POST Move an entry in your personal list order
/api/v1/workspaces/{id}/list-orders/{list_group}/moves
Personal list order for the signed-in user in this workspace. Owner, editor and viewer can change their own order. Browser sessions only; changes need CSRF and an Idempotency-Key. Manual sorting keeps other entries in their relative order; new entries append and deleted or reassigned entries lose their position.
On this page
Access and permissions
Personal list order for the signed-in user in this workspace. Owner, editor and viewer can change their own order. Browser sessions only; changes need CSRF and an Idempotency-Key. Manual sorting keeps other entries in their relative order; new entries append and deleted or reassigned entries lose their position.
Browser session: __Host-mb_session cookie.
When using a browser session for a mutation, send the current CSRF token in X-CSRF-Token with the same-site cookie. OAuth consent uses its documented form field.
Parameters and headers
| Field | Location | Type and limits | Required | Meaning |
|---|---|---|---|---|
| id | Path | string; {"format":"uuid"} | Yes | The concrete workspace, member or invitation identifier. Foreign and unshared workspace identifiers grant no access. |
| list_group | Path | string; {"enum":["monitors","servers"]} | Yes | List to reorder: monitors or servers. |
| Idempotency-Key | Header | string; {"minLength":16,"maxLength":128} | Yes | Persist one identifier before the request and reuse it only for the same normalized payload and resource. Reusing it with different content returns 409. |
Request body
| Field | Type and limits | Required | Meaning |
|---|---|---|---|
| $ | object | object | Yes | — |
| $.expected_revision | integer; {"minimum":0} | Yes | Current order revision. Supply it as expected_revision when moving or resetting; another change returns 409. |
| $.device_id | string; {"format":"uuid"} | Yes | — |
| $.target_device_id | string; {"format":"uuid"} | No | — |
| $.placement | string; {"enum":["before","after","first","last"]} | Yes | Move before or after target_device_id, or to the first or last position of the entire list. Only the moved entry changes its position. |
| $ (oneOf 1) | object | No | — |
| $ (oneOf 1).placement | JSON; {"enum":["before","after"]} | No | — |
| $ (oneOf 1).target_device_id | string; {"format":"uuid"} | Yes | — |
| $ (oneOf 2) | object | No | — |
| $ (oneOf 2).placement | JSON; {"enum":["first","last"]} | No | — |
Responses
application/json
| Field | Type and limits | Required | Meaning |
|---|---|---|---|
| $ | object; {"additionalProperties":false} | Yes | — |
| $.revision | integer; {"minimum":0} | Yes | Current order revision. Supply it as expected_revision when moving or resetting; another change returns 409. |
| $.has_custom_order | boolean | Yes | — |
| Stable error codes |
|---|
| unauthorized |
application/problem+json
| Field | Type and limits | Required | Meaning |
|---|---|---|---|
| $ | Problem | Yes | — |
| $.code | string | Yes | Stable machine-readable error code |
| $.detail | string | Yes | Short localized explanation without internal error details |
| $.instance | string | Yes | Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource |
| $.message | string | Yes | Temporarily identical to detail for existing clients |
| $.message_key | string | Yes | Stable translation key for changing the displayed language without another request |
| $.message_params | object; {"additionalProperties":true} | Yes | Named, safely rendered message parameters; never arbitrary HTML |
| $.request_id | string; {"pattern":"^[0-9a-f]{32}$"} | Yes | Server-generated diagnostic identifier. It contains no login token or credential. |
| $.status | integer; {"maximum":599,"minimum":400} | Yes | — |
| $.title | string | Yes | Localized HTTP status title |
| $.type | string; {"const":"about:blank"} | Yes | — |
| Stable error codes |
|---|
| browser_session_required |
| forbidden |
| csrf |
| invalid_origin |
| workspace_scope |
application/problem+json
| Field | Type and limits | Required | Meaning |
|---|---|---|---|
| $ | Problem | Yes | — |
| $.code | string | Yes | Stable machine-readable error code |
| $.detail | string | Yes | Short localized explanation without internal error details |
| $.instance | string | Yes | Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource |
| $.message | string | Yes | Temporarily identical to detail for existing clients |
| $.message_key | string | Yes | Stable translation key for changing the displayed language without another request |
| $.message_params | object; {"additionalProperties":true} | Yes | Named, safely rendered message parameters; never arbitrary HTML |
| $.request_id | string; {"pattern":"^[0-9a-f]{32}$"} | Yes | Server-generated diagnostic identifier. It contains no login token or credential. |
