List public repositories

GET/api/repos

listPublicRepos

Returns public repositories visible to anonymous callers. `?sort=updated` (the default) is most-recently-updated first; `?sort=trending` is most stars gained in the last seven days first, tie-broken by `updated`, and fills `star_count` on every row. Page size is bounded — pass `?limit=N` (1–200, default 50).

Authentication is not described for this operation in the spec — that does not mean it is public. Check tokens and scopes.

curl

curl -X GET 'https://neosource.dev/api/repos'

fetch

fetch("https://neosource.dev/api/repos", {
  method: "GET",
});

Query parameters

limit: Maximum number of repositories to return. Clamped to [1, 200]; defaults to 50 when omitted.
integerint64
default50
sort: Ordering. `updated` (the default when omitted) is most recently updated first; `trending` is most stars gained in the last seven days first, with `updated` as the tiebreak, and fills `star_count` on every row.
ExploreSort
string
The ordering `GET /api/repos` (explore) serves. A closed set on the wire, so the `OpenAPI` document carries the real enum and a typo in `?sort=` is a 400 rather than a silent fall-through to the default. `Default` is [`Updated`](Self::Updated): an omitted `sort` is exactly the pre-`sort` explore order, so nothing that never sends the parameter changes behaviour.
"updated""trending"

Responses

200Repository list

application/json

RepoListResponse

object

reposrequired

array

items

RepoResponse

object

activity_at: integer | nullint64
When the repo last changed, as the owner list sorts and shows it (ms since the epoch): the later of `updated_at` (a settings write) and its last push. Present only on `GET /api/owners/{handle}/repos` rows, whose statement reads it; absent (not `null`) everywhere else. Set only through [`RepoResponse::with_activity_at`].
allowed_merge_methodsrequired: array
Which merge methods this repo permits at all. Never empty, and always in a canonical order (`merge` before `squash`) — it is a set, so the server normalises the order on write rather than echoing the order it was sent.
itemsMergeMethod
created_atrequired: integerint64
created_byrequired: string
default_branchrequired: string
default_merge_methodrequired: MergeMethod
delete_branch_on_mergerequired: boolean
Whether merging a PR against this repo also deletes its source branch. `true` on a repo nobody has configured — see the settings route for why this one defaults on where the merge-method fields default to today's behaviour.
descriptionrequired: string
mirror_source_url: string | null
mirror_status: one of
RepoMirrorStatus
null
ownerrequired: string
parent: one of
RepoParentInfo
null
primary_language: string | null
The default branch's primary language: the language with the most code lines in the stored breakdown (ADR 0105, ADR 0187). Absent until a fill under the current classification policy has run, and for a repo with no code. An open vocabulary (tokei's names), like `LanguageStat::name`.
repo_idrequired: string
slugrequired: string
star_count: integer | nullint64
All-time star count. Present on exactly four routes — `GET /api/user/stars`, `GET /api/users/{handle}/stars`, `GET /api/repos?sort=trending` and `GET /api/owners/{handle}/repos` — whose store reads carry the count in the same statement. Absent (not `null`) everywhere else, including the default `GET /api/repos`: the repo detail's `stats.star_count` is the per-repo source. Set only through [`RepoResponse::with_star_count`].
statusrequired: RepoStatusOutput
updated_atrequired: integerint64
versionrequired: integerint32
visibilityrequired: RepoVisibilityInput
workspace_idrequired: string

Standard errors

Bodies documented once for the whole API — see standard errors.

400Bad Request — one of: invalid_input
429Rate limited — retry after the interval in the `Retry-After` header
500Internal server error
503Service temporarily unavailable / at capacity — retry after the `Retry-After` header
504Gateway timeout — the request exceeded the server's handling budget

Schemas

Referenced above. Listed here rather than expanded inline, so the same definition is not repeated at every level.

`MergeMethod`

string

How a pull request's commits land on its target branch. A repo carries two settings over this enum (`migrations/20260820120000_repo_merge_methods.sql`): the set it *permits* (`RepoRecord::allowed_merge_methods`, never empty) and the one the merge path reaches for when the request names none (`RepoRecord::default_merge_method`, always a member of that set — enforced by the settings route, which is the only place both columns are visible at once). `Default` is [`MergeMethod::Merge`] to match the column default, which is itself the pre-existing behaviour of every repo: before this setting existed, a merge always minted a two-parent commit. `Rebase` is deliberately absent rather than merely unimplemented — it replays N commits, can conflict per commit, and rewrites the SHAs the stacked-PR re-parent invariant leans on (`plans/archive/pr-merge-methods-2026-08.md` §"Not doing"). Adding it later is one `ALTER TYPE merge_method ADD VALUE` plus an arm here, which is why the stored shape is an enum array and not a pair of booleans.

"merge""squash"

`RepoMirrorStatus`

object

[`RepoResponse::mirror_status`]: how current a `_mirror` repository is.

last_synced_at: integer | nullint64
When the daily refresh last synced from the upstream (ms since the epoch); absent before the first sync.
latest_ci: one of
CommitStatusState
string
State of a single commit status, GitHub-shaped. `Error` is distinct from `Failure` on individual statuses (infrastructure/tooling breakage vs. a real red result) but the combined rollup folds both into `Failure`.
"pending""success""failure""error"
null

`RepoParentInfo`

object

Summary of a fork's parent repository.

repo_idrequired: string

`RepoStatusOutput`

string

Repo lifecycle state surfaced by the API. Mirrors `RepoStatus`. See ADR 0012 §2.

"creating""ready""importing""import_failed"

`RepoVisibilityInput`

string

"public""internal""private"