---
title: "List assets for an app"
method: GET
path: "/app/{id}/assets"
---

# List assets for an app

`GET /app/{id}/assets`

## Request

- Base URL: `https://charm.ing`
- URL: `https://charm.ing/app/{id}/assets`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer

Returns all stored assets for the app. Auth posture: `requireAppAccess` (app token, user token, render token, or claim cookie).

## Response `200`

Asset list.

- AssetListResponse: Stored assets for the app (newest-first).
  - `ok` true, required
  - `assets` object[], required
    - `key` string, required
    - `contentType` string, required
    - `sizeBytes` integer, required

## Other responses

- `401`: Authentication required.
- `403`: Token does not authorize this app.
- `404`: App not found.

---

[API](https://skmtc.dev/charm/apis/charming-api.md) · [All operations](https://skmtc.dev/charm/apis/charming-api/llms.txt) · [OpenAPI document](https://skmtc.dev/charm/apis/charming-api/revisions/a9d06c419b3a?raw)