---
title: "Assets"
description: "Get All Assets"
canonical_url: "https://docs.cobalt.io/articles/assets-2ecfnEcxkw"
md_url: "https://docs.cobalt.io/articles/assets-2ecfnEcxkw.md"
---
# Assets

## **Get All Assets**

This endpoint retrieves a list of assets that belong to the organization specified in the `X-Org-Token` header.

### **HTTP Request**

`GET https://api.us.cobalt.io/assets`

### **URL Parameters**

| Parameter | Default | Description |
|----|----|----|
| `cursor` | N/A | Used for [pagination](https://docs.cobalt.io/en-us/articles/pagination-qS3Md7uER5). Example:   \n`https://api.us.cobalt.io/assets?cursor=a1b2c3d4` |
| `limit` | `10` | If specified, returns only a specified amount of assets. Example:   \n`https://api.us.cobalt.io/assets?limit=5` |

### **Response Fields**

| Field | Description |
|----|----|
| `id` | A unique ID representing the asset. Starts with `as_` |
| `title` | The title of the asset; set by user creating the asset |
| `description` | A description of the asset; set by user creating the asset |
| `asset_type` | An asset type, such as; `api`, `cloud_config`, `external_network`, `internal_network`, `mobile`, `web`, `web_plus_api`, `web_plus_mobile` |
| `links.ui.url` | A link to redirect an authorized user to this asset in the Cobalt web application |
| `logo` | A link pointing the location of the uploaded asset logo |
| `attachments` | A list of asset attachments. Attachment download URLs are pre-authorized and will expire after 10 minutes. |

```javascript
curl -X GET "https://api.us.cobalt.io/assets" \
  -H "Accept: application/vnd.cobalt.v1+json" \
  -H "Authorization: Bearer YOUR-PERSONAL-API-TOKEN" \
  -H "X-Org-Token: YOUR-V1-ORGANIZATION-TOKEN"
```

This command returns JSON structured like this:

```javascript
{
  "data": [
    {
      "resource": {
        "id": "as_rvZRC5Y",
        "title": "Acme Corp. HR System",
        "description": "HR system of the Acme Corp. holding sensitive employee data",
        "asset_type": "web",
        "logo": "https://s3.amazonaws.com/acmecorp/uploads/attachment/file/12345/cat.jpeg?something=1",
        "attachments": [
          {
            "token": "att_yYXZodA",
            "download_url": "https://s3.amazonaws.com/acmecorp/uploads/attachment/file/12345/rainbow.jpeg?something=1"
          }
        ]
      },
      "links": {
        "ui": {
          "url": "https://api.us.cobalt.io/links/eyJ0eXBlIjoic29tZXRoaW5nIiwib3JnU2x1ZyI6ImNvYmFsdCIsInBlbnRlc3RUYWciOiJz="
        }
      }
    }
  ],
  "pagination": {
    "next_page": "/assets?cursor=a1b2c3d4",
    "prev_page": "/assets?cursor=4d3c2b1a"
  }
}
```


:::info
Remember - you can only request assets scoped to the organization specified in the `X-Org-Token` header.

:::