diff --git a/.agents/skills/add-block/SKILL.md b/.agents/skills/add-block/SKILL.md index 3f8c86f5fc7..2e62aba6b24 100644 --- a/.agents/skills/add-block/SKILL.md +++ b/.agents/skills/add-block/SKILL.md @@ -159,6 +159,40 @@ export const {ServiceName}Block: BlockConfig = { Optional companions: `credentialLabels` (override the picker's section/connect-row copy) and `allowServiceAccounts: true` (trigger-mode only — list service accounts, which triggers otherwise exclude; set only when the trigger's polling path can resolve a service-account token). The connect modal, provider families (Google JSON key, Atlassian token, token-paste, client-credential, Slack bot), and the preview gate are all resolved from `serviceAccountProviderId` — you don't wire them per block. +### Credential-only successor (replacing inline secrets) + +A block that takes a secret inline keeps running for existing workflows; the saved-credential +version is a new block type that spreads it. Keep the successor an object literal with the picker +written inline, because the docs generator reads the source text: + +```typescript +export const ServiceV2Block: BlockConfig = { + ...ServiceBlock, + type: 'service_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(ServiceBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'service', + title: 'Service Credential', + }), +} +``` + +- The legacy block changes only by `hideFromToolbar: true` and `sunset: { status: 'legacy', + replacedBy: 'service_v2' }` (an older `_v2` points at the new `_v3`). Register both types. +- `withSavedCredential` (`blocks/utils.ts`) swaps exactly the fields its policy in + `SAVED_CREDENTIAL_OAUTH` supplies for the picker, places it directly under the operation + dropdown, inherits the replaced fields' `condition` and `required`, and leaves trigger-mode + fields alone. Pass `required` when the replaced fields disagree (an optional host), and `params` + only when the legacy params builder validates the secret: extract that builder so the legacy + block calls it unchanged (`blocks/legacy-builders.test.ts`) and the successor skips the check. +- Add the pair to `serializer/saved-credentials.test.ts` (`optionalIds` for replaced fields the + legacy block never required), and grep for code that hard-codes the legacy type (`getBlock`, + `integration.type ===`, availability lookups), which now resolves to the successor. + ### OAuth deployment availability (required for integration blocks) A visible tools-category block with OAuth is deployment-gated. Its `oauth-input.serviceId` is diff --git a/.agents/skills/add-integration/SKILL.md b/.agents/skills/add-integration/SKILL.md index 71aa71c8b2c..82ee5ea576f 100644 --- a/.agents/skills/add-integration/SKILL.md +++ b/.agents/skills/add-integration/SKILL.md @@ -66,6 +66,42 @@ Use explicit permission choices when the supported operations have different acc region and permission selections on reconnect unless the user changes them. Verify documented identity endpoints rather than guessing which person a client-credentials token represents. +### Token credentials (API key, personal access token, token + host) + +A service authenticated by a pasted key or token takes it through a saved token credential, never an +inline `password` field, so one shared, verified credential serves every block. Wire it by the +service id: + +1. `apps/sim/lib/credentials/token-service-accounts/descriptors.ts`: a provider id and descriptor. + Fields are `apiToken`, plus `domain` for a host, instance URL, or region and + `providerWorkspaceId` for an account or org id; every listed field is required. Set `url: true` + on a `domain` that is a URL whose scheme or path matters, so the connect form sends it as typed. +2. `validators/token-checks.ts`: one `tokenCheckValidator` declaration (register it in + `server.ts`). Make one cheap, documented read on the tools' own host with the tools' own auth, + reusing their header and URL builders. `domain` and `workspaceId` normalize to exactly the form + the tools build URLs from and throw for anything that could steer the host or path + (`normalizeHttpBaseUrl`, `allowedDomain`, `refuseUrlCredentials`); the normalized domain is what + the credential stores. Set `egress` when the user chooses the host. Add `forbiddenMeansScoped`, + `rejectsKey`, or `provesKey` only for documented replies (probe a fake key to see how a bad one + answers), and `errorBodyEchoesToken` when an error body echoes the token. +3. `apps/sim/lib/oauth/oauth.ts` and `types.ts`: the service entry (`authType: 'service_account'`, + `serviceAccountProviderId`). +4. `apps/sim/tools/shared/saved-credentials.ts`: `tokenCredentialOAuth('', { : + 'accessToken' | 'domain' | 'providerWorkspaceId' })`, listed in `SAVED_CREDENTIAL_OAUTH`, and set + as `oauth` on every tool. Map every param that decides the request host; the executor overwrites + mapped params after authorizing the credential, and `check-block-registry` probes the tools' real + URL builders and fails on a host-steering param left unmapped. +5. A credential-only block (including a successor) uses `authMode: AuthMode.OAuth`, so the + generated catalog maps the service; a token-only block that keeps `AuthMode.ApiKey`, as Coda + does, registers in `tokenCredentialIntegrationTypes` instead (see below). The credential picker + sits directly under the operation dropdown (`add-block` → OAuth/Credentials). An existing block that already takes the secret inline is never edited in + place: add a credential-only successor (`add-block` → Credential-only successor). + +Then run `generate-docs`, `generate:block-successors`, `generate:deployment-config`, and +`generate:tool-metadata`, and `check-block-registry.ts origin/staging`. This pattern does not fit +hosted-key tools, model-provider keys, two-secret or username/password logins, or a host chosen +per call. + ### Pair saved credentials with block and resource selectors `oauth-input` is the shared saved-credential picker, including for service accounts that never diff --git a/.agents/skills/add-tools/SKILL.md b/.agents/skills/add-tools/SKILL.md index ddcb7a625bd..5261ea8169d 100644 --- a/.agents/skills/add-tools/SKILL.md +++ b/.agents/skills/add-tools/SKILL.md @@ -89,6 +89,10 @@ export const {serviceName}{Action}Tool: ToolConfig< provider: '{service}', // Must match the service id in OAUTH_PROVIDERS // credentialKind: 'service-account', // service-account-only integrations }, + // A token credential (API key, PAT, token + host) instead uses the service's shared policy from + // tools/shared/saved-credentials.ts, built with tokenCredentialOAuth('{service}', { apiKey: + // 'accessToken' }). Its keys are the tool's own token/host/account params, which the executor + // fills after authorizing the credential. params: { // Hidden params (system-injected, e.g. the OAuth accessToken) diff --git a/.agents/skills/validate-integration/SKILL.md b/.agents/skills/validate-integration/SKILL.md index afc070e00b5..f2f91449948 100644 --- a/.agents/skills/validate-integration/SKILL.md +++ b/.agents/skills/validate-integration/SKILL.md @@ -218,6 +218,17 @@ For **each tool** in `tools.access`: - True/false → `switch` (a Yes/No `dropdown` only when the tool needs a third "unset" state) - Credentials → `oauth-input` with correct `serviceId` - Every tool with a `credential`/`oauthCredential` param declares `oauth: { required: true, provider }` matching that `serviceId`, plus `credentialKind: 'service-account'` when only service accounts are supported +- [ ] In a new block or credential-only successor, a pasted key, token, or token + host comes from a + saved token credential (add-integration → Token credentials), not an inline `password` field + (legacy blocks keep theirs); a successor changes its legacy block only by `hideFromToolbar` + and `sunset`, and its picker sits under the operation +- [ ] For a token-credential integration, every tool in `tools.access` declares the service's + `tokenCredentialOAuth` policy, every + param that decides the request host is mapped, and the stored domain is in the form the tools + build URLs from (`check-block-registry.ts origin/staging` passes) +- [ ] The `tokenCheckValidator` request uses the tools' host and auth, its normalizers refuse + anything that could steer the host or path, and a fake key is rejected without a valid + scoped key being refused - [ ] Dropdown `value: () => 'default'` is set for dropdowns with a sensible default - [ ] Every `short-input`, `long-input`, `code`, and selector subBlock has a `placeholder` — including password fields (`Enter your API key`). Formatted values show the shape diff --git a/apps/docs/components/ui/icon-mapping.ts b/apps/docs/components/ui/icon-mapping.ts index 8d3a0f2b273..c4c817a2963 100644 --- a/apps/docs/components/ui/icon-mapping.ts +++ b/apps/docs/components/ui/icon-mapping.ts @@ -343,6 +343,7 @@ export const blockTypeToIconMap: Record = { ahrefs_v2: AhrefsIcon, airtable: AirtableIcon, algolia: AlgoliaIcon, + algolia_v2: AlgoliaIcon, amplitude: AmplitudeIcon, api: ApiIcon, api_trigger: ApiIcon, @@ -361,6 +362,7 @@ export const blockTypeToIconMap: Record = { attio: AttioIcon, azure_data_explorer: AzureDataExplorerIcon, azure_devops: AzureIcon, + azure_devops_v2: AzureIcon, bitbucket: BitbucketIcon, box: BoxCompanyIcon, box_v2: BoxCompanyIcon, @@ -403,6 +405,7 @@ export const blockTypeToIconMap: Record = { confluence_v2: ConfluenceIcon, context_dev: ContextDevIcon, convex: ConvexIcon, + convex_v2: ConvexIcon, credential: CredentialIcon, credential_group: GridOffset, crowdstrike: CrowdStrikeIcon, @@ -420,6 +423,7 @@ export const blockTypeToIconMap: Record = { daytona_v2: DaytonaIcon, deployments: Rocket, devin: DevinIcon, + devin_v2: DevinIcon, discord: DiscordIcon, discord_v2: DiscordIcon, docusign: DocuSignIcon, @@ -435,12 +439,14 @@ export const blockTypeToIconMap: Record = { dynamodb: DynamoDBIcon, dynamodb_v2: DynamoDBIcon, dynatrace: DynatraceIcon, + dynatrace_v2: DynatraceIcon, ec2: EC2Icon, ec2_v2: EC2Icon, elasticsearch: ElasticsearchIcon, elevenlabs: ElevenLabsIcon, elevenlabs_v2: ElevenLabsIcon, emailbison: EmailBisonIcon, + emailbison_v2: EmailBisonIcon, embeddings: EmbeddingsIcon, enrich: EnrichSoIcon, enrich_v2: EnrichSoIcon, @@ -506,6 +512,7 @@ export const blockTypeToIconMap: Record = { 'google-drive': GoogleDriveIcon, 'google-sheets': GoogleSheetsIcon, grafana: GrafanaIcon, + grafana_v2: GrafanaIcon, grain: GrainIcon, grain_v2: GrainIcon, grain_v3: GrainIcon, @@ -537,6 +544,7 @@ export const blockTypeToIconMap: Record = { incidentio: IncidentioIcon, incidentio_v2: IncidentioIcon, infisical: InfisicalIcon, + infisical_v2: InfisicalIcon, input_trigger: FormInput, instantly: InstantlyIcon, instantly_v2: InstantlyIcon, @@ -549,9 +557,11 @@ export const blockTypeToIconMap: Record = { jira: JiraIcon, jira_service_management: JiraServiceManagementIcon, jotform: JotformIcon, + jotform_v2: JotformIcon, jsm: JiraServiceManagementIcon, jupyter: JupyterIcon, jupyter_v2: JupyterIcon, + jupyter_v3: JupyterIcon, kalshi: KalshiIcon, kalshi_v2: KalshiIcon, ketch: KetchIcon, @@ -573,6 +583,7 @@ export const blockTypeToIconMap: Record = { linq: LinqIcon, linq_v2: LinqIcon, logfire: LogfireIcon, + logfire_v2: LogfireIcon, logrocket: LogRocketIcon, logs: Library, logs_v2: Library, @@ -583,6 +594,7 @@ export const blockTypeToIconMap: Record = { mailchimp: MailchimpIcon, mailchimp_v2: MailchimpIcon, mailgun: MailgunIcon, + mailgun_v2: MailgunIcon, managed_agent: ClaudeIcon, manageengine_sdp: ManageEngineIcon, manual_trigger: Play, @@ -615,12 +627,14 @@ export const blockTypeToIconMap: Record = { netsuite: NetSuiteIcon, neverbounce: NeverBounceIcon, new_relic: NewRelicIcon, + new_relic_v2: NewRelicIcon, note: NoteIcon, notion: NotionIcon, notion_v2: NotionIcon, obsidian: ObsidianIcon, oci: OracleIcon, okta: OktaIcon, + okta_v2: OktaIcon, onedrive: MicrosoftOneDriveIcon, onepassword: OnePasswordIcon, openai: OpenAIIcon, @@ -641,6 +655,7 @@ export const blockTypeToIconMap: Record = { pipedrive: PipedriveIcon, pitchbook: PitchBookIcon, plane: PlaneIcon, + plane_v2: PlaneIcon, planetscale: PlanetScaleIcon, polymarket: PolymarketIcon, postgresql: PostgresIcon, @@ -743,6 +758,7 @@ export const blockTypeToIconMap: Record = { stt: STTIcon, stt_v2: STTIcon, supabase: SupabaseIcon, + supabase_v2: SupabaseIcon, table: Table, table_v2: Table, tailscale: TailscaleIcon, @@ -757,8 +773,10 @@ export const blockTypeToIconMap: Record = { textract_v3: TextractIcon, thinking: BrainIcon, thrive: ThriveIcon, + thrive_v2: ThriveIcon, tiktok: TikTokIcon, tinybird: TinybirdIcon, + tinybird_v2: TinybirdIcon, tinyfish: TinyFishIcon, translate: TranslateIcon, trello: TrelloIcon, @@ -767,10 +785,13 @@ export const blockTypeToIconMap: Record = { tts: TTSIcon, twilio: TwilioIcon, twilio_sms: TwilioIcon, + twilio_sms_v2: TwilioIcon, twilio_voice: TwilioIcon, + twilio_voice_v2: TwilioIcon, typeform: TypeformIcon, typeform_v2: TypeformIcon, upstash: UpstashIcon, + upstash_v2: UpstashIcon, uptimerobot: UptimeRobotIcon, uptimerobot_v2: UptimeRobotIcon, vanta: VantaIcon, diff --git a/apps/docs/content/docs/integrations/algolia.mdx b/apps/docs/content/docs/integrations/algolia.mdx index ea40da2799e..a819e9226a9 100644 --- a/apps/docs/content/docs/integrations/algolia.mdx +++ b/apps/docs/content/docs/integrations/algolia.mdx @@ -2,7 +2,7 @@ title: Algolia description: Search and manage Algolia indices integration: - type: "algolia" + type: "algolia_v2" color: "#003DFF" --- @@ -29,8 +29,6 @@ Search an Algolia index | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia API Key | | `indexName` | string | Yes | Name of the Algolia index to search | | `query` | string | Yes | Search query text | | `hitsPerPage` | number | No | Number of hits per page \(default: 20\) | @@ -82,8 +80,6 @@ Add or replace a record in an Algolia index | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia Admin API Key | | `indexName` | string | Yes | Name of the Algolia index | | `objectID` | string | No | Object ID for the record \(auto-generated if not provided\) | | `record` | json | Yes | JSON object representing the record to add | @@ -109,8 +105,6 @@ Get a record by objectID from an Algolia index | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia API Key | | `indexName` | string | Yes | Name of the Algolia index | | `objectID` | string | Yes | The objectID of the record to retrieve | | `attributesToRetrieve` | string | No | Comma-separated list of attributes to retrieve | @@ -134,8 +128,6 @@ Retrieve multiple records by objectID from one or more Algolia indices | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia API Key | | `indexName` | string | Yes | Default index name for all requests | | `requests` | json | Yes | Array of objects specifying records to retrieve. Each must have "objectID" and optionally "indexName" and "attributesToRetrieve". | @@ -158,8 +150,6 @@ Partially update a record in an Algolia index without replacing it entirely | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia Admin API Key | | `indexName` | string | Yes | Name of the Algolia index | | `objectID` | string | Yes | The objectID of the record to update | | `attributes` | json | Yes | JSON object with attributes to update. Supports built-in operations like \{"stock": \{"_operation": "Decrement", "value": 1\}\} | @@ -185,8 +175,6 @@ Delete a record by objectID from an Algolia index | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia Admin API Key | | `indexName` | string | Yes | Name of the Algolia index | | `objectID` | string | Yes | The objectID of the record to delete | @@ -209,8 +197,6 @@ Browse and iterate over all records in an Algolia index using cursor pagination | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia API Key \(must have browse ACL\) | | `indexName` | string | Yes | Name of the Algolia index to browse | | `query` | string | No | Search query to filter browsed records | | `filters` | string | No | Filter string to narrow down results | @@ -247,8 +233,6 @@ Perform batch add, update, partial update, or delete operations on records in an | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia Admin API Key | | `indexName` | string | Yes | Name of the Algolia index | | `requests` | json | Yes | Array of batch operations. Each item has "action" \(addObject, updateObject, partialUpdateObject, partialUpdateObjectNoCreate, deleteObject, delete, clear\) and "body" \(the record data; must include objectID for update/delete; use an empty object \{\} for the index-level delete/clear actions\) | @@ -271,8 +255,6 @@ List all indices in an Algolia application | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia API Key | | `page` | number | No | Page number for paginating indices \(default: not paginated\) | | `hitsPerPage` | number | No | Number of indices per page \(default: 100\) | @@ -307,8 +289,6 @@ Retrieve the settings of an Algolia index | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia API Key | | `indexName` | string | Yes | Name of the Algolia index | #### Output @@ -338,8 +318,6 @@ Update the settings of an Algolia index | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia Admin API Key \(must have editSettings ACL\) | | `indexName` | string | Yes | Name of the Algolia index | | `settings` | json | Yes | JSON object with settings to update \(e.g., \{"searchableAttributes": \["name", "description"\], "customRanking": \["desc\(popularity\)"\]\}\) | | `forwardToReplicas` | boolean | No | Whether to apply changes to replica indices \(default: false\) | @@ -363,8 +341,6 @@ Delete an entire Algolia index and all its records | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia Admin API Key \(must have deleteIndex ACL\) | | `indexName` | string | Yes | Name of the Algolia index to delete | #### Output @@ -386,8 +362,6 @@ Copy or move an Algolia index to a new destination | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia Admin API Key | | `indexName` | string | Yes | Name of the source index | | `operation` | string | Yes | Operation to perform: "copy" or "move" | | `destination` | string | Yes | Name of the destination index | @@ -412,8 +386,6 @@ Clear all records from an Algolia index while keeping settings, synonyms, and ru | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia Admin API Key \(must have deleteIndex ACL\) | | `indexName` | string | Yes | Name of the Algolia index to clear | #### Output @@ -435,8 +407,6 @@ Delete all records matching a filter from an Algolia index | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia Admin API Key \(must have deleteIndex ACL\) | | `indexName` | string | Yes | Name of the Algolia index | | `filters` | string | No | Filter expression to match records for deletion \(e.g., "category:outdated"\) | | `facetFilters` | json | No | Array of facet filters \(e.g., \["brand:Acme"\]\) | @@ -466,8 +436,6 @@ Check whether an Algolia indexing task has finished publishing | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `applicationId` | string | Yes | Algolia Application ID | -| `apiKey` | string | Yes | Algolia API Key | | `indexName` | string | Yes | Name of the Algolia index the task ran against | | `taskID` | number | Yes | The taskID returned by a previous write operation | diff --git a/apps/docs/content/docs/integrations/aws-credentials.mdx b/apps/docs/content/docs/integrations/aws-credentials.mdx index 8282645bfac..55e5e9d22aa 100644 --- a/apps/docs/content/docs/integrations/aws-credentials.mdx +++ b/apps/docs/content/docs/integrations/aws-credentials.mdx @@ -33,7 +33,7 @@ STS **Get Session Token** works only with an **Access keys** credential: AWS ref In Sim, open **Integrations**, add an **AWS credential**, and choose **IAM role (keyless, via Sim OIDC)**. Keep the dialog open; it shows the values for the next steps. - In the AWS IAM console, open **Identity providers → Add provider**, choose **OpenID Connect**, and enter the **Identity provider URL** and **Audience** from the dialog. You only do this once per AWS account. + In the AWS IAM console, open **Identity providers → Add provider**, choose **OpenID Connect**, and enter the dialog's **Issuer** as the **Provider URL**, and its **Audience**. You only do this once per AWS account. Create a role (or edit an existing one) and set its trust policy to the **Role trust policy** shown in the dialog. It trusts only this credential's **Subject**, so no other Sim