# List trust URL: https://docs.hanzo.ai/docs/openapi/trust/get-trust > Reads YOUR organization's whole trust centre, including the addresses of your own gated documents. `GET /v1/trust` > [Trust →](https://docs.hanzo.ai/docs/openapi/trust) · [All API references →](https://docs.hanzo.ai/docs/openapi) · [Get started →](https://docs.hanzo.ai/docs/guides) | | | | ------------- | -------------------------------------- | | **Address** | `https://api.hanzo.ai/v1/trust` | | **Method** | `GET` | | **Operation** | `get_trust` | | **Auth** | `Authorization: Bearer $HANZO_API_KEY` | Reads YOUR organization's whole trust centre, including the addresses of your own gated documents. Same shape as the published endpoint; the difference is that this one is resolved from your validated bearer and shows you your own artifacts. ## Request `GET /v1/trust` takes no parameters and no body — the credential is the whole request. ## Response | Status | Body | Meaning | | --------- | --------------- | ------- | | `200` | trust.centre | ok | | `default` | problem-details | refused | `200` body — 49 fields. | Field | In | Type | Always | Description | | ------------------------ | ---- | --------------------- | ------ | --------------------------------------------------------------------------------------------------------------------------------------------------------- | | `controls` | body | any\[] | — | Controls is the control inventory, each entry naming what it asserts, the mechanism, where it is enforced, how it is verified and the clauses it maps to. | | `coverage` | body | trust.coverRow\[] | — | Coverage is the per-framework counts, computed from Controls against each framework's whole published clause list. | | `coverage[].automated` | body | integer (int64) | — | Automated is how many clauses have an automated control behind them that something can fail on behalf of. | | `coverage[].edition` | body | string | — | Edition is which edition the clause list is taken from. | | `coverage[].framework` | body | string | — | Framework is the framework id — "soc2", "iso27001", "nist80053". | | `coverage[].name` | body | string | — | Name is the published standard's name. | | `coverage[].none` | body | integer (int64) | — | None is how many have nothing behind them. | | `coverage[].note` | body | string | — | Note is what the clause list itself is scoped to, when the framework's catalog says something a count alone would misrepresent. | | `coverage[].partial` | body | integer (int64) | — | Partial is how many are answered in part. | | `coverage[].publisher` | body | string | — | Publisher is who publishes it — AICPA, ISO/IEC, NIST. | | `coverage[].statement` | body | string | — | Statement is the counts as one sentence, carrying the unit. | | `coverage[].total` | body | integer (int64) | — | Total is the framework's WHOLE published clause list — the denominator. | | `coverage[].unit` | body | string | — | Unit is what ONE clause is — "criterion", "control", "family". | | `coverage[].units` | body | string | — | Units is the plural of Unit, for rendering a sentence. | | `documents` | body | trust.docRow\[] | — | Documents are the artifacts, each saying whether this reader may read it. | | `documents[].attested` | body | boolean | — | Attested reports whether somebody OUTSIDE this organization put their name to it. | | `documents[].href` | body | string | — | Href is where to read it, present only when this reader may. | | `documents[].id` | body | string | — | ID is the document's id within this organization's centre. | | `documents[].kind` | body | string | — | Kind is the artifact type — soc2, iso, pentest, letter, caiq, sig, vsa, questionnaire, policy or other. | | `documents[].label` | body | string | — | Label is the artifact type in words, for rendering. | | `documents[].note` | body | string | — | Note is anything the organization says about this artifact. | | `documents[].released` | body | boolean | — | Released reports whether THIS reader may read it. | | `documents[].tier` | body | string | — | Tier is "public" or "gated". | | `documents[].title` | body | string | — | Title is what the document is called. | | `documents[].updated` | body | integer (int64) | — | Updated is when the record last changed, unix milliseconds. | | `faq` | body | any\[] | — | Faq is the knowledge base — the questions a reviewer