> ## Documentation Index > Fetch the complete documentation index at: https://uselora.dev/llms.txt > Use this file to discover all available pages before exploring further. # List folders > Returns folders in the workspace, ordered newest-first, paginated by an opaque cursor. Deleted folders are excluded. ## OpenAPI ````yaml /openapi.json get /v1/folders openapi: 3.1.0 info: title: Lora API version: 1.0.0 description: >- Lora REST API for managing workspace shortcuts, folders, tags, and QR codes. ## Versioning All stable endpoints are prefixed with `/v1/`. Breaking changes ship under a new path prefix (for example `/v2/`). Non-breaking additions (new optional fields, new endpoints) may land in the current version. Deprecated endpoints are announced in the [developer docs](https://uselora.dev) before removal. ## Authentication Send `Authorization: Bearer ` on every request except `GET /v1/qr`, which also accepts anonymous callers. API keys are workspace-scoped and carry OAuth-style scopes (for example `shortcuts.write`). ## Errors 4xx and 5xx responses use a typed JSON envelope: `{ error, code?, requestId, traceId?, fieldErrors?, required_scope?, current_plan?, required_capability? }`. See components `ErrorResponse`, `ErrorWithFieldErrors`, `PaymentRequiredError`, `ForbiddenError`, and `InternalError`. ## Rate limits Successful responses include `RateLimit-Limit`, `RateLimit-Remaining`, and `RateLimit-Reset` (IETF RateLimit fields). 429 responses include `Retry-After` (seconds). Authenticated callers are bucketed per API key; anonymous QR endpoints are bucketed per IP. ## Discovery - OpenAPI spec: `GET https://api.uselora.com/openapi.json` (also `GET https://api.uselora.com/`) - RFC 9727 catalog: `GET https://www.uselora.com/.well-known/api-catalog` - MCP manifest: `GET https://www.uselora.com/.well-known/mcp` (server card at `/.well-known/mcp/server-card.json`) - MCP Streamable HTTP endpoint: `POST https://api.uselora.com/mcp` servers: - url: https://api.uselora.com description: Production security: - bearerAuth: [] paths: /v1/folders: get: tags: - Folders summary: List folders description: >- Returns folders in the workspace, ordered newest-first, paginated by an opaque cursor. Deleted folders are excluded. operationId: listFolders parameters: - name: cursor in: query required: false schema: type: string description: >- Opaque pagination token returned as `nextCursor` from the previous page. Omit on the first request. - name: limit in: query required: false schema: type: integer minimum: 1 maximum: 100 default: 50 description: >- Page size. Out-of-range values are clamped to [1, 100]; defaults to 50. responses: '200': description: Paginated list of folders. content: application/json: schema: type: object properties: items: type: array items: type: object properties: id: type: string pattern: ^[0-9abcdefghjkmnpqrstvwxyz]{8}$ description: The folder's unique ID. examples: - a1b2c3d4 name: type: string slug: type: string linkCount: type: integer minimum: 0 maximum: 9007199254740991 description: >- Number of shortcuts visible to you in this folder — those whose primary folder this is, plus those curated into it. Excludes deleted and archived shortcuts. Counted per viewer, so two members may see different values for the same folder. examples: - 12 isSystem: type: boolean workspaceId: type: string creatorId: type: string createdAt: type: string updatedAt: type: string required: - createdAt - creatorId - isSystem - name - slug - updatedAt - workspaceId - id - linkCount additionalProperties: false title: FolderListItem description: A folder as it appears in the workspace listing nextCursor: description: >- Cursor for the next page, or null if this is the last page. type: - string - 'null' pattern: >- ^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z__[0-9abcdefghjkmnpqrstvwxyz]{8}$ required: - items - nextCursor additionalProperties: false title: ListFoldersResponse description: Paginated list of folders visible to the caller '400': description: >- Query parameters failed validation, or the cursor was malformed (`invalid_cursor`). content: application/json: schema: type: object properties: error: type: string code: type: string fieldErrors: type: object propertyNames: type: string additionalProperties: type: array items: type: string requestId: type: string description: >- Correlation identifier for support/debugging. Equals the `X-Lora-Request-Id` response header. traceId: description: >- Trace identifier when available for this request. 