| $.status | integer; {"maximum":599,"minimum":400} | Yes | — |
| $.title | string | Yes | Localized HTTP status title |
| $.type | string; {"const":"about:blank"} | Yes | — |
| Stable error codes |
|---|
| not_found |
application/problem+json
| Field | Type and limits | Required | Meaning |
|---|---|---|---|
| $ | Problem | Yes | — |
| $.code | string | Yes | Stable machine-readable error code |
| $.detail | string | Yes | Short localized explanation without internal error details |
| $.instance | string | Yes | Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource |
| $.message | string | Yes | Temporarily identical to detail for existing clients |
| $.message_key | string | Yes | Stable translation key for changing the displayed language without another request |
| $.message_params | object; {"additionalProperties":true} | Yes | Named, safely rendered message parameters; never arbitrary HTML |
| $.request_id | string; {"pattern":"^[0-9a-f]{32}$"} | Yes | Server-generated diagnostic identifier. It contains no login token or credential. |
| $.status | integer; {"maximum":599,"minimum":400} | Yes | — |
| $.title | string | Yes | Localized HTTP status title |
| $.type | string; {"const":"about:blank"} | Yes | — |
| Stable error codes |
|---|
| revision_conflict |
| idempotency_conflict |
application/problem+json
| Field | Type and limits | Required | Meaning |
|---|---|---|---|
| $ | Problem | Yes | — |
| $.code | string | Yes | Stable machine-readable error code |
| $.detail | string | Yes | Short localized explanation without internal error details |
| $.instance | string | Yes | Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource |
| $.message | string | Yes | Temporarily identical to detail for existing clients |
| $.message_key | string | Yes | Stable translation key for changing the displayed language without another request |
| $.message_params | object; {"additionalProperties":true} | Yes | Named, safely rendered message parameters; never arbitrary HTML |
| $.request_id | string; {"pattern":"^[0-9a-f]{32}$"} | Yes | Server-generated diagnostic identifier. It contains no login token or credential. |
| $.status | integer; {"maximum":599,"minimum":400} | Yes | — |
| $.title | string | Yes | Localized HTTP status title |
| $.type | string; {"const":"about:blank"} | Yes | — |
| Stable error codes |
|---|
| invalid_list_order |
| invalid_idempotency_key |
| invalid_reference |
application/problem+json
| Field | Type and limits | Required | Meaning |
|---|---|---|---|
| $ | Problem | Yes | — |
| $.code | string | Yes | Stable machine-readable error code |
| $.detail | string | Yes | Short localized explanation without internal error details |
| $.instance | string | Yes | Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource |
| $.message | string | Yes | Temporarily identical to detail for existing clients |
| $.message_key | string | Yes | Stable translation key for changing the displayed language without another request |
| $.message_params | object; {"additionalProperties":true} | Yes | Named, safely rendered message parameters; never arbitrary HTML |
| $.request_id | string; {"pattern":"^[0-9a-f]{32}$"} | Yes | Server-generated diagnostic identifier. It contains no login token or credential. |
| $.status | integer; {"maximum":599,"minimum":400} | Yes | — |
| $.title | string | Yes | Localized HTTP status title |
| $.type | string; {"const":"about:blank"} | Yes | — |
| Stable error codes |
|---|
| unavailable |
application/problem+json
| Field | Type and limits | Required | Meaning |
|---|---|---|---|
| $ | Problem | Yes | — |
| $.code | string | Yes | Stable machine-readable error code |
| $.detail | string | Yes | Short localized explanation without internal error details |
| $.instance | string | Yes | Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource |
| $.message | string | Yes | Temporarily identical to detail for existing clients |
| $.message_key | string | Yes | Stable translation key for changing the displayed language without another request |
| $.message_params | object; {"additionalProperties":true} | Yes | Named, safely rendered message parameters; never arbitrary HTML |
| $.request_id | string; {"pattern":"^[0-9a-f]{32}$"} | Yes | Server-generated diagnostic identifier. It contains no login token or credential. |
| $.status | integer; {"maximum":599,"minimum":400} | Yes | — |
| $.title | string | Yes | Localized HTTP status title |
| $.type | string; {"const":"about:blank"} | Yes | — |
Retries and asynchronous work
This change does not have a general retry guarantee. If the response is unclear, read the affected resource before trying again. Follow Retry-After waiting times and request new sign-in or action codes when they expire.