asks, answered. | | `frameworks` | body | trust.frameworkRow\[] | — | Frameworks are the clause universes the coverage is computed against. | | `frameworks[].edition` | body | string | — | Edition is which edition this clause list is taken from. | | `frameworks[].framework` | body | string | — | Framework is the framework id. | | `frameworks[].name` | body | string | — | Name is the published standard's name. | | `frameworks[].publisher` | body | string | — | Publisher is who publishes it. | | `frameworks[].total` | body | integer (int64) | — | Total is how many clauses the standard publishes. | | `frameworks[].unit` | body | string | — | Unit is what one clause is; Units is its plural. | | `frameworks[].units` | body | string | — | Units is Unit's plural, carried so a caller renders "12 controls" without having to pluralise a word it does not know. | | `generated` | body | integer (int64) | — | Generated is when this answer was computed, unix milliseconds. | | `inventory` | body | trust.trustTally | — | | | `inventory.absent` | body | integer (int64) | — | Absent is how many the organization does not have. | | `inventory.automated` | body | integer (int64) | — | Automated is how many run with nobody in the loop. | | `inventory.partial` | body | integer (int64) | — | Partial is how many run but do not cover their whole claim. | | `inventory.statement` | body | string | — | Statement is the counts as one sentence, safe to quote. | | `inventory.total` | body | integer (int64) | — | Total is how many controls this organization publishes. | | `inventory.unverified` | body | integer (int64) | — | Unverified is how many rest on somebody having READ the source rather than on a test or an audit row. | | `org` | body | string | — | Org is whose centre this is. | | `policies` | body | any\[] | — | Policies are the published policies. | | `profile` | body | any | — | Profile is the organization's own description of itself. | | `risk` | body | any | — | Risk is the risk profile — label and value pairs describing what this organization handles and how. | | `subprocessors` | body | any\[] | — | Subprocessors are the third parties this organization sends data to. | | `updates` | body | any\[] | — | Updates is the changelog, newest as the organization ordered it. | | `version` | body | string | — | Version is the embedded inventory's version. | Failure carries the platform error shape — see [Errors](https://docs.hanzo.ai/docs/errors). ## Examples **CLI** ```bash hanzo trust list ``` **SDK** **.ts** ```ts import { Configuration, TrustApi } from 'hanzoai'; const api = new TrustApi(new Configuration({ accessToken: process.env.HANZO_API_KEY })); const { data } = await api.getTrust(); ``` **.py** ```python from hanzoai.cloud import ApiClient, Configuration from hanzoai.cloud.api import TrustApi client = ApiClient(Configuration(access_token=os.environ["HANZO_API_KEY"])) result = TrustApi(client).get_trust() ``` **.go** ```go cfg := hanzoai.NewConfiguration() cfg.AddDefaultHeader("Authorization", "Bearer "+os.Getenv("HANZO_API_KEY")) client := hanzoai.NewAPIClient(cfg) resp, _, err := client.TrustAPI.GetTrust(context.Background()).Execute() if err != nil { return err } ``` **.rs** ```rust use hanzo_client::apis::{configuration::Configuration, trust_api}; let mut cfg = Configuration::new(); cfg.bearer_access_token = std::env::var("HANZO_API_KEY").ok(); let result = trust_api::get_trust(&cfg, Default::default()).await?; ``` **.java** ```java import ai.hanzo.cloud.ApiClient; import ai.hanzo.cloud.api.TrustApi; ApiClient client = new ApiClient(); client.setBearerToken(System.getenv("HANZO_API_KEY")); var result = new TrustApi(client).getTrust(); ``` **HTTP** ```bash curl https://api.hanzo.ai/v1/trust \ -H "Authorization: Bearer $HANZO_API_KEY" ``` **MCP** MCP reaches **trust** through the `trust` tool, which names its 17 operations with its own verbs — this one among them, under a name only MCP declares. `describe` explains any of them: ```bash curl -X POST https://api.hanzo.ai/v1/mcp \ -H "Content-Type: application/json" \ -d '{ "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "describe", "arguments": { "op": "list_trusts" } } }' ``` --- [Trust API](https://docs.hanzo.ai/docs/openapi/trust) · [All Hanzo APIs](https://docs.hanzo.ai/docs/openapi) · [Interactive reference](https://docs.hanzo.ai/docs/openapi/reference)