---
title: "List every vault file the caller may see"
method: GET
path: "/api/files/list"
tags: ["files"]
---

# List every vault file the caller may see

`GET /api/files/list`

## Request

- Base URL: `https://www.immersivecommons.com`
- URL: `https://www.immersivecommons.com/api/files/list`
- Auth: HTTP bearer

Clerk session or agt_ token with `files:read`. Returns the FilePublic projection (newest first) of the open ic-members files plus the caller's own uploads and anything they are a grantee of; operators see all. Blob URLs are never included.

## Response `200`

The visible file list.

- FilesListResponse
  - `ok` boolean, required
  - `files` FilePublic[], required
    - `id` string, required
    - `filename` string, required
    - `contentType` string, required
    - `size` integer, required: Bytes.
    - `sha256` string
    - `folder_id` string, nullable, required: Containing folder, or null at the vault root.
    - `uploadedBy` string, required: Clerk user id of the uploader.
    - `uploadedByName` string
    - `uploadedAt` string, date-time, required
    - `visibility` 'private' | 'ic-members' | 'grantees', required
    - `grantees` string[], required: Clerk user ids explicitly admitted to this file.
    - `label` string
    - `description` string
    - `tags` string[], required
    - `mine` boolean, required: True iff the requesting caller uploaded this file.
    - `can_manage` boolean, required: True iff the requesting caller may update, delete, or re-share it.
  - `count` integer, required
  - `via` 'clerk' | 'agent'

## Other responses

- `401`: No auth.
- `403`: Scope/tier not authorized.

---

[API](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api.md) · [All operations](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api/revisions/be67c1f67c27?raw)