> ## Documentation Index > Fetch the complete documentation index at: https://uselora.dev/llms.txt > Use this file to discover all available pages before exploring further. # List tags > Returns tags in the workspace, ordered newest-first, paginated by an opaque cursor. Deleted tags are excluded. ## OpenAPI ````yaml /openapi.json get /v1/tags openapi: 3.1.0 info: title: Lora API version: 1.0.0 description: >- Lora REST API for managing workspace shortcuts, folders, tags, and QR codes. ## Versioning All stable endpoints are prefixed with `/v1/`. Breaking changes ship under a new path prefix (for example `/v2/`). Non-breaking additions (new optional fields, new endpoints) may land in the current version. Deprecated endpoints are announced in the [developer docs](https://uselora.dev) before removal. ## Authentication Send `Authorization: Bearer ` on every request except `GET /v1/qr`, which also accepts anonymous callers. API keys are workspace-scoped and carry OAuth-style scopes (for example `shortcuts.write`). ## Errors 4xx and 5xx responses use a typed JSON envelope: `{ error, code?, requestId, traceId?, fieldErrors?, required_scope?, current_plan?, required_capability? }`. See components `ErrorResponse`, `ErrorWithFieldErrors`, `PaymentRequiredError`, `ForbiddenError`, and `InternalError`. ## Rate limits Successful responses include `RateLimit-Limit`, `RateLimit-Remaining`, and `RateLimit-Reset` (IETF RateLimit fields). 429 responses include `Retry-After` (seconds). Authenticated callers are bucketed per API key; anonymous QR endpoints are bucketed per IP. ## Discovery - OpenAPI spec: `GET https://api.uselora.com/openapi.json` (also `GET https://api.uselora.com/`) - RFC 9727 catalog: `GET https://www.uselora.com/.well-known/api-catalog` - MCP manifest: `GET https://www.uselora.com/.well-known/mcp` (server card at `/.well-known/mcp/server-card.json`) - MCP Streamable HTTP endpoint: `POST https://api.uselora.com/mcp` servers: - url: https://api.uselora.com description: Production security: - bearerAuth: [] paths: /v1/tags: get: tags: - Tags summary: List tags description: >- Returns tags in the workspace, ordered newest-first, paginated by an opaque cursor. Deleted tags are excluded. operationId: listTags parameters: - name: cursor in: query required: false schema: type: string description: >- Opaque pagination token returned as `nextCursor` from the previous page. Omit on the first request. - name: limit in: query required: false schema: type: integer minimum: 1 maximum: 100 default: 50 description: >- Page size. Out-of-range values are clamped to [1, 100]; defaults to 50. responses: '200': description: Paginated list of tags. content: application/json: schema: type: object properties: items: type: array items: type: object properties: id: type: string pattern: ^[0-9abcdefghjkmnpqrstvwxyz]{8}$ description: The tag's unique ID. examples: - a1b2c3d4 name: type: string slug: type: string color: type: string enum: - DEFAULT - GRAY - BROWN - ORANGE - YELLOW - GREEN - BLUE - PURPLE - PINK - RED workspaceId: type: string creatorId: type: string createdAt: type: string updatedAt: type: string required: - color - createdAt - creatorId - name - slug - updatedAt - workspaceId - id additionalProperties: false title: TagListItem description: A tag as it appears in the workspace listing nextCursor: description: >- Opaque pagination token returned as `nextCursor` from the previous page. type: - string - 'null' pattern: >- ^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z__[0-9abcdefghjkmnpqrstvwxyz]{8}$ examples: - 2024-01-15T12:34:56.789Z__a1b2c3d4 required: - items - nextCursor additionalProperties: false title: ListTagsResponse description: Paginated list of tags visible to the caller '400': description: The cursor is malformed. content: application/json: schema: type: object properties: error: type: string code: type: string fieldErrors: type: object propertyNames: type: string additionalProperties: type: array items: type: string requestId: type: string description: >- Correlation identifier for support/debugging. Equals the `X-Lora-Request-Id` response header. traceId: description: >- Trace identifier when available for this request. 