credential, workspace, or customer can assume the role. diff --git a/apps/docs/content/docs/integrations/azure_devops.mdx b/apps/docs/content/docs/integrations/azure_devops.mdx index 8b2bcc313c2..f376227d22d 100644 --- a/apps/docs/content/docs/integrations/azure_devops.mdx +++ b/apps/docs/content/docs/integrations/azure_devops.mdx @@ -2,7 +2,7 @@ title: Azure DevOps description: Interact with Azure DevOps pipelines, builds, and work items integration: - type: "azure_devops" + type: "azure_devops_v2" color: "#0078D4" --- @@ -34,7 +34,6 @@ List all pipelines in an Azure DevOps project. Returns pipeline ID, name, folder | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `orderBy` | string | No | Field to sort results by \(e.g. "name"\) | | `top` | number | No | Maximum number of pipelines to return | @@ -66,7 +65,6 @@ Get details for a specific pipeline in an Azure DevOps project, including config | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `pipelineId` | number | Yes | ID of the pipeline to retrieve | | `pipelineVersion` | number | No | Specific revision of the pipeline to retrieve \(defaults to latest\) | @@ -105,7 +103,6 @@ List runs for a specific pipeline in an Azure DevOps project. Returns run ID, na | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `pipelineId` | number | Yes | ID of the pipeline whose runs to list | @@ -138,7 +135,6 @@ Get details for a specific pipeline run in an Azure DevOps project. Returns run | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `pipelineId` | number | Yes | ID of the pipeline | | `runId` | number | Yes | ID of the run to retrieve | @@ -177,7 +173,6 @@ List builds in an Azure DevOps project. Optionally filter by pipeline definition | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `definitionIds` | string | No | Comma-separated pipeline definition IDs to filter by \(e.g. "1,2,3"\) | | `top` | number | No | Maximum number of builds to return | @@ -219,7 +214,6 @@ List all log entries for a specific build in Azure DevOps. Returns log IDs, type | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `buildId` | number | Yes | The build ID whose logs to list | @@ -250,7 +244,6 @@ Fetch the text content of a specific build log in Azure DevOps. Use List Build L | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `buildId` | number | Yes | The build ID containing the log | | `logId` | number | Yes | The log entry ID to fetch \(from List Build Logs\) | @@ -277,7 +270,6 @@ Get the execution timeline for an Azure DevOps build — every stage, job, and t | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `buildId` | number | Yes | ID of the build whose timeline to retrieve | @@ -322,7 +314,6 @@ Get work item references associated with commits between two builds in Azure Dev | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `fromBuildId` | number | Yes | The older build ID \(start of range\) | | `toBuildId` | number | Yes | The newer build ID \(end of range\) | @@ -350,7 +341,6 @@ Execute a WIQL query to search for work items in Azure DevOps and return full fi | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `wiqlQuery` | string | Yes | WIQL query string \(e.g. "SELECT \[System.Id\] FROM workitems WHERE \[System.State\] = 'Doing' ORDER BY \[System.Id\] ASC"\). Use TOP N to limit results. | @@ -383,7 +373,6 @@ Fetch full details of a single work item by ID from Azure DevOps, including titl | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `workItemId` | number | Yes | The work item ID to fetch | @@ -414,7 +403,6 @@ Fetch full details for multiple work items by ID from Azure DevOps. Pass comma-s | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `ids` | string | Yes | Comma-separated work item IDs to fetch \(e.g. "123,456,789"\). Lists longer than 200 IDs are chunked automatically. | @@ -447,7 +435,6 @@ Create a new Basic-process work item (Issue, Task, or Epic) in Azure DevOps. Ret | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `workItemType` | string | Yes | Basic-process work item type to create \("Issue", "Task", or "Epic"\). Use Issue for bug or defect tracking. | | `title` | string | Yes | Title of the new work item | @@ -491,7 +478,6 @@ Update one or more fields on an existing work item in Azure DevOps. Provide only | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `workItemId` | number | Yes | ID of the work item to update | | `title` | string | No | New title for the work item \(optional\) | @@ -535,7 +521,6 @@ Add a comment to a work item in Azure DevOps. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `workItemId` | number | Yes | ID of the work item to comment on | | `text` | string | Yes | Comment text \(HTML supported, e.g. "<p>My comment</p>"\) | @@ -571,7 +556,6 @@ List comments for an Azure DevOps work item. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `organization` | string | Yes | Azure DevOps organization name | | `project` | string | Yes | Azure DevOps project name | | `workItemId` | number | Yes | ID of the work item whose comments should be listed | | `top` | number | No | Maximum number of comments to return | diff --git a/apps/docs/content/docs/integrations/convex.mdx b/apps/docs/content/docs/integrations/convex.mdx index 52179097d79..bc7b74720ca 100644 --- a/apps/docs/content/docs/integrations/convex.mdx +++ b/apps/docs/content/docs/integrations/convex.mdx @@ -2,7 +2,7 @@ title: Convex description: Use Convex database integration: - type: "convex" + type: "convex_v2" color: "#FFFFFF" --- @@ -33,8 +33,6 @@ Run a Convex query function and return its result | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `deploymentUrl` | string | Yes | Convex deployment URL \(e.g., https://your-deployment.convex.cloud) | -| `deployKey` | string | Yes | Convex deploy key from the dashboard Settings page | | `functionPath` | string | Yes | Path to the query function \(e.g., messages:list or folder/file:myQuery\) | | `args` | json | No | Named arguments to pass to the function as a JSON object | @@ -57,8 +55,6 @@ Run a Convex mutation function to write data and return its result | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `deploymentUrl` | string | Yes | Convex deployment URL \(e.g., https://your-deployment.convex.cloud) | -| `deployKey` | string | Yes | Convex deploy key from the dashboard Settings page | | `functionPath` | string | Yes | Path to the mutation function \(e.g., messages:send or folder/file:myMutation\) | | `args` | json | No | Named arguments to pass to the function as a JSON object | @@ -81,8 +77,6 @@ Run a Convex action function and return its result | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `deploymentUrl` | string | Yes | Convex deployment URL \(e.g., https://your-deployment.convex.cloud) | -| `deployKey` | string | Yes | Convex deploy key from the dashboard Settings page | | `functionPath` | string | Yes | Path to the action function \(e.g., emails:send or folder/file:myAction\) | | `args` | json | No | Named arguments to pass to the function as a JSON object | @@ -105,8 +99,6 @@ Run any Convex function (query, mutation, or action) by path without specifying | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `deploymentUrl` | string | Yes | Convex deployment URL \(e.g., https://your-deployment.convex.cloud) | -| `deployKey` | string | Yes | Convex deploy key from the dashboard Settings page | | `functionPath` | string | Yes | Path to the function \(e.g., messages:list or folder/file:myFunction\) | | `args` | json | No | Named arguments to pass to the function as a JSON object | @@ -129,8 +121,6 @@ List all tables in a Convex deployment along with their JSON schemas. Requires s | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `deploymentUrl` | string | Yes | Convex deployment URL \(e.g., https://your-deployment.convex.cloud) | -| `deployKey` | string | Yes | Convex deploy key from the dashboard Settings page | #### Output @@ -151,8 +141,6 @@ List documents from a Convex table via a paginated snapshot. Pass the returned s | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `deploymentUrl` | string | Yes | Convex deployment URL \(e.g., https://your-deployment.convex.cloud) | -| `deployKey` | string | Yes | Convex deploy key from the dashboard Settings page | | `tableName` | string | No | Table to list documents from. Omit to list documents from all tables. | | `snapshot` | string | No | Snapshot timestamp from a previous page. Omit on the first request to start a new snapshot. | | `pageCursor` | string | No | Page cursor from a previous page of the same snapshot. Omit on the first request. | @@ -178,8 +166,6 @@ List documents that changed after a snapshot or previous delta cursor. Deleted d | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `deploymentUrl` | string | Yes | Convex deployment URL \(e.g., https://your-deployment.convex.cloud) | -| `deployKey` | string | Yes | Convex deploy key from the dashboard Settings page | | `cursor` | string | Yes | Timestamp cursor to read deltas after. Use the snapshot value from List Documents or the cursor from a previous Document Deltas page. | | `tableName` | string | No | Table to read deltas from. Omit to read deltas from all tables. | diff --git a/apps/docs/content/docs/integrations/devin.mdx b/apps/docs/content/docs/integrations/devin.mdx index ed25ab6e30d..49ccec99c85 100644 --- a/apps/docs/content/docs/integrations/devin.mdx +++ b/apps/docs/content/docs/integrations/devin.mdx @@ -2,7 +2,7 @@ title: Devin description: Autonomous AI software engineer integration: - type: "devin" + type: "devin_v2" color: "#12141A" --- @@ -31,8 +31,6 @@ Create a new Devin session with a prompt. Devin will autonomously work on the ta | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Devin API key \(service user credential starting with cog_\) | -| `orgId` | string | Yes | Devin organization ID \(prefixed with org-\) | | `prompt` | string | Yes | The task prompt for Devin to work on | | `playbookId` | string | No | Optional playbook ID to guide the session | | `maxAcuLimit` | number | No | Maximum ACU limit for the session | @@ -68,8 +66,6 @@ Retrieve details of an existing Devin session including status, tags, pull reque | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Devin API key \(service user credential starting with cog_\) | -| `orgId` | string | Yes | Devin organization ID \(prefixed with org-\) | | `sessionId` | string | Yes | The session ID to retrieve | #### Output @@ -102,8 +98,6 @@ List Devin sessions in the organization. Returns up to 100 sessions by default. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Devin API key \(service user credential starting with cog_\) | -| `orgId` | string | Yes | Devin organization ID \(prefixed with org-\) | | `limit` | number | No | Maximum number of sessions to return \(1-200, default: 100\) | | `after` | string | No | Pagination cursor \(endCursor from a previous response\) to fetch the next page | @@ -140,8 +134,6 @@ Send a message to a Devin session. If the session is suspended, it will be autom | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Devin API key \(service user credential starting with cog_\) | -| `orgId` | string | Yes | Devin organization ID \(prefixed with org-\) | | `sessionId` | string | Yes | The session ID to send the message to | | `message` | string | Yes | The message to send to Devin | @@ -175,8 +167,6 @@ List the messages exchanged in a Devin session, including messages from both the | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Devin API key \(service user credential starting with cog_\) | -| `orgId` | string | Yes | Devin organization ID \(prefixed with org-\) | | `sessionId` | string | Yes | The session ID to list messages for | | `limit` | number | No | Maximum number of messages to return \(1-200, default: 100\) | | `after` | string | No | Pagination cursor \(endCursor from a previous response\) to fetch the next page | @@ -206,8 +196,6 @@ List the files uploaded to or produced by a Devin session. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Devin API key \(service user credential starting with cog_\) | -| `orgId` | string | Yes | Devin organization ID \(prefixed with org-\) | | `sessionId` | string | Yes | The session ID to list attachments for | #### Output @@ -233,8 +221,6 @@ Retrieve the tags currently applied to a Devin session. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Devin API key \(service user credential starting with cog_\) | -| `orgId` | string | Yes | Devin organization ID \(prefixed with org-\) | | `sessionId` | string | Yes | The session ID to retrieve tags for | #### Output @@ -255,8 +241,6 @@ Add tags to a Devin session without removing existing tags (max 50 tags total). | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Devin API key \(service user credential starting with cog_\) | -| `orgId` | string | Yes | Devin organization ID \(prefixed with org-\) | | `sessionId` | string | Yes | The session ID to add tags to | | `tags` | string | Yes | Tags to append to the session \(comma-separated string or array of strings\) | @@ -278,8 +262,6 @@ Replace all tags on a Devin session with a new set of tags (max 50 tags). | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Devin API key \(service user credential starting with cog_\) | -| `orgId` | string | Yes | Devin organization ID \(prefixed with org-\) | | `sessionId` | string | Yes | The session ID to replace tags on | | `tags` | string | Yes | Tags that will overwrite the existing tags \(comma-separated string or array of strings\) | @@ -301,8 +283,6 @@ Archive a Devin session. Archived sessions can still be viewed but cannot be mod | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Devin API key \(service user credential starting with cog_\) | -| `orgId` | string | Yes | Devin organization ID \(prefixed with org-\) | | `sessionId` | string | Yes | The session ID to archive | #### Output @@ -335,8 +315,6 @@ Terminate a Devin session. Optionally archive the session instead of permanently | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Devin API key \(service user credential starting with cog_\) | -| `orgId` | string | Yes | Devin organization ID \(prefixed with org-\) | | `sessionId` | string | Yes | The session ID to terminate | | `archive` | boolean | No | Archive the session instead of permanently terminating it \(default: false\) | diff --git a/apps/docs/content/docs/integrations/dynatrace.mdx b/apps/docs/content/docs/integrations/dynatrace.mdx index 83bf8472778..a73b08f0671 100644 --- a/apps/docs/content/docs/integrations/dynatrace.mdx +++ b/apps/docs/content/docs/integrations/dynatrace.mdx @@ -2,7 +2,7 @@ title: Dynatrace description: Manage Dynatrace problems, metrics, entities, logs, SLOs, settings, and security integration: - type: "dynatrace" + type: "dynatrace_v2" color: "#FFFFFF" --- @@ -37,7 +37,7 @@ The environment URL is the base address of your Dynatrace environment, without t | SaaS | `https://abc12345.live.dynatrace.com` | | Managed / environment ActiveGate | `https://your-activegate:9999/e/abc12345` | -Create the token under **Access tokens** in Dynatrace, and grant only the scopes for the operations you plan to call. Each action's `apiToken` description names the scope it needs: +Create the token under **Access tokens** in Dynatrace, and grant only the scopes for the operations you plan to call. The token and environment URL are saved together on the Dynatrace credential. The scope each action needs: | Area | Read | Write | | --- | --- | --- | @@ -93,8 +93,6 @@ List Davis-detected problems in a Dynatrace environment, filtered by timeframe, | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the problems.read scope | | `from` | string | No | Start of the timeframe as UTC milliseconds, ISO 8601, or a relative expression such as now-1d. Defaults to now-2h | | `to` | string | No | End of the timeframe in the same formats as From. Defaults to now | | `problemSelector` | string | No | Problem selector, e.g. status\("open"\),severityLevel\("AVAILABILITY"\),impactLevel\("SERVICES"\) | @@ -122,8 +120,6 @@ Get the full details of a single Dynatrace problem, including root cause, affect | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the problems.read scope | | `problemId` | string | Yes | ID of the problem \(e.g., -1234567890123456789_1700000000000V2\) | | `fields` | string | No | Comma-separated optional properties to include. Defaults to all of them: evidenceDetails, impactAnalysis, recentComments | @@ -145,8 +141,6 @@ Close a Dynatrace problem and record the closing comment. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the problems.write scope | | `problemId` | string | Yes | ID of the problem to close | | `message` | string | Yes | Text of the closing comment | @@ -171,8 +165,6 @@ List the comments recorded on a Dynatrace problem. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the problems.read scope | | `problemId` | string | Yes | ID of the problem whose comments should be listed | | `pageSize` | number | No | Comments per page \(max 500, default 10\) | | `nextPageKey` | string | No | Cursor for the next page. Page size is ignored when it is set | @@ -195,8 +187,6 @@ Add a comment to a Dynatrace problem. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the problems.write scope | | `problemId` | string | Yes | ID of the problem to comment on | | `message` | string | Yes | Text of the comment | | `context` | string | No | Context of the comment, shown alongside the author \(e.g., the source system\) | @@ -221,8 +211,6 @@ Read metric data points from Dynatrace using a metric selector, with optional en | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the metrics.read scope | | `metricSelector` | string | Yes | Metric selector, up to 10 metrics comma-separated, with optional transformations after a colon \(e.g. builtin:host.cpu.usage:avg:names\) | | `from` | string | No | Start of the timeframe as UTC milliseconds, ISO 8601, or a relative expression such as now-2h. Defaults to now-2h | | `to` | string | No | End of the timeframe in the same formats as From. Defaults to now | @@ -262,8 +250,6 @@ Discover the metrics available in a Dynatrace environment, filtered by metric se | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the metrics.read scope | | `metricSelector` | string | No | Metric selector, supporting wildcards \(e.g. builtin:host.cpu.*\) | | `text` | string | No | Free-text search across metric display names and descriptions | | `fields` | string | No | Comma-separated descriptor properties. Prefix with + to add a non-default property and - to drop a default one; metricId is always returned \(e.g. +aggregationTypes,-description\) | @@ -291,8 +277,6 @@ Get the descriptor of a single Dynatrace metric — its unit, dimensions, suppor | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the metrics.read scope | | `metricKey` | string | Yes | Metric key, optionally followed by transformation operators separated by a colon \(e.g. builtin:host.cpu.usage\) | #### Output @@ -313,8 +297,6 @@ Push custom metric data points into Dynatrace using the metric line protocol, on | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the metrics.ingest scope | | `payload` | string | Yes | Metric line protocol payload, one data point per line, max 1 MB \(e.g. cpu.temperature,dt.entity.host=HOST-06F288EE2A930951,cpu=1 55\) | #### Output @@ -347,8 +329,6 @@ List monitored entities — hosts, services, applications, Kubernetes workloads | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the entities.read scope | | `entitySelector` | string | Yes | Entity selector defining the scope, e.g. type\("HOST"\),tag\("env:prod"\) or entityId\("HOST-06F288EE2A930951"\) | | `from` | string | No | Start of the timeframe as UTC milliseconds, ISO 8601, or a relative expression such as now-3d. Defaults to now-3d | | `to` | string | No | End of the timeframe in the same formats as From. Defaults to now | @@ -375,8 +355,6 @@ Get the properties, tags, management zones, and relationships of a single monito | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the entities.read scope | | `entityId` | string | Yes | ID of the entity \(e.g., HOST-06F288EE2A930951\) | | `from` | string | No | Start of the timeframe as UTC milliseconds, ISO 8601, or a relative expression such as now-3d. Defaults to now-3d | | `to` | string | No | End of the timeframe in the same formats as From. Defaults to now | @@ -400,8 +378,6 @@ List the monitored entity types available in the environment, with the propertie | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the entities.read scope | | `pageSize` | number | No | Entity types per page \(max 500, default 50\) | | `nextPageKey` | string | No | Cursor for the next page. Page size is ignored when it is set | @@ -433,8 +409,6 @@ List events — deployments, availability changes, alerts, custom annotations | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the events.read scope | | `from` | string | No | Start of the timeframe as UTC milliseconds, ISO 8601, or a relative expression such as now-1d. Defaults to now-2h | | `to` | string | No | End of the timeframe in the same formats as From. Defaults to now | | `eventSelector` | string | No | Event selector, e.g. eventType\("CUSTOM_DEPLOYMENT"\),status\("OPEN"\),correlationId\("build-42"\) | @@ -460,8 +434,6 @@ Get the full details of a single Dynatrace event. