List workspace security project inventory
This endpoint lets you retrieve a list of all projects across your workspace along with their security status, review urgency, and publishing details. You can search, filter, and sort projects to track security across your entire organization.
Enterprise workspace owners and security leads who want to build custom dashboards to audit project risk across their team.
Do this, in order
- 1
Create an API key with the workspaces:read permission in your Lovable workspace settings.
This endpoint requires an Enterprise plan and the workspaces:read scope to access workspace-wide project information.
- 2
Prompt Lovable to create a security dashboard view that requests GET https://api.lovable.dev/v1/workspaces/{workspace_id}/security-center/insights/projects.
This loads the list of workspace projects complete with risk review priorities and issue counts.
- 3
Pass your workspace ID in the path and your API key in the Lovable-API-Key header.
API keys are tied to a specific workspace and require authentication headers to return data.
- 4
Add pagination handling using limit and cursor query parameters in your dashboard UI.
The API returns projects in pages (up to 100 per call) and provides a next_cursor value to fetch the next set.
Paste this into your project
Create a workspace security overview page that allows entering a Workspace ID and a Lovable API key. Make a GET request to https://api.lovable.dev/v1/workspaces/{workspace_id}/security-center/insights/projects using the Lovable-API-Key header. Display the returned projects in a table with columns for project name, review priority badge, finding counts, publishing status, and last edited date. Include a filter dropdown for review priority (needs_review, review_recommended, no_review_needed) and pagination controls using the returned next_cursor.Words decoded
- Scope
- The specific permission assigned to an API key determining what data it can view or edit.
- Cursor
- A text token that marks your place in a long list so you can request the next page of results.
- PII
- Personally Identifiable Information, such as user emails, names, or addresses.
- Eventually consistent
- A data state where recent edits or additions might take a few moments to show up in the list.
Where people get stuck
- Using the has_pii filter or sorting by open_pii_finding_count will return a 402 payment required error if your workspace plan does not include personal data detection.
- Search terms passed to the query parameter that are shorter than 3 characters are ignored.
- This endpoint returns summary counts and priorities, not individual vulnerability details; detailed findings must be queried via the security scans findings endpoint.
- Recent workspace updates might not show immediately due to eventual consistency, so avoid immediate re-fetching after quick edits.
The short version, steps, decoder and prompt on this page are written automatically from Lovable's own documentation and can lag or misread it. The official page is always the authority.