# `GET /v1/lists` — Read your block and allow list entries

Newest first. Contacts, devices and vendor_data are stored only as a keyed fingerprint, so an entry shows a masked hint, never the value. Needs the lists:read scope. At most 300 list calls per minute per organization.

Parameters:
- `kind` (query, string)
- `type` (query, string)
- `limit` (query, integer)
- `offset` (query, integer)

Responses:
- 200: One page of entries.
- 400: Invalid filter.
- 401: Missing, unknown or expired API key.
- 403: The key lacks the scope this call needs, or its IP allowlist refuses the caller.
- 429: More than 300 list calls in a minute.
