リファレンスHTTP APIVariables

The workspace's own variables

GET
/v1/workspace/variables

Owners and admins; never an API key. A plain variable carries its value; a secret never does. granted_agents is who may receive it, grant_all that every agent may (plain only).

Auth: cookie session only; no scope.

Authorization

cookieSession
cookie__Host-werft_session<token>

For the web console: the browser session cookie set by POST /v1/auth/login. It holds the scopes of the user's workspace role (owner: all; admin and member: all but sessions:recover). Requests other than GET must also send X-Requested-With: werft-web.

Response Body

The workspace's variables, by name.

application/json
  1. response
items*array<>
Example Request
curl -X GET 'https://example.com/v1/workspace/variables'
Example Response
{  "items": [    {      "name": "REGION",      "kind": "plain",      "value": "ap-northeast-1",      "version": 41,      "grant_all": false,      "grant_version": 42,      "granted_agents": [        "8d2c4f1a-6b3e-4a9d-b7c5-2e1f0a9b8c7d"      ],      "engine_delivery": false,      "updated_by": "3e7f1a90-5c2d-4b8e-8f61-2a9d0c4b7e35",      "updated_at": "2026-11-09T01:00:00.000Z"    }  ]}