32-character lowercase hex string. type: string pattern: ^[0-9a-f]{32}$ required: - error - requestId additionalProperties: false headers: X-Lora-Request-Id: description: >- Request correlation identifier. Matches the `requestId` field in the JSON error body. schema: type: string '401': description: Missing, malformed, unknown, or workspace-unscoped Bearer token. content: application/json: schema: type: object properties: error: type: string code: type: string requestId: type: string description: >- Correlation identifier for support/debugging. Equals the `X-Lora-Request-Id` response header. traceId: description: >- Trace identifier when available for this request. 32-character lowercase hex string. type: string pattern: ^[0-9a-f]{32}$ required: - error - requestId additionalProperties: false headers: X-Lora-Request-Id: description: >- Request correlation identifier. Matches the `requestId` field in the JSON error body. schema: type: string '402': description: >- The workspace plan does not include API access, the requested capability, or enough resource capacity. The body uses `plan_requires_upgrade` or `quota_exceeded`. Upgrade the workspace or change the request; retrying the same request will not succeed. headers: X-Lora-Request-Id: description: >- Request correlation identifier. Matches the `requestId` field in the JSON error body. schema: type: string content: application/json: schema: type: object properties: error: type: string code: type: string enum: - plan_requires_upgrade - quota_exceeded requestId: type: string description: >- Correlation identifier for support/debugging. Equals the `X-Lora-Request-Id` response header. traceId: description: >- Trace identifier when available for this request. 32-character lowercase hex string. type: string pattern: ^[0-9a-f]{32}$ current_plan: description: The workspace plan when the response includes it. type: string required_capability: description: >- The required plan capability when the response includes it. type: string required: - error - code - requestId additionalProperties: false '403': description: >- The caller is authenticated but not allowed to perform this action. Common codes: `insufficient_scope` (the key lacks the required scope; body sets `required_scope`) and `no_permission` (the caller is no longer a workspace member). content: application/json: schema: type: object properties: error: type: string code: type: string requestId: type: string description: >- Correlation identifier for support/debugging. Equals the `X-Lora-Request-Id` response header. traceId: description: >- Trace identifier when available for this request. 32-character lowercase hex string. type: string pattern: ^[0-9a-f]{32}$ required_scope: description: >- Set when `code` is `insufficient_scope`. The exact scope name the route required, e.g. `shortcuts.write`. type: string required: - error - requestId additionalProperties: false headers: X-Lora-Request-Id: description: >- Request correlation identifier. Matches the `requestId` field in the JSON error body. schema: type: string '429': description: Rate limit exceeded. Wait `Retry-After` seconds before retrying. headers: Retry-After: schema: type: integer minimum: 1 description: Seconds until the rate-limit window resets. X-Lora-Request-Id: description: >- Request correlation identifier. Matches the `requestId` field in the JSON error body. schema: type: string content: application/json: schema: type: object properties: error: type: string code: type: string requestId: type: string description: >- Correlation identifier for support/debugging. Equals the `X-Lora-Request-Id` response header. traceId: description: >- Trace identifier when available for this request. 32-character lowercase hex string. type: string pattern: ^[0-9a-f]{32}$ required: - error - requestId additionalProperties: false '500': description: >- An unexpected failure on the server. The body is `{ error: , code: "internal_error", requestId: }`, plus `traceId` when available. Retry idempotent operations with exponential backoff. A write may already have applied; reconcile its state before retrying. headers: X-Lora-Request-Id: description: >- Request correlation identifier. Matches the `requestId` field in the JSON error body. schema: type: string content: application/json: schema: type: object properties: error: type: string code: type: string const: internal_error requestId: type: string description: >- Correlation identifier for support/debugging. Equals the `X-Lora-Request-Id` response header. traceId: description: >- Trace identifier when available for this request. 32-character lowercase hex string. type: string pattern: ^[0-9a-f]{32}$ required: - error - code - requestId additionalProperties: false components: securitySchemes: bearerAuth: type: http scheme: bearer ````