Sorry, I don't know much about developing with REST API for Reporting Services.
- From what I've searched, a 400 (Bad Request) status code means that the server is unable or will not process the request due to what is believed to be a client error (e.g. malformed request syntax, invalid request message frame, or spoofed request routing). You can refer to the following link to develop using REST API for Reporting Services: https://learn.microsoft.com/en-us/sql/reporting-services/developer/rest-api?view=sql-server-ver16.
- The CredentialRetrieval attribute can specify the location of the credentials that will be used when the report server connects to the external data source. When creating a subscription, stored credentials are required. You can refer to these links:
https://scriptposse.com/2016/08/03/create-ssrs-data-source/.
Best regards,
Aniya