---
title: "ApiAccesses.list"
method: GET
path: "/entities/ApiAccesses"
tags: ["API Access"]
---

# ApiAccesses.list

`GET /entities/ApiAccesses`

## Request

- Base URL: `https://us-east.api.coevera.com/api/v100/rest/spaces/your_space_id`
- URL: `https://us-east.api.coevera.com/api/v100/rest/spaces/your_space_id/entities/ApiAccesses`
- Auth: HTTP basic
- TypeScript: <https://skmtc.dev/coevera/apis/coevera-crm-api/docs/entities/ApiAccesses/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns a page of ApiAccess records, optionally filtered, sorted and limited to selected fields.

## Query parameters

- `include-deleted` boolean
- `first` integer
- `last` integer
- `before` string
- `after` string
- `expand` string
- `order-by` string
- `filter` object
- `filter-op` object
- `load-only` string

## Response `200`

Page of ApiAccess records.

- object
  - `success` boolean: True when the request succeeded; false on error.
  - `data` ApiAccess[]
    - `is_delete_protected` boolean, required: True when the record is protected against deletion because it must always exist in the space. Deleting a record that is not protected can still fail on other checks. Read-only.
    - `id` string, uuid, required: Unique identifier of entity. Must match with Application id.
    - `is_deleted` boolean: Specifies if the entity is considered deleted.
    - `modified` string, date-time: Last modification time.
    - `created` string, date-time: Creation time.
    - `email` string: Contact email associated with this API access. Used for credential change notifications.
    - `is_active` boolean: Whether this API access can authenticate. Set to false to disable the credentials without deleting the record; existing tokens stop working immediately.
    - `last_used` string, date-time: Timestamp of the most recent successful authentication using this API access. Updated automatically on each use; empty for credentials that have never been used.
    - `permissions` object: Per-section access permissions (records, administration, misc) granted to this API access. Determines which entities and operations the credentials can read or write.
    - `type` 1 | 2, required: Authentication type of this API access (e.g. standard API key vs. OAuth client). Set automatically on create and cannot be changed. Integer enum value: 1 - Basic, 2 - OAuth
    - `name` string, required: Name for the api access.
    - `username` string: Username portion of the API credentials issued for this access.
    - `plain_password` string: Plain-text password issued for this API access. Returned only at create time and for migrated legacy access; otherwise empty. Integrators must store it on receipt — it is not retrievable later.
  - `page_info` object: Pagination of the result; not returned when the legacy limit and offset parameters are used.
    - `start_cursor` string: Cursor of the first record of the page.
    - `end_cursor` string: Cursor of the last record of the page.
    - `has_previous_page` boolean: Whether records exist before this page; pass start_cursor as before to load them.
    - `has_next_page` boolean: Whether records exist after this page; pass end_cursor as after to load them.
  - `total` integer: Number of records that match the request, across all pages.

## Other responses

- `400`: Bad request: a bad or unknown parameter (codes 117, 118), a missing permission (code 50), conflicting data (code 2002) or any other API error. The REST API answers 400 where others answer 403 or 409; check `code`.
- `401`: Not authenticated: missing or wrong credentials, a credential of another space, or an expired token (code 401, ERROR_UNAUTHORIZED).
- `429`: Too many requests (code 182). Wait for the seconds in Retry-After, then retry.
- `500`: Unexpected server error (code 1000, ERROR_UNKNOWN).

---

[API](https://skmtc.dev/coevera/apis/coevera-crm-api.md) - [All operations](https://skmtc.dev/coevera/apis/coevera-crm-api/llms.txt) - [OpenAPI document](https://skmtc.dev/coevera/apis/coevera-crm-api/revisions/40ebbc83f179?raw)