--- title: "ListEndorLicenses" method: GET path: "/v1/namespaces/{tenant_meta.namespace}/endor-licenses" tags: ["EndorLicenseService"] --- # ListEndorLicenses `GET /v1/namespaces/{tenant_meta.namespace}/endor-licenses` ## Request - Base URL: `https://api.endorlabs.com` - URL: `https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/endor-licenses` - Auth: none declared Lists all Endor Labs licenses in a namespace. ## Path parameters - `tenant_meta.namespace` string, required ## Query parameters - `list_parameters.filter` string - `list_parameters.page_token` integer - `list_parameters.page_size` integer - `list_parameters.action` string - `list_parameters.mask` string - `list_parameters.traverse` boolean - `list_parameters.sort.path` string - `list_parameters.sort.order` 'SORT_ENTRY_ORDER_UNSPECIFIED' | 'SORT_ENTRY_ORDER_ASC' | 'SORT_ENTRY_ORDER_DESC' - `list_parameters.count` boolean - `list_parameters.group.aggregation_paths` string - `list_parameters.group.show_aggregation_uuids` boolean - `list_parameters.group.unique_count_paths` string - `list_parameters.group.unique_value_paths` string - `list_parameters.ci_run_uuid` string - `list_parameters.page_id` string - `list_parameters.group_by_time.aggregation_paths` string - `list_parameters.group_by_time.show_aggregation_uuids` boolean - `list_parameters.group_by_time.interval` 'GROUP_BY_TIME_INTERVAL_UNSPECIFIED' | 'GROUP_BY_TIME_INTERVAL_YEAR' | 'GROUP_BY_TIME_INTERVAL_QUARTER' | 'GROUP_BY_TIME_INTERVAL_MONTH' | 'GROUP_BY_TIME_INTERVAL_WEEK' | 'GROUP_BY_TIME_INTERVAL_DAY' | 'GROUP_BY_TIME_INTERVAL_HOUR' | 'GROUP_BY_TIME_INTERVAL_MINUTE' | 'GROUP_BY_TIME_INTERVAL_SECOND' - `list_parameters.group_by_time.group_size` integer - `list_parameters.group_by_time.start_time` string, date-time - `list_parameters.group_by_time.end_time` string, date-time - `list_parameters.group_by_time.mode` string - `list_parameters.group_by_time.aggregation_value_field` string - `list_parameters.group_by_time.aggregation_operator` string - `list_parameters.disable_pagination` boolean ## Response `200` A successful response. - V1ListEndorLicensesResponse: Response to the request to list Endor Labs licenses. - `count_response` V1CountResponse: Response to a list count request. - `count` integer: Number of objects matching the given list parameters. - `group_response` V1GroupResponse: Response to a list group request. - `groups` object: Map indexed by values of the fields specified in aggregation_paths, for example, {"[{"key":"meta.kind","value":"Project"}]": { "aggregation_count": { "count": 1649 } } }. - `list` V1ListEndorLicensesResponseList - `objects` V1EndorLicense[] - `meta` V1Meta, required: Common fields for all Endor Labs resources. - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller. - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key. - `description` string: Resource description. Must be less than 1024 bytes. - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object. - `data` string[] - `search_score` number, float: search_score is the score of the resource for search. Internal use only. - `tenant` string - `will_be_deleted_at` string, date-time: Time that the resource will be deleted. - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name(). - `name` string, required: Resource name. Must be 63 characters or less. - `parent_kind` string: Parent object resource kind, for example, Project. - `parent_uuid` string: Parent object UUID. - `references` object: Map of objects referenced in a query API. - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less. - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509. - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `version` string: