> ## Documentation Index > Fetch the complete documentation index at: https://docurise.io/docs/llms.txt > Use this file to discover all available pages before exploring further. # List folders and courses > List your folders and courses with item counts ## OpenAPI ````yaml api-reference/openapi.yaml GET /api/preview/folders openapi: 3.1.0 info: title: DocuRise Public API version: preview description: > Programmatic access to DocuRise. **This is a preview API.** Every path is versioned under `/api/preview/` and carries no compatibility guarantee while it is in preview: fields, values and error codes may be added, changed or removed. Once the contract stabilizes it will be promoted to `/api/v1/`. See the [changelog](/changelog) for what changed and when. ### Access Every route requires: 1. A valid API key (see Authentication below). 2. The calling account's plan must be **Iconic or above**. 3. During the preview the API is available to some accounts only, whatever the plan. Accounts without access get a `404` from every route below; if you expect access, check with your DocuRise contact. Generate and manage keys from **Settings → Developers** in the dashboard. ### Idempotency `POST` endpoints that create a resource require an `Idempotency-Key` header. Reusing the same key with the same request body replays the original response (same status code, same body) instead of creating a second resource — safe to retry on timeout or connection loss. A key is remembered for 7 days; after that the same key is treated as a new request. Reusing the same key with a **different** body is rejected with `IDEMPOTENCY_KEY_CONFLICT`. Generate a fresh key (a UUID or ULID is fine) per logical operation, not per HTTP attempt. One exception: `POST /api/preview/tags` takes no `Idempotency-Key`. Creating the same tag name twice changes nothing (the second call returns the existing tag with `created: false`), so a retry is always safe. Another exception: `POST /api/preview/segments/preview` takes no `Idempotency-Key`. It saves nothing, so repeating it is always safe. ### Response compatibility Responses may gain additional fields over time, and `type`/`code`-style enum values (for example a future `LeadFormQuestion.type` member, or a new error `code`) may gain new members. Always ignore fields and enum values you don't recognize rather than treating them as errors — this is what makes every additive change under `preview` non-breaking. A field absent from a response is not always the same as a field present with value `null`. A field whose type never includes `null` is omitted when it doesn't apply — it is never sent as `null` (for example, `retryAfterSeconds` is left out entirely when there's no backoff hint, not set to `null`). A field whose type explicitly allows `null` uses it to mean something real and distinct from "not present" (for example, `expiresAt: null` on a document means it has no fixed expiry date, not "unknown" or "not applicable"). All field names use `camelCase` — `notionUrl`, `leadFormQuestions`, `collectName`, and so on — consistently across every request and response body. ### Identifiers `id` values are opaque strings. Store and compare them as unstructured tokens — don't parse them, validate their format, or assume anything about their length or character set. ### Errors Every error response has the same shape: ```json { "error": { "code": "STRING", "message": "human-readable", "retryable": false } } ``` Switch on `code`, not `message` — `message` is free text for logs/debugging and may be reworded without notice; `code` is the stable contract. `retryable` tells you whether the same request is safe to retry as-is; when present, `retryAfterSeconds` is a concrete backoff hint. A request body that contains a NUL character (`\u0000`), in a string value or in a property name, is refused with `400 VALIDATION_ERROR` before anything is saved. ### Rate limiting 60 requests/minute per account across all `/api/preview/*` routes, regardless of how many keys that account has. Exceeding it returns `429` with a `Retry-After` header. Separately, an account can have at most 10 requests running at the same moment across these routes, however many keys it has. A request that would be the eleventh returns `429` with `code: TOO_MANY_CONCURRENT_REQUESTS` and `Retry-After: 1`; wait for one of your requests to finish and retry. This limit counts requests that have not finished, so it can apply even while you are under 60 requests per minute. contact: name: DocuRise url: https://docurise.io servers: - url: https://docurise.io description: Production security: - apiKey: [] tags: - name: Documents description: >- Create documents (a Notion page, a post or a lead-capture form), list or read the documents you own, publish drafts, and change their status, expiry and email protection. - name: Analytics description: >- Read aggregate view, visitor, lead and conversion numbers for one of your documents, split by traffic channel, compared with the previous period, or as a form funnel, and rank all of