List extensions
List extensions.
GET
/v1/extensionsRequest
| Method and path | GET/v1/extensions |
|---|---|
| Base URL | https://api.boxline.dev |
| Authentication | Your API key in the x-api-key header (or Authorization: Bearer). The examples read it from BOXLINE_API_KEY. |
Query parameters
| Name | Type | Default | Allowed values | Description |
|---|---|---|---|---|
limit | integer | 50 | – | From 1 to 200. |
after | string | – | – | The next value of the previous page (same filters and sort). Opaque; do not build it yourself. |
curl "https://api.boxline.dev/v1/extensions" \ -H "x-api-key: $BOXLINE_API_KEY"import { Boxline } from "@boxline/sdk";const bx = new Boxline(); // reads BOXLINE_API_KEY and BOXLINE_API_URLfor await (const e of bx.extensions.list()) console.log(e.id, e.name, e.version, e.sizeBytes);from boxline import Boxlinebx = Boxline() # reads BOXLINE_API_KEY and BOXLINE_API_URLfor e in bx.extensions.list(): print(e["id"], e["name"], e["version"], e["sizeBytes"])Responses
200 OK
A page of extensions, newest first.
Fields
| Name | Type | Default | Allowed values | Description |
|---|---|---|---|---|
data | object[] | – | – | |
data[].id | string | – | – | |
data[].name | string | – | – | From the manifest (resolved from _locales when it uses __MSG_…__). |
data[].version | string | – | – | |
data[].description | string | – | – | |
data[].permissions | string[] | – | – | |
data[].hostPermissions | string[] | – | – | |
data[].sizeBytes | integer | – | – | Size of the zip. |
data[].files | integer | – | – | |
data[].sha256 | string | – | – | Of the zip. |
data[].createdAt | string | – | – | Format: date-time. |
next | string | null | – | – | Pass it back as after for the next page; null on the last page. |
{ "data": [ { "id": "ext_Q2x9L0aPz7NmK3Jb", "name": "Work account", "version": "1.2.0", "description": "…", "permissions": [ "…" ], "hostPermissions": [ "…" ], "sizeBytes": 0, "files": 0, "sha256": "…", "createdAt": "2026-09-29T10:00:00.000Z" } ], "next": "eyJvIjoiY3JlYXRlZF9kZXNjIiwidCI6IjIwMjYtMDktMjlUMTA6MDA6MDAuMTIzNDU2WiIsImkiOiI2YzFmIn0"}Errors
Errors have a matching HTTP status and the same body. code is stable, so check it in your code; message is for people. See Errors and request ids.
| Status | Codes | When |
|---|---|---|
| 400 Bad Request | invalid_request, invalid_json, invalid_cursor, invalid_idempotency_key, invalid_extension, variables_with_extensions, terms_not_accepted, invalid_reset_token, invalid_confirmation_code, wrong_password, no_password, invalid_next, invalid_oauth_token | The request is not valid. |
| 401 Unauthorized | unauthorized | Missing or invalid API key. |
{ "error": { "code": "not_found", "message": "session not found", "requestId": "req_4fJx0aQm2Lk9Pz7N" }}Learn more
These docs describe a beta API. Endpoints, fields and SDK methods may change before general availability; breaking changes will be listed in the changelog.