# List posts > Markdown version of https://docs.postlake.dev/api/get-posts . The canonical page for humans. > PostLake is the social media API for AI agents: https://postlake.dev/llms.txt `GET /v1/posts` List posts (most recent first) ## Request Authenticate with a bearer API key. Agents calling over MCP authorise with OAuth instead and never handle the key. ```bash curl -X GET https://api.postlake.dev/v1/posts \ -H "Authorization: Bearer $POSTLAKE_API_KEY" ``` ### Parameters | Field | Type | Required | What it is | | --- | --- | --- | --- | | `state` | string | No | Query string. | | `account` | string | No | Query string. Filter to posts that targeted this connected account id (acc_…). | | `profile` | string | No | Query string. Filter to posts that targeted a channel in this profile (username). | | `limit` | integer | No | Query string. | | `cursor` | string | No | Query string. | ## Response Success (`200`). | Field | Type | Required | What it is | | --- | --- | --- | --- | | `posts` | array | Yes | | | `nextCursor` | string or null | Yes | | ### Example ```json { "posts": [ "…" ], "nextCursor": "…" } ``` ## Calling this from an agent Agents do not call REST. They call tools. Over the hosted MCP server this operation is `list_posts`, and the agent authorises with OAuth so your API key is never pasted into a chat or seen by the model. You control what any one agent may do: which brands it may act for, which networks it may reach, how much a day, and whether it may spend credits bought up front. ## Errors Every failure uses one shape: a stable `type`, a granular `code`, the field at fault in `param`, and a plain-language `fix`. See https://docs.postlake.dev/errors.md . Retries are safe: send the same `Idempotency-Key` and a call that already succeeded returns its original result rather than repeating it. ## Common questions **Can an AI agent do this without the REST API?** Yes. Over MCP the same job is the list_posts tool. The agent authorises with OAuth, so no API key is pasted into a chat or seen by the model, and the answer comes back in the same normalised shape. **How often can I call this?** Reads are rate limited per account and every response carries X-RateLimit-Remaining and X-RateLimit-Reset. On a 429 the Retry-After header tells you how long to wait. **What happens when it fails?** You get one error shape: a stable type, a granular code you can branch on, the offending field in param, and a fix written so an agent can correct itself rather than stop. Full list on Errors and retries. ## Related - [Cancel scheduled post](https://docs.postlake.dev/api/delete-posts-by-id.md) `DELETE /v1/posts/{id}` - [Get post](https://docs.postlake.dev/api/get-posts-by-id.md) `GET /v1/posts/{id}` - [Edit scheduled post](https://docs.postlake.dev/api/patch-posts-by-id.md) `PATCH /v1/posts/{id}` - [Publish or schedule post](https://docs.postlake.dev/api/post-posts.md) `POST /v1/posts`