---
title: "List denylist entries"
method: GET
path: "/v1/apps/{app_id}/denylist"
tags: ["Apps"]
---

# List denylist entries

`GET /v1/apps/{app_id}/denylist`

## Request

- Base URL: `https://api.privy.io`
- URL: `https://api.privy.io/v1/apps/{app_id}/denylist`
- Auth: HTTP basic

Get a page of denylist entries for an app, which block matching users from logging in or linking the account.

## Path parameters

- `app_id` string, required: The ID of the app.

## Query parameters

- `cursor` string: Cursor returned by the previous page.
- `limit` integer

## Headers

- `privy-app-id` string, required: ID of your Privy app.

## Response `200`

A page of denylist entries.

- DenylistListResponse: A page of denylist entries for an app.
  - `data` DenylistEntry[], required: Denylist entries in this page.
    - `id` string, required: The ID of the denylist entry.
    - `rule_type` union, required: The type of identifier a denylist rule blocks.
      - 'email' | 'emailDomain' | 'phone' | 'ethereumAddress' | 'solanaAddress'
      - string
    - `value` string, required: The blocked identifier.
  - `next_cursor` string, nullable, required: Cursor for the next page, which is null only when this page is empty, so keep paging until `data` is empty.

## Changes

- **2026-10-27** `9b687835ed44`: 1 breaking, 1 warning
  - for the `query` request parameter `limit`, the type changed from `number, null` to `integer`
  - for the `query` request parameter `limit`, the min was set to `1.00`
- **2026-10-16** `4facbfa7f9d4`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/privy-io/apis/privy-api/changes/v1/apps/:app_id/denylist/get.md)

---

[API](https://skmtc.dev/privy-io/apis/privy-api.md) - [All operations](https://skmtc.dev/privy-io/apis/privy-api/llms.txt) - [OpenAPI document](https://skmtc.dev/privy-io/apis/privy-api/revisions/3a2288470053?raw)