# List tools



Search and paginate the live catalog. Only executable tools appear by default; include unavailable entries explicitly to inspect their readiness.



`GET /v1/tools`



## Find a tool for the job



Search with query or category, then follow next\_offset to read more results. Open the matching tool before constructing an invocation.



## What to do next



Use include\_unavailable=true when diagnosing a missing tool; normal discovery lists only executable tools.



[Read the step-by-step guide →](https://www.security.run/docs/tools.html)



### Parameters



#### `query` · `query · string`



#### `category` · `query · string | null`



#### `include_unavailable` · `query · boolean`



#### `offset` · `query · integer`



#### `limit` · `query · integer`



#### `authorization` · `header · string | null` · required



### Responses



- `200` Successful Response

- `422` Validation Error

## Request

```bash
curl -X GET "$SECURITY_RUN_URL/v1/tools?query=yara&limit=20" \
  -H "Authorization: Bearer $SECURITY_RUN_API_KEY"
```

## Request

```python
import os, httpx

headers = {}
headers["Authorization"] = "Bearer " + os.environ["SECURITY_RUN_API_KEY"]
response = httpx.request('GET', os.environ["SECURITY_RUN_URL"].rstrip("/") + '/v1/tools?query=yara&limit=20',
    headers=headers)
response.raise_for_status()
print(response.text)
```

## Request

```javascript
const base = process.env.SECURITY_RUN_URL.replace(/\/$/, "");
const headers = {};
headers.Authorization = `Bearer ${process.env.SECURITY_RUN_API_KEY}`;
const response = await fetch(base + "/v1/tools?query=yara&limit=20", {
  method: "GET",
  headers
});
if (!response.ok) throw new Error(`HTTP ${response.status}`);
console.log(await response.text());
```