GoliathDevelopersGet an API key
Reference/Spacesgenerated from the gateway manifest

searchSpaceItems

Find folders and files by NAME.

POST/api/v1/callREADreadruns as the key's owner
View as Markdown

Find folders and files by NAME (case-insensitive substring) across everything you can see: at most 50, most recently changed first. Searches names only, not file contents.

curl https://server.goliathdata.com/api/v1/call \
  -H "Authorization: Bearer $GOLIATH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "operationId": "searchSpaceItems",
    "variables": {
      "query": "<String>"
    }
  }'
import { GoliathClient } from '@goliath-data/sdk'

const goliath = new GoliathClient({
  apiKey: process.env.GOLIATH_API_KEY!,
  baseUrl: 'https://server.goliathdata.com',
})

const result = await goliath.spaces.searchSpaceItems({
  query: '<String>'
})
const res = await fetch('https://server.goliathdata.com/api/v1/call', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.GOLIATH_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    operationId: 'searchSpaceItems',
    variables: {
      query: '<String>'
    }
  }),
})
const { data, errors } = await res.json()

Variables

The example sends only what the schema requires. Some operations also need one of several optional variables (one filter or another, say); the description above says which.

queryString!required

Response

What comes back under data: a list shows as one entry, and a value as its type.

response shape
{
  "data": {
    "spacesQuery": {
      "search": [
        {
          "id": "<ID>",
          "spaceId": "<ID>",
          "spaceName": "…",
          "parentId": "<ID>",
          "kind": "FOLDER",
          "name": "…",
          "description": "…",
          "fileType": "…",
          "sizeBytes": 0,
          "accessMode": "INHERIT",
          "systemLocked": true,
          "viewerRole": "VIEWER",
          "abilities": {
            "addChildren": true,
            "edit": true,
            "move": true,
            "trash": true,
            "share": true
          },
          "owner": {
            "id": "<ID>",
            "name": "…"
          },
          "createdBy": {
            "kind": "PERSON",
            "label": "…"
          },
          "childCount": 0,
          "shareCount": 0,
          "currentVersion": {
            "id": "<ID>",
            "versionNumber": 0
          },
          "path": [
            {
              "id": "<ID>",
              "name": "…"
            }
          ],
          "updatedAt": "2026-01-01T00:00:00.000Z",
          "trashedAt": "2026-01-01T00:00:00.000Z"
        }
      ]
    }
  }
}

Errors

400unknown_variable

A variable the operation does not declare. A typo is refused rather than silently dropped.

401unauthorized

No bearer header, or the key is invalid or revoked.

403insufficient_scope

The key lacks the scope the operation requires.

403forbidden

A referenced record does not exist, was deleted, or is outside your organization. The gateway cannot tell those apart.

Behaviour

A read. It rejects an Idempotency-Key header with 400 bad_request.

READlistSpaceRootsREADlistSpaceFolderREADgetSpaceItemREADgetSpaceTextContentREADgetSpaceTextLinesREADreadSpaceSheet