Export an Environment's configuration as JSON
/portal/v1/accounts/{accountSlug}/applications/{appSlug}/environments/{envSlug}/exportReturns the Environment's configuration (resolved by :envSlug) as a versioned JSON document: format_version, source_env, access_model, hierarchy_schema, and the env's permissions, roles with their permission keys, hierarchy nodes (ref-linked), OAuth client configs, and webhook configs. Secrets are deliberately omitted — OAuth client secrets and webhook signing secrets are not included. The export is read-only and does not modify the Environment; returns 404 when the slug does not exist.
Authentication
AuthorizationJWT access token. Never send alongside X-API-Key: a request carrying both is refused.
applications.manageDeveloper ConsoleCreate, edit, and delete Applications and Environments. Granted through an administrator role in the Admin Workspace; a valid token without it is refused with 403.
Path Parameters
envSlugstring Required Responses
application/json
data *EnvironmentExportDto
application/json
error *ApiErrorBodyDto
application/json
error *ApiErrorBodyDto
application/json
error *ApiErrorBodyDto
Errors
When the request can't be completed, the response body includes a stable error code you can branch on.
account.capability_requiredForbiddenThe signed-in user's administrator roles do not grant the capability this endpoint requires.
Ask an account administrator to grant a role carrying the capability named in the Authentication section, then retry.
Returned object
curl -X GET "https://auth.canopy-io.com/portal/v1/accounts/{accountSlug}/applications/{appSlug}/environments/value/export" \ -H "Authorization: Bearer $CANOPY_TOKEN"
{ "data": { "format_version": 1, "source_env": {}, "access_model": "flat", "organizations_enabled": false, "hierarchy_schema": {}, "permissions": [ null ], "roles": [ null ], "nodes": [ null ], "oauth_clients": [ null ], "webhooks": [ null ] } }
Tell us how we can improve this guide.