---
title: "List tests"
method: GET
path: "/api/apps/{app_id}/testing-agent/flows"
---

# List tests

`GET /api/apps/{app_id}/testing-agent/flows`

## Request

- Base URL: `https://app.base44.com`
- URL: `https://app.base44.com/api/apps/{app_id}/testing-agent/flows`
- Auth: HTTP bearer

<Info>This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.</Info>

Returns every test in the app, newest first. An app has at most 250 tests, so the list is never paged.

This is limited to 6000 requests per minute per caller for each app. Some workspaces have a different limit.

<Note>This endpoint accepts a personal API key belonging to a user with access to the app, including a read-only key. Workspace API keys are not accepted.</Note>

## Path parameters

- `app_id` string, required: ID of the app.

## Response `200`

The app's tests.

- FlowResponse[]
  - `id` string, required: ID of the test.
  - `app_id` string, required: ID of the app the test belongs to.
  - `name` string, required: Short name of the test.
  - `goal` string, required: What the testing agent tries to do, in plain language.
  - `role` string, nullable: Role set on the test, or `null` when none is set. A test without one can still run as a role its name or goal names. The run's `flow_role` shows the role actually used.
  - `source` string, required: `manual` for a test you created, `app_context` for one Base44 generated from the app.
  - `revision` integer, required: Starts at 1 and goes up each time the test is edited.
  - `created_date` string, required: When the test was created, as an ISO 8601 UTC timestamp.
  - `updated_date` string, required: When the test last changed, as an ISO 8601 UTC timestamp.

## Other responses

- `401`: Missing or invalid credentials.
- `403`: You don't have access to this app, the app is blocked, or you used a workspace API key.
- `404`: App not found.
- `409`: Your workspace requires an unlocked SSO session.
- `429`: Rate limit exceeded.

## Changes

- **2026-10-13** `32455e516133`: 2 info
  - the security scope `read_only` was added to the endpoint's security scheme `PersonalAccessTokenAuth`
  - the security scope `full_access` was removed from the endpoint's security scheme `PersonalAccessTokenAuth`
- **2026-10-11** `80287813ab84`: 1 info
  - the endpoint scheme security `PersonalAccessTokenAuth` was added to the API
- **2026-09-30** `63675fa5257c`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/base44/apis/base44-app-management-api/changes/api/apps/:app_id/testing-agent/flows/get.md)

---

[API](https://skmtc.dev/base44/apis/base44-app-management-api.md) - [All operations](https://skmtc.dev/base44/apis/base44-app-management-api/llms.txt) - [OpenAPI document](https://skmtc.dev/base44/apis/base44-app-management-api/revisions/c534f09cf314?raw)