---
title: "List Testsets"
method: POST
path: "/api/testsets/list/"
tags: ["testsets"]
---

# List Testsets

`POST /api/testsets/list/`

Mixin for views that need method-level permission enforcement.

Supports two approaches for defining permissions:

1. Auto-generation (Recommended - DRY):
    Set permission_resource to auto-generate CRUD permissions based on HTTP methods:

    class MyView(PermissionMapMixin, JWTAndAPIKeyAuthenticationViewMixin, RetrieveUpdateDestroyAPIView):
        permission_resource = Resources.LOG
        # Auto-generates:
        # GET -> log:read
        # PATCH -> log:update
        # DELETE -> log:delete

    Override specific methods via permission_map (always use constants):
    class MyView(PermissionMapMixin, ...):
        permission_resource = Resources.LOG
        permission_map: PermissionMap = {
            "GET": None,  # Override: no permission required for GET
            "POST": make_permission(Resources.LOG, CRUDActions.READ),  # POST acts as read
        }

2. Explicit mapping (for non-CRUD or complex cases - always use constants):
    class MyView(PermissionMapMixin, JWTAndAPIKeyAuthenticationViewMixin, APIView):
        permission_map: PermissionMap = {
            "GET": make_permission(Features.PROXY, Actions.ACCESS),
            "POST": make_permission(Features.PLAYGROUND, Actions.ACCESS),
        }

3. Dynamic logic (most flexible):
    def get_required_permission(self, method: str) -> str | None:
        if self.kwargs.get('public'):
            return None
        return "dataset:read"

Notes:
- permission_map acts as an override when permission_resource is set
- If neither is defined, no permission check is performed (backward compatible)
- HasJWTPermission automatically enforces permissions when defined

## Headers

- `Authorization` string, required

## Request body

- TestsetSheetListRequest
  - `testset_unique_id` string
  - `project` string, nullable
  - `created_at` string, date-time
  - `name` string, required
  - `description` string
  - `updated_at` string, date-time
  - `row_count` integer
  - `column_count` integer
  - `max_insertions_before_rebalance` integer
  - `used_row_indexes` number[]
  - `current_max_row_index` number, double
  - `column_definitions` unknown[]
    - unknown
  - `starred` boolean
  - `created_by` integer, nullable
  - `organization` integer, required

## Response `201`

- TestsetSheetList
  - `testset_unique_id` string
  - `updated_by` Editor, required
    - `id` integer, required
    - `email` string, required
    - `name` string, required
    - `username` string
    - `first_name` string
    - `last_name` string
  - `tags` GenericTagDisplay[], required
    - `id` string, required
    - `name` string, required
    - `color` string, required
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
  - `project` string, nullable
  - `created_at` string, date-time
  - `name` string, required
  - `description` string
  - `updated_at` string, date-time
  - `row_count` integer
  - `column_count` integer
  - `max_insertions_before_rebalance` integer
  - `used_row_indexes` number[]
  - `current_max_row_index` number, double
  - `column_definitions` unknown[]
    - unknown
  - `starred` boolean
  - `created_by` integer, nullable
  - `organization` integer, required

---

[API](https://skmtc.net/keywordsai/apis/api-reference.md) · [All operations](https://skmtc.net/keywordsai/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/keywordsai/api-reference/versions/c26d550029f8/schema)