Skip to content

List integration rows

Settings module

GET/integrationsintegrations.list

An integration connection (Section 17). Credentials are stored in Supabase Vault through the credential action and never returned. Returns a cursor page of integration rows the caller may see. The default order is `created_at` ascending. Supports sparse fieldsets and the filter grammar.

  • Requires the capability org.settings.read.
  • OAuth scopes: org.
  • Cursor-paginated: limit, cursor, fields, sort and filter apply.
  • Error statuses: 400, 401, 429. Errors are RFC 9457 problem details.

Path and query parameters

integrations.list: Path and query parameters
FieldTypeRequiredDescription
limitLimitNoPage size. Default 50, maximum 200.Constraints: range 1 to 200
cursorCursorNoOpaque cursor from `next_cursor` of the previous page.Constraints: length 1 to any
fieldsFieldsNoSparse fieldset: a comma-separated list of top-level fields to return. `id` is always returned.Constraints: pattern ^[a-z_][a-z0-9_]*(,[a-z_][a-z0-9_]*)*$
sortSortNoSort keys, comma-separated; a leading `-` sorts descending. Without `sort`, the documented default order applies (coded lists sort in numeric code order).Constraints: pattern ^-?[a-z_][a-z0-9_]*(,-?[a-z_][a-z0-9_]*)*$
filterFilterNoFilter grammar `filter[field][op]=value`. Operators: eq, ne, lt, lte, gt, gte, in (comma-separated values), is_null (true or false) and contains. Conditions combine with AND.

Response 200: a page of Integration

integrations.list: Integration
FieldTypeRequiredDescription
idstring (uuid)YesIdentifier of the integration.
org_idstring (uuid)YesIdentifier of the owning organization, derived from the parent row and never accepted from the caller.
created_atstring (date-time)YesWhen the row was created.
created_bystring (uuid) | nullYesIdentifier of the person who created the row; null when a seed, platform or system process created it.
updated_atstring (date-time)YesWhen the row was last updated.
updated_bystring (uuid) | nullYesIdentifier of the person who last updated the row; null when a seed, platform or system process updated it.
provider_codestringYesProvider.Constraints: pattern ^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$
last_synced_atstring (date-time) | nullYesLast successful sync.
display_namestringYesName the org gives the connection.Constraints: length 1 to 120
external_account_idstring | nullYesProvider tenant, company or workspace id.Constraints: length 1 to 255
connection_state"Pending" | "Connected" | "Error" | "Paused" | "Disconnected"YesConnection state; changes through the transitions action.
credential_kind"OAuth Token" | "API Key" | "Service Account" | nullYesKind of the stored Vault credential.
credential_expires_atstring (date-time) | nullYesWhen the stored credential expires.
last_error_codestring | nullYesRule code of the last connection error.Constraints: pattern ^[a-z][a-z0-9_]*$
last_error_messagestring | nullYesProvider message of the last connection error.Constraints: length 1 to 1000
{
  "data": [
    {
      "id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
      "org_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
      "created_at": "2026-10-08T14:30:00Z",
      "created_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
      "updated_at": "2026-10-08T14:30:00Z",
      "updated_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
      "provider_code": "xero",
      "last_synced_at": "2026-10-08T14:30:00Z",
      "display_name": "Northwind Xero",
      "external_account_id": "tenant-nwl",
      "connection_state": "Connected",
      "credential_kind": "OAuth Token",
      "credential_expires_at": "2026-10-08T14:30:00Z",
      "last_error_code": "credential_refused",
      "last_error_message": "Xero refused the token."
    }
  ],
  "next_cursor": null
}

Code samples

curl -X GET "$XOS_BASE_URL/integrations" \
  -H "Authorization: Bearer $XOS_API_KEY"
for await (const row of xos.integrations.listAll()) {
  console.log(row);
}
for row in xos.integrations.list_all():
    print(row)
xos integrations list --all