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the events.read scope | | `eventId` | string | Yes | ID of the event | #### Output @@ -482,8 +454,6 @@ Push an event into Dynatrace — a deployment marker, custom annotation, or cust | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the events.ingest scope | | `eventType` | string | Yes | One of AVAILABILITY_EVENT, CUSTOM_ALERT, CUSTOM_ANNOTATION, CUSTOM_CONFIGURATION, CUSTOM_DEPLOYMENT, CUSTOM_INFO, ERROR_EVENT, MARKED_FOR_TERMINATION, PERFORMANCE_EVENT, RESOURCE_CONTENTION_EVENT, WARNING | | `title` | string | Yes | Title of the event | | `entitySelector` | string | No | Entity selector for the entities to attach the event to. Defaults to the environment entity | @@ -513,8 +483,6 @@ Search log records in Dynatrace by query and timeframe, for troubleshooting and | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the logs.read scope, or storage:logs:read and storage:buckets:read on Grail | | `query` | string | No | Log search query, e.g. status="ERROR" AND dt.entity.host="HOST-06F288EE2A930951" | | `from` | string | No | Start of the timeframe as UTC milliseconds, ISO 8601, or a relative expression such as now-1h. Defaults to now-2w | | `to` | string | No | End of the timeframe in the same formats as From. Defaults to now | @@ -548,8 +516,6 @@ Push log events into Dynatrace. Accepts a single log event object or an array of | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the logs.ingest scope | | `logs` | json | Yes | A log event object, or an array of them. Recognized keys are content, timestamp, and severity; any other key becomes a custom attribute \(e.g. \[\{"content":"Deploy finished","severity":"info","service":"checkout"\}\]\) | #### Output @@ -572,8 +538,6 @@ List service-level objectives with their current attainment, error budget, and b | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the slo.read scope | | `sloSelector` | string | No | SLO selector, e.g. healthState\("WARNING"\),text\("checkout"\),problems\("true"\). Combine criteria with commas | | `from` | string | No | Start of the evaluation timeframe as UTC milliseconds, ISO 8601, or a relative expression such as now-7d | | `to` | string | No | End of the evaluation timeframe in the same formats as From. Defaults to now | @@ -603,8 +567,6 @@ Get a single service-level objective with its evaluated attainment, error budget | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the slo.read scope | | `sloId` | string | Yes | ID of the SLO | | `from` | string | No | Start of the evaluation timeframe as UTC milliseconds, ISO 8601, or a relative expression such as now-7d. Defaults to now-2w | | `to` | string | No | End of the evaluation timeframe in the same formats as From. Defaults to now | @@ -628,8 +590,6 @@ List vulnerabilities detected by Dynatrace Application Security, filtered by ris | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the securityProblems.read scope | | `securityProblemSelector` | string | No | Security problem selector, e.g. status\("OPEN"\),riskLevel\("CRITICAL"\),technology\("JAVA"\) | | `from` | string | No | Start of the timeframe as UTC milliseconds, ISO 8601, or a relative expression such as now-7d. Defaults to now-30d | | `to` | string | No | End of the timeframe in the same formats as From. Defaults to now | @@ -656,8 +616,6 @@ Get a single vulnerability with its description, remediation guidance, affected | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the securityProblems.read scope | | `securityProblemId` | string | Yes | ID of the security problem | | `fields` | string | No | Comma-separated optional properties to include, each prefixed with +. Defaults to every detail property: +riskAssessment, +managementZones, +codeLevelVulnerabilityDetails, +globalCounts, +filteredCounts, +description, +remediationDescription, +events, +vulnerableComponents, +affectedEntities, +exposedEntities, +reachableDataAssets, +relatedEntities, +relatedContainerImages, +relatedAttacks, +entryPoints | | `managementZoneFilter` | string | No | Restrict the counts to management zones, e.g. names\("Production"\) | @@ -681,8 +639,6 @@ Read the Dynatrace audit log — who changed which configuration, when, and whet | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the auditLogs.read scope | | `filter` | string | No | Audit log filter, e.g. eventType\("UPDATE"\),user\("someone@example.com"\),category\("CONFIG"\) | | `from` | string | No | Start of the timeframe as UTC milliseconds, ISO 8601, or a relative expression such as now-1d. Defaults to now-2w | | `to` | string | No | End of the timeframe in the same formats as From. Defaults to now | @@ -726,8 +682,6 @@ Mute a single Dynatrace vulnerability with a reason, for triaging false positive | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the securityProblems.write scope | | `securityProblemId` | string | Yes | ID of the security problem to mute | | `reason` | string | Yes | One of CONFIGURATION_NOT_AFFECTED, FALSE_POSITIVE, IGNORE, OTHER, VULNERABLE_CODE_NOT_IN_USE | | `comment` | string | No | Explanation recorded alongside the mute | @@ -753,8 +707,6 @@ Unmute a single Dynatrace vulnerability, returning it to the active triage queue | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the securityProblems.write scope | | `securityProblemId` | string | Yes | ID of the security problem to unmute | | `reason` | string | Yes | Reason for unmuting. AFFECTED is the only value the API accepts | | `comment` | string | No | Explanation recorded alongside the unmute | @@ -780,8 +732,6 @@ Mute several Dynatrace vulnerabilities at once with a shared reason, for bulk tr | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the securityProblems.write scope | | `securityProblemIds` | string | Yes | Security problem IDs to mute, comma-separated or as a JSON array | | `reason` | string | Yes | One of CONFIGURATION_NOT_AFFECTED, FALSE_POSITIVE, IGNORE, OTHER, VULNERABLE_CODE_NOT_IN_USE | | `comment` | string | No | Explanation recorded against every muted problem | @@ -804,8 +754,6 @@ Unmute several Dynatrace vulnerabilities at once, returning them to active triag | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the securityProblems.write scope | | `securityProblemIds` | string | Yes | Security problem IDs to unmute, comma-separated or as a JSON array | | `reason` | string | Yes | Reason for unmuting. AFFECTED is the only value the API accepts | | `comment` | string | No | Explanation recorded against every unmuted problem | @@ -828,8 +776,6 @@ List the remediation items of a third-party vulnerability — the components to | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the securityProblems.read scope | | `securityProblemId` | string | Yes | ID of the third-party security problem | | `remediationItemSelector` | string | No | Remediation item selector, e.g. vulnerabilityState\("VULNERABLE"\),muted\("false"\),exposure\("PUBLIC_NETWORK"\) | @@ -851,8 +797,6 @@ List runtime attacks Dynatrace Application Protection detected — injection att | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the attacks.read scope | | `attackSelector` | string | No | Attack selector, e.g. state\("EXPLOITED"\),attackType\("SQL_INJECTION"\),technology\("JAVA"\) | | `from` | string | No | Start of the timeframe as UTC milliseconds, ISO 8601, or a relative expression such as now-7d. Defaults to now-30d | | `to` | string | No | End of the timeframe in the same formats as From. Defaults to now | @@ -879,8 +823,6 @@ Get a single attack with its entry point, payload, attacker, and the vulnerabili | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the attacks.read scope | | `attackId` | string | Yes | ID of the attack | | `fields` | string | No | Comma-separated optional properties to include, each prefixed with +. Defaults to all of them: +attackTarget, +request, +entrypoint, +vulnerability, +securityProblem, +attacker, +managementZones | @@ -902,8 +844,6 @@ List the custom tags applied to the monitored entities an entity selector matche | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the entities.read scope | | `entitySelector` | string | Yes | Entity selector for the entities to read tags from, e.g. type\("HOST"\) | | `from` | string | No | Start of the timeframe as UTC milliseconds, ISO 8601, or a relative expression. Defaults to now-24h | | `to` | string | No | End of the timeframe in the same formats as From. Defaults to now | @@ -926,8 +866,6 @@ Add custom tags to every monitored entity an entity selector matches. Tags drive | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the entities.write scope | | `entitySelector` | string | Yes | Entity selector for the entities to tag, e.g. type\("HOST"\),tag\("env:staging"\) | | `tags` | json | Yes | Tags to add, as an array of objects with a key and an optional value \(e.g. \[\{"key":"owner","value":"platform"\},\{"key":"reviewed"\}\]\) | | `from` | string | No | Start of the timeframe as UTC milliseconds, ISO 8601, or a relative expression. Defaults to now-24h | @@ -952,8 +890,6 @@ Remove a custom tag from every monitored entity an entity selector matches. Dele | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the entities.write scope | | `entitySelector` | string | Yes | Entity selector for the entities to untag, e.g. type\("HOST"\),tag\("owner:old"\) | | `key` | string | Yes | Key of the tag to delete | | `value` | string | No | Value of the tag to delete. Omit it and set Delete All With Key to remove every value of the key | @@ -979,8 +915,6 @@ List the settings schemas available in the environment. Use it to find the schem | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the settings.read scope | | `fields` | string | No | Comma-separated fields to include: schemaId, displayName, maturity, latestSchemaVersion, multiObject, ordered, ownerBasedAccessControl | #### Output @@ -1001,8 +935,6 @@ List settings objects — the configuration behind maintenance windows, alerting | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the settings.read scope | | `schemaIds` | string | No | Comma-separated schema IDs, e.g. builtin:alerting.profile | | `scopes` | string | No | Comma-separated scopes, e.g. environment or HOST-06F288EE2A930951 | | `externalIds` | string | No | Comma-separated external IDs | @@ -1030,8 +962,6 @@ Get a single settings object with its value and its update token. Read it before | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the settings.read scope | | `objectId` | string | Yes | ID of the settings object | #### Output @@ -1052,8 +982,6 @@ Create a settings object — a maintenance window, alerting profile, management | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the settings.write scope | | `schemaId` | string | Yes | Schema of the object to create, e.g. builtin:alerting.maintenance-window. List Settings Schemas returns the available IDs | | `scope` | string | Yes | Scope the object applies to, e.g. environment or an entity ID such as HOST-06F288EE2A930951 | | `value` | json | Yes | The configuration itself. Its shape is defined by the schema — read an existing object of the same schema to see the expected fields | @@ -1091,8 +1019,6 @@ Update an existing settings object. Pass the update token from Get Settings Obje | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the settings.write scope | | `objectId` | string | Yes | ID of the settings object to update | | `value` | json | Yes | The full replacement configuration. Its shape is defined by the object schema — this replaces the value rather than merging into it | | `schemaVersion` | string | No | Schema version to validate against | @@ -1118,8 +1044,6 @@ Delete a settings object. Dynatrace cannot undo this. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the settings.write scope | | `objectId` | string | Yes | ID of the settings object to delete | | `updateToken` | string | No | Token from Get Settings Object. When set, the delete fails if the object changed in the meantime | @@ -1142,8 +1066,6 @@ List synthetic monitors and their IDs. Use it to find the monitor IDs to feed in | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with one of ReadSyntheticData, DataExport, or ExternalSyntheticIntegration | | `type` | string | No | Filter by monitor type: BROWSER or HTTP | | `enabled` | boolean | No | Filter to enabled \(true\) or disabled \(false\) monitors | | `location` | string | No | Filter to monitors assigned to a synthetic location | @@ -1168,8 +1090,6 @@ Trigger an on-demand batch execution of synthetic monitors, for gating a deploy | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with syntheticExecutions.write or ExternalSyntheticIntegration | | `monitors` | json | Yes | Monitors to run, as an array of objects with monitorId and optional locations and executionCount \(e.g. \[\{"monitorId":"SYNTHETIC_TEST-123","executionCount":1\}\]\). Execution count caps at 10 | | `processingMode` | string | No | STANDARD, DISABLE_PROBLEM_DETECTION, or EXECUTIONS_DETAILS_ONLY | | `failOnPerformanceIssue` | boolean | No | Treat a performance threshold breach as a failure | @@ -1208,8 +1128,6 @@ Get the status and failures of an on-demand synthetic batch execution. Poll it a | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with syntheticExecutions.read, ReadSyntheticData, or ExternalSyntheticIntegration | | `batchId` | string | Yes | Batch ID returned by Execute Synthetic Monitors | #### Output @@ -1260,8 +1178,6 @@ Get a single comment on a Dynatrace problem. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the problems.read scope | | `problemId` | string | Yes | ID of the problem the comment belongs to | | `commentId` | string | Yes | ID of the comment | @@ -1283,8 +1199,6 @@ Replace the text of an existing comment on a Dynatrace problem. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the problems.write scope | | `problemId` | string | Yes | ID of the problem the comment belongs to | | `commentId` | string | Yes | ID of the comment to update | | `message` | string | Yes | Replacement text of the comment | @@ -1311,8 +1225,6 @@ Delete a comment from a Dynatrace problem. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the problems.write scope | | `problemId` | string | Yes | ID of the problem the comment belongs to | | `commentId` | string | Yes | ID of the comment to delete | @@ -1336,8 +1248,6 @@ Create a service-level objective from a metric expression, target, and evaluatio | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the slo.write scope | | `name` | string | Yes | Name of the SLO | | `target` | number | Yes | Target success rate as a percentage, e.g. 99.5 | | `warning` | number | Yes | Warning threshold as a percentage. Must sit above the target, e.g. 99.8 | @@ -1370,8 +1280,6 @@ Update an existing service-level objective. Every field is replaced, so send the | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the slo.write scope | | `sloId` | string | Yes | ID of the SLO to update | | `name` | string | Yes | Name of the SLO | | `target` | number | Yes | Target success rate as a percentage, e.g. 99.5 | @@ -1405,8 +1313,6 @@ Delete a service-level objective. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `environmentUrl` | string | Yes | Dynatrace environment URL \(e.g., https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/abc12345 for Managed\) | -| `apiToken` | string | Yes | Dynatrace access token \(dt0c01...\) with the slo.write scope | | `sloId` | string | Yes | ID of the SLO to delete | #### Output diff --git a/apps/docs/content/docs/integrations/emailbison.mdx b/apps/docs/content/docs/integrations/emailbison.mdx index da5b8bf350a..f0687c0e4cf 100644 --- a/apps/docs/content/docs/integrations/emailbison.mdx +++ b/apps/docs/content/docs/integrations/emailbison.mdx @@ -2,7 +2,7 @@ title: Email Bison description: Manage Email Bison leads, campaigns, replies, and tags integration: - type: "emailbison" + type: "emailbison_v2" color: "#FB7A22" --- @@ -31,8 +31,6 @@ Retrieves leads from Email Bison with optional search and tag filters. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | | `search` | string | No | Search term for filtering leads | | `campaignStatus` | string | No | Lead campaign status filter: in_sequence, sequence_finished, sequence_stopped, never_contacted, or replied | | `tagIds` | array | No | Tag IDs to include | @@ -70,8 +68,6 @@ Retrieves a lead by Email Bison lead ID or email address. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | | `leadId` | string | Yes | Lead ID or email address | #### Output @@ -105,8 +101,6 @@ Creates a single lead in Email Bison. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | | `firstName` | string | Yes | Lead first name | | `lastName` | string | Yes | Lead last name | | `email` | string | Yes | Lead email address | @@ -146,8 +140,6 @@ Updates an existing Email Bison lead. Fields omitted from a PUT update may be cl | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | | `leadId` | string | Yes | Lead ID or email address | | `firstName` | string | Yes | Lead first name | | `lastName` | string | Yes | Lead last name | @@ -188,8 +180,6 @@ Retrieves Email Bison campaigns. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | #### Output @@ -222,8 +212,6 @@ Creates a new Email Bison campaign. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | | `name` | string | Yes | Campaign name | | `campaignType` | string | No | Campaign type: outbound or reply_followup | @@ -258,8 +246,6 @@ Updates Email Bison campaign settings. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | | `campaignId` | number | Yes | Campaign ID | | `name` | string | No | Campaign name | | `maxEmailsPerDay` | number | No | Maximum emails per day | @@ -302,8 +288,6 @@ Pauses, resumes, or archives an Email Bison campaign. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | | `campaignId` | number | Yes | Campaign ID | | `action` | string | Yes | Status action: pause, resume, or archive | @@ -338,8 +322,6 @@ Adds existing Email Bison leads to a campaign. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | | `campaignId` | number | Yes | Campaign ID | | `leadIds` | array | Yes | Lead IDs to add to the campaign | | `allowParallelSending` | boolean | No | Force add leads already in sequence in other campaigns | @@ -375,8 +357,6 @@ Retrieves Email Bison replies with optional status, folder, campaign, sender, le | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | | `search` | string | No | Search term for replies | | `status` | string | No | Reply status: interested, automated_reply, or not_automated_reply | | `folder` | string | No | Reply folder: inbox, sent, spam, bounced, or all | @@ -417,8 +397,6 @@ Retrieves all Email Bison tags for the authenticated workspace. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | #### Output @@ -451,8 +429,6 @@ Creates a new Email Bison tag. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | | `name` | string | Yes | Tag name | #### Output @@ -486,8 +462,6 @@ Attaches Email Bison tags to one or more leads. