - CREDENTIAL_TYPE_PASSWORD - CREDENTIAL_TYPE_TOTP - CREDENTIAL_TYPE_EMAIL_OTP - CREDENTIAL_TYPE_RECOVERY_CODE - CREDENTIAL_TYPE_DELEGATED_GOOGLE - CREDENTIAL_TYPE_DELEGATED_MICROSOFT - CREDENTIAL_TYPE_UPSTREAM_IDP type: string x-speakeasy-unknown-values: allow type: - array - 'null' id: description: Unique identifier for the policy. readOnly: true type: string isBuiltin: description: >- True for built-in policies provided by ConductorOne. Built-in policies cannot be edited or deleted. readOnly: true type: boolean passkey: oneOf: - $ref: >- #/components/schemas/c1.api.credential_inventory.v1.PasskeyConstraints - type: 'null' password: oneOf: - $ref: >- #/components/schemas/c1.api.credential_inventory.v1.PasswordConstraints - type: 'null' priority: description: >- When a user matches more than one policy, the policy with the highest priority applies. format: int32 type: integer totp: oneOf: - $ref: >- #/components/schemas/c1.api.credential_inventory.v1.TOTPConstraints - type: 'null' updatedAt: format: date-time readOnly: true type: - string - 'null' title: Credential Inventory Policy type: object x-speakeasy-entity: CredentialInventoryPolicy x-speakeasy-name-override: CredentialInventoryPolicy c1.api.credential_inventory.v1.DelegatedConstraints: description: |- DelegatedConstraints controls which third-party sign-in providers are accepted as proof of email ownership, and how they are scoped. properties: googleEnabled: description: Accept "Sign in with Google". type: boolean googleHostedDomains: description: >- Restrict Google sign-in to these Google Workspace domains. Empty = any domain. items: type: string type: - array - 'null' microsoftEnabled: description: Accept "Sign in with Microsoft". type: boolean microsoftTenantIds: description: >- Restrict Microsoft sign-in to these Microsoft tenant IDs. Empty = any tenant. items: type: string type: - array - 'null' title: Delegated Constraints type: object x-speakeasy-name-override: DelegatedConstraints c1.api.credential_inventory.v1.EmailOTPConstraints: description: EmailOTPConstraints configures one-time codes delivered by email. properties: codeLength: description: Number of digits in each code. format: int32 type: integer maxAttempts: description: Number of incorrect attempts allowed before the code is invalidated. format: int32 type: integer ttlSeconds: description: How long a code remains valid, in seconds. format: int32 type: integer title: Email Otp Constraints type: object x-speakeasy-name-override: EmailOTPConstraints c1.api.credential_inventory.v1.PasskeyConstraints: description: >- PasskeyConstraints controls how users may enroll passkeys (FIDO2 / WebAuthn). properties: allowedAaguids: description: |- Allowed authenticator models, by AAGUID. Leave empty to permit any authenticator. items: format: base64 type: string type: - array - 'null' attestation: description: How strictly the authenticator's origin must be attested. enum: - ATTESTATION_REQUIREMENT_UNSPECIFIED - ATTESTATION_REQUIREMENT_NONE - ATTESTATION_REQUIREMENT_INDIRECT - ATTESTATION_REQUIREMENT_DIRECT - ATTESTATION_REQUIREMENT_ENTERPRISE type: string x-speakeasy-unknown-values: allow requireUserVerification: description: >- Require the authenticator to verify the user (PIN or biometric) at enrollment. type: boolean title: Passkey Constraints type: object x-speakeasy-name-override: PasskeyConstraints c1.api.credential_inventory.v1.PasswordConstraints: description: >- PasswordConstraints sets the complexity rules a user's password must satisfy. properties: checkBreached: description: Reject passwords found in known-breach corpora. type: boolean historyDepth: description: Number of previous passwords to remember and disallow reuse of. format: int32 type: integer minLength: description: Minimum length, in characters. format: int32 type: integer requireMixedCase: description: Require both uppercase and lowercase letters. type: boolean requireNumber: description: Require at least one digit. type: boolean requireSymbol: description: Require at least one symbol. type: boolean title: Password Constraints type: object x-speakeasy-name-override: PasswordConstraints c1.api.credential_inventory.v1.TOTPConstraints: description: TOTPConstraints configures authenticator-app one-time codes (RFC 6238). properties: codeLength: description: Number of digits in each code. format: int32 type: integer periodSeconds: description: How often a new code is generated, in seconds (typically 30 or 60). format: int32 type: integer skewTolerance: description: How many adjacent time windows to accept, to tolerate clock drift. format: int32 type: integer title: Totp Constraints type: object x-speakeasy-name-override: TOTPConstraints securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````