---
title: "List applications"
method: GET
path: "/api/v1/applications"
tags: ["applications"]
---

# List applications

`GET /api/v1/applications`

Returns a paginated list of applications in your organization.

## Query parameters

- `limit` integer
- `cursor` string
- `title_like` string
- `category_contains_word` string

## Response `200`

Application list

- ApplicationList — Paginated list of applications
  - `data` Application[], required — List of applications
    - `admin_user_ids` string[] — User IDs of the application's admins
    - `auth_method` 'google' | 'microsoft' | 'okta' | 'sso_provider' | 'credentials' | 'other', nullable — Authentication method used to sign in
    - `data_location` string, nullable — Where the vendor stores data
    - `description` string, nullable — Description
    - `id` string, uuid, required — Application ID
    - `inserted_at` string, date-time — Creation timestamp
    - `last_vendor_review_at` string, date, nullable — Date of the last vendor security review
    - `mfa_activated` boolean, nullable — Whether MFA is activated for this application
    - `notes` string, nullable — Internal notes
    - `owner_user_id` string, uuid, nullable — Owner user ID
    - `permanent_access_allowed` boolean — Whether the application allows permanent (non-expiring) access
    - `processed_data_types` string[] — Types of data this application processes
    - `provisioning_type` 'application_admin' | 'automatic' — Provisioning type
    - `risk_level` 'low' | 'medium' | 'high', nullable — Risk level assessment
    - `status` 'ignored' | 'discovered' | 'approved' | 'requestable', required — Application status
    - `tags` object[] — Tags assigned to this application
      - `id` string, uuid
      - `title` string
    - `time_based_access_durations` string[] — Configured time-based access durations as ISO 8601 durations (e.g. "PT1H", "P7D"); empty when the app offers only permanent access
    - `title` string, required — Application title
    - `updated_at` string, date-time — Last update timestamp
    - `url` string, nullable — Application URL
    - `user_count` integer, nullable — Number of users with access
    - `user_setup_url` string, nullable — URL where existing users are shown and new users are invited
    - `vendor_certificates` string[] — Security/compliance certifications held by the vendor
  - `meta` PaginationMeta, required — Pagination metadata
    - `page` integer, required — Current page number
    - `page_size` integer, required — Items per page
    - `total_count` integer, required — Total number of items
    - `total_pages` integer, required — Total number of pages

## Other responses

- `400` — Bad request
- `401` — Unauthorized

## Changes

- **2026-08-19** `6f2cb0585bbe` — 1 breaking
  - the `errors` response's property type/format changed from `object`/`` to `array`/`` for status `400`
- **2026-07-31** `f01f507d4b4e` — 2 info
  - added the optional property `data/items/permanent_access_allowed` to the response with the `200` status
  - added the optional property `data/items/time_based_access_durations` to the response with the `200` status

[Change history](https://skmtc.dev/accessowl/apis/accessowl-api/changes/api/v1/applications/get.md)

---

[API](https://skmtc.dev/accessowl/apis/accessowl-api.md) · [All operations](https://skmtc.dev/accessowl/apis/accessowl-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/accessowl/accessowl-api/revisions/6f2cb0585bbe/schema)