List authorizations
List authorizations the caller is a party to (either side), newest
first. Use role to split the two intuitive views:
role=authorized— “what customers can I act on?” (broker view).role=granter— “who can act on my behalf?” (customer view).
status and type narrow further; omitting both returns every state
including REVOKED (kept for audit).
Honors Nxos-On-Behalf-Of — a broker can list a customer’s grants by
pointing the header at the customer’s org id.
Cursor-based pagination via the standard limit / cursor query
params; pass back the previous response’s nextCursor to advance.
curl --request GET \
--url https://api.nxos.io/v1/authorizations \
--header 'Authorization: <authorization>'import requests
url = "https://api.nxos.io/v1/authorizations"
headers = {"Authorization": "<authorization>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: '<authorization>'}};
fetch('https://api.nxos.io/v1/authorizations', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.nxos.io/v1/authorizations",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: <authorization>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.nxos.io/v1/authorizations"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "<authorization>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.nxos.io/v1/authorizations")
.header("Authorization", "<authorization>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.nxos.io/v1/authorizations")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = '<authorization>'
response = http.request(request)
puts response.read_body{
"object": "list",
"data": [
{
"object": "authorization",
"grantingOrganizationId": "org_a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4",
"authorizedOrganizationId": "org_b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5",
"type": "LOA",
"status": "REVOKED",
"signedAt": "2025-12-01T10:30:00.000Z",
"revokedAt": "2026-03-15T14:30:00.000Z",
"revokedReason": "Client off-boarded",
"createdAt": "2025-12-01T10:30:00.000Z",
"updatedAt": "2026-03-15T14:30:00.000Z"
}
],
"hasMore": true,
"nextCursor": "<string>"
}Headers
Bearer token. Format: Bearer <api_key>
Query Parameters
Maximum number of items to return. Defaults to 25, max 100.
Cursor for the next page of results, returned in previous responses.
Which side of the grant the caller is on. Omit to return both directions. Filter for which side of the grant the caller is on. Omitted = both directions.
granter, authorized Filter by lifecycle status. Omit to return all states (including REVOKED). Lifecycle status of an authorization grant.
PENDING— Row exists, the granter has not signed yet. The authorized org cannot act on the granter's behalf.ACTIVE— Granter has signed (signedAtis set). The authorized org may act on the granter's behalf when theNxos-On-Behalf-Ofheader is set.REVOKED— Previously active or pending, then revoked by either party. Kept for audit; never reverts toACTIVE.
PENDING, ACTIVE, REVOKED Filter by grant type. Currently only LOA exists.
Type of cross-org authorization. Today the only value is LOA (Letter of Authorization), which lets the authorized organization act on the granter's behalf via the platform API when the Nxos-On-Behalf-Of header is set.
LOA Response
The request has succeeded.
Paginated list envelope. All list endpoints return this shape.
Object type. Always list for paginated responses.
list Array of results.
Show child attributes
Show child attributes
Whether more results are available beyond this page.
Cursor to pass as cursor query parameter for the next page. Null when there are no more results.
curl --request GET \
--url https://api.nxos.io/v1/authorizations \
--header 'Authorization: <authorization>'import requests
url = "https://api.nxos.io/v1/authorizations"
headers = {"Authorization": "<authorization>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: '<authorization>'}};
fetch('https://api.nxos.io/v1/authorizations', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.nxos.io/v1/authorizations",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: <authorization>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.nxos.io/v1/authorizations"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "<authorization>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.nxos.io/v1/authorizations")
.header("Authorization", "<authorization>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.nxos.io/v1/authorizations")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = '<authorization>'
response = http.request(request)
puts response.read_body{
"object": "list",
"data": [
{
"object": "authorization",
"grantingOrganizationId": "org_a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4",
"authorizedOrganizationId": "org_b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5",
"type": "LOA",
"status": "REVOKED",
"signedAt": "2025-12-01T10:30:00.000Z",
"revokedAt": "2026-03-15T14:30:00.000Z",
"revokedReason": "Client off-boarded",
"createdAt": "2025-12-01T10:30:00.000Z",
"updatedAt": "2026-03-15T14:30:00.000Z"
}
],
"hasMore": true,
"nextCursor": "<string>"
}