GoliathDevelopersGet an API key
Reference/Contractsgenerated from the gateway manifest

listContracts

The organization's contracts, newest first.

POST/api/v1/callREADreadruns as the key's owner
View as Markdown

The organization's contracts, newest first (at most 200), with status and who signed. held marks a workflow or AI employee send waiting on a blank required value (getHeldContractDraft).

curl https://server.goliathdata.com/api/v1/call \
  -H "Authorization: Bearer $GOLIATH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "operationId": "listContracts",
    "variables": {}
  }'
import { GoliathClient } from '@goliath-data/sdk'

const goliath = new GoliathClient({
  apiKey: process.env.GOLIATH_API_KEY!,
  baseUrl: 'https://server.goliathdata.com',
})

const result = await goliath.contracts.listContracts()
const res = await fetch('https://server.goliathdata.com/api/v1/call', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.GOLIATH_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    operationId: 'listContracts',
    variables: {}
  }),
})
const { data, errors } = await res.json()

Variables

None. Send "variables": {}.

Response

What comes back under data: a list shows as one entry, and a value as its type.

response shape
{
  "data": {
    "contractsQuery": {
      "contracts": [
        {
          "id": "<ID>",
          "title": "…",
          "templateId": "<ID>",
          "status": "PREPARING",
          "held": true,
          "contactId": "<ID>",
          "contactName": "…",
          "signerCount": 0,
          "signedCount": 0,
          "sentAt": "2026-01-01T00:00:00.000Z",
          "expiresAt": "2026-01-01T00:00:00.000Z",
          "completedAt": "2026-01-01T00:00:00.000Z",
          "signers": [
            {
              "displayName": "…",
              "status": "WAITING",
              "signedAt": "2026-01-01T00:00:00.000Z"
            }
          ]
        }
      ]
    }
  }
}

Errors

Behaviour

A read. It rejects an Idempotency-Key header with 400 bad_request.