Message version. - `spec` V1EndorLicenseSpec, required - `bundle_info` SpecEndorLicenseBundleInfo[]: A repeated field containing information about Endor Labs license bundles. - `expiration_time` string, date-time: The time when the license bundle expires. - `free_tier` boolean: Whether this bundle is granted as a free tier. - `limit` integer: A value of 0 or -1 corresponds to an unlimited license. - `type` 'ENDOR_LICENSE_BUNDLE_TYPE_UNSPECIFIED' | 'ENDOR_LICENSE_BUNDLE_TYPE_OSS_CORE' | 'ENDOR_LICENSE_BUNDLE_TYPE_OSS_PRO' | 'ENDOR_LICENSE_BUNDLE_TYPE_CICD' | 'ENDOR_LICENSE_BUNDLE_TYPE_SECRETS' | 'ENDOR_LICENSE_BUNDLE_TYPE_SBOM_HUB' | 'ENDOR_LICENSE_BUNDLE_TYPE_SUPPLY_CHAIN' | 'ENDOR_LICENSE_BUNDLE_TYPE_ENDOR_PATCHING' | 'ENDOR_LICENSE_BUNDLE_TYPE_CODE' | 'ENDOR_LICENSE_BUNDLE_TYPE_ENDOR_OUTPOST' | 'ENDOR_LICENSE_BUNDLE_TYPE_SECURITY_REVIEW' | 'ENDOR_LICENSE_BUNDLE_TYPE_CODE_PRO' | 'ENDOR_LICENSE_BUNDLE_TYPE_OSS_FIREWALL' | 'ENDOR_LICENSE_BUNDLE_TYPE_AI_GOVERNANCE' | 'ENDOR_LICENSE_BUNDLE_TYPE_BYOK': Enum representing different types of Endor Labs license bundles. - ENDOR_LICENSE_BUNDLE_TYPE_UNSPECIFIED: Default value. Should not be used. - ENDOR_LICENSE_BUNDLE_TYPE_OSS_CORE: Open Source Software (OSS) Core license bundle. - ENDOR_LICENSE_BUNDLE_TYPE_OSS_PRO: Open Source Software (OSS) Pro license bundle. - ENDOR_LICENSE_BUNDLE_TYPE_CICD: Continuous Integration/Continuous Deployment (CI/CD) license bundle. - ENDOR_LICENSE_BUNDLE_TYPE_SECRETS: Secrets Management license bundle. - ENDOR_LICENSE_BUNDLE_TYPE_SBOM_HUB: Software Bill of Materials (SBOM) Hub license bundle. - ENDOR_LICENSE_BUNDLE_TYPE_SUPPLY_CHAIN: Supply Chain Security license bundle. - ENDOR_LICENSE_BUNDLE_TYPE_ENDOR_PATCHING: Endor Patching license bundle. - ENDOR_LICENSE_BUNDLE_TYPE_CODE: Discover risks in 1st party code. - ENDOR_LICENSE_BUNDLE_TYPE_ENDOR_OUTPOST: Endor Outpost license bundle. - ENDOR_LICENSE_BUNDLE_TYPE_SECURITY_REVIEW: Security Review license bundle. - ENDOR_LICENSE_BUNDLE_TYPE_CODE_PRO: Discover risks in 1st party code using AI. - ENDOR_LICENSE_BUNDLE_TYPE_OSS_FIREWALL: Endor OSS Firewall license bundle. - ENDOR_LICENSE_BUNDLE_TYPE_AI_GOVERNANCE: AI Governance license bundle. Grants access to AI agent hook event collection and review (Cursor, Claude Code, etc.). - ENDOR_LICENSE_BUNDLE_TYPE_BYOK: BYOK license bundle. Grants the ability to register customer-provided LLM provider credentials and route AI requests through them. - `credits_period_start` string, date-time: Anchor timestamp for the scan credit counting window. Set on contract renewal. Any unused credits will be refreshed and NOT carry forwarded once the new period starts. - `excluded_feature_types` SpecEndorLicenseFeatureType[]: Indicates excluded features. - `is_customer` boolean: Indicates whether the license belongs to a customer. - `license_configurations` SpecLicenseConfiguration: LicenseConfiguration is the configuration for the Endor Labs license. - `patch_configuration` SpecPatchConfiguration: PatchConfiguration is the configuration for Endor Patches download gating. - `max_patches` integer: Maximum number of distinct patches this tenant may download through endorfactory. Unset or -1 means unlimited. 