your documents by views, visitors or leads. - name: Folders description: Read your folders and courses, with item counts. - name: Products description: Read your product catalog (read-only). - name: Audiences description: >- List your tags and groups with contact counts, create a group from a rule, count who a rule would match, and read one group with its rule. Counts only; no member data is ever returned. - name: Contacts description: >- Add or remove a tag on one of your contacts. Contact details are never returned. - name: Email description: >- Read email broadcasts, their aggregate delivery numbers, and automations. Email only; Kakao is not included. - name: Instagram description: >- Create, read, edit, pause and resume Instagram comment-to-DM automation rules. - name: Account description: Inspect the API key you are calling with. paths: /api/preview/folders: get: tags: - Folders summary: List folders and courses description: > Returns your folders and courses, newest first, with item counts. A course is a folder in course layout; both appear in one list and `kind` tells them apart. Needs the `documents:read` scope. Counts only: the response never contains the items themselves, viewers, leads, links or access settings. `documentCount` is the number of documents in the folder, including draft posts and forms. `itemCount` is `documentCount` plus the subfolders, links, linked folders and files in it. Courses are always listed alongside folders. Folders are returned as one flat list: each item has a `parentId` (`null` for top-level folders), so you can rebuild the tree. Results are paged with a cursor: pass `nextCursor` as `cursor` to get the next page (`null` on the last page). `limit` defaults to 20; a value above 100 is treated as 100. You only ever see your own folders. Unknown query parameters are rejected with `400 VALIDATION_ERROR`. operationId: listFolders parameters: - name: q in: query description: >- Only folders whose title contains this text (case-insensitive, 1-100 characters). Matched as plain text, so `%` and `_` are not wildcards. Must not contain a NUL character (`%00`); one is rejected with `VALIDATION_ERROR`. schema: type: string minLength: 1 maxLength: 100 - name: kind in: query description: Only folders (`folder`) or only courses (`course`). schema: type: string enum: - folder - course - name: limit in: query description: Page size, 1-100. Default 20; larger values are clamped to 100. schema: type: integer minimum: 1 maximum: 100 default: 20 - name: parentId in: query description: >- Only folders directly inside this folder (a folder id), or `root` for top-level folders. Omit it to list all folders and courses, including nested ones. schema: type: string - name: cursor in: query description: >- The `nextCursor` of the previous page. Opaque; do not build or edit it. A cursor this API did not issue to you returns `400 INVALID_CURSOR` (not retryable). schema: type: string maxLength: 512 responses: '200': description: One page of folders and courses. content: application/json: schema: $ref: '#/components/schemas/ListFoldersResponse' example: data: - id: 3b0c8a52-6f1e-4d0a-9a1c-0d8f2f6a7b11 title: Onboarding kit kind: folder parentId: null documentCount: 4 itemCount: 6 createdAt: '2026-09-20T09:00:00.000Z' updatedAt: '2026-09-28T14:30:00.000Z' - id: 9c1d7e34-2b6a-4f55-8e0b-5a3c1d9e2f40 title: Notion for founders kind: course parentId: null documentCount: 0 itemCount: 12 createdAt: '2026-09-01T09:00:00.000Z' updatedAt: '2026-09-01T09:00:00.000Z' - id: 5e2a9b17-4c3d-4e8f-a6b1-7d0c2e1f3a98 title: Templates kind: folder parentId: 3b0c8a52-6f1e-4d0a-9a1c-0d8f2f6a7b11 documentCount: 2 itemCount: 2 createdAt: '2026-09-21T09:00:00.000Z' updatedAt: '2026-09-21T09:00:00.000Z' nextCursor: null '400': description: | `VALIDATION_ERROR` (unknown or repeated query parameter, `kind` not `folder`/`course`, `limit` not a positive integer, empty or too long `q`, or an invalid `parentId`) or `INVALID_CURSOR` (a `cursor` this API did not issue to you; not retryable). Never retryable as sent. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '401': $ref: '#/components/responses/Unauthorized' '403': description: | One of `INSUFFICIENT_SCOPE` (the key lacks `documents:read`), `PLAN_REQUIRED` or `PAST_DUE_RESTRICTED`. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '404': $ref: '#/components/responses/NotOnAllowlist' '429': $ref: '#/components/responses/RateLimited' '500': description: >- `INTERNAL_ERROR`: unexpected failure. Retryable; the cause is not returned. