List widgets
Lists the widgets of your workspace, newest first (created_at descending). Deleted widgets are
never included. Use GET /api/widgets/{id} to read one and POST /api/widgets to add one.
Offset pagination: the response is a bare data array with no total and no cursor. Request the next
page with offset increased by limit until fewer than limit items come back. See
Pagination.
Items never include the widget API key or its stored digest; the plaintext key is returned only
once, as plaintext_api_key, by POST /api/widgets.
Consistency. Pages are cached per limit/offset for up to 120 seconds. Creating, updating or
deleting a widget clears that cache, so your own writes show up on the next read.
Idempotency. Read-only; safe to retry.
Access
- Required scope:
read(orwrite). - Rate limit: General API — 120 requests/min per workspace (200 on Growth, 300 on Business, 600 on Enterprise). See Rate limits.
- Plan: Available on every plan.
Authentication
Workspace API key: jl_ followed by 64 lowercase hex characters, created by the workspace owner in the
dashboard (Settings → API Keys) and sent as Authorization: Bearer jl_.... The plaintext is shown once,
at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys.
Operations restricted to admins or owners reject keys without the full scope with 403, and say so in
their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret —
that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds.
See Authentication.
Query parameters
Page size, 1 to 100. Default 50. A value outside the range or not a number returns 400
Request validation failed; it is not clamped.
Number of widgets to skip, 0 to 100000. Default 0. Out-of-range values return 400
Request validation failed.