curl --request GET \
--url https://control.ergoly.ai/api/v1/connections/{id}/hosts \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://control.ergoly.ai/api/v1/connections/{id}/hosts', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://control.ergoly.ai/api/v1/connections/{id}/hosts"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"data": [
{
"id": "e1d2c3b4-a596-4870-9f6e-5d4c3b2a1908",
"host": "api.stripe.com",
"createdAt": "2026-02-01T09:14:00.000Z"
}
],
"page": {
"limit": 50,
"hasMore": true,
"nextCursor": null
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}List hosts
Every host in one answer — a credential has a handful, not a stream, so there is no cursor. Hosts attach to the connection’s key, so every scoped variant of that key returns the same list.
curl --request GET \
--url https://control.ergoly.ai/api/v1/connections/{id}/hosts \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://control.ergoly.ai/api/v1/connections/{id}/hosts', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://control.ergoly.ai/api/v1/connections/{id}/hosts"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"data": [
{
"id": "e1d2c3b4-a596-4870-9f6e-5d4c3b2a1908",
"host": "api.stripe.com",
"createdAt": "2026-02-01T09:14:00.000Z"
}
],
"page": {
"limit": 50,
"hasMore": true,
"nextCursor": null
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}Authorizations
An organization-scoped API key, minted in control under Settings → API keys. Every failure to authenticate answers one identical 401: "Provide a valid organization-scoped API key or an active session." Each operation names the one scope it is filed under, <resource>:<read|write>, where the resource is the first path segment after /api/v1/; a key minted today carries all 22 of them. Scopes are RECORDED — on the key and on every audit row — and are not yet enforced: no request is refused for want of one.
Path Parameters
The connection whose hosts to list. A malformed id answers 404, exactly as another organization's well-formed id does.

