List form files

GET/form-files

Lists the form files your organisation uploaded, oldest first, and returns one page. A file that is only an answer on a submission is not listed, but GET /form-files/{id} still reads it. Deleted files are left out. filter[q] matches the name and filter[created_at] takes a range. It changes nothing.

Query parameters

limitinteger#
Page size (1–100). Defaults to 25; values are clamped to the range.
Default: 25
cursorstring#
Opaque pagination cursor taken from a prior response's meta.next_cursor.
fieldsstring#
Comma-separated top-level fields to return. id is always returned.
sortstring#
Comma-separated fields to sort by: created_at or updated_at. Prefix a field with - for descending. Defaults to created_at, oldest first. The file id is always the final tiebreak.
filter[q]string#
Files whose name contains this text, ignoring case.
filter[created_at]string#
Only files uploaded in a range, written filter[created_at][gte]=2026-10-01. Takes gt, gte, lt and lte.

Responses

200

One page of form files.

FormFile[]

{
  "data": [
    {
      "id": "1a2b3c4d-5e6f-4071-8293-a4b5c6d7e8f9",
      "name": "passport.pdf",
      "size": 248173,
      "created_at": "2026-06-15T10:30:00Z",
      "updated_at": "2026-06-15T10:30:00Z"
    }
  ],
  "meta": {
    "limit": 1,
    "next_cursor": "string",
    "prev_cursor": "string"
  }
}

401

Authentication failed. error.code is one of invalid_token, expired, revoked.

Error

403

Authorization failed. error.code is one of org_disabled, ip_blocked, missing_scope, scope_disabled, user_disabled.

Error

422

The request can't be processed (HTTP 422): validation_failed with one ErrorDetail per problem, or a code documented on the operation.

Error

429

Rate limit exceeded (error.code = rate_limited).

Error

Examples

curl https://your-org-domain/kong/core/api/v2/form-files\
  -H "Authorization: Bearer $HELM_API_KEY"\
  -H "Content-Type: application/json"