document include param in firework & astp credential search

Author: Francis Labelle

docs/api-reference/spec/firework-v4-openapi.json

@@ -15299,6 +15299,13 @@
                             }
                         ],
                         "title": "Event Uid"
+                    },
+                    "auth_domains": {
+                        "items": {
+                            "type": "string"
+                        },
+                        "type": "array",
+                        "title": "Auth Domains"
                     }
                 },
                 "type": "object",
@@ -21029,7 +21036,8 @@
             "IncludeOptions": {
                 "type": "string",
                 "enum": [
-                    "known_password_id"
+                    "known_password_id",
+                    "auth_domains"
                 ],
                 "title": "IncludeOptions"
             },

docs/changelog/overview.mdx

@@ -12,6 +12,12 @@ This page lists changes to Flare's API.
 Release notes for the Flare Platform can be found on the [product documentation website](https://docs.flare.io/releases).
 </Note>
 
+<Update label="2026-03" description="API - March 2026">
+  Added new value for the `include` parameter in the [Global Search Credentials Endpoint <Icon icon="code" size={16} />](/api-reference/v4/endpoints/credentials-global-search).
+
+  Added documentation for the `include` paramter in the [ASTP Search Credentials Endpoint <Icon icon="code" size={16} />](/api-reference/astp/endpoints/post-credentials-search).
+</Update>
+
 <Update label="2026-03" description="API - March 2026">
   Replaced the `leak` event type for individual `leaked_credential` events. See [Leaked Credentials <Icon icon="book" size={16} />](/event-types/leaked-credential)
 </Update>

docs/snippets/credentials/astp-and-global-search-common.mdx

@@ -63,6 +63,10 @@ This endpoint supports the
   The `next` value from the last response.
 </ParamField>
 
+<ParamField body="include" type="string[]">
+  Additional fields to return. Available options: `known_password_id`, `auth_domains`
+</ParamField>
+
 <ParamField body="order" type="string" default="desc">
   The order in which the results will be returned. (`asc` or `desc`)
 </ParamField>