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Email Bison API token | -| `apiBaseUrl` | string | Yes | Email Bison instance URL that issued the token | | `tagIds` | array | Yes | Tag IDs to attach | | `leadIds` | array | Yes | Lead IDs to tag | | `skipWebhooks` | boolean | No | Skip Email Bison webhooks for this action | diff --git a/apps/docs/content/docs/integrations/fathom.mdx b/apps/docs/content/docs/integrations/fathom.mdx index a3c5703a3b7..92ef1a1073f 100644 --- a/apps/docs/content/docs/integrations/fathom.mdx +++ b/apps/docs/content/docs/integrations/fathom.mdx @@ -10,7 +10,7 @@ import { ReferenceDetails } from "@/components/ui/reference-details" {/* MANUAL-CONTENT-START:intro */} -Use [Fathom](https://fathom.video/) to retrieve meeting summaries and transcripts and inspect teams and team members. Provide a Fathom API key and the selected operation's required fields, such as a recording ID. Triggers can start a workflow when new meeting content is ready. +Use [Fathom](https://fathom.video/) to retrieve meeting summaries and transcripts and inspect teams and team members. Connect a saved Fathom credential (an API key) and fill in the selected operation's required fields, such as a recording ID. Triggers can start a workflow when new meeting content is ready. Pass returned meeting data to later steps, such as sending a summary to Slack or extracting action items. {/* MANUAL-CONTENT-END */} diff --git a/apps/docs/content/docs/integrations/grafana.mdx b/apps/docs/content/docs/integrations/grafana.mdx index 9facac4c35e..797402593d4 100644 --- a/apps/docs/content/docs/integrations/grafana.mdx +++ b/apps/docs/content/docs/integrations/grafana.mdx @@ -2,7 +2,7 @@ title: Grafana description: Interact with Grafana dashboards, alerts, and annotations integration: - type: "grafana" + type: "grafana_v2" color: "#FFFFFF" --- @@ -29,8 +29,6 @@ Get a dashboard by its UID | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `dashboardUid` | string | Yes | The UID of the dashboard to retrieve \(e.g., abc123def\) | @@ -53,8 +51,6 @@ Search and list all dashboards | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `query` | string | No | Search query to filter dashboards by title | | `tag` | string | No | Filter by tag \(comma-separated for multiple tags\) | @@ -88,8 +84,6 @@ Create a new dashboard | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `title` | string | Yes | The title of the new dashboard | | `folderUid` | string | No | The UID of the folder to create the dashboard in \(e.g., folder-abc123\) | @@ -123,8 +117,6 @@ Update an existing dashboard. Fetches the current dashboard and merges your chan | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `dashboardUid` | string | Yes | The UID of the dashboard to update \(e.g., abc123def\) | | `title` | string | No | New title for the dashboard | @@ -159,8 +151,6 @@ Delete a dashboard by its UID | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `dashboardUid` | string | Yes | The UID of the dashboard to delete \(e.g., abc123def\) | @@ -184,8 +174,6 @@ List all alert rules in the Grafana instance | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | #### Output @@ -226,8 +214,6 @@ Get a specific alert rule by its UID | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `alertRuleUid` | string | Yes | The UID of the alert rule to retrieve | @@ -268,8 +254,6 @@ Create a new alert rule | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `title` | string | Yes | The title of the alert rule | | `folderUid` | string | Yes | The UID of the folder to create the alert in \(e.g., folder-abc123\) | @@ -326,8 +310,6 @@ Update an existing alert rule. Fetches the current rule and merges your changes. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `alertRuleUid` | string | Yes | The UID of the alert rule to update | | `title` | string | No | New title for the alert rule | @@ -384,8 +366,6 @@ Delete an alert rule by its UID | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `alertRuleUid` | string | Yes | The UID of the alert rule to delete | @@ -407,8 +387,6 @@ List all alert notification contact points | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `name` | string | No | Filter contact points by exact name match | @@ -436,8 +414,6 @@ Create a notification contact point (e.g., Slack, email, PagerDuty) | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `name` | string | Yes | Name of the contact point \(groups receivers shown in the UI\) | | `type` | string | Yes | Receiver type \(e.g., slack, email, pagerduty, webhook\) | @@ -468,8 +444,6 @@ Create an annotation on a dashboard or as a global annotation | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `text` | string | Yes | The text content of the annotation | | `tags` | string | No | Comma-separated list of tags | @@ -497,8 +471,6 @@ Query annotations by time range, dashboard, or tags | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `from` | number | No | Start time in epoch milliseconds \(e.g., 1704067200000\) | | `to` | number | No | End time in epoch milliseconds \(e.g., 1704153600000\) | @@ -544,8 +516,6 @@ Update an existing annotation | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `annotationId` | number | Yes | The ID of the annotation to update | | `text` | string | No | New text content for the annotation \(PATCH supports partial updates\) | @@ -572,8 +542,6 @@ Delete an annotation by its ID | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `annotationId` | number | Yes | The ID of the annotation to delete | @@ -595,8 +563,6 @@ List all data sources configured in Grafana | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | #### Output @@ -635,8 +601,6 @@ Get a data source by its ID or UID | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `dataSourceId` | string | Yes | The UID of the data source to retrieve \(e.g., P1234AB5678\). Numeric ids are not supported — Grafana serves those only behind a disabled-by-default feature toggle | @@ -675,8 +639,6 @@ Test connectivity to a data source by its UID | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `dataSourceUid` | string | Yes | The UID of the data source to health-check \(e.g., P1234AB5678\) | @@ -700,8 +662,6 @@ List all folders in Grafana | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `limit` | number | No | Maximum number of folders to return | | `page` | number | No | Page number for pagination | @@ -740,8 +700,6 @@ Create a new folder in Grafana | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `title` | string | Yes | The title of the new folder | | `uid` | string | No | Optional UID for the folder \(auto-generated if not provided\) | @@ -779,8 +737,6 @@ Get a folder by its UID | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `folderUid` | string | Yes | The UID of the folder to retrieve \(e.g., folder-abc123\) | @@ -816,8 +772,6 @@ Update (rename) a folder. Fetches the current folder and merges your changes. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `folderUid` | string | Yes | The UID of the folder to update \(e.g., folder-abc123\) | | `title` | string | Yes | New title for the folder | @@ -854,8 +808,6 @@ Delete a folder by its UID | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `folderUid` | string | Yes | The UID of the folder to delete \(e.g., folder-abc123\) | | `forceDeleteRules` | boolean | No | Delete any alert rules stored in the folder along with it \(default false\) | @@ -880,8 +832,6 @@ Check the health of the Grafana instance (version, database status) | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | #### Output @@ -904,8 +854,6 @@ Replace a contact point by its UID. Grafana has no partial update for contact po | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `contactPointUid` | string | Yes | UID of the contact point to replace | | `name` | string | Yes | Contact point name. Grafana groups receivers that share a name | @@ -933,8 +881,6 @@ Permanently delete a contact point by its UID. Grafana refuses the delete while | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `contactPointUid` | string | Yes | UID of the contact point to delete | @@ -957,8 +903,6 @@ Move a folder under a different parent folder, or to the root by leaving the par | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `folderUid` | string | Yes | UID of the folder to move | | `parentUid` | string | No | UID of the new parent folder. Leave empty to move the folder to the root | @@ -995,8 +939,6 @@ Read an alert rule group: its evaluation interval and every rule in it. The inte | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `folderUid` | string | Yes | UID of the folder holding the rule group | | `ruleGroup` | string | Yes | Name of the rule group | @@ -1042,8 +984,6 @@ Run one or more queries against a Grafana data source that has a backend impleme | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Grafana Service Account Token | -| `baseUrl` | string | Yes | Grafana instance URL \(e.g., https://your-grafana.com) | | `organizationId` | string | No | Organization ID for multi-org Grafana instances \(e.g., 1, 2\) | | `queries` | string | Yes | JSON array of at least one query. Each needs a datasource.uid and a refId, plus the fields that data source expects — expr for Prometheus, rawSql for SQL. Example: \[\{"refId":"A","datasource":\{"uid":"P123"\},"expr":"up","format":"time_series"\}\] | | `from` | string | No | Start of the time range, either epoch milliseconds or Grafana relative time \(e.g., now-5m\). Defaults to now-1h | diff --git a/apps/docs/content/docs/integrations/infisical.mdx b/apps/docs/content/docs/integrations/infisical.mdx index efbcc7ed0ef..92a0593db7d 100644 --- a/apps/docs/content/docs/integrations/infisical.mdx +++ b/apps/docs/content/docs/integrations/infisical.mdx @@ -2,7 +2,7 @@ title: Infisical description: Manage secrets with Infisical integration: - type: "infisical" + type: "infisical_v2" color: "#F7FE62" --- @@ -10,12 +10,12 @@ import { ReferenceDetails } from "@/components/ui/reference-details" {/* MANUAL-CONTENT-START:intro */} -Use [Infisical](https://infisical.com/) to list, read, create, update, or delete secrets in a project environment. Configure the API key, project ID, environment slug, and any secret path required by the selected operation. +Use [Infisical](https://infisical.com/) to list, read, create, update, or delete secrets in a project environment. Connect a saved Infisical credential (a machine identity access token), then set the project ID, environment slug, and any secret path required by the selected operation. {/* MANUAL-CONTENT-END */} ## Use the block [#usage-instructions] -List, get, create, update, and delete secrets across project environments. +List, get, create, update, and delete secrets across project environments on Infisical Cloud or a self-hosted instance. ## Actions @@ -29,8 +29,6 @@ List all secrets in a project environment. Returns secret keys, values, comments | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Infisical API token | -| `baseUrl` | string | No | Infisical instance URL \(default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. | | `projectId` | string | Yes | The ID of the project to list secrets from | | `environment` | string | Yes | The environment slug \(e.g., "dev", "staging", "prod"\) | | `secretPath` | string | No | The path of the secrets \(default: "/"\) | @@ -91,8 +89,6 @@ Retrieve a single secret by name from a project environment. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Infisical API token | -| `baseUrl` | string | No | Infisical instance URL \(default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. | | `projectId` | string | Yes | The ID of the project | | `environment` | string | Yes | The environment slug \(e.g., "dev", "staging", "prod"\) | | `secretName` | string | Yes | The name of the secret to retrieve | @@ -152,8 +148,6 @@ Create a new secret in a project environment. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Infisical API token | -| `baseUrl` | string | No | Infisical instance URL \(default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. | | `projectId` | string | Yes | The ID of the project | | `environment` | string | Yes | The environment slug \(e.g., "dev", "staging", "prod"\) | | `secretName` | string | Yes | The name of the secret to create | @@ -213,8 +207,6 @@ Update an existing secret in a project environment. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Infisical API token | -| `baseUrl` | string | No | Infisical instance URL \(default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. | | `projectId` | string | Yes | The ID of the project | | `environment` | string | Yes | The environment slug \(e.g., "dev", "staging", "prod"\) | | `secretName` | string | Yes | The name of the secret to update | @@ -275,8 +267,6 @@ Delete a secret from a project environment. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Infisical API token | -| `baseUrl` | string | No | Infisical instance URL \(default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. | | `projectId` | string | Yes | The ID of the project | | `environment` | string | Yes | The environment slug \(e.g., "dev", "staging", "prod"\) | | `secretName` | string | Yes | The name of the secret to delete | diff --git a/apps/docs/content/docs/integrations/jotform.mdx b/apps/docs/content/docs/integrations/jotform.mdx index c8635101e58..def122e3518 100644 --- a/apps/docs/content/docs/integrations/jotform.mdx +++ b/apps/docs/content/docs/integrations/jotform.mdx @@ -2,7 +2,7 @@ title: Jotform description: Read submissions, manage forms, and wire up webhooks in Jotform integration: - type: "jotform" + type: "jotform_v2" color: "#FFFFFF" --- @@ -16,7 +16,7 @@ Use [Jotform](https://www.jotform.com/) to manage forms and submissions, create The integration authenticates with a Jotform API key, created under **Account Settings → API**. Keys are scoped to read-only or full access, so create the key at the level your operations need — creating submissions, editing forms, and managing webhooks all require full access. -An API key is only valid on the host that issued it. Use the **Region** field to match where the account lives: `us` (default), `eu` for EU data residency accounts, or `hipaa` for HIPAA-compliant accounts. A key used against the wrong host returns an authentication error. +An API key is only valid on the host that issued it. Choose the region when you connect the Jotform credential (the legacy block has a **Region** field instead) to match where the account lives: `us` (default), `eu` for EU data residency accounts, or `hipaa` for HIPAA-compliant accounts. A key used against the wrong host returns an authentication error. Jotform enforces a daily API call limit that varies by plan. Schedule high-frequency polling with that budget in mind — or prefer a webhook, to reduce polling calls. Sim still makes API calls to register and manage webhook subscriptions. @@ -45,8 +45,6 @@ List the forms on a Jotform account with their titles, status, and submission co | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `offset` | string | No | Index of the first result to return. Default 0 | | `limit` | string | No | Number of forms to return. Default 20, maximum 1000 | | `orderby` | string | No | Field to order by: id, username, title, status, created_at, updated_at, new, count, or slug | @@ -89,8 +87,6 @@ Get the details of a single Jotform form, including its status, URL, and submiss | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | Form ID, the numeric segment of the form URL | #### Output @@ -125,8 +121,6 @@ Create a new Jotform form from a list of questions, plus optional form propertie | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `questions` | json | Yes | Array of question objects, each with type, text, order, and name, e.g. \[\{"type":"control_email","text":"Email","order":"1","name":"email"\}\] | | `properties` | json | No | Form properties object, e.g. \{"title":"Contact Us","height":"600"\} | | `emails` | json | No | Array of email objects, each with type \(notification or autorespond\), from, to, subject, html, and body | @@ -159,8 +153,6 @@ Clone an existing Jotform form and return the copy. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form to clone | #### Output @@ -195,8 +187,6 @@ Delete a Jotform form. The API returns the form with status DELETED. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form to delete | #### Output @@ -226,8 +216,6 @@ Get the settings of a form: layout, limits, redirect behavior, notification emai | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form to read properties from | | `propertyKey` | string | No | Single property to read instead of the whole set, e.g. formWidth, thankurl, or activeRedirect | @@ -249,8 +237,6 @@ Update form settings such as the thank-you redirect, submission limit, width, or | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form to update | | `properties` | json | Yes | Properties to set, e.g. \{ "thankurl": "https://example.com/thanks", "activeRedirect": "thankurl", "formWidth": "650" \} | @@ -272,8 +258,6 @@ List every file uploaded through a form, with its download URL, size, type, and | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form whose uploads to list | #### Output @@ -302,8 +286,6 @@ List every question on a form with its question ID, label, and field type. Quest | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form whose questions to list | #### Output @@ -330,8 +312,6 @@ Get every property of a single form question, including its validation rules and | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form the question belongs to | | `questionId` | string | Yes | Question ID, available from the List Questions operation | @@ -359,8 +339,6 @@ Add a question to an existing Jotform form. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form to add the question to | | `questionType` | string | Yes | Field type, e.g. control_textbox, control_textarea, control_dropdown, control_radio, control_checkbox, control_fileupload, control_fullname, control_email, or control_datetime | | `text` | string | No | Question label shown on the form | @@ -392,8 +370,6 @@ Edit the properties of a form question, such as its label, order, or validation. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form the question belongs to | | `questionId` | string | Yes | ID of the question to edit | | `text` | string | No | New question label | @@ -419,8 +395,6 @@ Delete a question from a Jotform form. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form the question belongs to | | `questionId` | string | Yes | ID of the question to delete | @@ -443,8 +417,6 @@ List the submissions received by one form, with each answer available both by qu | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form whose submissions to list | | `offset` | string | No | Index of the first result to return. Default 0 | | `limit` | string | No | Number of submissions to return. Default 20, maximum 1000 | @@ -484,8 +456,6 @@ List submissions across every form on the account, optionally narrowed to specif | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `offset` | string | No | Index of the first result to return. Default 0 | | `limit` | string | No | Number of submissions to return. Default 20, maximum 1000 | | `orderby` | string | No | Field to order by: id, form_id, IP, created_at, status, new, flag, or updated_at | @@ -524,8 +494,6 @@ Get a single Jotform submission, with its answers available both by question ID | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `submissionId` | string | Yes | ID of the submission to read | #### Output @@ -556,8 +524,6 @@ Submit an entry to a Jotform form. Answers are keyed by question ID, which the L | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form to submit to | | `answers` | json | Yes | Answers keyed by question ID. Multi-field questions take either a nested object or the documented shorthand, e.g. \{"3":\{"first":"Bart","last":"Simpson"\},"4":"Hello"\} or \{"3_first":"Bart","3_last":"Simpson"\} | @@ -580,8 +546,6 @@ Edit an existing Jotform submission. Only the question IDs supplied are changed; | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `submissionId` | string | Yes | ID of the submission to edit | | `answers` | json | Yes | Answers to overwrite, keyed by question ID, e.g. \{"4":"Updated message","3":\{"first":"Lisa"\}\} or the shorthand \{"3_first":"Lisa"\}. The control keys new, flag, and status are passed through unchanged. | @@ -604,8 +568,6 @@ Delete a single Jotform submission. