Skip to main content
GET
List graph nodes
Per-user scoped (WHERE user_id = <effective subject>). Optional filters: domain (membership in a domain id from /v1/graph/domains), nodeType (exact) and q (case-insensitive title substring). Ordered by createdAt descending with id as a stable tiebreaker; page with nextCursor until hasMore is false. No totals (keyset pagination).

Authorization

This route requires the read scope. A missing or invalid credential returns 401 authentication_error. A valid credential without the scope returns 403 permission_denied, and the problem body names the exact scope required.

Headers

These are request conventions the contract does not declare as parameters, so they do not appear in the schema tables below.

Success responses

Errors

Every error is an RFC 9457 application/problem+json body carrying a stable code, a requestId, and a suggestedAction where Exo has one. See Errors.

Authorizations

X-Exo-API-Key
string
header
required

An Exo API key (exo_...) sent as the X-Exo-API-Key header.

Query Parameters

domain
string | null

Filter to nodes that are members of this domain id.

nodeType
string | null

Filter by node type (anchor, derived, phase, ...).

q
string | null

Case-insensitive substring match on the node title.

Maximum string length: 200
cursor
string | null

Opaque cursor from a previous nextCursor.

pageSize
integer | null

Page size, coerced into [1, 100] (default 25).

Response

Successful Response

data
GraphNode · object[]
required
hasMore
boolean
default:false
nextCursor
string | null