Request examples
Replace demo IDs, timestamps and placeholders with your own values. For a retry, keep the same IDs, time and content. These examples do not run requests on this page.
Keep login links, codes, cookies and keys private. Do not print them in logs or share them in support requests.
curl --request POST --header "Cookie: $MB_COOKIE" --header "X-CSRF-Token: $MB_CSRF" --header "Idempotency-Key: $MB_OPERATION_ID" --header "Content-Type: application/json" --data '{"expected_revision":0,"device_id":"00000000-0000-4000-8000-000000000002","placement":"first"}' "https://metribeacon.com/api/v1/workspaces/00000000-0000-4000-8000-000000000001/list-orders/monitors/moves"
import json, os, urllib.request
headers = {"Cookie": os.environ["MB_COOKIE"], "X-CSRF-Token": os.environ["MB_CSRF"], "Content-Type": "application/json"}
headers["Idempotency-Key"] = os.environ["MB_OPERATION_ID"]
request = urllib.request.Request("https://metribeacon.com/api/v1/workspaces/00000000-0000-4000-8000-000000000001/list-orders/monitors/moves", method="POST", headers=headers, data='{"expected_revision":0,"device_id":"00000000-0000-4000-8000-000000000002","placement":"first"}'.encode())
with urllib.request.urlopen(request, timeout=30) as response:
print(json.load(response))
const response = await fetch("https://metribeacon.com/api/v1/workspaces/00000000-0000-4000-8000-000000000001/list-orders/monitors/moves", {method: "POST", credentials: "same-origin", headers: {"Content-Type":"application/json", "X-CSRF-Token":csrfToken, "Idempotency-Key":operationId}, body:JSON.stringify({"expected_revision":0,"device_id":"00000000-0000-4000-8000-000000000002","placement":"first"})});
console.log(response.status, await response.json());
package main
import ("fmt"; "net/http"; "os"; "strings"; "time")
func main() {
client := &http.Client{Timeout:30*time.Second}
request, err := http.NewRequest("POST","https://metribeacon.com/api/v1/workspaces/00000000-0000-4000-8000-000000000001/list-orders/monitors/moves",strings.NewReader("{\"expected_revision\":0,\"device_id\":\"00000000-0000-4000-8000-000000000002\",\"placement\":\"first\"}"))
if err != nil { panic(err) }
request.Header.Set("Cookie",os.Getenv("MB_COOKIE"))
request.Header.Set("X-CSRF-Token",os.Getenv("MB_CSRF"))
request.Header.Set("Content-Type","application/json")
request.Header.Set("Idempotency-Key",os.Getenv("MB_OPERATION_ID"))
response,err := client.Do(request)
if err != nil {panic(err)}
defer response.Body.Close()
fmt.Println(response.StatusCode)
}
Related guides
- HTTP API, OAuth and MCP
Find the user API endpoints, their permissions, fields, examples and response formats.
- GET Read your personal list order
Personal list order for the signed-in user in this workspace. Owner, editor and viewer can change their own order. Browser sessions only; changes need CSRF and an Idempotency-Key. Manual sorting keeps other entries in their relative order; new entries append and deleted or reassigned entries lose their position.
- DELETE Reset your personal list order
Personal list order for the signed-in user in this workspace. Owner, editor and viewer can change their own order. Browser sessions only; changes need CSRF and an Idempotency-Key. Manual sorting keeps other entries in their relative order; new entries append and deleted or reassigned entries lose their position.
- GET Search and page through devices in your workspace
Search and page through devices in your workspace.