> ## Documentation Index > Fetch the complete documentation index at: https://docs.basaltic.sh/llms.txt > Use this file to discover all available pages before exploring further. # List buckets > List buckets owned by the requesting account, ordered by name ascending. Keyset-paginated on the bucket name (globally unique) — pass the last name from the previous page as `marker` to fetch the next. ## OpenAPI ````yaml /api-reference/specs/storage.yaml get /v1/buckets openapi: 3.0.3 info: title: Basaltic Storage API version: 1.0.0 description: | Block volumes with their snapshots and snapshot policies, plus bucket management for object storage. The S3 wire protocol itself is served separately at `objects.{region}.basaltic.cloud`. contact: name: Basaltic Support email: ping@basaltic.sh license: name: Proprietary url: https://basaltic.sh/terms servers: - url: https://storage.{region}.basaltic.sh description: Regional API endpoint variables: region: default: sa-saopaulo-1 description: Region code security: - SignatureAuth: [] paths: /v1/buckets: get: tags: - Buckets summary: List buckets description: | List buckets owned by the requesting account, ordered by name ascending. Keyset-paginated on the bucket name (globally unique) — pass the last name from the previous page as `marker` to fetch the next. operationId: listBuckets parameters: - name: limit in: query schema: type: integer minimum: 1 maximum: 500 default: 50 example: 50 - name: marker in: query schema: type: string example: my-app-assets description: Resume token — the last bucket name from the previous page. responses: '200': description: Buckets in the requesting account. content: application/json: schema: $ref: '#/components/schemas/BucketListResponse' '401': $ref: '#/components/responses/Unauthorized' '403': description: Caller lacks the required IAM permission. security: - SignatureAuth: [] components: schemas: BucketListResponse: type: object properties: buckets: type: array items: $ref: '#/components/schemas/Bucket' meta: $ref: '#/components/schemas/PaginationMeta' Bucket: type: object required: - id - name - crn - acl - versioning - deletion_protection - deletion_recovery_days - created_at properties: id: type: string format: uuid readOnly: true example: c4e2a1f8-6b3d-4e9a-8c7f-2d1e0a3b4c5d name: type: string example: my-app-assets crn: type: string example: crn:storage:sa-saopaulo-1:platform:bucket/my-app-assets readOnly: true acl: type: string example: private versioning: type: string description: >- Versioning state. `suspended` means versioning was on and was turned off — existing versions are kept, new writes stop creating them — which is distinct from `disabled`, a bucket that never had it enabled. The S3-compatible endpoint spells the same states `Enabled` / `Suspended` in its XML, and reports `disabled` by omitting the element. enum: - disabled - enabled - suspended example: disabled deletion_protection: type: boolean description: >- When true, DeleteBucket schedules deletion instead of removing the bucket immediately. example: false deletion_recovery_days: type: integer description: >- Recovery window, in days, applied when a deletion is scheduled. 0 means the service default is used. example: 7 scheduled_deletion_at: type: string format: date-time readOnly: true description: >- Deadline a protected bucket is deleted at. Present only while a deletion is pending — POST /v1/buckets/{bucket}/restore before it passes to cancel. example: '2026-01-22T09:30:00Z' created_at: type: string format: date-time readOnly: true example: '2026-01-15T09:30:00Z' PaginationMeta: type: object properties: total: type: integer description: Total number of items example: 150 limit: type: integer description: Number of items per page example: 20 marker: type: string description: >- Opaque cursor for the next page. Pass it back as the `marker` query parameter; treat it as a token, not a value to parse. example: 550e8400-e29b-41d4-a716-446655440000 has_more: type: boolean description: Whether there are more items example: true Error: type: object required: - error properties: error: type: object required: - code - message - request_id properties: code: type: string description: Error code identifying the type of error example: INVALID_INPUT message: type: string description: Human-readable error message example: Invalid request parameters request_id: type: string format: uuid description: Request ID for debugging example: 550e8400-e29b-41d4-a716-446655440000 responses: Unauthorized: description: Authentication required or token invalid content: application/json: schema: $ref: '#/components/schemas/Error' example: error: code: UNAUTHORIZED message: Authentication required request_id: 550e8400-e29b-41d4-a716-446655440000 securitySchemes: SignatureAuth: type: apiKey in: header name: Authorization description: > Request signing with an access key issued to a service account. An HMAC-SHA256 over a canonical form of the request, close to AWS SigV4. The `basaltic` CLI signs for you. Send `Authorization`, `X-Date` (UTC, `YYYYMMDDTHHMMSSZ`) and `X-Nonce` (random per request); add `X-Content-Sha256` to bind a body, and `X-Amz-Security-Token` when using temporary credentials. ``` Authorization: BASALTIC-HMAC-SHA256 Credential=///basaltic/basaltic_request, SignedHeaders=host;x-date;x-nonce, Signature= ``` `` is the region code you are calling, or `global` for the global services. A signature is valid for 5 minutes from `X-Date`, and mutating requests are replay-guarded on the nonce. **Full signing procedure, including a working implementation:** https://docs.basaltic.sh/authentication ## Rate limits There is no global request budget. A limit applies only where an operation documents a `429`, and that operation says what it counts. Those responses carry `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset` and, on a `429`, `Retry-After` — read them rather than hard-coding a number. Retrying before `Retry-After` is refused and extends the window. Everything else is bounded by quota, not by request rate. ````