---
title: "List All Cards"
method: GET
path: "/api/tarot/cards"
tags: ["tarot"]
---

# List All Cards

`GET /api/tarot/cards`

## Request

- Base URL: `https://api.stellara.natlex.it` (the document declares no server; this is the origin it was published from)
- URL: `https://api.stellara.natlex.it/api/tarot/cards`
- Auth: none declared

List all 78 tarot cards (for info/collection screen). No auth required.

The 78 cards are static reference data (last touched in migration 004,
never re-seeded). Adds an aggressive Cache-Control so CDN / mobile HTTP
clients can serve repeat hits from cache instead of hitting Cloud Run.
Mitigates the no-auth + no-rate-limit DDoS surface that would otherwise
require a global slowapi rewrite (deferred to the Cloud Run XFF cycle).
(Cycle 5 audit P1 partial mitigation.)

## Response `200`

Successful Response

- TarotCardListResponse
  - `cards` unknown[], required
    - unknown

---

[API](https://skmtc.dev/natlex/apis/stellara-api.md) · [All operations](https://skmtc.dev/natlex/apis/stellara-api/llms.txt) · [OpenAPI document](https://skmtc.dev/natlex/apis/stellara-api/revisions/e576f046b61f?raw)