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `submissionId` | string | Yes | ID of the submission to delete | #### Output @@ -627,8 +589,6 @@ List every report on the account, across all forms, with the shareable URL for e | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | #### Output @@ -659,8 +619,6 @@ List the reports built from one form, each with its shareable URL. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form whose reports to list | #### Output @@ -692,8 +650,6 @@ Create a shareable report of a form, choosing the report type and which submissi | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form to build the report from | | `title` | string | Yes | Title of the report | | `listType` | string | Yes | Report type: excel, csv, grid, table, calendar, rss, or visual | @@ -725,8 +681,6 @@ Get the details and shareable URL of a single Jotform report. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `reportId` | string | Yes | ID of the report to read | #### Output @@ -758,8 +712,6 @@ Delete an existing Jotform report. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `reportId` | string | Yes | ID of the report to delete | #### Output @@ -781,8 +733,6 @@ List the webhooks registered on a form. The returned IDs are what the Delete Web | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form whose webhooks to list | #### Output @@ -805,8 +755,6 @@ Register a webhook on a form so every new submission is posted to the given URL. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form to add the webhook to | | `webhookUrl` | string | Yes | URL that Jotform posts submission data to | @@ -830,8 +778,6 @@ Remove a webhook from a form. Returns the webhooks that remain registered on the | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form the webhook belongs to | | `webhookId` | string | Yes | Webhook ID, available from the List Webhooks operation | @@ -855,8 +801,6 @@ Get the Jotform account behind the API key, including its plan, status, time zon | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | #### Output @@ -891,8 +835,6 @@ Get this month usage for the account: submissions received, payments, form views | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | #### Output @@ -919,8 +861,6 @@ Read the account activity log: forms created, updated, deleted or purged, and ac | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `action` | string | No | Activity to filter by: all \(default\), userCreation, userLogin, formCreation, formUpdate, formDelete, or formPurge | | `date` | string | No | Named date range to limit results to, e.g. lastWeek. Use startDate and endDate for an explicit range instead | | `sortBy` | string | No | Sort order: ASC or DESC | @@ -952,8 +892,6 @@ Submit several entries to a Jotform form in one call. Each entry is keyed by que | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form to submit to | | `submissions` | json | Yes | Array of submissions. Each entry maps a question ID to an object holding its answer, e.g. \[\{"1":\{"text":"Answer 1"\},"2":\{"text":"Answer 2"\}\}\] | @@ -978,8 +916,6 @@ Add several questions to an existing Jotform form in one call. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `formId` | string | Yes | ID of the form to add the questions to | | `questions` | json | Yes | Array of question objects, each with type, text, order, and name, e.g. \[\{"type":"control_head","text":"Text 1","order":"1","name":"Header1"\}\] | @@ -1007,8 +943,6 @@ List the labels on the account as a tree. Labels are how Jotform groups forms, w | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `addResources` | string | No | Set to "true" to include the resources assigned to each label | #### Output @@ -1038,8 +972,6 @@ Get the name, color, and owner of a single Jotform label. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `labelId` | string | Yes | ID of the label to read, available from the List Labels operation | #### Output @@ -1068,8 +1000,6 @@ Create a Jotform label for grouping forms and other assets, optionally nested un | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `labelName` | string | Yes | Name of the label, e.g. "IT Operations" | | `color` | string | No | Label color as a hex code, e.g. "#FFDC7B" | | `parent` | string | No | ID of the parent label to nest this label under | @@ -1098,8 +1028,6 @@ Rename a Jotform label or change its color. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `labelId` | string | Yes | ID of the label to update | | `labelName` | string | No | New name for the label | | `color` | string | No | New label color as a hex code, e.g. "#23FFDD" | @@ -1122,8 +1050,6 @@ Delete a Jotform label along with all of its sublabels. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `labelId` | string | Yes | ID of the label to delete | #### Output @@ -1145,8 +1071,6 @@ List the assets assigned to a label — forms, workflows, sheets, and apps — w | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `labelId` | string | Yes | ID of the label whose assets to list | | `offset` | string | No | Index of the first result to return. Default 0 | | `limit` | string | No | Number of assets to return | @@ -1180,8 +1104,6 @@ Assign forms, workflows, sheets, or apps to a Jotform label. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `labelId` | string | Yes | ID of the label to assign the assets to | | `resources` | json | Yes | Assets to add, each with an id and a type of form, workflow, sheet, or portal, e.g. \[\{"id":"251464995493876","type":"form"\}\] | @@ -1205,8 +1127,6 @@ Unassign forms, workflows, sheets, or apps from a Jotform label. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `labelId` | string | Yes | ID of the label to remove the assets from | | `resources` | json | Yes | Assets to remove, each with an id and a type of form, workflow, sheet, or portal, e.g. \[\{"id":"251464995493876","type":"form"\}\] | @@ -1230,8 +1150,6 @@ List the sub-users on the account with the forms and folders each one can reach, | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | #### Output @@ -1257,8 +1175,6 @@ Read the account settings behind the API key, including time zone, language, and | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `settingsKey` | string | No | Single setting to read instead of the whole set, e.g. time_zone | #### Output @@ -1294,8 +1210,6 @@ Update account settings such as name, email, website, company, industry, or time | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Jotform API key | -| `region` | string | No | Jotform data residency region the API key belongs to: "us" \(default\), "eu", or "hipaa" | | `settingsName` | string | No | New display name on the account | | `email` | string | No | New account email address | | `website` | string | No | New website recorded on the account | diff --git a/apps/docs/content/docs/integrations/jupyter.mdx b/apps/docs/content/docs/integrations/jupyter.mdx index fea8fb677a2..a0e3e48f5e4 100644 --- a/apps/docs/content/docs/integrations/jupyter.mdx +++ b/apps/docs/content/docs/integrations/jupyter.mdx @@ -2,7 +2,7 @@ title: Jupyter description: Manage files, notebooks, kernels, and sessions on a Jupyter server integration: - type: "jupyter_v2" + type: "jupyter_v3" color: "#FFFFFF" --- @@ -35,8 +35,6 @@ List files, notebooks, and subdirectories at a path on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `path` | string | No | Directory path to list, relative to the server root. Leave blank for root. | #### Output @@ -67,8 +65,6 @@ Download a file as a stored file, or read structured notebook and directory cont | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `path` | string | Yes | Path of the file or notebook to read, relative to the server root | #### Output @@ -93,8 +89,6 @@ Create a file, notebook, or directory on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `path` | string | Yes | Path to create, relative to the server root | | `type` | string | Yes | Type of entry to create: file, notebook, or directory | | `content` | string | No | Content to write. For a file, plain text. For a notebook, a JSON-stringified nbformat document \(defaults to an empty notebook\). Ignored for directories. | @@ -121,8 +115,6 @@ Upload a file to a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `directory` | string | No | Destination directory, relative to the server root. Leave blank to upload to the root directory. | | `file` | file | No | The file to upload \(UserFile object\) | | `fileName` | string | No | Optional filename override | @@ -148,8 +140,6 @@ Rename or move a file, notebook, or directory on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `path` | string | Yes | Current path of the entry, relative to the server root | | `newPath` | string | Yes | New path for the entry, relative to the server root | @@ -173,8 +163,6 @@ Delete a file, notebook, or directory on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `path` | string | Yes | Path of the entry to delete, relative to the server root | #### Output @@ -196,8 +184,6 @@ Duplicate a file or notebook into a directory on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `path` | string | Yes | Destination directory path, relative to the server root | | `copyFromPath` | string | Yes | Path of the file or notebook to copy, relative to the server root | @@ -221,8 +207,6 @@ List running kernels on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | #### Output @@ -247,8 +231,6 @@ Start a new kernel on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `kernelName` | string | No | Kernel spec name to start \(e.g. python3\). Defaults to the server default. | #### Output @@ -273,8 +255,6 @@ Shut down a running kernel on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `kernelId` | string | Yes | ID of the kernel to shut down | #### Output @@ -296,8 +276,6 @@ Restart a running kernel on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `kernelId` | string | Yes | ID of the kernel to restart | #### Output @@ -322,8 +300,6 @@ Interrupt a running kernel on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `kernelId` | string | Yes | ID of the kernel to interrupt | #### Output @@ -345,8 +321,6 @@ List available kernel specs (languages/runtimes) on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | #### Output @@ -372,8 +346,6 @@ List active sessions (notebook-to-kernel bindings) on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | #### Output @@ -403,8 +375,6 @@ Create a session that binds a notebook path to a (new or existing) kernel | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `path` | string | Yes | Notebook path to bind the session to, relative to the server root | | `kernelName` | string | No | Kernel spec name to start for this session \(e.g. python3\) | | `name` | string | No | Optional session name | @@ -437,8 +407,6 @@ Delete a session and shut down its associated kernel on a Jupyter server | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `serverUrl` | string | Yes | Base URL of the Jupyter server \(e.g. http://localhost:8888) | -| `token` | string | Yes | Jupyter server authentication token | | `sessionId` | string | Yes | ID of the session to delete | #### Output diff --git a/apps/docs/content/docs/integrations/logfire.mdx b/apps/docs/content/docs/integrations/logfire.mdx index 6c6b3a0b056..78af2860fee 100644 --- a/apps/docs/content/docs/integrations/logfire.mdx +++ b/apps/docs/content/docs/integrations/logfire.mdx @@ -2,7 +2,7 @@ title: Logfire description: Query traces, logs, and metrics in Pydantic Logfire integration: - type: "logfire" + type: "logfire_v2" color: "#000000" --- @@ -14,7 +14,7 @@ Use [Pydantic Logfire](https://pydantic.dev/logfire) to query telemetry collecte Trace lookup returns spans ordered by time with parent-child relationships for request investigation. Credential lookup identifies the organization and project targeted by a read token. -Create a project **read token** under **Settings → Read tokens**. Sim detects the cloud region from its prefix. For a self-hosted instance, set **Host** to a publicly resolvable HTTPS base URL that Sim can reach. +Create a project **read token** under **Settings → Read tokens**. Sim detects the cloud region from its prefix. For a self-hosted instance, enter a publicly resolvable HTTPS base URL that Sim can reach as the credential's region or host (the legacy block's **Host** field). {/* MANUAL-CONTENT-END */} ## Use the block [#usage-instructions] @@ -33,9 +33,6 @@ Run a read-only SQL query against Logfire traces, logs, and metrics. Reads the r | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Logfire read token | -| `region` | string | No | Logfire data region: auto, us, or eu. Auto reads the region from the token. | -| `host` | string | No | Base URL of a self-hosted Logfire instance, e.g. https://logfire.example.com. Overrides region. Leave blank for Logfire Cloud. | | `sql` | string | Yes | SQL SELECT query to run against the records or metrics table | | `minTimestamp` | string | No | ISO 8601 lower bound on start_timestamp. Defaults to 2020-01-01T00:00:00Z when omitted. | | `maxTimestamp` | string | No | ISO 8601 upper bound on start_timestamp | @@ -66,9 +63,6 @@ Search Logfire spans and logs using structured filters for message text, service | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Logfire read token | -| `region` | string | No | Logfire data region: auto, us, or eu. Auto reads the region from the token. | -| `host` | string | No | Base URL of a self-hosted Logfire instance, e.g. https://logfire.example.com. Overrides region. Leave blank for Logfire Cloud. | | `query` | string | No | Case-insensitive text to match within the record message | | `service` | string | No | Exact service name to filter on | | `spanName` | string | No | Exact span name to filter on | @@ -114,9 +108,6 @@ Fetch every span and log belonging to a Logfire trace, ordered from earliest to | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Logfire read token | -| `region` | string | No | Logfire data region: auto, us, or eu. Auto reads the region from the token. | -| `host` | string | No | Base URL of a self-hosted Logfire instance, e.g. https://logfire.example.com. Overrides region. Leave blank for Logfire Cloud. | | `traceId` | string | Yes | 32-character hexadecimal trace identifier | | `minTimestamp` | string | No | ISO 8601 lower bound on start_timestamp. Defaults to 2020-01-01T00:00:00Z when omitted. | | `maxTimestamp` | string | No | ISO 8601 upper bound on start_timestamp | @@ -157,9 +148,6 @@ Resolve which Logfire organization and project a read token belongs to. Useful f | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Logfire read token | -| `region` | string | No | Logfire data region: auto, us, or eu. Auto reads the region from the token. | -| `host` | string | No | Base URL of a self-hosted Logfire instance, e.g. https://logfire.example.com. Overrides region. Leave blank for Logfire Cloud. | #### Output diff --git a/apps/docs/content/docs/integrations/mailgun.mdx b/apps/docs/content/docs/integrations/mailgun.mdx index 85fd0f03684..fb9d98f75e3 100644 --- a/apps/docs/content/docs/integrations/mailgun.mdx +++ b/apps/docs/content/docs/integrations/mailgun.mdx @@ -2,7 +2,7 @@ title: Mailgun description: Send emails and manage mailing lists with Mailgun integration: - type: "mailgun" + type: "mailgun_v2" color: "#C12126" --- @@ -29,8 +29,6 @@ Send an email using Mailgun API | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Mailgun API key | -| `region` | string | No | Mailgun account region: "us" \(default\) or "eu" | | `domain` | string | Yes | Mailgun sending domain \(e.g., mg.example.com\) | | `from` | string | Yes | Sender email address \(e.g., sender@example.com or "Name <sender@example.com>"\) | | `to` | string | Yes | Recipient email address \(e.g., user@example.com\). Use comma-separated values for multiple recipients | @@ -61,8 +59,6 @@ Retrieve a stored message by its key | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Mailgun API key | -| `region` | string | No | Mailgun account region: "us" \(default\) or "eu" | | `domain` | string | Yes | Mailgun domain for retrieving messages \(e.g., mg.example.com\) | | `messageKey` | string | Yes | Message storage key | @@ -96,8 +92,6 @@ List events (logs) for messages sent through Mailgun | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Mailgun API key | -| `region` | string | No | Mailgun account region: "us" \(default\) or "eu" | | `domain` | string | Yes | Mailgun domain for listing events \(e.g., mg.example.com\) | | `event` | string | No | Filter by event type \(accepted, delivered, failed, opened, clicked, etc.\) | | `limit` | number | No | Maximum number of events to return \(default: 100\) | @@ -122,8 +116,6 @@ Create a new mailing list | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Mailgun API key | -| `region` | string | No | Mailgun account region: "us" \(default\) or "eu" | | `address` | string | Yes | Mailing list address \(e.g., newsletter@mg.example.com\) | | `name` | string | No | Mailing list name | | `description` | string | No | Mailing list description | @@ -149,8 +141,6 @@ Get details of a mailing list | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Mailgun API key | -| `region` | string | No | Mailgun account region: "us" \(default\) or "eu" | | `address` | string | Yes | Mailing list address to retrieve \(e.g., newsletter@mg.example.com\) | #### Output @@ -172,8 +162,6 @@ Add a member to a mailing list | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Mailgun API key | -| `region` | string | No | Mailgun account region: "us" \(default\) or "eu" | | `listAddress` | string | Yes | Mailing list address \(e.g., list@mg.example.com\) | | `address` | string | Yes | Member email address to add \(e.g., user@example.com\) | | `name` | string | No | Member name | @@ -200,8 +188,6 @@ List all domains for your Mailgun account | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Mailgun API key | -| `region` | string | No | Mailgun account region: "us" \(default\) or "eu" | #### Output @@ -223,8 +209,6 @@ Get details of a specific domain | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Mailgun API key | -| `region` | string | No | Mailgun account region: "us" \(default\) or "eu" | | `domain` | string | Yes | Domain name to retrieve details for \(e.g., mg.example.com\) | #### Output diff --git a/apps/docs/content/docs/integrations/new_relic.mdx b/apps/docs/content/docs/integrations/new_relic.mdx index 1f137bd3f51..eba47ccd62c 100644 --- a/apps/docs/content/docs/integrations/new_relic.mdx +++ b/apps/docs/content/docs/integrations/new_relic.mdx @@ -2,7 +2,7 @@ title: New Relic description: Query observability data and record deployments in New Relic integration: - type: "new_relic" + type: "new_relic_v2" color: "#000000" --- @@ -31,8 +31,6 @@ Run a NRQL query against a New Relic account using NerdGraph. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | New Relic user API key for NerdGraph | -| `region` | string | No | New Relic data center region: us or eu | | `accountId` | number | Yes | New Relic account ID to query | | `nrql` | string | Yes | NRQL query to execute | | `timeout` | number | No | Optional query timeout in seconds | @@ -56,8 +54,6 @@ Search New Relic entities by name, GUID, domain type, tags, or reporting state. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | New Relic user API key for NerdGraph | -| `region` | string | No | New Relic data center region: us or eu | | `query` | string | Yes | Entity search query, for example: name like "api" or domainType = "APM-APPLICATION" | | `cursor` | string | No | Pagination cursor from a previous entity search | @@ -91,8 +87,6 @@ Fetch a New Relic entity by GUID. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | New Relic user API key for NerdGraph | -| `region` | string | No | New Relic data center region: us or eu | | `guid` | string | Yes | Entity GUID | #### Output @@ -122,8 +116,6 @@ Record a deployment change event in New Relic change tracking. