---
title: "List applications"
method: GET
path: "/api/v1/applications"
tags: ["applications"]
---

# List applications

`GET /api/v1/applications`

Returns a paginated list of applications in your organization.

## Query parameters

- `limit` integer
- `cursor` string
- `title_like` string
- `category_contains_word` string

## Response `200`

Application list

- ApplicationList — Paginated list of applications
  - `data` Application[], required — List of applications
    - `admin_user_ids` string[] — User IDs of the application's admins
    - `auth_method` 'google' | 'microsoft' | 'okta' | 'sso_provider' | 'credentials' | 'other', nullable — Authentication method used to sign in
    - `data_location` string, nullable — Where the vendor stores data
    - `description` string, nullable — Description
    - `id` string, uuid, required — Application ID
    - `inserted_at` string, date-time — Creation timestamp
    - `last_vendor_review_at` string, date, nullable — Date of the last vendor security review
    - `mfa_activated` boolean, nullable — Whether MFA is activated for this application
    - `notes` string, nullable — Internal notes
    - `owner_user_id` string, uuid, nullable — Owner user ID
    - `permanent_access_allowed` boolean — Whether the application allows permanent (non-expiring) access
    - `processed_data_types` string[] — Types of data this application processes
    - `provisioning_type` 'application_admin' | 'automatic' — Provisioning type
    - `risk_level` 'low' | 'medium' | 'high', nullable — Risk level assessment
    - `status` 'ignored' | 'discovered' | 'approved' | 'requestable', required — Application status
    - `tags` object[] — Tags assigned to this application
      - `id` string, uuid
      - `title` string
    - `time_based_access_durations` string[] — Configured time-based access durations as ISO 8601 durations (e.g. "PT1H", "P7D"); empty when the app offers only permanent access
    - `title` string, required — Application title
    - `updated_at` string, date-time — Last update timestamp
    - `url` string, nullable — Application URL
    - `user_count` integer, nullable — Number of users with access
    - `user_setup_url` string, nullable — URL where existing users are shown and new users are invited
    - `vendor_certificates` string[] — Security/compliance certifications held by the vendor
  - `meta` PaginationMeta, required — Pagination metadata
    - `page` integer, required — Current page number
    - `page_size` integer, required — Items per page
    - `total_count` integer, required — Total number of items
    - `total_pages` integer, required — Total number of pages

## Other responses

- `400` — Bad request
- `401` — Unauthorized

---

[API](https://skmtc.net/accessowl/apis/accessowl-api.md) · [All operations](https://skmtc.net/accessowl/apis/accessowl-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/accessowl/accessowl-api/versions/f01f507d4b4e/schema)