0 means no patches. At most 10. - `security_review_configuration` SpecSecurityReviewConfiguration: SecurityReviewConfiguration is the configuration for the security review. - `max_pr_reviews_per_month` integer: The maximum number of PR reviews per month. - `license_info` SpecEndorLicenseInfo[]: An array that stores the types of valid feature licenses and their limits. Protobuf does not allow enums to be the key of maps. Ensure that any code accessing this array checks for an existing type before writing. - `expiration_time` string, date-time: The time when the license expires. - `free_tier` boolean: Whether this is a free-tier (limited) grant. - `limit` integer: A value of 0 or -1 corresponds to an unlimited license. - `type` 'ENDOR_LICENSE_FEATURE_TYPE_UNSPECIFIED' | 'ENDOR_LICENSE_FEATURE_TYPE_SCM_POSTURE_MANAGEMENT' | 'ENDOR_LICENSE_FEATURE_TYPE_SCA' | 'ENDOR_LICENSE_FEATURE_TYPE_SECRETS' | 'ENDOR_LICENSE_FEATURE_TYPE_SBOM_INGESTION' | 'ENDOR_LICENSE_FEATURE_TYPE_CONTAINER_SCAN' | 'ENDOR_LICENSE_FEATURE_TYPE_RECOMMENDATION' | 'ENDOR_LICENSE_FEATURE_TYPE_CICD_DISCOVERY' | 'ENDOR_LICENSE_FEATURE_TYPE_ARTIFACT_SIGN' | 'ENDOR_LICENSE_FEATURE_TYPE_ENDOR_PATCHING' | 'ENDOR_LICENSE_FEATURE_TYPE_SAST' | 'ENDOR_LICENSE_FEATURE_TYPE_AI_MODELS' | 'ENDOR_LICENSE_FEATURE_TYPE_ENDOR_OUTPOST' | 'ENDOR_LICENSE_FEATURE_TYPE_AI_INFERENCE' | 'ENDOR_LICENSE_FEATURE_TYPE_SECURITY_REVIEW' | 'ENDOR_LICENSE_FEATURE_TYPE_GITHUB_ACTIONS' | 'ENDOR_LICENSE_FEATURE_TYPE_AI_SAST' | 'ENDOR_LICENSE_FEATURE_TYPE_PACKAGE_FIREWALL' | 'ENDOR_LICENSE_FEATURE_TYPE_ENDOR_ENRICHMENT' | 'ENDOR_LICENSE_FEATURE_TYPE_AI_GOVERNANCE' | 'ENDOR_LICENSE_FEATURE_TYPE_BYOK': - ENDOR_LICENSE_FEATURE_TYPE_UNSPECIFIED: Type is undefined. - ENDOR_LICENSE_FEATURE_TYPE_SCM_POSTURE_MANAGEMENT: SCM Posture Management corresponds to endorctl's Github Scanner and ensure your respository's configuration is correct. - ENDOR_LICENSE_FEATURE_TYPE_SCA: SCA corresponds to endorctl's Git Scanner and runs the Software Composition Analysis. - ENDOR_LICENSE_FEATURE_TYPE_SECRETS: Secrets corresponds to endorctl's Secrets Scanner. - ENDOR_LICENSE_FEATURE_TYPE_SBOM_INGESTION: SBOM (Software Bill of Materials) Ingestion feature for ingesting SBOM data. - ENDOR_LICENSE_FEATURE_TYPE_CONTAINER_SCAN: Container Scan feature for scanning container images. - ENDOR_LICENSE_FEATURE_TYPE_RECOMMENDATION: Recommendation feature provides recommendations based on change impact analysis results. - ENDOR_LICENSE_FEATURE_TYPE_CICD_DISCOVERY: CI/CD Discovery feature discovers CI/CD pipelines tools and configurations. - ENDOR_LICENSE_FEATURE_TYPE_ARTIFACT_SIGN: Artifact Signing feature allows signing artifacts. - ENDOR_LICENSE_FEATURE_TYPE_ENDOR_PATCHING: Endor Patching feature allows accessing Endor Labs factory. - ENDOR_LICENSE_FEATURE_TYPE_SAST: SAST feature allows scanning source code for security vulnerabilities. - ENDOR_LICENSE_FEATURE_TYPE_AI_MODELS: AI Models feature allows scanning source code for AI model usage. - ENDOR_LICENSE_FEATURE_TYPE_ENDOR_OUTPOST: Endor Outpost feature allows automated scanning on-premises. - ENDOR_LICENSE_FEATURE_TYPE_AI_INFERENCE: AI Inference feature allows querying AI models. - ENDOR_LICENSE_FEATURE_TYPE_SECURITY_REVIEW: Security Review feature allows reviewing security code. - ENDOR_LICENSE_FEATURE_TYPE_GITHUB_ACTIONS: Github Actions feature allows scanning Github Actions workflows. - ENDOR_LICENSE_FEATURE_TYPE_AI_SAST: AI SAST feature allows triage/detection of false positives of SAST findings using AI. - ENDOR_LICENSE_FEATURE_TYPE_PACKAGE_FIREWALL: Package Firewall feature allows evaluating packages for security. - ENDOR_LICENSE_FEATURE_TYPE_ENDOR_ENRICHMENT: Endor Enrichment feature allows access to Endor-proprietary data. - ENDOR_LICENSE_FEATURE_TYPE_AI_GOVERNANCE: AI Governance feature allows recording and reviewing AI agent hook events (e.g. Cursor, Claude Code) for governance and audit. - ENDOR_LICENSE_FEATURE_TYPE_BYOK: BYOK feature allows routing AI requests through customer-provided LLM provider credentials (bring