List shortcuts
Returns shortcuts visible to the caller, paginated by an opaque cursor. Most-used first by default; use sort and dir to re-order, and the tags / creator / owner / expired / passwordProtected / masked parameters to filter. Deleted shortcuts are always excluded; archived ones unless archived=true.
The query parameters mirror the in-app overview’s own URL contract, so a link a user shares out of the app can be pasted here unchanged. Boolean parameters accordingly accept 1 / 0 as well as true / false; any other value is a 400 validation_error.
A cursor encodes a position in one specific ordering. Changing any ordering or filter parameter invalidates it — start the new query without a cursor rather than replaying the previous page’s nextCursor, which returns 400 invalid_cursor.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Query Parameters
Opaque pagination token returned as nextCursor from the previous page. Omit on the first request.
Page size. Out-of-range values are clamped to [1, 100]; defaults to 50.
1 <= x <= 100Filter to shortcuts whose externalId equals this value. The ext_ prefix is recommended for visual disambiguation from internal IDs, but the server accepts both prefixed (ext_<value>) and bare (<value>) forms. Combine with tenantId for multi-tenant lookups.
1 - 259Filter to shortcuts whose tenantId equals this value.
1 - 255Free-text search over slug and title, using the same full-text and trigram matching as the in-app search. Results are relevance-ranked, which suppresses nextCursor — a search returns the first page only.
1 - 255Ordering. clicks (the default) orders by the workspace-wide click total; trending by 7-day relative change (only shortcuts with at least 5 clicks in each of the last two 7-day windows are scored — the rest sort last); myLastClick by the authenticated caller's own last click. Available on every plan: click-count values are gated (they are returned as 0 without the analytics entitlement) but the ordering is not. Re-orders the list, never narrows it.
clicks, created, trending, updated, title, myLastClick Sort direction for the active sort. Shortcuts with no value for that ordering always sort last, in both directions.
asc, desc Include archived shortcuts. Soft-deleted shortcuts are never returned regardless of this value.
true, false, 1, 0 Comma-separated tag IDs (up to 20). Tag IDs outside this workspace match nothing. Combine with tagsOp.
How to apply tags. in returns shortcuts carrying at least one of them; nin returns shortcuts carrying none of them.
in, nin Comma-separated user IDs (up to 20) to filter by the shortcut's original creator. This does not change when a shortcut is transferred — use owner for the current owner.
How to apply creator. in returns shortcuts created by one of them; nin returns shortcuts created by none of them, including shortcuts with no recorded creator.
in, nin Comma-separated user IDs (up to 20) to filter by the shortcut's current owner.
How to apply owner. in returns shortcuts owned by one of them; nin returns shortcuts owned by none of them, including unowned shortcuts.
in, nin Filter by expiry state. true returns only shortcuts whose expiresAt has already passed; false returns the rest — both the ones expiring in the future and the ones with no expiry at all. Omit to ignore expiry entirely. Evaluated against the server clock, so this means currently expired rather than has an expiry set, matching the redirect's 410 Gone behaviour.
true, false, 1, 0 Filter by whether a password is set on the shortcut — the same derived flag returned as passwordProtected on each item. Never accepts or compares a password value. Omit to ignore.
true, false, 1, 0 Filter by destination masking. true returns only shortcuts that render a Lora landing page instead of redirecting straight through. Omit to ignore.
true, false, 1, 0