List sites
const url = 'https://qinto-api.blotout.io/teams/7b8d1a52-6c1e-4b6f-9a30-2f8a54d1c3e9/domains';const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url https://qinto-api.blotout.io/teams/7b8d1a52-6c1e-4b6f-9a30-2f8a54d1c3e9/domains \ --header 'Authorization: Bearer <token>'Lists the team’s sites. Use it to find a site’s domainId, or to check whether a team has been onboarded yet.
How it works
Only sites covered by this token’s all-domain or selected-domain read policy are returned. An empty list means the team has no sites or none are covered. Deleted sites are never listed.
Required permissions
team:readon the team
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”Unique id (UUID) of the team that owns the addressed resources, as shown in the team settings on the Blotout platform.
Example
7b8d1a52-6c1e-4b6f-9a30-2f8a54d1c3e9Unique id (UUID) of the team that owns the addressed resources, as shown in the team settings on the Blotout platform.
Responses
Section titled “Responses”The sites this token may read in the team.
object
Every site in the team the caller may read; empty when there are none.
A site a team serves through Qinto.
object
Server-assigned unique id of the site. Address the site with it in every other operation.
Display name of the site, as shown on the Blotout platform.
Hostname Qinto serves this site on, built from its subdomain and root domain. It is fixed at creation.
Customer domain the site belongs to.
Label Qinto serves the site from, under the root domain.
pending until the site is first deployed, then active. Deleted sites are not returned at all.
Jurisdiction the site’s data is held in, or null when unrestricted. Guaranteed for Durable Objects and object storage; other storage follows locationHint where it is supported, and is otherwise placed automatically. Fixed at creation.
Region the site’s state is placed near, or null to let Cloudflare choose. Fixed at creation.
Qinto URL the site can be served from while its own DNS is not set up, or null when it has none.
Where the site is asked to be served from: its own domain, or its Qinto development_url.
Whether the deployed worker already serves the requested deliveryMode. False on a site that has never deployed — call deploy — and false while a change to a deployed site has not reached the edge, which retries on its own.
Host the site is provisioned under. It is fixed at creation.
Example
{ "sites": [ { "domainId": "3f2a9c81-5d47-4e0b-8c66-91b2a7f04d15", "name": "Storefront", "domain": "shop.example.com", "rootDomain": "example.com", "subdomain": "shop", "status": "pending", "jurisdiction": "eu", "locationHint": "wnam", "developmentUrl": "shopexamplecom.acme.workers.dev", "deliveryMode": "domain", "deliveryLive": true, "hostId": "9b1c7f30-2d85-4e77-a6c1-0f3d8e6b5a24" } ]}invalid_params — A path parameter failed validation (for example a malformed UUID); details pinpoints the offending parameter.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Field-level validation errors: a tree keyed by input property, each node carrying an errors array of human-readable messages. Render it to help the caller correct the request.
object
Example
{ "error": "invalid_params", "details": { "errors": [], "properties": { "teamId": { "errors": [ "Invalid UUID" ] } } }}unauthenticated — The Authorization: Bearer token is missing, malformed, or no longer valid. Generate a team API token or obtain a new OAuth access token.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Example
{ "error": "unauthenticated"}forbidden — The bearer credential lacks the required permission or belongs to another team, or its user lacks the organization role a developer operation needs. Update its policies, use a credential bound to the addressed team, or ask an organization owner for the role; message states the reason when one is known.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Human-readable reason for this specific failure, intended for display — do not parse it programmatically.
Example
{ "error": "forbidden", "message": "The Cloudflare API token is invalid or expired."}internal — Unexpected server error. Nothing is guaranteed to have been persisted; idempotent operations are safe to retry.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Example
{ "error": "internal"}