---
title: "List a host's restriction windows for a service"
description: "Returns the restriction windows narrowing this host's schedule for this service (the third schedule layer)."
api_method: GET
api_path: "/v1/services/{serviceId}/hosts/{memberId}/restrictions"
canonical_url: https://wiblo.app/docs/developers/api/schedules/list-host-restrictions
last_updated: 2026-07-28T18:08:25+02:00
md_url: https://wiblo.app/docs/developers/api/schedules/list-host-restrictions.md
---

# List a host's restriction windows for a service

`GET /v1/services/{serviceId}/hosts/{memberId}/restrictions`

Returns the restriction windows narrowing this host's schedule for this service (the third schedule layer). Available to any active member. Per-user rate-limited at 60/60s.

## Path parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `serviceId` | `string` | Yes |  |
| `memberId` | `string` | Yes |  |

## Headers

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `X-Wiblo-Workspace` | `string` | Yes | Workspace id the call is scoped to. The actor must hold an active membership in it; a foreign or unknown id collapses onto 404 WORKSPACE_NOT_FOUND. |

## Request

**curl**

```bash
curl https://api.wiblo.app/v1/services/3f8a2b9c-51d4-4e0b-9c6a-7d2e8f1a4b5c/hosts/8b3e6d2a-4c7f-4e1b-9d5a-2f6c8e3b7a1d/restrictions \
  -H "Authorization: Bearer $WIBLO_TOKEN" \
  -H "X-Wiblo-Workspace: $WIBLO_WORKSPACE_ID"
```

**TypeScript**

```ts
import { createSdk, listHostRestrictions } from "@workspace/sdk"

const sdk = createSdk({ baseUrl: "https://api.wiblo.app" })

const { data, error } = await listHostRestrictions({
  client: sdk,
  path: { serviceId: "3f8a2b9c-51d4-4e0b-9c6a-7d2e8f1a4b5c", memberId: "8b3e6d2a-4c7f-4e1b-9d5a-2f6c8e3b7a1d" },
  headers: { "X-Wiblo-Workspace": "..." },
})
```

## Example response

```json
{
  "restrictions": [
    {
      "id": "e2a94c6d-8b3f-4d5a-a1c7-3f8e5b2d9c4a",
      "workspace_id": "9c1b7e24-6a3f-4d58-b2e9-0f4a8c6d1e37",
      "service_id": "3f8a2b9c-51d4-4e0b-9c6a-7d2e8f1a4b5c",
      "member_id": "8b3e6d2a-4c7f-4e1b-9d5a-2f6c8e3b7a1d",
      "days": [
        1,
        2,
        3
      ],
      "start_time": "10:00:00",
      "end_time": "13:00:00",
      "created_at": "2026-08-20T11:20:00.000Z",
      "updated_at": "2026-08-20T11:20:00.000Z"
    },
    {
      "id": "f7b25e8c-3d6a-4a9e-8b4f-6c1d9e3a7b5f",
      "workspace_id": "9c1b7e24-6a3f-4d58-b2e9-0f4a8c6d1e37",
      "service_id": "3f8a2b9c-51d4-4e0b-9c6a-7d2e8f1a4b5c",
      "member_id": "8b3e6d2a-4c7f-4e1b-9d5a-2f6c8e3b7a1d",
      "days": [
        4,
        5
      ],
      "start_time": "14:00:00",
      "end_time": "18:00:00",
      "created_at": "2026-08-20T11:20:00.000Z",
      "updated_at": "2026-08-20T11:20:00.000Z"
    }
  ]
}
```

## Responses

**`200`** — The restriction windows. Returns `HostRestrictionListResponse`.

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `restrictions` | `array<HostRestrictionResponse>` | Yes | The restriction windows narrowing this host's schedule for this service; `[]` when unrestricted. |

**`401`** — No valid session cookie or `wbl_*` bearer was present. Returns `ApiErrorEnvelope`.

**`404`** — The service collapsed (`SERVICE_NOT_FOUND`) or the member is not an assigned host (`HOST_NOT_FOUND`). Returns `ApiErrorEnvelope`.

**`422`** — Path param failed UUID validation (`INVALID_PARAMS`). Returns `ApiErrorEnvelope`.

**`429`** — Rate limit exceeded. The body's `error.code` is `RATE_LIMITED` and `error.details.retry_after` is the same number of seconds as the `Retry-After` header. Returns `ApiErrorEnvelope`.

### The HostRestrictionResponse object

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | `string` | Yes | Unique id of the restriction row. |
| `workspace_id` | `string` | Yes | Workspace the row belongs to. |
| `service_id` | `string` | Yes | Service the restriction applies to. |
| `member_id` | `string` | Yes | Host (workspace member) whose availability the window narrows. |
| `days` | `array<integer>` | Yes | Days of week (`0`–`6`, `0` = Sunday) the window applies to. |
| `start_time` | `string` | Yes | Window start as `HH:mm:ss` (requests send `HH:mm`). |
| `end_time` | `string` | Yes | Window end as `HH:mm:ss`. |
| `created_at` | `string` | Yes | Creation timestamp (RFC 3339). |
| `updated_at` | `string` | Yes | Last-update timestamp (RFC 3339). |