---
title: "List vault-backed repos for the signed-in principal"
method: GET
path: "/vaults/v1/repos"
tags: ["vault"]
---

# List vault-backed repos for the signed-in principal

`GET /vaults/v1/repos`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/vaults/v1/repos`
- Auth: one of:
  - API key in header `SIGN-IN-WITH-X`
  - HTTP bearer

vault-web-viewer task 1.1 (closes repo-first-onramp follow-up 6.1): every vault-backed repo on an org where the caller holds an active membership, keyset-paginated. Authorize-before-reveal by construction — the query narrows to the caller's own active memberships, so there is no separate authorization branch to leak existence from.

## Query parameters

- `cursor` string
- `limit` integer

## Headers

- `SIGN-IN-WITH-X` string, required

## Response `200`

Repos, newest vault first

- object
  - `repos` object[]
    - `org_id` string, uuid
    - `org_slug` string, nullable
    - `repo_id` string
    - `repo_name` string, nullable
    - `project_id` string
    - `vault_policy` 'required' | 'grandfathered' | 'null', nullable
    - `latest_generation` string, nullable
    - `created_at` string, date-time
  - `has_more` boolean
  - `next_cursor` string, nullable

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)