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | New Relic user API key for NerdGraph | -| `region` | string | No | New Relic data center region: us or eu | | `entityGuid` | string | Yes | GUID of the entity associated with the deployment | | `version` | string | Yes | Deployment version, release name, or commit SHA | | `shortDescription` | string | No | Short description of the deployment | diff --git a/apps/docs/content/docs/integrations/okta.mdx b/apps/docs/content/docs/integrations/okta.mdx index e844de7c47c..d5d2eeec9be 100644 --- a/apps/docs/content/docs/integrations/okta.mdx +++ b/apps/docs/content/docs/integrations/okta.mdx @@ -2,7 +2,7 @@ title: Okta description: Manage users, groups, apps, and MFA in Okta integration: - type: "okta" + type: "okta_v2" color: "#191919" --- @@ -31,8 +31,6 @@ List users in your Okta organization with optional search and filtering. Users w | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `search` | string | No | Okta search expression \(e.g., profile.firstName eq "John" or profile.email co "example.com"\) | | `filter` | string | No | Okta filter expression \(e.g., status eq "ACTIVE"\) | | `after` | string | No | Opaque pagination cursor returned as nextCursor by a previous call | @@ -74,8 +72,6 @@ Get a specific user by ID or login from your Okta organization | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | User ID or login \(email\) to look up | #### Output @@ -119,8 +115,6 @@ Create a new user in your Okta organization | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `firstName` | string | Yes | First name of the user | | `lastName` | string | Yes | Last name of the user | | `email` | string | Yes | Email address of the user | @@ -157,8 +151,6 @@ Update a user profile in your Okta organization | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | User ID or login to update | | `firstName` | string | No | Updated first name | | `lastName` | string | No | Updated last name | @@ -194,8 +186,6 @@ Activate a user in your Okta organization. Can only be performed on users with S | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | User ID or login to activate | | `sendEmail` | boolean | No | Send activation email to the user \(default: true\) | @@ -221,8 +211,6 @@ Deactivate a user in your Okta organization. This transitions the user to DEPROV | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | User ID or login to deactivate | | `sendEmail` | boolean | No | Send deactivation email to admin \(default: false\) | @@ -246,8 +234,6 @@ Suspend a user in your Okta organization. Only users with ACTIVE status can be s | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | User ID or login to suspend | #### Output @@ -270,8 +256,6 @@ Unsuspend a previously suspended user in your Okta organization. Returns the use | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | User ID or login to unsuspend | #### Output @@ -294,8 +278,6 @@ Generate a one-time token to reset a user password. Can email the reset link to | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | User ID or login to reset password for | | `sendEmail` | boolean | No | Send password reset email to the user. Okta requires this parameter and declares no default of its own; leaving it blank sends the email | @@ -319,8 +301,6 @@ Permanently delete a user from your Okta organization. Can only be performed on | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | User ID or login \(email\) to delete | | `sendEmail` | boolean | No | Send deactivation email to admin \(default: false\) | @@ -344,8 +324,6 @@ List all groups in your Okta organization with optional search and filtering | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `search` | string | No | Okta search expression for groups \(e.g., profile.name sw "Engineering" or type eq "OKTA_GROUP"\) | | `filter` | string | No | Okta filter expression \(e.g., type eq "OKTA_GROUP"\) | | `after` | string | No | Opaque pagination cursor returned as nextCursor by a previous call | @@ -380,8 +358,6 @@ Get a specific group by ID from your Okta organization | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `groupId` | string | Yes | Group ID to look up | #### Output @@ -409,8 +385,6 @@ Create a new group in your Okta organization | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `name` | string | Yes | Name of the group | | `description` | string | No | Description of the group | @@ -439,8 +413,6 @@ Update a group profile in your Okta organization. Only groups of OKTA_GROUP type | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `groupId` | string | Yes | Group ID to update | | `name` | string | No | Updated group name. Leave blank to keep the stored name | | `description` | string | No | Updated group description | @@ -470,8 +442,6 @@ Delete a group from your Okta organization. Groups of OKTA_GROUP or APP_GROUP ty | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `groupId` | string | Yes | Group ID to delete | #### Output @@ -494,8 +464,6 @@ Add a user to a group in your Okta organization | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `groupId` | string | Yes | Group ID to add the user to | | `userId` | string | Yes | User ID to add to the group | @@ -520,8 +488,6 @@ Remove a user from a group in your Okta organization | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `groupId` | string | Yes | Group ID to remove the user from | | `userId` | string | Yes | User ID to remove from the group | @@ -546,8 +512,6 @@ List all members of a specific group in your Okta organization | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `groupId` | string | Yes | Group ID to list members for | | `after` | string | No | Opaque pagination cursor returned as nextCursor by a previous call | | `limit` | number | No | Maximum number of members to return per page \(default: 1000, but Okta recommends 200\) | @@ -588,8 +552,6 @@ List the group rules in your Okta organization. Each rule assigns users to group | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `search` | string | No | Keyword to search group rules for | | `after` | string | No | Opaque pagination cursor returned as nextCursor by a previous call | | `limit` | number | No | Maximum number of rules to return \(default: 50, max: 200\) | @@ -627,8 +589,6 @@ Retrieve a single Okta group rule by ID, including the expression that decides w | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `groupRuleId` | string | Yes | Group rule ID to look up | #### Output @@ -660,8 +620,6 @@ Create a group rule that automatically assigns users matching an Okta expression | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `ruleName` | string | Yes | Name for the group rule \(maximum 50 characters\) | | `expression` | string | Yes | Okta expression that must evaluate to a boolean \(e.g., user.department=="Engineering"\) | | `assignUserToGroupIds` | string | Yes | Comma-separated group IDs that matching users are assigned to | @@ -696,8 +654,6 @@ Activate a group rule so Okta starts applying it, assigning every matching user | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `groupRuleId` | string | Yes | Group rule ID to activate | #### Output @@ -720,8 +676,6 @@ Deactivate a group rule so Okta stops applying it. Existing memberships the rule | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `groupRuleId` | string | Yes | Group rule ID to deactivate | #### Output @@ -744,8 +698,6 @@ Permanently delete a group rule. Destructive and irreversible. Optionally also r | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `groupRuleId` | string | Yes | Group rule ID to delete | | `removeUsers` | boolean | No | Also remove the users this rule assigned from the groups it targeted \(default: false\) | @@ -769,8 +721,6 @@ List the MFA factors a user has enrolled, with each factor type, provider, and e | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | Okta user ID \(not a login or email\) to list enrolled factors for | #### Output @@ -801,8 +751,6 @@ Retrieve a single enrolled MFA factor for a user, including its type, provider, | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | Okta user ID \(not a login or email\) the factor belongs to | | `factorId` | string | Yes | Factor ID to look up | @@ -832,8 +780,6 @@ Enroll an MFA factor for a user. The profile fields required depend on the facto | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | Okta user ID \(not a login or email\) to enroll the factor for | | `factorType` | string | Yes | Factor type to enroll \(sms, call, email, question, push, token:software:totp, u2f, webauthn\) | | `provider` | string | Yes | Factor provider \(OKTA, GOOGLE, FIDO, DUO, RSA, SYMANTEC, YUBICO, CUSTOM\). Each provider supports a subset of factor types | @@ -870,8 +816,6 @@ Unenroll one specific MFA factor for a user so they can re-enroll it. Destructiv | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | Okta user ID \(not a login or email\) the factor belongs to | | `factorId` | string | Yes | Factor ID to unenroll | | `removeRecoveryEnrollment` | boolean | No | Also remove the phone number as a recovery method, not only as a factor. Applies to sms and call factors only \(default: false\) | @@ -897,8 +841,6 @@ Reset every MFA factor for a user, returning all enrollments to the unenrolled s | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | User ID or login whose MFA factors will all be reset | #### Output @@ -921,8 +863,6 @@ Revoke every active Okta session for a user, signing them out of all devices imm | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | Okta user ID \(not a login or email\) whose sessions will be revoked | | `oauthTokens` | boolean | No | Also revoke the user OpenID Connect and OAuth refresh and access tokens \(default: false\) | | `forgetDevices` | boolean | No | Clear the user remembered factors for all devices \(default: true\) | @@ -947,8 +887,6 @@ Retrieve an Okta session by ID, including who it belongs to, when it expires, an | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `sessionId` | string | Yes | Session ID to look up | #### Output @@ -980,8 +918,6 @@ Revoke a single Okta session by ID, ending that sign-in immediately. Destructive | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `sessionId` | string | Yes | Session ID to revoke | #### Output @@ -1004,8 +940,6 @@ List the applications configured in your Okta organization, with optional name s | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `q` | string | No | Search for applications whose name or label starts with this value | | `filter` | string | No | Okta filter expression \(e.g., status eq "ACTIVE"\) | | `includeNonDeleted` | boolean | No | Also return inactive applications. Deleted applications stay excluded either way \(default: false\) | @@ -1042,8 +976,6 @@ Retrieve a single Okta application by ID, including its sign-on mode, status, en | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `appId` | string | Yes | Application ID to look up | #### Output @@ -1085,8 +1017,6 @@ List the users assigned to an Okta application, including how each assignment wa | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `appId` | string | Yes | Application ID to list assigned users for | | `q` | string | No | Search assigned users whose userName, firstName, lastName, or email starts with this value | | `after` | string | No | Opaque pagination cursor returned as nextCursor by a previous call | @@ -1126,8 +1056,6 @@ Assign a user to an Okta application, granting them access to it. Applications t | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `appId` | string | Yes | Application ID to assign the user to | | `userId` | string | Yes | Okta user ID to assign | | `scope` | string | No | Assignment scope: USER for a direct assignment, or GROUP | @@ -1164,8 +1092,6 @@ Unassign a user from an Okta application, revoking their access. Destructive and | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `appId` | string | Yes | Application ID to remove the user from | | `userId` | string | Yes | Okta user ID to unassign | | `sendEmail` | boolean | No | Send a deactivation email to the administrator \(default: false\) | @@ -1191,8 +1117,6 @@ List the groups assigned to an Okta application. Every member of an assigned gro | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `appId` | string | Yes | Application ID to list assigned groups for | | `q` | string | No | Search assigned groups whose name starts with this value | | `after` | string | No | Opaque pagination cursor returned as nextCursor by a previous call | @@ -1224,8 +1148,6 @@ Assign a group to an Okta application so every member of the group inherits acce | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `appId` | string | Yes | Application ID to assign the group to | | `groupId` | string | Yes | Group ID to assign | | `priority` | number | No | Assignment priority, which resolves conflicting profile mappings when a user belongs to several assigned groups | @@ -1253,8 +1175,6 @@ Unassign a group from an Okta application. Destructive: every member who had acc | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `appId` | string | Yes | Application ID to remove the group from | | `groupId` | string | Yes | Group ID to unassign | @@ -1279,8 +1199,6 @@ List the administrator roles assigned to a user. Returns both standard roles and | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | Okta user ID \(not a login or email\) to list admin roles for | #### Output @@ -1312,8 +1230,6 @@ Grant a user an administrator role. Use a standard role type such as USER_ADMIN | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | Okta user ID \(not a login or email\) to assign the admin role to | | `roleType` | string | Yes | Role type to assign: SUPER_ADMIN, ORG_ADMIN, APP_ADMIN, USER_ADMIN, HELP_DESK_ADMIN, READ_ONLY_ADMIN, API_ACCESS_MANAGEMENT_ADMIN, GROUP_MEMBERSHIP_ADMIN, REPORT_ADMIN, WORKFLOWS_ADMIN, ACCESS_CERTIFICATIONS_ADMIN, ACCESS_REQUESTS_ADMIN, or CUSTOM | | `customRoleId` | string | No | Custom role ID. Required when the role type is CUSTOM | @@ -1348,8 +1264,6 @@ Revoke an administrator role from a user. Destructive: the user immediately lose | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `userId` | string | Yes | Okta user ID \(not a login or email\) to revoke the admin role from | | `roleAssignmentId` | string | Yes | Role assignment ID to revoke, as returned by List User Roles. For a custom role this is the resource set binding ID | @@ -1374,8 +1288,6 @@ Query the Okta System Log for sign-ins, admin changes, and security events. Supp | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Okta API token for authentication | -| `domain` | string | Yes | Okta domain \(e.g., dev-123456.okta.com\) | | `since` | string | No | Start of the query time window as an ISO 8601 timestamp \(default: 7 days before "until"\). Ignored when a cursor is supplied in "after", which already encodes the resume position | | `until` | string | No | End of the query time window as an ISO 8601 timestamp \(default: now\) | | `filter` | string | No | SCIM filter expression \(e.g., eventType eq "user.session.start" or outcome.result eq "FAILURE"\) | diff --git a/apps/docs/content/docs/integrations/plane.mdx b/apps/docs/content/docs/integrations/plane.mdx index 1a5fe006d8c..c88799d7d96 100644 --- a/apps/docs/content/docs/integrations/plane.mdx +++ b/apps/docs/content/docs/integrations/plane.mdx @@ -2,7 +2,7 @@ title: Plane description: Manage projects and work items in Plane integration: - type: "plane" + type: "plane_v2" color: "#FFFFFF" --- @@ -19,7 +19,7 @@ With the Plane block, you can: - **Keep knowledge current**: Manage pages and sync project work items or pages into a Sim knowledge base. - **React to changes**: Start agents from authenticated Plane webhook events. -Create a personal access token in Plane's profile settings and enter it as the API token. API v2 is the default. For Community Edition or an older self-hosted instance, select API v1 in the advanced settings and set the instance origin, optionally including its reverse-proxy path prefix. Omit `/api/v1` and `/api/v2` from the instance URL. The block exposes core workflow actions. Supported self-hosted actions use the same operation list. Resource availability depends on the instance's edition and version. +Create a personal access token in Plane's profile settings and enter it as the API token. API v2 is the default. For Community Edition or an older self-hosted instance, select API v1 in the advanced settings and set the instance origin on the Plane credential (the legacy block's advanced settings), optionally including its reverse-proxy path prefix. Omit `/api/v1` and `/api/v2` from the instance URL. The block exposes core workflow actions. Supported self-hosted actions use the same operation list. Resource availability depends on the instance's edition and version. Explicit empty strings, nulls, and empty arrays can be supplied through **Body Overrides** using the action's canonical input names. Clearing work item labels and assignees is verified through API v1 because Plane v2 can continue returning deleted relationship IDs. The update action returns the verified cleared state; subsequent v2 reads may still include those IDs. Use API v1 when reading active relationships after a clear. @@ -44,8 +44,6 @@ Archive a project in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `pk` | string | Yes | The project id. | @@ -68,8 +66,6 @@ Archive a work item in Plane. Requires API v2. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the work item belongs to. | @@ -140,8 +136,6 @@ Confirm a work item attachment upload in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -182,8 +176,6 @@ Create a work item attachment upload in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -262,8 +254,6 @@ Create a comment in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -335,8 +325,6 @@ Create a cycle in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -407,8 +395,6 @@ Create a label in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -458,8 +444,6 @@ Create a link in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -505,8 +489,6 @@ Create a module in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -576,8 +558,6 @@ Create a project in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -689,8 +669,6 @@ Create a project page in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -773,8 +751,6 @@ Create a state in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -830,8 +806,6 @@ Create a webhook in Plane. Requires API v2. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -871,8 +845,6 @@ Create a work item in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -1014,8 +986,6 @@ Delete an attachment in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the resource belongs to. Accepts the project UUID or its bare identifier, for example `ENG`. | @@ -1040,8 +1010,6 @@ Delete a comment in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the work item belongs to. | @@ -1066,8 +1034,6 @@ Delete a cycle in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the cycle belongs to. | @@ -1091,8 +1057,6 @@ Delete a label in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the label belongs to. | @@ -1116,8 +1080,6 @@ Delete a link in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the resource belongs to. Accepts the project UUID or its bare identifier, for example `ENG`. | @@ -1142,8 +1104,6 @@ Delete a module in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the module belongs to. | @@ -1167,8 +1127,6 @@ Delete a project in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `pk` | string | Yes | The project id. | @@ -1191,8 +1149,6 @@ Delete a project page in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the resource belongs to. Accepts the project UUID or its bare identifier, for example `ENG`. | @@ -1216,8 +1172,6 @@ Delete a state in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the state belongs to. | @@ -1241,8 +1195,6 @@ Delete a webhook in Plane. Requires API v2. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `pk` | string | Yes | The webhook id. | @@ -1265,8 +1217,6 @@ Delete a work item in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the work item belongs to. | @@ -1290,8 +1240,6 @@ Get an attachment in Plane. Requires API v2. