---
type: api
title: List all watchlists
description: Returns a list of all entity analytics watchlists.
url: https://www.elastic.co/elastic/docs-builder/docs/4493/api/doc/kibana/v0/operation/operation-listwatchlists
resource: https://www.elastic.co/elastic/docs-builder/docs/4493/api/doc/kibana/v0/operation/operation-listwatchlists
products:
  - Kibana
---

# List all watchlists

Availability: Preview

- Server: `https://{kibana_url}`

## Paths

- `GET` `/api/entity_analytics/watchlists/list`

## Description

Returns a list of all entity analytics watchlists.

## Authentication

- Api key: `Authorization: <value>`
  These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: `Authorization: ApiKey base64AccessApiKey`
- Basic: `Authorization: Basic <credentials>`

## Response

List of watchlists

`application/json`

Type: `object[]`

An array; each item has these fields:

- `createdAt` (string · format: date-time)
  Timestamp indicating when the watchlist was created
- `description` (string)
  Description of the watchlist
- `entityCount` (number)
  Number of entities in the watchlist
- `entitySourceIds` (string[])
  List of entity source IDs associated with the watchlist
- `hasManualEntities` (boolean)
  Indicates whether the watchlist contains manually assigned entities
- `id` (string)
  The unique ID of the watchlist
- `managed` (boolean)
  Indicates if the watchlist is managed by the system
- `name` (string)
  The name of the watchlist
- `riskModifier` (number)
  Risk score modifier associated with the watchlist
- `updatedAt` (string · format: date-time)
  Timestamp indicating when the watchlist was last updated
## Code examples

#### Console

```console
GET kbn:/api/entity_analytics/watchlists/list
```

#### curl

```curl
curl -X GET "${KIBANA_URL}/api/entity_analytics/watchlists/list" \
  -H "Authorization: ApiKey ${API_KEY}"
```

## Response examples

#### List of watchlists

```json
[
  {
    "createdAt": "2026-01-28T12:00:00.000Z",
    "description": "High risk vendor watchlist",
    "id": "watchlist-123",
    "managed": false,
    "name": "High Risk Vendors",
    "riskModifier": 1.5,
    "updatedAt": "2026-02-18T12:00:00.000Z"
  },
  {
    "createdAt": "2026-01-10T09:30:00.000Z",
    "description": "Privileged user monitoring watchlist",
    "id": "watchlist-456",
    "managed": true,
    "name": "Privileged Accounts",
    "riskModifier": 2,
    "updatedAt": "2026-02-01T15:45:00.000Z"
  }
]
```