> ## Documentation Index > Fetch the complete documentation index at: https://conductorone-leet-slack-mcp-docs.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Search > Search resource servers across the tenant, filtered by application, audience substring, signing algorithm, or disabled state, or fetch a specific set by ref. Returns one page at a time. ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples post /api/v1/search/xaa/resource_servers openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/search/xaa/resource_servers: post: tags: - Cross-App Access summary: Search description: |- Search resource servers across the tenant, filtered by application, audience substring, signing algorithm, or disabled state, or fetch a specific set by ref. Returns one page at a time. operationId: c1.api.cross_app_access.v1.XAAResourceServerService.Search requestBody: content: application/json: schema: $ref: >- #/components/schemas/c1.api.cross_app_access.v1.XAAResourceServerServiceSearchRequest responses: '200': content: application/json: schema: $ref: >- #/components/schemas/c1.api.cross_app_access.v1.XAAResourceServerServiceSearchResponse description: >- XAAResourceServerServiceSearchResponse returns matching resource servers. x-codeSamples: - lang: go label: Search source: "package main\n\nimport(\n\t\"context\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/shared\"\n\tconductoronesdkgo \"github.com/conductorone/conductorone-sdk-go\"\n\t\"log\"\n)\n\nfunc main() {\n ctx := context.Background()\n\n s := conductoronesdkgo.New(\n conductoronesdkgo.WithSecurity(shared.Security{\n BearerAuth: \"\",\n Oauth: \"\",\n }),\n )\n\n res, err := s.XAAResourceServer.Search(ctx, nil)\n if err != nil {\n log.Fatal(err)\n }\n if res.XAAResourceServerServiceSearchResponse != nil {\n // handle response\n }\n}" components: schemas: c1.api.cross_app_access.v1.XAAResourceServerServiceSearchRequest: description: >- XAAResourceServerServiceSearchRequest searches resource servers with filters. properties: appIds: description: Optional filter by applications. Empty matches any application. items: type: string type: - array - 'null' disabled: description: Optional filter by disabled state. type: - boolean - 'null' pageSize: description: Page size (max 100). format: int32 type: integer pageToken: description: Page token for pagination. type: string query: description: >- Optional text query matched against display_name and normalized_audience. type: string refs: description: |- Optional: fetch a specific set of resource servers by ref (used by websocket notify to re-fetch individual rows). items: $ref: >- #/components/schemas/c1.api.cross_app_access.v1.XAAResourceServerRef type: - array - 'null' signingAlgorithmFilter: description: Optional filter by signing algorithm. UNSPECIFIED means no filter. items: enum: - XAA_SIGNING_ALGORITHM_UNSPECIFIED - XAA_SIGNING_ALGORITHM_EDDSA - XAA_SIGNING_ALGORITHM_RS256 - XAA_SIGNING_ALGORITHM_ES256 type: string x-speakeasy-unknown-values: allow type: - array - 'null' title: Xaa Resource Server Service Search Request type: object x-speakeasy-name-override: XAAResourceServerServiceSearchRequest c1.api.cross_app_access.v1.XAAResourceServerServiceSearchResponse: description: >- XAAResourceServerServiceSearchResponse returns matching resource servers. properties: list: description: Matching resource servers. items: $ref: '#/components/schemas/c1.api.cross_app_access.v1.XAAResourceServer' type: - array - 'null' nextPageToken: description: Token for the next page. type: string title: Xaa Resource Server Service Search Response type: object x-speakeasy-name-override: XAAResourceServerServiceSearchResponse c1.api.cross_app_access.v1.XAAResourceServerRef: description: >- XAAResourceServerRef is a lightweight reference to a resource server, used for websocket notifications and search filter refs. properties: appId: description: The appId field. type: string id: description: The id field. type: string title: Xaa Resource Server Ref type: object x-speakeasy-name-override: XAAResourceServerRef c1.api.cross_app_access.v1.XAAResourceServer: description: |- XAAResourceServer is a third-party authorization server registered as a permitted cross-app-access audience for one application. properties: appId: description: The application this resource server fronts. type: string createdAt: format: date-time type: - string - 'null' deletedAt: format: date-time type: - string - 'null' description: description: Description of the resource server. type: string disabled: description: >- When true, exchange requests for this resource server are rejected without removing the registration (a kill switch). type: boolean displayName: description: Display name for the resource server. type: string id: description: Unique identifier for this resource server. type: string maxGrantLifetime: format: duration type: - string - 'null' modifyClaimsHook: oneOf: - $ref: >- #/components/schemas/c1.api.cross_app_access.v1.XAAModifyClaimsHook - type: 'null' normalizedAudience: description: >- The resource authorization server's issuer identifier (RFC 8414). Becomes the audience of every grant minted for this server. Stored normalized: lowercase scheme and host, no trailing slash, https only. Immutable after creation. Must not equal your own tenant's issuer. type: string requireProofOfPossession: description: >- When true, mint proof-of-possession-bound grants for clients presenting a DPoP proof. type: boolean resourceUris: description: >- The resource identifiers this server governs (RFC 8707). An allowlist for the token-exchange resource parameter; empty rejects any request that carries a resource parameter. items: type: string type: - array - 'null' sectorId: description: |- Optional pairwise sector override. Empty means the resource server's audience is its own sector. Set to the well-known global sentinel sector to opt into a correlatable shared `sub`, or to a shared value to share one pairwise `sub` across a trust group of audiences. Immutable once set. type: string signingAlgorithm: description: >- JWS algorithm for grants minted for this server. UNSPECIFIED uses the tenant default. Minting fails if no active signing key exists for the resolved algorithm. enum: - XAA_SIGNING_ALGORITHM_UNSPECIFIED - XAA_SIGNING_ALGORITHM_EDDSA - XAA_SIGNING_ALGORITHM_RS256 - XAA_SIGNING_ALGORITHM_ES256 type: string x-speakeasy-unknown-values: allow updatedAt: format: date-time type: - string - 'null' title: Xaa Resource Server type: object x-speakeasy-name-override: XAAResourceServer c1.api.cross_app_access.v1.XAAModifyClaimsHook: description: >- XAAModifyClaimsHook registers a tenant Function invoked just before a grant is signed. The function may deny issuance or narrow the outgoing claims. It always runs blocking and fails closed: any error, timeout, or invalid result denies the grant. properties: commitId: description: |- Pin to a specific commit of the function. Empty uses the function's published commit, resolved when the resource server is saved. type: string disabled: description: When true, the hook is configured but not invoked. type: boolean functionId: description: The Function to invoke. type: string title: Xaa Modify Claims Hook type: object x-speakeasy-name-override: XAAModifyClaimsHook securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````