32-character lowercase hex string. type: string pattern: ^[0-9a-f]{32}$ required: - error - requestId additionalProperties: false headers: X-Lora-Request-Id: description: >- Request correlation identifier. Matches the `requestId` field in the JSON error body. schema: type: string '401': description: Missing, malformed, unknown, or workspace-unscoped Bearer token. content: application/json: schema: type: object properties: error: type: string code: type: string requestId: type: string description: >- Correlation identifier for support/debugging. Equals the `X-Lora-Request-Id` response header. traceId: description: >- Trace identifier when available for this request. 32-character lowercase hex string. type: string pattern: ^[0-9a-f]{32}$ required: - error - requestId additionalProperties: false headers: X-Lora-Request-Id: description: >- Request correlation identifier. Matches the `requestId` field in the JSON error body. schema: type: string '402': description: >- The workspace plan does not include API access, the requested capability, or enough resource capacity. The body uses `plan_requires_upgrade` or `quota_exceeded`. Upgrade the workspace or change the request; retrying the same request will not succeed. headers: X-Lora-Request-Id: description: >- Request correlation identifier. Matches the `requestId` field in the JSON error body. schema: type: string content: application/json: schema: type: object properties: error: type: string code: type: string enum: - plan_requires_upgrade - quota_exceeded requestId: type: string description: >- Correlation identifier for support/debugging. Equals the `X-Lora-Request-Id` response header. traceId: description: >- Trace identifier when available for this request. 32-character lowercase hex string. type: string pattern: ^[0-9a-f]{32}$ current_plan: description: The workspace plan when the response includes it. type: string required_capability: description: >- The required plan capability when the response includes it. type: string required: - error - code - requestId additionalProperties: false '403': description: >- The caller is authenticated but not allowed to perform this action. Common codes: `insufficient_scope` (the key lacks the required scope; body sets `required_scope`) and `no_permission` (the caller is no longer a workspace member). content: application/json: schema: type: object properties: error: type: string code: type: string requestId: type: string description: >- Correlation identifier for support/debugging. Equals the `X-Lora-Request-Id` response header. traceId: description: >- Trace identifier when available for this request. 32-character lowercase hex string. type: string pattern: ^[0-9a-f]{32}$ required_scope: description: >- Set when `code` is `insufficient_scope`. The exact scope name the route required, e.g. `shortcuts.write`. type: string required: - error - requestId additionalProperties: false headers: X-Lora-Request-Id: description: >- Request correlation identifier. Matches the `requestId` field in the JSON error body. schema: type: string '429': description: Rate limit exceeded. Wait `Retry-After` seconds before retrying. headers: Retry-After: schema: type: integer minimum: 1 description: Seconds until the rate-limit window resets. X-Lora-Request-Id: description: >- Request correlation identifier. Matches the `requestId` field in the JSON error body. schema: type: string content: application/json: schema: type: object properties: error: type: string code: type: string requestId: type: string description: >- Correlation identifier for support/debugging. Equals the `X-Lora-Request-Id` response header. traceId: description: >- Trace identifier when available for this request. 32-character lowercase hex string. type: string pattern: ^[0-9a-f]{32}$ required: - error - requestId additionalProperties: false '500': description: >- An unexpected failure on the server. The body is `{ error: , code: "internal_error", requestId: }`, plus `traceId` when available. Retry idempotent operations with exponential backoff. A write may already have applied; reconcile its state before retrying. headers: X-Lora-Request-Id: description: >- Request correlation identifier. Matches the `requestId` field in the JSON error body. schema: type: string content: application/json: schema: type: object properties: error: type: string code: type: string const: internal_error requestId: type: string description: >- Correlation identifier for support/debugging. Equals the `X-Lora-Request-Id` response header. traceId: description: >- Trace identifier when available for this request. 32-character lowercase hex string. type: string pattern: ^[0-9a-f]{32}$ required: - error - code - requestId additionalProperties: false components: securitySchemes: bearerAuth: type: http scheme: bearer ````