> ## Documentation Index > Fetch the complete documentation index at: https://conductorone-docs-mcp-bridge-private-server.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Search > Search decoys with free-text query and filters for kind, status, and annotation key. ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples post /api/v1/decoys/search openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/decoys/search: post: tags: - Decoy summary: Search description: |- Search decoys with free-text query and filters for kind, status, and annotation key. operationId: c1.api.decoy.v1.DecoySearchService.Search requestBody: content: application/json: schema: $ref: '#/components/schemas/c1.api.decoy.v1.DecoySearchRequest' responses: '200': content: application/json: schema: $ref: '#/components/schemas/c1.api.decoy.v1.DecoySearchResponse' description: Successful response x-codeSamples: - lang: typescript label: Typescript (SDK) source: >- import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript"; const conductoroneSDKTypescript = new ConductoroneSDKTypescript({ security: { bearerAuth: "", oauth: "", }, }); async function run() { const result = await conductoroneSDKTypescript.decoySearch.search(); console.log(result); } run(); components: schemas: c1.api.decoy.v1.DecoySearchRequest: description: The DecoySearchRequest message. properties: annotationKeys: description: |- Filter to decoys that have at least one of these annotation keys set. Empty means no annotation filter. Per-key constraints match the c1api annotation-bag standard (min_len 1, max_len 128, same regex used by every annotation-bag-typed field across c1api). items: type: string type: - array - 'null' hasBeenUsed: description: |- Filter to decoys that have been used at least once. False / unset means no filter (show all). The "never used" case is not covered in this filter; add an explicit field if needed. type: - boolean - 'null' kinds: description: Filter by kind (OR within the list). Empty means any kind. items: enum: - DECOY_KIND_UNSPECIFIED - DECOY_KIND_USER_CLIENT_CREDENTIAL - DECOY_KIND_CONNECTOR_CLIENT - DECOY_KIND_WORKLOAD_FEDERATION - DECOY_KIND_ACCESS_TOKEN type: string x-speakeasy-unknown-values: allow type: - array - 'null' pageSize: description: The pageSize field. format: int32 type: - integer - 'null' pageToken: description: The pageToken field. type: - string - 'null' query: description: |- Free-text query against display_name and description. Empty means no text filter. type: - string - 'null' statuses: description: Filter by status (OR within the list). Empty means any status. items: enum: - DECOY_STATUS_FILTER_UNSPECIFIED - DECOY_STATUS_FILTER_ACTIVE - DECOY_STATUS_FILTER_DISABLED type: string x-speakeasy-unknown-values: allow type: - array - 'null' title: Decoy Search Request type: object x-speakeasy-name-override: DecoySearchRequest c1.api.decoy.v1.DecoySearchResponse: description: The DecoySearchResponse message. properties: list: description: The list field. items: $ref: '#/components/schemas/c1.api.decoy.v1.Decoy' type: - array - 'null' nextPageToken: description: The nextPageToken field. type: - string - 'null' title: Decoy Search Response type: object x-speakeasy-name-override: DecoySearchResponse c1.api.decoy.v1.Decoy: description: |- Decoy is the read projection of a planted honey-credential. All fields except annotations are server-managed. properties: annotations: additionalProperties: type: string description: |- Customer-defined grouping/filtering bag. PATCH semantics on Update: keys in the request overwrite, keys missing stay, keys set to empty string delete. Copied onto the Finding produced when a decoy fires, so routing rules can condition on the same keys. type: object x-speakeasy-terraform-plan-modifier: imports: - >- github.com/conductorone/terraform-provider-conductorone/internal/annotations schemaDefinition: annotations.PlanModifier() createdAt: format: date-time readOnly: true type: - string - 'null' description: description: The description field. type: - string - 'null' disabled: description: Admin-disabled. type: - boolean - 'null' displayName: description: The displayName field. type: - string - 'null' id: description: The id field. readOnly: true type: - string - 'null' kind: description: The kind field. enum: - DECOY_KIND_UNSPECIFIED - DECOY_KIND_USER_CLIENT_CREDENTIAL - DECOY_KIND_CONNECTOR_CLIENT - DECOY_KIND_WORKLOAD_FEDERATION - DECOY_KIND_ACCESS_TOKEN readOnly: true type: - string - 'null' x-speakeasy-unknown-values: allow lastUsedAt: format: date-time readOnly: true type: - string - 'null' materialFingerprintSha256: description: |- Hex-encoded SHA256 of the secret string vended at Create / Rotate. Stable for the decoy's current material; changes only on Rotate. Empty for WorkloadFederation decoys (no server-vended secret). readOnly: true type: - string - 'null' updatedAt: format: date-time readOnly: true type: - string - 'null' title: Decoy type: object x-speakeasy-name-override: Decoy securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````