# Get an application

`GET /v1/applications/{application_id}` · permission `applications:read`

Returns one application. An application of another environment, or one that does not exist, returns `404`. The `ETag` response header is the version to send as `If-Match` when updating or deleting.

## Request

| Parameter | In | Description |
|---|---|---|
| `application_id` | path | Application id (`app_…`). |

## Response

`200 OK` with the application (see the field reference on the create page) and an `ETag` header. `allowed_first_factors` is returned in catalog order; an empty list means the application does not restrict first factors. `allowed_response_modes` is never empty and is returned in the order `query`, `form_post`.

## Errors

| HTTP | `code` | When |
|---|---|---|
| 401 | `unauthenticated` | The key is missing, invalid or revoked. |
| 403 | `insufficient_permissions` | The key lacks the required permission. |
| 404 | `not_found` | The application does not exist in this environment. |

## Example

```bash
curl https://api.eu.keenauth.com/v1/applications/app_6f8d0cjgbmf0gtn2rg6pscp3cg \
  -H "Authorization: Bearer $KEENAUTH_SECRET_KEY"
```