List entity records

curl --request GET \
  --url https://app.base44.com/api/apps/{app_id}/entities/{entity_name} \
  --header 'api_key: <api-key>'

const options = {method: 'GET', headers: {api_key: '<api-key>'}};

fetch('https://app.base44.com/api/apps/{app_id}/entities/{entity_name}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.base44.com/api/apps/{app_id}/entities/{entity_name}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "api_key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://app.base44.com/api/apps/{app_id}/entities/{entity_name}"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("api_key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://app.base44.com/api/apps/{app_id}/entities/{entity_name}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["api_key"] = '<api-key>'

response = http.request(request)
puts response.read_body

[
  {
    "id": "6886b8d390dc7e2f4a2c91b3",
    "created_date": "2026-06-01T09:23:41.481000",
    "updated_date": "2026-06-04T14:07:02.115000",
    "created_by": "jane@acme.com",
    "created_by_id": "6874b0c2e1a94d0031bb77de",
    "is_sample": false
  }
]

API Reference

List entity records

This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.

Returns the records held in one of the app’s entities. Deleted records are left out.

Row-level security applies, so an entity whose rls read rule narrows what a caller sees returns only the records that credential can read. An entity with no rls rules returns all of its records.

Filter with q, or by passing one of the entity’s own fields as a query parameter of that name. Any parameter this endpoint doesn’t define is read as a filter, so a misspelled one narrows the result to nothing rather than failing the call.

Base44 returns at most 5000 records per call. It caps the result at 5000 both when you leave limit out and when you ask for more, and the response doesn’t tell you it was cut short, so page through a bigger entity with skip.

Records come back in no particular order unless you set sort.

Pass the entity name exactly as List entity schemas reports it. The User entity is served by its own endpoints and never reaches this one.

This endpoint is limited to 100 requests per minute per app, shared with the app’s other entity listing calls.

This endpoint accepts a personal API key belonging to a user with access to the app, including a read-only key. Workspace API keys are not accepted.

GET

api

apps

{app_id}

entities

{entity_name}

List entity records

curl --request GET \
  --url https://app.base44.com/api/apps/{app_id}/entities/{entity_name} \
  --header 'api_key: <api-key>'

const options = {method: 'GET', headers: {api_key: '<api-key>'}};

fetch('https://app.base44.com/api/apps/{app_id}/entities/{entity_name}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.base44.com/api/apps/{app_id}/entities/{entity_name}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "api_key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://app.base44.com/api/apps/{app_id}/entities/{entity_name}"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("api_key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://app.base44.com/api/apps/{app_id}/entities/{entity_name}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["api_key"] = '<api-key>'

response = http.request(request)
puts response.read_body

[
  {
    "id": "6886b8d390dc7e2f4a2c91b3",
    "created_date": "2026-06-01T09:23:41.481000",
    "updated_date": "2026-06-04T14:07:02.115000",
    "created_by": "jane@acme.com",
    "created_by_id": "6874b0c2e1a94d0031bb77de",
    "is_sample": false
  }
]

Authorizations

api_key

string

header

required

Personal API key.

Path Parameters

app_id

string

required

ID of the app that owns the entity.

entity_name

string

required

Name of the entity, exactly as List entity schemas reports it.

Query Parameters

string

Filter as a JSON object of field names and values, for example {"status": "paid"}. A value can be a comparison rather than an exact match, as in {"amount": {"$gt": 100}}, and $and, $or, $nor and $not combine conditions. Keep the nesting shallow. Base44 wraps your filter in its own row-level-security conditions before it checks the depth, so how deep you can go depends on the entity's rules.

limit

integer

default:5000

Maximum number of records to return, as a whole number of at least 1. Defaults to 5000, and Base44 returns at most 5000 records however high you set this.

skip

integer

default:0

Number of records to skip before the ones you get back, as a whole number of 0 or more. Defaults to 0. Use it with limit to page through an entity.

sort

string

Single field to sort by, prefixed with - for descending. For example, -created_date returns newest first. Sorting by more than one field isn't supported.

fields

string

Comma-separated list of fields to return, which reduces the response size on a wide entity. Reach a field inside an object with dots, as in customer.email. Each record still carries its id whether you ask for it or not.

Response

The entity's records.

string | null

ID of the record. Pass it as entity_id to Get entity record, Update entity record or Delete entity record.

Example:

"6886b8d390dc7e2f4a2c91b3"

created_date

string | null

When the record was created, as a UTC timestamp in ISO 8601 format. A record Base44 has just created carries a Z suffix, and a record read back from storage does not.

Example:

"2026-06-01T09:23:41.481000"

updated_date

string | null

When the record last changed, as a UTC timestamp in ISO 8601 format. A record Base44 has just created carries a Z suffix, and a record read back from storage does not.

Example:

"2026-06-04T14:07:02.115000"

created_by

string | null

Email of the app user who created the record, or anonymous when a visitor created it on an app that needs no login. Apps that hide record authorship leave this field out of the response.

Example:

"jane@acme.com"

created_by_id

string | null

ID of the app user who created the record, or anonymous when a visitor created it on an app that needs no login.

Example:

"6874b0c2e1a94d0031bb77de"

is_sample

boolean | null

Whether Base44 stored the record as sample data while the app was being built. A record you create reports false.

Example:

false

App Management API (Beta)

Entities API (Beta)

Virality API (Beta)

Workflows API (Beta)

Analytics API (Beta)

Google Ads API (Beta)

Monitoring API

Audit Logs API

List entity records

Authorizations

Path Parameters

Query Parameters

Response