Widget Catalog
GET/api/v2/dashboard/widgets
The dashboard widget catalog for the signed-in user — powers the "Add a widget" gallery.
This endpoint currently requires session authentication; Personal Access Token scope support is in progress.
Authentication: Requires Bearer token.
Response fields
widgets— the widgets this user may add. A widget is left out when the tenant hides financial data (Settings → Dashboard), when the user lacks the permission for the widget's data (e.g.sales_orders.index), or when the widget shows money and the user lacksfinancials.index.categories,allowed_widths— gallery groupings and the widths a widget may be resized to.hidden_financial_widgets—{count, reason}: how many money widgets (revenue, inventory value, payables…) were left out because the user lacks the Financials → List permission, and the sentence the gallery shows.countis 0 andreasonis null when nothing was withheld.
POs arriving this week stays visible without Financials: it hides only its inbound value per user.
Request
Responses
- 200
- 401
- 403
- 429
OK
Response Headers
Unauthenticated — the bearer token is missing, revoked, expired, or malformed. Never retry automatically; fix the credential. See the Errors guide.
Forbidden — the token lacks a required scope, the endpoint is not available to API tokens, or the user behind the token lacks the permission. A human must adjust the token scopes or user permissions; do not retry.
Rate limited — platform limit is 1,000 requests/min; individual tokens may carry lower limits. Honor the Retry-After header before retrying. See the Rate Limits guide.