---
title: "List sources on an honeytoken"
method: GET
path: "/v1/honeytokens/{honeytoken_id}/sources"
tags: ["Honeytoken Sources"]
---

# List sources on an honeytoken

`GET /v1/honeytokens/{honeytoken_id}/sources`

List sources where a honeytoken appears.

## Path parameters

- `honeytoken_id` string, uuid, required

## Query parameters

- `cursor` string
- `per_page` integer
- `ordering` 'source_id' | '-source_id'
- `provider_metadata_archived` boolean — Filter by whether the source is archived on the provider side when that information is available (e.g. archived repository). Sources without this metadata are treated as not archived for this filter.

## Response `200`

Honeytoken Sources List

- object[]
  - `provider_metadata` object — Metadata from the upstream provider. Fields depend on integration; absent concepts are represented with conservative defaults (e.g. archived false).
    - `archived` boolean, required — Whether the resource is archived on the provider (e.g. archived GitHub repository). False when not applicable or when the provider does not expose this information.
  - `type` 'azure_devops' | 'bitbucket' | 'bitbucket_cloud' | 'github' | 'gitlab'
  - `name` string
  - `url` string, uri
  - `open_issues_count` number — Number of open secret issues with at least one occurrence on this source.
  - `total_files_count` number — Number of files where the honeytoken appears.
  - `files` string[] — Files where the honeytoken appears.
  - `source_id` number

## Other responses

- `400` — Invalid data
- `401` — Invalid API key
- `404` — Honeytoken not found
- `503` — API under maintenance

---

[API](https://skmtc.net/gitguardian/apis/gitguardian-api.md) · [All operations](https://skmtc.net/gitguardian/apis/gitguardian-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gitguardian/gitguardian-api/revisions/511b067cdcb1/schema)