---
title: "List one-time view codes"
method: GET
path: "/v1/artifacts/{id}/view-codes"
tags: ["Collaborators"]
---

# List one-time view codes

`GET /v1/artifacts/{id}/view-codes`

## Request

- Base URL: `https://shareout.site`
- URL: `https://shareout.site/v1/artifacts/{id}/view-codes`
- Auth: HTTP bearer

Every code on the page: who it is for, whether it was opened, from what kind of device, and what the viewer tried while it was open (copy, print, save, right-click, the screenshot key, leaving the page). The codes themselves are never returned again. Owner or editor.

## Response `200`

The page's codes

- object
  - `enabled` boolean: The page opens with a code (auth_method `onetime`).
  - `url` string, uri
  - `view_codes` ViewCode[]
    - `id` string
    - `label` string: Who the code is for (their watermark).
    - `view_seconds` integer
    - `status` 'unused' | 'open' | 'viewed' | 'revoked'
    - `created_at` string, date-time
    - `opened_at` string, date-time, nullable
    - `closed_at` string, date-time, nullable
    - `opened_device` 'phone' | 'tablet' | 'computer', nullable
    - `revoked_at` string, date-time, nullable
    - `attempts` object: What the viewer tried while it was open, by kind. Signals, not proof.

## Other responses

- `403`: Access denied

## Changes

- **2026-11-03** `1e3f7fd34f6d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/shareout/apis/shareout-rest-api/changes/v1/artifacts/:id/view-codes/get.md)

---

[API](https://skmtc.dev/shareout/apis/shareout-rest-api.md) - [All operations](https://skmtc.dev/shareout/apis/shareout-rest-api/llms.txt) - [OpenAPI document](https://skmtc.dev/shareout/apis/shareout-rest-api/revisions/1e3f7fd34f6d?raw)