---
title: "List the world's hidden elements"
method: GET
path: "/api/v2/world/hidden"
tags: ["World"]
---

# List the world's hidden elements

`GET /api/v2/world/hidden`

## Request

- Base URL: `https://www.onlyworlds.com`
- URL: `https://www.onlyworlds.com/api/v2/world/hidden`
- Auth: one of:
  - API key in header `API-Key`
  - API key in header `API-Key` and API key in header `API-Pin`

The world's owner key, or a co-builder's (read or write). Every hidden element's type and id, when it was hidden and by whom, newest first. A hidden element is seen only by the world's owner, its co-builders and the member who created it. To every other key it is as if it did not exist: a GET of it is 404, lists, search and counts leave it out, links to it are left out of the elements that carry them (those elements do not change), and a write naming its id answers as a missing id does. A key the owner minted (no member) reads as the owner and sees hidden elements. On /changes, a hide gives each contributor who loses the element (person or seat, never the member who made it) one delete row with reason `hidden`, at the change_seq the hide took; a guest gets no row, and its feed resets (409 resync_required) if it saw the element. An unhide resets every contributor and guest that regains it. A hidden Character is null on the roster (GET /members, GET /me, the world's owner_character) and can never be the Character a seat or a player plays (422 character_hidden). The hidden mark answers only where the server has it switched on; elsewhere every hidden route is a 404.

## Response `200`

The hidden elements. Cache-Control: no-store.

- object
  - `data` object[], required
    - `type` string, required: The element's type.
    - `id` string, uuid, required: The element's id.
    - `set_at` string, date-time, required
    - `set_by` string, uuid, nullable, required: The membership (person or seat) that hid it, or null when the world's owner did (as an element's created_by).

## Other responses

- `401`: Missing, invalid or revoked credential, or a wrong PIN (authentication_error; code key_revoked for a revoked key, invalid_credentials otherwise).
- `403`: The key is not the world's owner's or a co-builder's (permission_error).
- `429`: Too many failed PIN attempts; see the Retry-After header (rate_limited). Or too many requests: over the request budget (code too_many_requests, type rate_limited): 300 requests a minute per key or account token, 60 a minute per address for a request with neither. Retry after the Retry-After header's seconds.
- `503`: The server is busy: every request slot stayed full for 10 s (code server_busy, type api_error). Retry after the Retry-After header's seconds.

## Changes

- **2026-10-20** `78df39c4c62e`: 4 warning
  - added the new `known_of_not_writable` enum value to the `error/code` response property for the response status `401`
  - added the new `known_of_not_writable` enum value to the `error/code` response property for the response status `403`
  - added the new `known_of_not_writable` enum value to the `error/code` response property for the response status `429`
  - added the new `known_of_not_writable` enum value to the `error/code` response property for the response status `503`
- **2026-10-20** `4dd5b1cd0687`: 8 warning
  - added the new `character_taken` enum value to the `error/code` response property for the response status `401`
  - added the new `character_taken` enum value to the `error/code` response property for the response status `403`
  - added the new `character_taken` enum value to the `error/code` response property for the response status `429`
  - added the new `character_taken` enum value to the `error/code` response property for the response status `503`
  - …4 more

[Operation history](https://skmtc.dev/onlyworlds/apis/onlyworlds-api/changes/api/v2/world/hidden/get.md)

---

[API](https://skmtc.dev/onlyworlds/apis/onlyworlds-api.md) · [All operations](https://skmtc.dev/onlyworlds/apis/onlyworlds-api/llms.txt) · [OpenAPI document](https://skmtc.dev/onlyworlds/apis/onlyworlds-api/revisions/1752622ae8ce?raw)