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the resource belongs to. Accepts the project UUID or its bare identifier, for example `ENG`. | @@ -1329,8 +1277,6 @@ Get a comment in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the work item belongs to. | @@ -1395,8 +1341,6 @@ Get current user in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | #### Output @@ -1426,8 +1370,6 @@ Get a cycle in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the cycle belongs to. A cycle id from a different project returns `404`, not the record. | @@ -1488,8 +1430,6 @@ Get a label in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the label belongs to. | @@ -1532,8 +1472,6 @@ Get a link in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the resource belongs to. Accepts the project UUID or its bare identifier, for example `ENG`. | @@ -1597,8 +1535,6 @@ Get a module in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the module belongs to. | @@ -1657,8 +1593,6 @@ Get a project in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `pk` | string | Yes | The project id. | @@ -1740,8 +1674,6 @@ Get a project page in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the resource belongs to. Accepts the project UUID or its bare identifier, for example `ENG`. | @@ -1811,8 +1743,6 @@ Get a project summary in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `pk` | string | Yes | Project ID or bare project identifier whose summary to retrieve. | @@ -1851,8 +1781,6 @@ Get a state in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the state belongs to. A state id from a different project returns `404`, even inside the same workspace. | @@ -1898,8 +1826,6 @@ Get a webhook in Plane. Requires API v2. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `pk` | string | Yes | The webhook id. | @@ -1932,8 +1858,6 @@ Get a work item in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the work item belongs to. | @@ -2048,8 +1972,6 @@ Get a work item by identifier in Plane. Requires API v2. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `identifier` | string | Yes | The work item's human key: the project identifier, a hyphen, and the work item's number — `PROJ-142`. The project part must start with a letter, and it is upper-cased before lookup, so `proj-142` resolves the same work item as `PROJ-142`. A project identifier is unique within a workspace, which is what makes this key unambiguous. | @@ -2119,8 +2041,6 @@ List attachments in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the resource belongs to. Accepts the project UUID or its bare identifier, for example `ENG`. | @@ -2208,8 +2128,6 @@ List comments in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the work item belongs to. | @@ -2312,8 +2230,6 @@ List cycles in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project whose cycles you want. | @@ -2429,8 +2345,6 @@ List labels in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project whose labels you want. | @@ -2547,8 +2461,6 @@ List links in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the resource belongs to. Accepts the project UUID or its bare identifier, for example `ENG`. | @@ -2634,8 +2546,6 @@ List modules in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project whose modules you want. | @@ -2745,8 +2655,6 @@ List project pages in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the resource belongs to. Accepts the project UUID or its bare identifier, for example `ENG`. | @@ -2878,8 +2786,6 @@ List projects in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `count` | boolean | No | Set to false to skip the total_count COUNT\(\*\) \(omits total_count\). | @@ -3033,8 +2939,6 @@ List states in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project whose states you want to list. | @@ -3128,8 +3032,6 @@ List webhooks in Plane. Requires API v2. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `count` | boolean | No | Set to false to skip the total_count COUNT\(\*\) \(omits total_count\). | @@ -3179,8 +3081,6 @@ List work items in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project to list work items from. | @@ -3388,8 +3288,6 @@ List work items across a workspace in Plane. Requires API v2. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `assignee_id` | string | No | Filter by `assignee_id`. | @@ -3510,8 +3408,6 @@ Add or remove cycle work items in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -3555,8 +3451,6 @@ Add or remove module work items in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -3659,8 +3553,6 @@ Regenerate a webhook secret in Plane. Requires API v2. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `pk` | string | Yes | The webhook id. | @@ -3694,8 +3586,6 @@ Transfer work items between cycles in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -3723,8 +3613,6 @@ Unarchive a project in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `pk` | string | Yes | The project id. | @@ -3747,8 +3635,6 @@ Unarchive a work item in Plane. Requires API v2. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | | `project_id` | string | Yes | The project the work item belongs to. | @@ -3819,8 +3705,6 @@ Update a comment in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -3891,8 +3775,6 @@ Update a cycle in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -3964,8 +3846,6 @@ Update a label in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -4016,8 +3896,6 @@ Update a link in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -4067,8 +3945,6 @@ Update a module in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -4139,8 +4015,6 @@ Update a project in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -4253,8 +4127,6 @@ Update a project page in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -4338,8 +4210,6 @@ Update a state in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -4396,8 +4266,6 @@ Update a webhook in Plane. Requires API v2. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | @@ -4437,8 +4305,6 @@ Update a work item in Plane. Supports API v1 compatibility. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `apiKey` | string | Yes | Plane personal access token from Profile → API tokens. | -| `baseUrl` | string | No | Plane instance origin, optionally with a reverse-proxy path prefix. Defaults to https://api.plane.so. Do not include /api/v1 or /api/v2. | | `apiVersion` | string | No | API version: v2 \(default\) for Plane Cloud and current commercial instances; v1 for Community Edition or older self-hosted instances. Unsupported operations or fields fail explicitly. | | `bodyOverrides` | json | No | JSON overrides using the canonical input names for the selected API version. Preserves empty strings, null, and empty arrays; unsupported fields are rejected. | | `workspace_slug` | string | Yes | Workspace slug from the Plane URL \(for example, my-team\). | diff --git a/apps/docs/content/docs/integrations/supabase.mdx b/apps/docs/content/docs/integrations/supabase.mdx index 815363c2ab0..1c1f8effb13 100644 --- a/apps/docs/content/docs/integrations/supabase.mdx +++ b/apps/docs/content/docs/integrations/supabase.mdx @@ -2,7 +2,7 @@ title: Supabase description: Use Supabase database integration: - type: "supabase" + type: "supabase_v2" color: "#1C1C1C" --- @@ -10,7 +10,7 @@ import { ReferenceDetails } from "@/components/ui/reference-details" {/* MANUAL-CONTENT-START:intro */} -[Supabase](https://www.supabase.com/) provides Postgres databases and related project services. Use this integration to query, insert, update, and delete table rows, or select the storage, function, and other operations listed below. Configure your Project ID and Service Role Secret; table operations also require a table name. Use [PostgREST filter syntax](https://postgrest.org/en/stable/api.html#operators) when filtering, ordering, or limiting row queries. +[Supabase](https://www.supabase.com/) provides Postgres databases and related project services. Use this integration to query, insert, update, and delete table rows, or select the storage, function, and other operations listed below. Connect a saved Supabase credential (project ID and key); table operations also require a table name. Use [PostgREST filter syntax](https://postgrest.org/en/stable/api.html#operators) when filtering, ordering, or limiting row queries. {/* MANUAL-CONTENT-END */} ## Use the block [#usage-instructions] @@ -29,7 +29,6 @@ Query data from a Supabase table | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `table` | string | Yes | The name of the Supabase table to query | | `schema` | string | No | Database schema to query from \(default: public\). Use this to access tables in other schemas. | | `select` | string | No | Columns to return \(comma-separated\). Defaults to * \(all columns\) | @@ -37,7 +36,6 @@ Query data from a Supabase table | `orderBy` | string | No | Column to order by \(add DESC for descending\) | | `limit` | number | No | Maximum number of rows to return | | `offset` | number | No | Number of rows to skip \(for pagination\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -58,11 +56,9 @@ Insert data into a Supabase table | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `table` | string | Yes | The name of the Supabase table to insert data into | | `schema` | string | No | Database schema to insert into \(default: public\). Use this to access tables in other schemas. | | `data` | array | Yes | The data to insert \(array of objects or a single object\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -83,12 +79,10 @@ Get a single row from a Supabase table based on filter criteria | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `table` | string | Yes | The name of the Supabase table to query | | `schema` | string | No | Database schema to query from \(default: public\). Use this to access tables in other schemas. | | `select` | string | No | Columns to return \(comma-separated\). Defaults to * \(all columns\) | | `filter` | string | Yes | PostgREST filter to find the specific row \(e.g., "id=eq.123"\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -109,12 +103,10 @@ Update rows in a Supabase table based on filter criteria | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `table` | string | Yes | The name of the Supabase table to update | | `schema` | string | No | Database schema to update in \(default: public\). Use this to access tables in other schemas. | | `filter` | string | Yes | PostgREST filter to identify rows to update \(e.g., "id=eq.123"\) | | `data` | object | Yes | Data to update in the matching rows | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -135,11 +127,9 @@ Delete rows from a Supabase table based on filter criteria | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `table` | string | Yes | The name of the Supabase table to delete from | | `schema` | string | No | Database schema to delete from \(default: public\). Use this to access tables in other schemas. | | `filter` | string | Yes | PostgREST filter to identify rows to delete \(e.g., "id=eq.123"\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -160,12 +150,10 @@ Insert or update data in a Supabase table (upsert operation) | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `table` | string | Yes | The name of the Supabase table to upsert data into | | `schema` | string | No | Database schema to upsert into \(default: public\). Use this to access tables in other schemas. | | `data` | array | Yes | The data to upsert \(insert or update\) - array of objects or a single object | | `onConflict` | string | No | Comma-separated column\(s\) with a unique or primary key constraint to resolve conflicts on \(e.g., "email"\). Defaults to the primary key. | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -186,12 +174,10 @@ Count rows in a Supabase table | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `table` | string | Yes | The name of the Supabase table to count rows from | | `schema` | string | No | Database schema to count from \(default: public\). Use this to access tables in other schemas. | | `filter` | string | No | PostgREST filter \(e.g., "status=eq.active"\) | | `countType` | string | No | Count type: exact, planned, or estimated \(default: exact\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -212,7 +198,6 @@ Perform full-text search on a Supabase table | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `table` | string | Yes | The name of the Supabase table to search | | `schema` | string | No | Database schema to search in \(default: public\). Use this to access tables in other schemas. | | `column` | string | Yes | The column to search in | @@ -221,7 +206,6 @@ Perform full-text search on a Supabase table | `language` | string | No | Language for text search configuration \(default: english\) | | `limit` | number | No | Maximum number of rows to return | | `offset` | number | No | Number of rows to skip \(for pagination\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -242,12 +226,10 @@ Perform similarity search using pgvector in a Supabase table | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `functionName` | string | Yes | The name of the PostgreSQL function that performs vector search \(e.g., match_documents\) | | `queryEmbedding` | array | Yes | The query vector/embedding to search for similar items | | `matchThreshold` | number | No | Minimum similarity threshold \(0-1\), typically 0.7-0.9 | | `matchCount` | number | No | Maximum number of results to return \(default: 10\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -268,10 +250,8 @@ Call a PostgreSQL function in Supabase | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `functionName` | string | Yes | The name of the PostgreSQL function to call | | `params` | object | No | Parameters to pass to the function as a JSON object | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -292,12 +272,10 @@ Invoke a Supabase Edge Function over HTTP | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `functionName` | string | Yes | The name of the Edge Function to invoke \(e.g., "hello-world"\) | | `method` | string | No | HTTP method to use: GET, POST, PUT, PATCH, or DELETE \(default: POST\) | | `body` | json | No | Request payload to send to the function as a JSON object \(ignored for GET\) | | `headers` | json | No | Additional request headers as a JSON object of header name to value | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -318,9 +296,7 @@ Introspect Supabase database schema from its OpenAPI spec to get table and colum | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `schema` | string | No | Database schema to introspect \(defaults to all user schemas, commonly "public"\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -363,7 +339,6 @@ Upload a file to a Supabase storage bucket | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the storage bucket | | `fileName` | string | Yes | The name of the file \(e.g., "document.pdf", "image.jpg"\) | | `path` | string | No | Optional folder path \(e.g., "folder/subfolder/"\) | @@ -371,7 +346,6 @@ Upload a file to a Supabase storage bucket | `contentType` | string | No | MIME type of the file \(e.g., "image/jpeg", "text/plain"\) | | `cacheControl` | string | No | Cache-Control header value in seconds for the stored object \(e.g., "3600"; default: "3600"\) | | `upsert` | boolean | No | If true, overwrites existing file \(default: false\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -397,11 +371,9 @@ Download a file from a Supabase storage bucket | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the storage bucket | | `path` | string | Yes | The path to the file to download \(e.g., "folder/file.jpg"\) | | `fileName` | string | No | Optional filename override | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -421,7 +393,6 @@ List files in a Supabase storage bucket | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the storage bucket | | `path` | string | No | The folder path to list files from \(default: root\) | | `limit` | number | No | Maximum number of files to return \(default: 100\) | @@ -429,7 +400,6 @@ List files in a Supabase storage bucket | `sortBy` | string | No | Column to sort by: name, created_at, updated_at, last_accessed_at \(default: name\) | | `sortOrder` | string | No | Sort order: asc or desc \(default: asc\) | | `search` | string | No | Search term to filter files by name | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -463,10 +433,8 @@ Delete files from a Supabase storage bucket | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the storage bucket | | `paths` | array | Yes | Array of file paths to delete \(e.g., \["folder/file1.jpg", "folder/file2.jpg"\]\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -494,11 +462,9 @@ Move a file within a Supabase storage bucket | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the storage bucket | | `fromPath` | string | Yes | The current path of the file \(e.g., "folder/old.jpg"\) | | `toPath` | string | Yes | The new path for the file \(e.g., "newfolder/new.jpg"\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -522,11 +488,9 @@ Copy a file within a Supabase storage bucket | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the storage bucket | | `fromPath` | string | Yes | The path of the source file \(e.g., "folder/source.jpg"\) | | `toPath` | string | Yes | The path for the copied file \(e.g., "folder/copy.jpg"\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -549,12 +513,10 @@ Create a new storage bucket in Supabase | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the bucket to create | | `isPublic` | boolean | No | Whether the bucket should be publicly accessible \(default: false\) | | `fileSizeLimit` | number | No | Maximum file size in bytes \(optional\) | | `allowedMimeTypes` | array | No | Array of allowed MIME types \(e.g., \["image/png", "image/jpeg"\]\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -576,12 +538,10 @@ Update the configuration of an existing Supabase storage bucket | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the bucket to update | | `isPublic` | boolean | No | Whether the bucket should be publicly accessible \(leave unset to keep the current value\) | | `fileSizeLimit` | number | No | Maximum file size in bytes \(leave unset to keep the current value\) | | `allowedMimeTypes` | array | No | Array of allowed MIME types \(e.g., \["image/png", "image/jpeg"\]\) — leave unset to keep the current value | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -603,9 +563,7 @@ Delete all objects inside a Supabase storage bucket without deleting the bucket | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the bucket to empty | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -627,8 +585,6 @@ List all storage buckets in Supabase | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -657,9 +613,7 @@ Delete a storage bucket in Supabase | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the bucket to delete | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -681,7 +635,6 @@ Get the public URL for a file in a Supabase storage bucket | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the storage bucket | | `path` | string | Yes | The path to the file \(e.g., "folder/file.jpg"\) | | `download` | boolean | No | If true, forces download instead of inline display \(default: false\) | @@ -705,12 +658,10 @@ Create a temporary signed URL for a file in a Supabase storage bucket | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the storage bucket | | `path` | string | Yes | The path to the file \(e.g., "folder/file.jpg"\) | | `expiresIn` | number | Yes | Number of seconds until the URL expires \(e.g., 3600 for 1 hour\) | | `download` | boolean | No | If true, forces download instead of inline display \(default: false\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output @@ -731,11 +682,9 @@ Create a temporary signed URL a client can use to upload directly to a Supabase | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `projectId` | string | Yes | Your Supabase project ID \(e.g., jdrkgepadsdopsntdlom\) | | `bucket` | string | Yes | The name of the storage bucket | | `path` | string | Yes | The destination path for the uploaded file \(e.g., "folder/file.jpg"\) | | `upsert` | boolean | No | If true, allows overwriting an existing file at this path \(default: false\) | -| `apiKey` | string | Yes | Your Supabase service role secret key | #### Output diff --git a/apps/docs/content/docs/integrations/thrive.mdx b/apps/docs/content/docs/integrations/thrive.mdx index 6e99a230d23..b261f1884a6 100644 --- a/apps/docs/content/docs/integrations/thrive.mdx +++ b/apps/docs/content/docs/integrations/thrive.mdx @@ -2,7 +2,7 @@ title: Thrive description: Manage users, audiences, learning and CPD on Thrive integration: - type: "thrive" + type: "thrive_v2" color: "#FFFFFF" --- @@ -29,9 +29,6 @@ Create a new user in Thrive. