> ## Documentation Index
> Fetch the complete documentation index at: https://docs.b3os.org/llms.txt
> Use this file to discover all available pages before exploring further.

# GET /v1/agent-cards/grants

List the organization's card-disclosure grants, live and dead alike.

` GET /v1/agent-cards/grants `

List the organization's card-disclosure grants, live and dead alike.

## Parameters

### ` limit ` (query, optional)

Number of items (default 20, max 100)

- ` value `: type ` integer `

### ` offset ` (query, optional)

Offset for pagination (default 0)

- ` value `: type ` integer `

## Responses

### ` 200 ` — OK

Content type: ` application/json `

- ` value `: type ` object `

  - ` code `: type ` integer `

    - example: ` 200 `

  - ` data `: type ` object `

    - ` hasMore `: type ` boolean `

    - ` items `: type ` array `

      - ` array item `: type ` object `

        - ` approvedAt `: type ` string `

        - ` cardId `: type ` string `

        - ` connectorId `: type ` string `

        - ` createdAt `: type ` string `

        - ` expiresAt `: type ` string `

        - ` grantedBy `: type ` string `

        - ` id `: type ` string `

        - ` maxUses `: type ` integer `

        - ` note `: type ` string `

        - ` organizationId `: type ` string `

        - ` purpose `: type ` string `

        - ` requestedBy `: type ` string `

        - ` retiredAt `: type ` string ` — RetiredAt exists for the unique index, not for the domain. idx_agent_card_grants_live keeps one live grant per card, but a partial index predicate cannot reference now(), so expiry is stamped here instead and the index excludes it. Only ever set on a row that is already past ExpiresAt, and never by a human — a human withdrawing permission sets RevokedAt, which redeem and the UI both read and this column deliberately is not.

        - ` revokedAt `: type ` string `

        - ` updatedAt `: type ` string `

        - ` uses `: type ` integer `

    - ` limit `: type ` integer `

    - ` offset `: type ` integer `

  - ` message `: type ` string `

    - example: ` "success" `

  - ` requestId `: type ` string `

    - example: ` "abc-123" `

### ` 400 ` — Bad Request

Content type: ` application/json `

- ` value `: type ` object `

  - ` code `: type ` integer `

  - ` details `: type ` array `

    - ` array item `: type ` unknown `

  - ` message `: type ` string `

  - ` requestId `: type ` string `

## Request examples

### cURL

```curl
curl -X GET 'https://api.example.com/v1/agent-cards/grants' \
  -H 'Authorization: Bearer YOUR_API_TOKEN'
```

### JavaScript

```javascript
const response = await fetch('https://api.example.com/v1/agent-cards/grants', {
  method: 'GET',
  headers: {
      "Authorization": "Bearer YOUR_API_TOKEN"
  }
});

const data = await response.json();
console.log(data);
```

### Python

```python
import requests

headers = {
    'Authorization': 'Bearer YOUR_API_TOKEN'
}

response = requests.get('https://api.example.com/v1/agent-cards/grants', headers=headers)
print(response.json())
```

### Go

```go
package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, _ := http.NewRequest("GET", "https://api.example.com/v1/agent-cards/grants", nil)
	req.Header.Set("Authorization", "Bearer YOUR_API_TOKEN")

	resp, _ := http.DefaultClient.Do(req)
	defer resp.Body.Close()
	result, _ := io.ReadAll(resp.Body)
	fmt.Println(string(result))
}
```