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '503': $ref: '#/components/responses/Unavailable' security: - apiKey: [] components: schemas: ListFoldersResponse: type: object required: - data - nextCursor properties: data: type: array items: $ref: '#/components/schemas/FolderSummary' description: The folders and courses on this page. nextCursor: type: - string - 'null' description: Pass as `cursor` to get the next page. `null` on the last page. ErrorResponse: type: object required: - error properties: error: type: object required: - code - message - retryable properties: code: type: string description: >- Stable machine-readable error code — switch on this, not `message`. message: type: string description: Human-readable detail. May change wording without notice. retryable: type: boolean description: Whether retrying the identical request may succeed. retryAfterSeconds: type: integer description: Present only when a concrete backoff hint applies. details: type: object description: > Present only for a few specific codes: - `PROTECTION_RULE_CONFLICT`: `{ rule: string }`, the protection rule that refused the request (`form`, `restricted_access`, `paid_lead_gate`, `free_lead_gate` or `form_no_access_controls`). Open-ended: tolerate new values. - `NEXT_POST_RULE_EXISTS`: `{ ruleId: string }`, the existing next-post rule. - `NOTION_FETCH_FAILED`: `{ notionErrorCode: string }`, one of `NOTION_ERROR_PRIVATE`, `NOTION_ERROR_NOT_FOUND`, `NOTION_ERROR_NETWORK`, `NOTION_ERROR_RATE_LIMIT`, `NOTION_ERROR_TEMPORARILY_UNAVAILABLE`, `NOTION_ERROR_PAGE_REJECTED`, `NOTION_ERROR_UNKNOWN`. - `HTML_REJECTED`: `{ reason: string }`, one of `too_large`, `css_rejected` or `invalid`. Open-ended: tolerate new values. - `CONDITION_NOT_SUPPORTED`: `{ field: string, path: string }`, the condition type that is not accepted and where it sits in the request. For a condition shape refused where it sits also `operator: string` and, when there is an equivalent operator for `requiredConditions`, `invertTo: string`. - `REFERENCE_NOT_FOUND`: `{ path: string, kind: string }`, where the unknown id sits in the request and what it refers to: `document`, `product`, `tier`, `cta`, `folder`, `broadcast` or `step`. Open-ended: tolerate new values. - `TAG_NOT_FOUND` (from a group rule): `{ tag: string }`, the tag name that does not exist. - `GROUP_REFERENCE_NOT_FOUND`: `{ groupIds: string[] }`, the group ids that are not in the account. - `GROUP_LIMIT_REACHED`: `{ limit: integer }`, the most groups an account can create through the API. description: >- The error. Every error response from the API has it: `code`, `message`, `retryable` and, for some codes, `retryAfterSeconds` and `details`. FolderSummary: type: object required: - id - title - kind - parentId - documentCount - itemCount - createdAt - updatedAt properties: id: type: string description: The folder's id. title: type: string description: The folder's title. kind: type: string enum: - folder - course description: 'What it is: `folder` or `course` (a folder in course layout).' parentId: type: - string - 'null' description: >- Id of the folder this one is nested in, or `null` for a top-level folder. documentCount: type: integer description: Documents in this folder, including draft posts and forms. itemCount: type: integer description: >- `documentCount` plus the subfolders, links, linked folders and files in this folder. createdAt: type: string format: date-time description: When the folder was created (RFC 3339, UTC). updatedAt: type: string format: date-time description: When the folder was last changed (RFC 3339, UTC). responses: Unauthorized: description: 'Missing, malformed, or revoked API key (`code: UNAUTHORIZED`).' content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' NotOnAllowlist: description: | The API is available to some accounts only, whatever the plan. If you expect access, check with your DocuRise contact (`code: NOT_FOUND`). content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' RateLimited: description: >- Rate limited (`code: RATE_LIMITED`, always retryable): see the `Retry-After` header and `X-RateLimit-*` headers. Or too many requests running at once (`code: TOO_MANY_CONCURRENT_REQUESTS`, always retryable): `Retry-After` is `1` and there are no `X-RateLimit-*` headers. headers: Retry-After: schema: type: integer X-RateLimit-Limit: schema: type: integer X-RateLimit-Remaining: schema: type: integer X-RateLimit-Reset: schema: type: integer description: Unix timestamp (seconds) when the limit resets. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' Unavailable: description: | A server-side dependency is temporarily down (`RATE_LIMIT_UNAVAILABLE` or `SERVICE_UNAVAILABLE`). Not a problem with the request or key; always retryable — honor `retryAfterSeconds` when present. The group endpoints (`POST /segments`, `POST /segments/preview`, `GET /segments/{id}`) also return it when a very heavy rule could not be counted within about 10 seconds: simplify the rule or retry. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' securitySchemes: apiKey: type: http scheme: bearer bearerFormat: dr_live__ description: | A key generated from Settings → Developers, sent as `Authorization: Bearer dr_live_<12 hex chars>_<64 hex chars>`. Keys carry explicit scopes — each endpoint states the one it requires. The full key is shown exactly once at generation time and cannot be retrieved again; only the `keyId` prefix is shown afterward. A revoked key fails auth on its very next request. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.