Skip to main content
GET
List this customer's own destinations

Authorizations

Authorization
string
header
required

A hpt_… customer portal token, as Authorization: Bearer. Stored hashed and looked up by its full SHA-256 hash; shown once at issue. The query string (?token=) is not accepted: a token there ends up in request logs and traces. A browser page trades the token for a portalSession cookie with POST /portal/api/session.

Response

Destinations owned by this token's (tenant, project, portal, customer), newest first. No pagination and no limit. The signing secret is not in this list; GET /portal/api/destinations/{id}/secret reveals it.

destinations
object[]
required