listSpaceFolder
One folder's files and folders only (a root when folderId is omitted).
One folder's files and folders only (a root when folderId is omitted). Team's templates, forms, contracts, tables are never listed here: count them with listContentTemplates, listForms, listContractTemplates, listWorkflowTables before saying what Team or Library holds; an empty Team root is not an empty Team. Folders first, then files, by name; each item has abilities, fileType, size, owner, creator and path. Items you cannot see are not returned.
curl https://server.goliathdata.com/api/v1/call \
-H "Authorization: Bearer $GOLIATH_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"operationId": "listSpaceFolder",
"variables": {
"spaceId": "<spaceId>"
}
}'import { GoliathClient } from '@goliath-data/sdk'
const goliath = new GoliathClient({
apiKey: process.env.GOLIATH_API_KEY!,
baseUrl: 'https://server.goliathdata.com',
})
const result = await goliath.spaces.listSpaceFolder({
spaceId: '<spaceId>'
})const res = await fetch('https://server.goliathdata.com/api/v1/call', {
method: 'POST',
headers: {
Authorization: `Bearer ${process.env.GOLIATH_API_KEY}`,
'Content-Type': 'application/json',
},
body: JSON.stringify({
operationId: 'listSpaceFolder',
variables: {
spaceId: '<spaceId>'
}
}),
})
const { data, errors } = await res.json()Variables
The example sends only what the schema requires. Some operations also need one of several optional variables (one filter or another, say); the description above says which.
Response
What comes back under data: a list shows as one entry, and a value as its type.
{
"data": {
"spacesQuery": {
"folder": {
"space": {
"id": "<ID>",
"kind": "TEAM",
"name": "…"
},
"folder": {
"id": "<ID>",
"spaceId": "<ID>",
"spaceName": "…",
"parentId": "<ID>",
"kind": "FOLDER",
"name": "…",
"description": "…",
"fileType": "…",
"sizeBytes": 0,
"accessMode": "INHERIT",
"systemLocked": true,
"viewerRole": "VIEWER",
"abilities": {
"addChildren": true,
"edit": true,
"move": true,
"trash": true,
"share": true
},
"owner": {
"id": "<ID>",
"name": "…"
},
"createdBy": {
"kind": "PERSON",
"label": "…"
},
"childCount": 0,
"shareCount": 0,
"currentVersion": {
"id": "<ID>",
"versionNumber": 0
},
"path": [
{
"id": "<ID>",
"name": "…"
}
],
"updatedAt": "2026-01-01T00:00:00.000Z",
"trashedAt": "2026-01-01T00:00:00.000Z"
},
"items": [
{
"id": "<ID>",
"spaceId": "<ID>",
"spaceName": "…",
"parentId": "<ID>",
"kind": "FOLDER",
"name": "…",
"description": "…",
"fileType": "…",
"sizeBytes": 0,
"accessMode": "INHERIT",
"systemLocked": true,
"viewerRole": "VIEWER",
"abilities": {
"addChildren": true,
"edit": true,
"move": true,
"trash": true,
"share": true
},
"owner": {
"id": "<ID>",
"name": "…"
},
"createdBy": {
"kind": "PERSON",
"label": "…"
},
"childCount": 0,
"shareCount": 0,
"currentVersion": {
"id": "<ID>",
"versionNumber": 0
},
"path": [
{
"id": "<ID>",
"name": "…"
}
],
"updatedAt": "2026-01-01T00:00:00.000Z",
"trashedAt": "2026-01-01T00:00:00.000Z"
}
]
}
}
}
}Errors
unknown_variableA variable the operation does not declare. A typo is refused rather than silently dropped.
unauthorizedNo bearer header, or the key is invalid or revoked.
insufficient_scopeThe key lacks the scope the operation requires.
forbiddenA referenced record does not exist, was deleted, or is outside your organization. The gateway cannot tell those apart.
Behaviour
A read. It rejects an Idempotency-Key header with 400 bad_request.