---
title: "List a vault's handoffs"
method: GET
path: "/vaults/v1/{vault_id}/handoffs"
tags: ["vault"]
---

# List a vault's handoffs

`GET /vaults/v1/{vault_id}/handoffs`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/vaults/v1/{vault_id}/handoffs`
- Auth: one of:
  - HTTP bearer
  - API key in header `SIGN-IN-WITH-X`
  - HTTP bearer

kygit-handoff. Ids, kind, state, minted_role, minted_by, expires_at, redeemed_by — NEVER the auth_hash or sealed_envelope. Auth: gitvault.writer (owner/developer session or wallet, or a deploy-scoped grant key).

## Path parameters

- `vault_id` string, required

## Headers

- `SIGN-IN-WITH-X` string, required

## Response `200`

Every handoff minted on this vault, newest first.

- object
  - `handoffs` object[], required
    - `handoff_id` string, uuid
    - `kind` 'handoff'
    - `state` 'issued' | 'adopted' | 'expired' | 'revoked'
    - `role` string
    - `minted_by` string, uuid
    - `expires_at` string, date-time
    - `redeemed_by` string, uuid, nullable

## Other responses

- `403`: VAULT_ACCESS_DENIED.

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)