---
title: "Read workspace resource inventory and secret-free TCP status"
method: GET
path: "/v1/public/account/workspace/deployments/resources"
---

# Read workspace resource inventory and secret-free TCP status

`GET /v1/public/account/workspace/deployments/resources`

## Request

- Base URL: `https://api.decionis.com`
- URL: `https://api.decionis.com/v1/public/account/workspace/deployments/resources`
- Auth: API key in cookie `decionis_account_session`

Account session scoped to the current workspace. Reads require workspace membership. Saving inventory alone does not activate routing. HTTPS connected status requires a verified deployed upstream; TCP connected status requires a fresh authenticated connector lease. TCP metadata is omitted and tcp_enabled is false when the default-off feature is disabled. HTTP and WebSocket forwarding remain unsupported.

## Response `200`

Private bounded result.

- HostedGatewayResources
  - `resources` HostedGatewayResource[], required
    - `id` string, uuid, required
    - `type` 'url' | 'tcp_ip' | 'hostname', required
    - `resource` string, required
    - `label` string, required
    - `created_at` string, date-time, required
    - `status` 'connected' | 'pending_connection' | 'unsupported_transport', required
    - `status_message` string, required
    - `tcp` HostedGatewayTcpView: Secret-free resource metadata, omitted while TCP is disabled. route_id equals the saved resource UUID. Connected means a fresh broker-authenticated connector lease, not a successful application login or application-command inspection.
      - `route_id` string, uuid, required
      - `generation` integer, required: Non-secret fencing generation. Discard stale reveals and clear displayed credentials when this changes.
      - `state` 'provisioning' | 'awaiting_connector' | 'connected' | 'offline' | 'disabled' | 'failed', required
      - `gateway_url` string, uri, required
      - `connector_online` boolean, required
      - `last_seen_at` string, date-time, nullable, required
      - `credentials_available` boolean, required
      - `message` string, required
  - `resource_limit` 50, required
  - `tcp_enabled` boolean, required: Default false. The interface must hide TCP activation controls unless true.

## Other responses

- `401`: The signed workspace account session is missing or invalid.
- `403`: Current workspace membership required.
- `500`: Resource inventory or database unavailable.

---

[API](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api.md) · [All operations](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/llms.txt) · [OpenAPI document](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/revisions/357f5e459d0c?raw)