Skip to main content
GET
cURL

Authorizations

Lovable-API-Key
string
header
required

Lovable API key. Send its value in the Lovable-API-Key header.

Headers

Lovable-Version
string

Stable API version to serve, as a YYYY-MM-DD date. Omit for the oldest supported stable version, currently 2026-09-11.

Lovable-Beta
string

Comma-separated beta revision strings to enable on top of the stable version.

Path Parameters

workspace_id
string
required

Workspace ID.

Query Parameters

limit
integer<int64>
default:50

Maximum number of items to return per page.

Required range: 1 <= x <= 100
cursor
string

Pass pagination.next_cursor from the previous response to fetch the next page. Omit for the first page; keep the same filters and sort order across pages.

query
string

Free-text search across project name and owner. Terms shorter than 3 characters are ignored.

Maximum string length: 1000
sort_by
enum<string>

Sort field. Omit for the default order: most recently edited first, or best matches first when query is set. Ties break by project id unless noted. review_priority: unscored projects last in both directions, ties by risk score. name: projects without a name first ascending and last descending. publish_audience: ranks not published, then workspace, custom, public. last_edited_at: falls back to the last update time. risk_factor_count, open_pii_finding_count, external_access_rank: missing counts as 0, ties by name; external_access_rank ranks external collaborators above shared users, publicly published apps, then none; open_pii_finding_count returns 402 when personal data detection is not available on the workspace plan. edits_* and visitors_*: missing counts as 0. last_security_scan_at: never scanned last in both directions. relevance: requires query, ties by last update time.

Available options:
relevance,
review_priority,
name,
publish_audience,
last_edited_at,
risk_factor_count,
open_pii_finding_count,
external_access_rank,
edits_24h,
edits_7d,
edits_30d,
visitors_24h,
visitors_7d,
visitors_30d,
last_security_scan_at
sort_order
enum<string>

Direction for sort_by. Defaults to descending. Requires sort_by.

Available options:
asc,
desc
activity_group
enum<string>[]

Filter by the activity_group field: time since the last edit, or last update for projects never edited, using 14-day and 60-day boundaries. Repeat to match any value. Omit for no filter.

Available options:
last_14_days,
last_60_days,
older
is_published
boolean

Filter by whether the project is published. Omit for no filter.

visibility
enum<string>[]

Filter by the visibility field. Repeat to match any of the values. Omit for no filter.

Available options:
restricted,
workspace_edit,
workspace_view
has_pii
boolean

Filter by the has_pii signal. false selects projects without detected personal data. Omit for no filter. Returns 402 when personal data detection is not available on the workspace plan.

has_connectors
boolean

Filter by whether the project has a connected service. false selects projects without one. Omit for no filter.

publish_audience
enum<string>[]

Filter published projects by the publish_audience field. Repeat to match any value. Omit for no filter. Requires is_published to be true or omitted.

Available options:
public,
workspace,
custom
review_priority
enum<string>[]

Filter by Security Center review priority. Repeat to match any selected priority; unscored matches projects not yet scored. Omit to include every project.

Available options:
needs_review,
review_recommended,
no_review_needed,
unscored
finding_type_id
string[]

Finding type IDs returned by GET /v1/workspaces/{workspace_id}/security-center/insights. Repeat to match any selected type. Unknown IDs return 400. Types that depend on personal data detection return 402 when that feature is not available on the workspace plan.

Response

OK

Projects with security finding counts, review priorities, activity counts, and publishing details.

activity_as_of
object | null
required

Data timestamps for the edit and visitor counts on this page; null when none are available.

applied_finding
object | null
required

Finding type used as a filter when exactly one finding_type_id is selected; null otherwise. project_count equals the total matching projects after all filters are applied.

as_of
string<date-time> | null
required

Timestamp indicating the freshness of workspace review-priority data. Individual projects may have newer results. Null when unavailable; not a security scan completion time.

Example:

"2026-01-15T09:30:00Z"

data
object[]
required

Items in this page. Empty when there are none.

pagination
object
required

Whether more results are available and the cursor to fetch the next page.

total
integer<int64>
required

Total matching projects across all pages.

Example:

42