your own key). - `quota` SpecQuota: Quota for the Endor Labs license. - `ai_limit` SpecAILimit: AILimit represents quota/threshold setup for AI-related features. - `days` integer, required: The number of days over which the quota is calculated. - `max_credit` string, int64, required: The maximum number of credits ( eg. could be tokens or price,etc) allowed. - `max_daily_cloud_scans` integer: The maximum number of cloud scans per day. - `max_daily_pr_scans` integer: The maximum number of cloud pr_scans per day. - `read_access_until` string, date-time: Optional. Indicates the time upto to which users of this tenant have read access. - `salesforce_account_id` string: Salesforce Account ID for CRM integration. Links this license to a Salesforce account for revenue attribution and customer success reporting. Format: Salesforce IDs are either 15 or 18 characters: - 15 chars: case-sensitive alphanumeric (0-9, a-z, A-Z) - 18 chars: 15-char ID + 3-char case-safe checksum Pattern validates format only, not checksum correctness. Ref: https://stackoverflow.com/questions/9742913/validating-a-salesforce-id - `scan_credit_grants` SpecScanCreditGrant[]: History of additional scan credit buckets outside the bundle entitlement granted to the tenant, in the order they were applied. Entries are appended via ServiceRequest by CS when customers buy additional credits beyond the bundle entitlement. - `credits` string, int64, required: Number of additional scan credits in this grant. Must be a non-zero multiple of 10,000. Negative values are permitted for corrections. - `granted_at` string, date-time: Time at which this grant was applied. Stamped by the backend when the entry is first persisted; clients should leave this unset on writes. - `scan_credit_limit` string, int64: Scan credit limit available to the tenant for the current counting window. Computed by the backend as the derived base from seats and bundle tiers plus the sum of scan_credit_grants. Clients must not set this field; any value provided on write is discarded. - `target_namespace` string, required: Target namespace of the Endor Labs license. - `type` 'ENDOR_LICENSE_TYPE_UNSPECIFIED' | 'ENDOR_LICENSE_TYPE_FREE_TRIAL' | 'ENDOR_LICENSE_TYPE_FREE_TIER' | 'ENDOR_LICENSE_TYPE_PREMIUM' | 'ENDOR_LICENSE_TYPE_POV': EndorLicenseType represents the type of Endor Labs license. - ENDOR_LICENSE_TYPE_UNSPECIFIED: Type is undefined. - ENDOR_LICENSE_TYPE_FREE_TRIAL: FREE TRIAL license is used for self-service signup workflow. - ENDOR_LICENSE_TYPE_FREE_TIER: FREE TIER license for free restricted access to Endor Labs products. - ENDOR_LICENSE_TYPE_PREMIUM: PREMIUM license for paid customers. - ENDOR_LICENSE_TYPE_POV: Sales-led POC Customer. - `write_access_until` string, date-time: The time upto to which users of this tenant have write access. - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource. - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app". - `uuid` string: The UUID of an Endor Labs license. - `response` V1ListResponse: Response to a list request. - `next_page_id` string: The UUID of last message retrieved. - `next_page_token` integer: Pagination token that can be used to retrieve the next page of results. ## Other responses - `default`: An unexpected error response. ## Changes - **2026-11-03** `4acd9fe15140`: 1 info - endpoint added [Operation history](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/changes/v1/namespaces/:tenant_meta.namespace/endor-licenses/get.md) --- [API](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference.md) - [All operations](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/revisions/4acd9fe15140?raw)