Skip to main content
GET
List Portfolios
Posture: Authenticated internal beta. The caller must resolve to a mapped TattooAPI actor before access is granted.
Write boundary: Public writes are blocked. Do not build production flows assuming mutation is live on this route family.
Canonical request URL: https://api.tattooapi.com/api/v1/portfolios.

List Portfolios

GET /portfolios is an authenticated read-beta endpoint. It returns the public projection of portfolio assets only. Records must be publish_state = published_public and must not contradict the rights posture. An operator-approved intake with status promoted_to_sanity is still a private Sanity draft. It does not appear here until a separate governed promotion creates a published_public Convex runtime projection with approved distribution posture.

Auth

Use a WorkOS organization API key mapped with portfolios:read:
Mapped human sessions can use a WorkOS AuthKit bearer token:

Query Parameters

Response Shape

Write Boundary

POST, PUT, PATCH, and DELETE are explicitly blocked on this public route family. Use owner-scoped routes only for current owner reads. Owner writes remain gated until a governed owner mutation contract lands.