---
title: "List sources"
method: GET
path: "/v1/nhi/sources"
tags: ["NHI Sources"]
---

# List sources

`GET /v1/nhi/sources`

## Request

- Base URL: `https://api.gitguardian.com`
- URL: `https://api.gitguardian.com/v1/nhi/sources`
- Auth: HTTP bearer

List the sources that send non-human identities to GitGuardian: secrets managers,
consumers such as Kubernetes clusters or CI systems, cloud providers and endpoints.

Use the source ids to filter identities with `vault_source_id__in`, `consumer_source_id__in`,
`endpoint_source_id__in` and `provider_source_id__in`.

The response contains a page of sources and a pagination cursor to retrieve the next page.
The sources are sorted by id.

The API token must have the Manager access level or above, or be a service account token.

## Query parameters

- `cursor` string
- `per_page` integer
- `search` string
- `type` string
- `is_vault` boolean
- `active` boolean

## Response `200`

A page of sources.

- object[]
  - `id` integer, required
  - `type` string, required
  - `display_name` string, required
  - `identifier` string, required: Identifier of the source, such as its URL.
  - `last_seen_at` string, date-time, required
  - `status` 'active' | 'stale', required: `stale` when the source was not seen within the workspace activity period.
  - `owner` string, email, nullable
  - `is_monitored` boolean, nullable

## Other responses

- `400`: Invalid data
- `401`: Invalid API key
- `403`: Permission denied
- `503`: API under maintenance

## Changes

- **2026-10-21** `426ea32f227a`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/gitguardian/apis/gitguardian-api/changes/v1/nhi/sources/get.md)

---

[API](https://skmtc.dev/gitguardian/apis/gitguardian-api.md) - [All operations](https://skmtc.dev/gitguardian/apis/gitguardian-api/llms.txt) - [OpenAPI document](https://skmtc.dev/gitguardian/apis/gitguardian-api/revisions/5829df7b9045?raw)