> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vertracloud.app/llms.txt
> Use this file to discover all available pages before exploring further.

# List Blob Objects in a Folder

> Lists the blob objects of the account by path prefix, with folders and a cursor for the next page. Returns up to 1,000 objects per call.

Lists the blob objects of the account in path order. Use `prefix` to list one folder and `delimiter=/` to get its sub-folders as `folders`. Pass the returned `cursor` back to get the next page; `cursor` is `null` on the last page.

**Scope:** `blob:read`.

<ParamField query="prefix" type="string">
  Only objects whose `path` starts with this text, for example `images/`.
</ParamField>

<ParamField query="delimiter" type="string">
  Group paths into folders at this character, usually `/`. Folders come back in `folders` and not as objects.
</ParamField>

<ParamField query="visibility" type="string">
  Only `public` or only `private` objects.
</ParamField>

<ParamField query="cursor" type="string">
  The `cursor` from the previous page. Omit it for the first page.
</ParamField>

<ParamField query="limit" type="number">
  Objects per page, 1–1000. Default `100`.
</ParamField>

<ParamField query="workspace_id" type="string">
  The workspace ID, when the blob belongs to a workspace. The call acts on the blob of the workspace owner and needs the `blob:read` workspace permission (`blob:manage` on routes that change data). Leave it out to act on your own blob.
</ParamField>

### Example request

```bash theme={null}
curl "https://blob.vertracloud.app/v1/objects?prefix=images/&delimiter=/&limit=100" \
  -H "Authorization: Bearer $VERTRA_API_KEY"
```

### Response

<ResponseField name="response" type="object">
  The page of objects, its sub-folders and the cursor for the next page.

  <Expandable title="properties">
    <ResponseField name="objects" type="object[]">Objects on this page. Each item has the fields of [Get a blob object](/api-reference/endpoint/blob/objects/get).</ResponseField>
    <ResponseField name="objects[].id" type="string">Stable object ID.</ResponseField>
    <ResponseField name="objects[].path" type="string">Full path inside the account.</ResponseField>
    <ResponseField name="objects[].size" type="number">Size in bytes.</ResponseField>
    <ResponseField name="objects[].visibility" type="string">`public` or `private`.</ResponseField>
    <ResponseField name="objects[].url" type="string | null">Public URL, or `null` while private.</ResponseField>
    <ResponseField name="folders" type="string[]">Folder prefixes ending in `/`. Empty without a `delimiter`.</ResponseField>
    <ResponseField name="cursor" type="string | null">Send it back as `cursor` to get the next page. `null` on the last page.</ResponseField>
  </Expandable>
</ResponseField>

<ResponseExample>
  ```json Response theme={null}
  {
    "response": {
      "objects": [
        {
          "id": "0b6f7c1e-3d2a-4f5b-9a8c-1d2e3f4a5b6c",
          "path": "images/logo.png",
          "size": 48213,
          "content_type": "image/png",
          "etag": "9b2cf535f27731c974343645a3085d39",
          "sha256": null,
          "visibility": "public",
          "url": "https://blob.vertracloud.dev/k7p2m9x4qa/images/logo.png",
          "cache_control": null,
          "content_disposition": "inline",
          "filename": null,
          "metadata": {},
          "expires_at": null,
          "created_at": "2026-10-14T12:00:00.000Z",
          "updated_at": "2026-10-14T12:00:00.000Z"
        }
      ],
      "folders": [
        "images/avatars/"
      ],
      "cursor": null
    }
  }
  ```
</ResponseExample>

### Error Responses

<ResponseField name="code" type="string">
  The error code indicating the reason for failure. Possible values:

  * `AUTH_TOKEN_MISSING` (`401`): No `Authorization` header was sent.
  * `API_KEY_INVALID` (`401`): The API key doesn't exist, was revoked, or its secret doesn't match.
  * `API_KEY_SCOPE_DENIED` (`403`): The key lacks the scope this route needs (`blob:read` or `blob:write`); `details.required` names it.
  * `WORKSPACE_PERMISSION_DENIED` (`403`): Only with `workspace_id`: you're not a member, or your role lacks the blob permission.
  * `WORKSPACE_NOT_FOUND` (`404`): Only with `workspace_id`: no workspace with that ID, or you're not a member.
  * `VALIDATION_ERROR` (`400`): A parameter failed validation, with `details.path` naming it. A malformed `cursor`, or one from another query, returns it with `details.path` set to `cursor`.
</ResponseField>

<ResponseExample>
  ```json Error Response (401) theme={null}
  {
    "code": "AUTH_TOKEN_MISSING"
  }
  ```

  ```json Error Response (403) theme={null}
  {
    "code": "API_KEY_SCOPE_DENIED"
  }
  ```

  ```json Error Response (404) theme={null}
  {
    "code": "WORKSPACE_NOT_FOUND"
  }
  ```

  ```json Error Response (400) theme={null}
  {
    "code": "VALIDATION_ERROR"
  }
  ```
</ResponseExample>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.