---
title: "Get the current authorization manifest"
method: GET
path: "/projects/v1/admin/{project_id}/expose"
tags: ["Admin"]
---

# Get the current authorization manifest

`GET /projects/v1/admin/{project_id}/expose`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/projects/v1/admin/{project_id}/expose`
- Auth: HTTP bearer

Returns the most-recently-applied manifest from the tracking table, or — if no manifest has ever been applied — reconstructs one by introspecting current DB state.

## Path parameters

- `project_id` string, required: Run402 project ID. Public IDs are not UUIDs.

## Response `200`

Current manifest

- object
  - `status` string
  - `project_id` string: Run402 project ID. Public IDs are not UUIDs.
  - `source` 'applied' | 'introspected'
  - `manifest` object

## Other responses

- `401`: Missing or invalid authentication. Run402-originated JSON bodies use the canonical ErrorEnvelope.

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)