# List custom skills

`GET https://api.endless.app/skills`

Source: https://endless.app/docs/api/custom-skills/list

Lists the custom skills the caller can read.

## Authentication

- `bearerAuth`: HTTP bearer (JWT)

## Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `organization_id` | query | string | yes |  |
| `search` | query | string | no |  |
| `created_by` | query | string | no |  |
| `visibility` | query | string | no |  |
| `project_ids` | query | string | no |  |
| `source` | query | string | no |  |
| `deleted` | query | boolean | no |  |
| `limit` | query | integer | no |  |
| `cursor` | query | string | no |  |
| `Endless-Api-Version` | header | string | no | Pin the caller to an API major (`1`). Omit to accept the current version. A major this deployment cannot serve is refused with 400 `unsupported_api_version`. |

## Responses

### 200 OK

Content type: `application/json` — object

- `items` (array<object>, required)
  - `id` (string (uuid), required)
  - `codename` (string | null, required)
  - `organization_id` (string | null, required)
  - `source` ("built-in" | "custom" | "community", required)
  - `name` (string, required)
  - `description` (string, required)
  - `author` (string | null, required)
  - `project_scoped` (boolean, required)
  - `visibility` ("private" | "workspace" | "public", required)
  - `workspace_role` ("viewer" | "editor" | "owner", required)
  - `created_by_id` (string | null, required)
  - `mod_shortcut_id` (string | null, required)
  - `listing_id` (string (uuid) | null, required)
  - `listing_version` (integer | null, required)
  - `listing_edited_at` (string (date-time) | null, required)
  - `deleted_at` (string (date-time) | null, required)
  - `deleted_by_id` (string | null, required)
  - `created_at` (string (date-time), required)
  - `updated_at` (string (date-time), required)
  - `created_by` (object | null, required)
    - `id` (string, required)
    - `first_name` (string | null, required)
    - `last_name` (string | null, required)
    - `email` (string, required)
    - `image_url` (string, required)
  - `shared` (boolean, required)
  - `verified` (boolean, required)
  - `can_edit` (boolean, required)
  - `can_delete` (boolean, required)
  - `state` (object, required)
    - `workspace_enabled` (boolean, required)
    - `user_enabled` (boolean | null, required)
    - `effective` (boolean, required)
  - `resources` (object, required)
    - `scripts` (number, required)
    - `references` (number, required)
    - `assets` (number, required)
  - `projects` (array<object>, required)
    - `id` (string (uuid), required)
    - `slug` (string, required)
    - `title` (string, required)
    - `emoji` (string | null, required)
- `next_cursor` (string | null, required)

### Errors

- `400` (Error): The request is malformed, or failed input validation. `message` names the field and the rule it broke; `data.issues` carries them individually.
- `401` (Error): No bearer token, or a token that failed verification.
- `402` (Error): The workspace has no credits left, or the caller is over a spending limit.
- `403` (Error): Authenticated, but the caller's role in this workspace does not carry the permission this operation needs.
- `409` (Error): The request is well-formed, but the resource's current state forbids it — a taken name, a last admin, a limit already reached.
- `429` (Error): The caller has spent its rate-limit window. `Retry-After` says when to come back.
- `500` (Error): The request failed on our side. Safe to retry an idempotent operation with backoff.