---
title: "List CLI connections"
method: GET
path: "/sandbox-clis/connections"
tags: ["Sandbox CLIs"]
---

# List CLI connections

`GET /sandbox-clis/connections`

## Request

- Base URL: `https://api.sazabi.com/v1`
- URL: `https://api.sazabi.com/v1/sandbox-clis/connections`
- Auth: none declared

List a project's stored and integration-backed sandbox CLI connections without returning secret values.

## Query parameters

- `projectId` string, uuid: Project to inspect. Required for organization-scoped keys; auto-filled from a project-scoped key when omitted.

## Response `200`

OK

- object
  - `connections` object[], required
    - `connectionStatus` object
      - `state` 'connected' | 'needs_attention' | 'connecting' | 'not_connected', required
      - `reasonCode` 'credentials_rejected' | 'permissions_missing' | 'configuration_invalid' | 'discovery_failed' | 'health_check_failed' | 'stream_failed' | 'recovery_required', nullable, required
      - `checkedAt` string, date-time, nullable, required
      - `verification` 'verified' | 'unverified', required
    - `recovery` object
      - `action` 'reconnect' | 'update_credentials' | 'manage_installation' | 'manage_owner' | 'review_setup', nullable, required
      - `canCheck` boolean, required
      - `canDisconnect` boolean, required
      - `target` object
        - `kind` 'integration' | 'connected_account' | 'mcp_connector' | 'log_source' | 'sandbox_cli', required
        - `resourceId` string, required
        - `providerId` string, required
        - `scope` object, required
          - `kind` 'user' | 'organization' | 'project', required
          - `id` string, required
    - `id` string, required: Connection ID: the stored connection's row ID, or `<forge>-integration:<projectId>` for an integration-managed CLI (GitHub, Bitbucket) with no stored credentials. Accepted wherever the CLI takes `<slug | connection-id>`.
    - `cliType` string, required: CLI type identifier.
    - `credentialSource` 'github_app' | 'bitbucket_integration' | 'personal_access_token' | 'stored_credentials' | 'tailscale_federated_identity', required: Authoritative credential source for the sandbox CLI.
    - `isSystemManaged` boolean, required: Whether the connection follows an integration lifecycle.
    - `fallbackConfigured` boolean, required: Whether user-provided fallback credentials are stored for this sandbox CLI.
    - `envVarKeys` string[], required: Stored environment variable names. Secret values are omitted.

## Changes

- **2026-10-11** `5f4a1feb193a`: 1 info
  - added the required property `connections/items/id` to the response with the `200` status
- **2026-09-17** `9be5c4da3dc5`: 2 info
  - added the optional property `connections/items/connectionStatus` to the response with the `200` status
  - added the optional property `connections/items/recovery` to the response with the `200` status

[Operation history](https://skmtc.dev/sazabi/apis/sazabi-public-api/changes/sandbox-clis/connections/get.md)

---

[API](https://skmtc.dev/sazabi/apis/sazabi-public-api.md) - [All operations](https://skmtc.dev/sazabi/apis/sazabi-public-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sazabi/apis/sazabi-public-api/revisions/965b6230cf45?raw)