---
title: "List files in a folder or search the drive"
method: GET
path: "/v1/files"
tags: ["Files"]
---

# List files in a folder or search the drive

`GET /v1/files`

## Request

- Base URL: `https://zernio.com/api`
- URL: `https://zernio.com/api/v1/files`
- Auth: HTTP bearer

Lists the children of `folderId` (the root by default), folders first.

With `q` and no `folderId` the whole drive is searched by name (on Google, every drive the app can see, shared drives included).

- The account must have been connected with `scopes=files` (412 `account_scope_missing` otherwise).
- Cursors are opaque and provider-issued.
- Google Drive returns only files Zernio created or the user picked (see the Files tag): an unpicked folder lists empty.

## Query parameters

- `accountId` string, required
- `folderId` string
- `q` string
- `cursor` string
- `limit` integer

## Response `200`

Files

- object
  - `data` FileItem[]
    - `id` string, required
    - `accountId` string, required
    - `provider` 'google' | 'microsoft', required
    - `name` string, required
    - `kind` 'file' | 'folder', required
    - `mimeType` string, nullable, required
    - `size` integer, nullable, required: Bytes; null for folders and Google editors files.
    - `parentId` string, nullable, required
    - `webUrl` string, nullable, required: The provider's own link to open the item.
    - `downloadable` boolean, required: False for folders and for Drive files whose owner disabled downloading.
    - `exportMimeType` string, nullable: Google Docs, Slides and Drawings download as PDF/PNG and Sheets as XLSX; this is the type the download carries.
    - `createdAt` string, date-time, nullable, required
    - `modifiedAt` string, date-time, nullable, required
    - `trashed` boolean, required
  - `pagination` object
    - `hasMore` boolean
    - `nextCursor` string, nullable

## Other responses

- `400`: Invalid request
- `401`: Missing or invalid API key. `code` is `missing_credentials` when no Authorization header was sent and `invalid_credentials` when the key is unknown, revoked or expired.
- `412`: The connected account cannot serve this request until something outside the request changes. Two codes: - `account_scope_missing`: the account was connected without the area this endpoint needs (`details.grantedAreas`, `details.missingArea`), or Google reports the grant lacks a permission. Reconnect with a wider `scopes=`. - `admin_consent_required` (Microsoft): the tenant requires an administrator's approval. `details.adminConsentUrl` is the Microsoft Entra admin-consent link to hand to one; it opens in a browser with no API key and stays valid for one hour. `GET /v1/connect/microsoft/admin-consent` mints a fresh one.

## Changes

- **2026-10-27** `0a24331f5431`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/zernio/apis/zernio-api/changes/v1/files/get.md)

---

[API](https://skmtc.dev/zernio/apis/zernio-api.md) - [All operations](https://skmtc.dev/zernio/apis/zernio-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zernio/apis/zernio-api/revisions/c319eb5d95b6?raw)