List Environments in an Application
/portal/v1/accounts/{accountSlug}/applications/{appSlug}/environmentsReturns every Environment in the active Application as an { items } collection, ordered as stored. Each row carries the Environment's name, slug, non-secret publishable_key, and settings (access model, auth toggles, MFA, CORS allowlist). The Application is resolved from the path (:accountSlug/:appSlug) and the guard chain; no pagination is applied since an Application holds only a handful of Environments.
Authentication
AuthorizationJWT access token. Never send alongside X-API-Key: a request carrying both is refused.
applications.viewDeveloper ConsoleView the Account's Applications and Environments. Granted through an administrator role in the Admin Workspace; a valid token without it is refused with 403.
Responses
application/json
items *EnvironmentResponseDto[]
application/json
error *ApiErrorBodyDto
application/json
error *ApiErrorBodyDto
Errors
When the request can't be completed, the response body includes a stable error code you can branch on.
account.capability_requiredForbiddenThe signed-in user's administrator roles do not grant the capability this endpoint requires.
Ask an account administrator to grant a role carrying the capability named in the Authentication section, then retry.
Returned object
curl -X GET "https://auth.canopy-io.com/portal/v1/accounts/{accountSlug}/applications/{appSlug}/environments" \ -H "Authorization: Bearer $CANOPY_TOKEN"
{ "items": [ { "id": "string", "application_id": "string", "name": "string", "slug": "string", "is_production": false, "settings": {}, "version": 0, "created_at": "2026-04-20T12:00:00.000Z", "updated_at": "2026-04-20T12:00:00.000Z" } ] }
Tell us how we can improve this guide.