curl --request GET \
--url https://control.ergoly.ai/api/v1/connections \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://control.ergoly.ai/api/v1/connections', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://control.ergoly.ai/api/v1/connections"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"data": [
{
"id": "6d5c4b3a-2918-4706-9f8e-1d2c3b4a5968",
"key": "stripe_live",
"kind": "api_key",
"type": "secret",
"scope": "org",
"workerId": null,
"clientId": null,
"internalOnly": false,
"managed": false,
"hosts": [
"api.stripe.com"
],
"description": "Billing — subscriptions, invoices and refunds.",
"provider": null,
"account": null,
"providerScopes": [],
"expiresAt": null,
"health": null,
"issuer": null,
"issuerHost": null,
"mcpEndpoint": null,
"mcpTransport": null,
"mcpTools": [],
"mcpStatus": null,
"mcpServerName": null,
"providerClientId": null,
"redirectUri": null,
"createdAt": "2026-02-01T09:14:00.000Z",
"updatedAt": "2026-02-01T09:14:00.000Z"
},
{
"id": "1f2e3d4c-5b6a-4978-8e6f-5a4b3c2d1e09",
"key": "github_main",
"kind": "oauth",
"type": "oauth",
"scope": "worker",
"workerId": "8f1c2d3e-9a4b-4c5d-8e6f-1a2b3c4d5e6f",
"clientId": null,
"internalOnly": false,
"managed": false,
"hosts": [
"api.github.com"
],
"description": null,
"provider": "github",
"account": "acme-support",
"providerScopes": [
"repo",
"read:org"
],
"expiresAt": "2026-03-01T09:14:00.000Z",
"health": "healthy",
"issuer": null,
"issuerHost": null,
"mcpEndpoint": null,
"mcpTransport": null,
"mcpTools": [],
"mcpStatus": null,
"mcpServerName": null,
"providerClientId": null,
"redirectUri": null,
"createdAt": "2026-01-20T11:02:00.000Z",
"updatedAt": "2026-02-18T08:40:00.000Z"
}
],
"page": {
"limit": 50,
"hasMore": true,
"nextCursor": "MjAyNi0wMy0wNFQwOToxNDowMi4wMDBafDhmMWMyZDNlLTlhNGItNGM1ZC04ZTZmLTFhMmIzYzRkNWU2Zg"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}List connections
Newest first, across all four types. workerId and clientId narrow to connections scoped to exactly that Worker or Client — they do not answer what that Worker can resolve, so org-wide connections it also reaches are not included. ?view=apps lists the CONNECTED APPS instead: each is an app a person signed in to or pasted a key for, placed at one or more tiers, and its placements say where it may be used. That view takes no scope filter. No entry in either list carries a stored value.
curl --request GET \
--url https://control.ergoly.ai/api/v1/connections \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://control.ergoly.ai/api/v1/connections', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://control.ergoly.ai/api/v1/connections"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"data": [
{
"id": "6d5c4b3a-2918-4706-9f8e-1d2c3b4a5968",
"key": "stripe_live",
"kind": "api_key",
"type": "secret",
"scope": "org",
"workerId": null,
"clientId": null,
"internalOnly": false,
"managed": false,
"hosts": [
"api.stripe.com"
],
"description": "Billing — subscriptions, invoices and refunds.",
"provider": null,
"account": null,
"providerScopes": [],
"expiresAt": null,
"health": null,
"issuer": null,
"issuerHost": null,
"mcpEndpoint": null,
"mcpTransport": null,
"mcpTools": [],
"mcpStatus": null,
"mcpServerName": null,
"providerClientId": null,
"redirectUri": null,
"createdAt": "2026-02-01T09:14:00.000Z",
"updatedAt": "2026-02-01T09:14:00.000Z"
},
{
"id": "1f2e3d4c-5b6a-4978-8e6f-5a4b3c2d1e09",
"key": "github_main",
"kind": "oauth",
"type": "oauth",
"scope": "worker",
"workerId": "8f1c2d3e-9a4b-4c5d-8e6f-1a2b3c4d5e6f",
"clientId": null,
"internalOnly": false,
"managed": false,
"hosts": [
"api.github.com"
],
"description": null,
"provider": "github",
"account": "acme-support",
"providerScopes": [
"repo",
"read:org"
],
"expiresAt": "2026-03-01T09:14:00.000Z",
"health": "healthy",
"issuer": null,
"issuerHost": null,
"mcpEndpoint": null,
"mcpTransport": null,
"mcpTools": [],
"mcpStatus": null,
"mcpServerName": null,
"providerClientId": null,
"redirectUri": null,
"createdAt": "2026-01-20T11:02:00.000Z",
"updatedAt": "2026-02-18T08:40:00.000Z"
}
],
"page": {
"limit": 50,
"hasMore": true,
"nextCursor": "MjAyNi0wMy0wNFQwOToxNDowMi4wMDBafDhmMWMyZDNlLTlhNGItNGM1ZC04ZTZmLTFhMmIzYzRkNWU2Zg"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}Authorizations
An organization-scoped API key, minted in control under Settings → API keys. Every failure to authenticate answers one identical 401: "Provide a valid organization-scoped API key or an active session." Each operation names the one scope it is filed under, <resource>:<read|write>, where the resource is the first path segment after /api/v1/; a key minted today carries all 22 of them. Scopes are RECORDED — on the key and on every audit row — and are not yet enforced: no request is refused for want of one.
Query Parameters
Page size. Defaults to 50, clamped at 200. A value that is not a positive integer is a 400.
Opaque keyset cursor from the previous page's page.nextCursor. A cursor this API did not issue is a 400, never a silent page one.
Which store to list. Omitted, the plain secrets, connected accounts, provider apps and MCP servers below. apps lists the CONNECTED APPS instead — each an app placed at a tier, in the AppConnection shape — and takes no workerId or clientId; read each connection's placements. Any other value is a 400.
apps Narrow to connections scoped to exactly this Worker. This is the row's own scope column, not what the Worker can resolve — org-wide connections a Worker also resolves are NOT included. A malformed id is a 400.
Narrow to connections scoped to exactly this Client, on the same exact-match basis as workerId. A malformed id is a 400.

