According to the source code in master:
there are only create/move/delete API scopes for the credentials, but release notes for Scoped API Keys
specify that you also can list/update credentials, which are not available through API (unfortunately)