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `ref` | string | Yes | Your organisation's unique identifier for this individual | | `firstName` | string | Yes | The given name of the individual | | `lastName` | string | Yes | The family name of the individual | @@ -85,9 +82,6 @@ Update an existing user in Thrive by ref. Only the fields provided are changed. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `ref` | string | Yes | The user ref to update | | `firstName` | string | No | The given name of the individual | | `lastName` | string | No | The family name of the individual | @@ -141,9 +135,6 @@ Permanently delete (obfuscate) a user in Thrive by ref while retaining training | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `ref` | string | Yes | The user ref to delete | #### Output @@ -164,9 +155,6 @@ Suspend a user in Thrive by ref, marking the account inactive. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `ref` | string | Yes | The user ref to suspend | | `endDate` | string | No | The date this individual left your organisation \(ISO 8601\) | @@ -207,9 +195,6 @@ Search users in Thrive and return basic user information with pagination. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `page` | number | No | Page number for pagination \(default 1\) | | `perPage` | number | No | Number of results per page \(1-1000, default 100\) | | `updatedSince` | string | No | Return only users updated on or after this date/time \(ISO 8601\) | @@ -280,9 +265,6 @@ Get a single user in Thrive by their ID and return basic user information. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `id` | string | Yes | The user ID | #### Output @@ -343,9 +325,6 @@ Get a single user in Thrive by their ref and return basic user information. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `ref` | string | Yes | The user ref | #### Output @@ -387,9 +366,6 @@ List audiences and structures in Thrive with pagination. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `apiControlled` | boolean | No | Filter to only return audiences which are / are not API controlled | | `updatedSince` | string | No | Return only audiences updated on or after this date/time \(ISO 8601\) | | `page` | number | No | Page number for pagination \(default 1\) | @@ -430,9 +406,6 @@ Create a new audience or structure in Thrive. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `name` | string | No | The name of the audience \(max 100 characters\) | | `reference` | string | No | The external reference for the audience \(max 100 characters\) | | `parentId` | string | No | The id or reference of the parent audience/structure; leave blank for a parent audience/structure | @@ -468,9 +441,6 @@ Get a single audience or structure in Thrive by id or reference. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | Yes | The audience id or audience reference | #### Output @@ -503,9 +473,6 @@ Update an audience in Thrive, optionally moving it to a new parent. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | Yes | The audience id or audience reference | | `name` | string | No | The name of the audience \(max 100 characters\) | | `reference` | string | No | The external reference for the audience \(max 100 characters\) | @@ -541,9 +508,6 @@ Delete an audience in Thrive (only if it has no child audiences). | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | Yes | The audience id or audience reference | #### Output @@ -564,9 +528,6 @@ List the members of a Thrive audience with pagination. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | Yes | The audience id or audience reference | | `page` | number | No | Page number for pagination \(default 1\) | | `perPage` | number | No | Number of results per page \(1-1000, default 100\) | @@ -597,9 +558,6 @@ Add members to a Thrive audience by email, ref, or id. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | Yes | The audience id or audience reference | | `users` | string | Yes | JSON array of user emails/refs/ids to add \(1-100\). Example: \["user@example.com"\] | @@ -630,9 +588,6 @@ Replace a Thrive audience's entire members list with the given users (does not s | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | Yes | The audience id or audience reference | | `users` | string | Yes | JSON array of user emails/refs/ids that replaces the whole members list \(1-100, no empty array\). Example: \["user@example.com"\] | @@ -663,9 +618,6 @@ Remove a single member from a Thrive audience. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | Yes | The audience id or audience reference | | `userRef` | string | Yes | The user email, ref, or id to remove | @@ -687,9 +639,6 @@ List the managers of a Thrive audience. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | Yes | The audience id or audience reference | #### Output @@ -717,9 +666,6 @@ Add managers to a Thrive audience with their permissions. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | Yes | The audience id or audience reference | | `managers` | string | Yes | JSON array of manager objects \(1-100\). Each: \{"reference":"user@example.com","permissions":\{"audienceManager":\{"manageContent":true,"assignments":true\},"peopleManager":\{"canViewLearnPage":true,"insights":false,"manage":false\},"administrator":\{"canAddAudienceManagers":false\}\}\} | @@ -750,9 +696,6 @@ Replace a Thrive audience's entire manager list with the given managers (does no | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | Yes | The audience id or audience reference | | `managers` | string | Yes | JSON array of manager objects that replaces the whole manager list \(1-100, no empty array\). Each: \{"reference":"user@example.com","permissions":\{"audienceManager":\{"manageContent":true,"assignments":true\},"peopleManager":\{"canViewLearnPage":true,"insights":false,"manage":false\},"administrator":\{"canAddAudienceManagers":false\}\}\} | @@ -783,9 +726,6 @@ Remove a single manager from a Thrive audience. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | Yes | The audience id or audience reference | | `userId` | string | Yes | The user email, ref, or id to remove as a manager | @@ -807,9 +747,6 @@ List compliance assignments in Thrive, optionally filtered by audience. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | No | Filter by audience ID or audience reference | | `updatedSince` | string | No | Return only items updated on or after this date/time \(ISO 8601\) | | `page` | number | No | Page number for pagination \(default 1\) | @@ -845,9 +782,6 @@ Create a compliance assignment in Thrive for an audience and content item. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceId` | string | Yes | The audience ID | | `contentId` | string | Yes | The content ID for the primary content | | `alternativeContentIds` | string | No | JSON array of content IDs that can also complete the assignment | @@ -885,9 +819,6 @@ Get a single compliance assignment in Thrive by its ID. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `assignmentId` | string | Yes | The assignment ID | #### Output @@ -920,9 +851,6 @@ Update a compliance assignment in Thrive. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `assignmentId` | string | Yes | The assignment ID | | `audienceId` | string | Yes | The audience ID | | `contentId` | string | No | The content ID for the primary content | @@ -960,9 +888,6 @@ Delete a compliance assignment in Thrive. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `assignmentId` | string | Yes | The assignment ID | | `audienceId` | string | Yes | The audience ID | @@ -984,9 +909,6 @@ List enrolments for a compliance assignment in Thrive. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `assignmentId` | string | Yes | The assignment ID | | `updatedAtFrom` | string | No | Start date to filter enrolments from \(ISO 8601\) | | `updatedAtTo` | string | No | Date to filter enrolments up to \(ISO 8601\). Requires updatedAtFrom. | @@ -1029,9 +951,6 @@ Get a single enrolment for a compliance assignment in Thrive. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `assignmentId` | string | Yes | The assignment ID | | `enrolmentId` | string | Yes | The enrolment ID | @@ -1070,9 +989,6 @@ List learning completion records in Thrive, optionally filtered by user or conte | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `contentId` | string | No | Filter by content | | `isRPL` | boolean | No | Filter by completions imported via Recognition of Prior Learning \(RPL\) | | `userId` | string | No | Filter by user | @@ -1109,9 +1025,6 @@ Get a single learning completion record in Thrive by its ID. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `id` | string | Yes | The completion ID | #### Output @@ -1142,9 +1055,6 @@ Record a learning completion in Thrive for a user and content item. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `userId` | string | Yes | The user ID | | `contentId` | string | Yes | The content ID for the content completed | | `completedAt` | string | Yes | ISO8601 timestamp when the completion occurred | @@ -1167,9 +1077,6 @@ Get a single content record in Thrive by its ID. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `id` | string | Yes | Unique identifier of the content item | #### Output @@ -1208,9 +1115,6 @@ Query content records in Thrive with pagination and filtering options. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `page` | number | No | Page number for pagination \(default 1\) | | `perPage` | number | No | Number of results per page \(1-1000, default 20\) | | `types` | string | No | Comma-separated content types \(article, assessment, broadcast, cmi5, elearning, event, file, pathway, question, quiz, scorm, url, video, mixed\). If both set, omitTypes is ignored. | @@ -1258,9 +1162,6 @@ Get a single activity record in Thrive by its ID. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `id` | string | Yes | Unique identifier of the activity | #### Output @@ -1290,9 +1191,6 @@ Query activity records in Thrive with pagination and filtering options. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `page` | number | No | Page number for pagination \(default 1\) | | `perPage` | number | No | Number of results per page \(1-1000, default 20\) | | `actions` | string | No | comma-separated activity types e.g. viewed,completed | @@ -1334,9 +1232,6 @@ Get a single CPD category in Thrive by its ID. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `categoryId` | string | Yes | The CPD category ID | #### Output @@ -1359,9 +1254,6 @@ Query CPD categories in Thrive and return results with pagination. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `page` | number | No | Page number for pagination \(default 1\) | | `perPage` | number | No | Number of results per page \(1-1000, default 100\) | | `updatedSince` | string | No | Return only items updated on or after this date/time \(ISO 8601\) | @@ -1391,9 +1283,6 @@ Get a single CPD log entry in Thrive by its ID. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `logEntryId` | string | Yes | The CPD log entry ID | #### Output @@ -1426,9 +1315,6 @@ Query CPD log entries in Thrive and return results with pagination. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `page` | number | No | Page number for pagination \(default 1\) | | `perPage` | number | No | Number of results per page \(1-1000, default 100\) | | `entryDateFrom` | string | No | Filter entries after this date \(format YYYY-MM-DD hh:mm:ss\) | @@ -1469,9 +1355,6 @@ Get a single CPD requirement summary in Thrive by its ID. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `audienceRequirementId` | string | Yes | The CPD requirement ID | #### Output @@ -1497,9 +1380,6 @@ Query CPD requirement summaries in Thrive and return results with pagination. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `page` | number | No | Page number for pagination \(default 1\) | | `perPage` | number | No | Number of results per page \(1-1000, default 100\) | | `updatedSince` | string | No | Return only items updated on or after this date/time \(ISO 8601\) | @@ -1532,9 +1412,6 @@ Query CPD user log summaries in Thrive and return results with pagination. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `entryDateFrom` | string | Yes | Filter entries after this date \(format YYYY-MM-DDThh:mm:ss\) | | `entryDateTo` | string | Yes | Filter entries before this date \(format YYYY-MM-DDThh:mm:ss\) | | `userIds` | string | No | Comma-separated user IDs to filter by | @@ -1566,9 +1443,6 @@ List tags in Thrive and return tag information with pagination. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `page` | number | No | Page number for pagination \(default 1\) | | `perPage` | number | No | Number of results per page \(1-1000, default 100\) | | `updatedSince` | string | No | Return only tags updated on or after this date/time \(ISO 8601\) | @@ -1602,9 +1476,6 @@ Get a single tag in Thrive by its ID. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `tagId` | string | Yes | The tag ID | #### Output @@ -1631,9 +1502,6 @@ Add one or more tags to a learner in Thrive. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `userId` | string | Yes | The learner ID | | `tags` | string | Yes | JSON array of tag names to add \(1-100\). Example: \["leadership"\] | @@ -1656,9 +1524,6 @@ Remove one or more tags from a learner in Thrive. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `userId` | string | Yes | The learner ID | | `tags` | string | Yes | JSON array of tag names to remove \(1-100\). Example: \["leadership"\] | @@ -1681,9 +1546,6 @@ Update skills and levels for a learner in Thrive. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | | `userId` | string | Yes | The learner ID | | `skills` | string | Yes | JSON array of skill objects \(1-100\). Each: \{"tagName":"leadership","level":1,"targetLevel":3\}. level/targetLevel optional \(min -1\). | @@ -1706,9 +1568,6 @@ Get the available skill levels configured in Thrive. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `tenantId` | string | Yes | Thrive Tenant ID \(used as the Basic auth username\) | -| `apiKey` | string | Yes | Thrive API key \(used as the Basic auth password\) | -| `host` | string | No | Region-specific API host | #### Output diff --git a/apps/docs/content/docs/integrations/tinybird.mdx b/apps/docs/content/docs/integrations/tinybird.mdx index e97300ca143..7424261d15d 100644 --- a/apps/docs/content/docs/integrations/tinybird.mdx +++ b/apps/docs/content/docs/integrations/tinybird.mdx @@ -2,7 +2,7 @@ title: Tinybird description: Send events, query data, and manage Data Sources with Tinybird integration: - type: "tinybird" + type: "tinybird_v2" color: "#2EF598" --- @@ -29,13 +29,11 @@ Send events to a Tinybird Data Source using the Events API. Supports JSON and ND | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `base_url` | string | Yes | Tinybird API base URL \(e.g., https://api.tinybird.co or https://api.us-east.tinybird.co) | | `datasource` | string | Yes | Name of the Tinybird Data Source to send events to. Example: "events_raw", "user_analytics" | | `data` | string | Yes | Data to send as NDJSON \(newline-delimited JSON\) or JSON string. Each event should be a valid JSON object. Example NDJSON: \{"user_id": 1, "event": "click"\}\n\{"user_id": 2, "event": "view"\} | | `wait` | boolean | No | Wait for database acknowledgment before responding. Enables safer retries but introduces latency. Defaults to false. | | `format` | string | No | Format of the events data: "ndjson" \(default\) or "json" | | `compression` | string | No | Compression format: "none" \(default\) or "gzip" | -| `token` | string | Yes | Tinybird API Token with DATASOURCES:APPEND or DATASOURCES:CREATE scope | #### Output @@ -56,10 +54,8 @@ Execute SQL queries against Tinybird Pipes and Data Sources using the Query API. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `base_url` | string | Yes | Tinybird API base URL \(e.g., https://api.tinybird.co) | | `query` | string | Yes | SQL query to execute. Specify your desired output format \(e.g., FORMAT JSON, FORMAT CSV, FORMAT TSV\). JSON format provides structured data, while other formats return raw text. Example: "SELECT * FROM my_datasource LIMIT 100 FORMAT JSON" | | `pipeline` | string | No | Optional pipe name. When provided, enables SELECT * FROM _ syntax. Example: "my_pipe", "analytics_pipe" | -| `token` | string | Yes | Tinybird API Token with PIPES:READ scope | #### Output @@ -85,11 +81,9 @@ Call a published Tinybird Pipe API Endpoint by name, passing dynamic parameters | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `base_url` | string | Yes | Tinybird API base URL \(e.g., https://api.tinybird.co) | | `pipe` | string | Yes | Name of the published Pipe API Endpoint to call. Example: "top_pages" | | `parameters` | json | No | Dynamic Pipe parameters as a JSON object, sent as query-string arguments. Example: \{"start_date": "2024-01-01", "limit": 10\} | | `q` | string | No | Optional SQL to run on top of the Pipe result. Use "_" to reference the Pipe. Example: "SELECT count\(\) FROM _" | -| `token` | string | Yes | Tinybird API Token with PIPES:READ scope | #### Output @@ -118,11 +112,9 @@ Append data to a Tinybird Data Source from a remote file URL (CSV, NDJSON, Parqu | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `base_url` | string | Yes | Tinybird API base URL \(e.g., https://api.tinybird.co) | | `datasource` | string | Yes | Name of the existing Data Source to append to. Example: "events_raw" | | `url` | string | Yes | Publicly accessible URL of the file to append. Example: "https://example.com/data.csv" | | `format` | string | No | Format of the source file: "csv" \(default\), "ndjson", or "parquet" | -| `token` | string | Yes | Tinybird API Token with DATASOURCES:APPEND or DATASOURCES:CREATE scope | #### Output @@ -148,9 +140,7 @@ Delete all rows from a Tinybird Data Source. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `base_url` | string | Yes | Tinybird API base URL \(e.g., https://api.tinybird.co) | | `datasource` | string | Yes | Name of the Data Source to truncate. Example: "events_raw" | -| `token` | string | Yes | Tinybird API Token with DATASOURCES:CREATE scope | #### Output @@ -171,11 +161,9 @@ Delete rows from a Tinybird Data Source matching a SQL condition. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `base_url` | string | Yes | Tinybird API base URL \(e.g., https://api.tinybird.co) | | `datasource` | string | Yes | Name of the Data Source to delete rows from. Example: "events_raw" | | `delete_condition` | string | Yes | SQL WHERE-clause condition selecting the rows to delete. Example: "country = 'ES'" or "event_date < '2024-01-01'" | | `dry_run` | boolean | No | When true, returns how many rows would be deleted without deleting them. Defaults to false. | -| `token` | string | Yes | Tinybird API Token with DATASOURCES:CREATE scope | #### Output @@ -200,9 +188,7 @@ Check the status of an asynchronous Tinybird job (import, delete, etc.) by ID. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `base_url` | string | Yes | Tinybird API base URL \(e.g., https://api.tinybird.co) | | `job_id` | string | Yes | ID of the job to check, as returned by an append or delete operation | -| `token` | string | Yes | Tinybird API Token with ADMIN scope, or the token that started the job | #### Output diff --git a/apps/docs/content/docs/integrations/twilio_sms.mdx b/apps/docs/content/docs/integrations/twilio_sms.mdx index f0d3e00b4b5..39bdd4f6cfb 100644 --- a/apps/docs/content/docs/integrations/twilio_sms.mdx +++ b/apps/docs/content/docs/integrations/twilio_sms.mdx @@ -2,7 +2,7 @@ title: Twilio SMS description: Send SMS messages integration: - type: "twilio_sms" + type: "twilio_sms_v2" color: "#F22F46" --- @@ -31,8 +31,6 @@ Send text messages to single or multiple recipients using the Twilio API. | --------- | ---- | -------- | ----------- | | `phoneNumbers` | string | Yes | Phone numbers to send the message to in E.164 format \(e.g., +15551234567\), separated by newlines | | `message` | string | Yes | Message to send | -| `accountSid` | string | Yes | Twilio Account SID | -| `authToken` | string | Yes | Twilio Auth Token | | `fromNumber` | string | Yes | Twilio phone number to send the message from in E.164 format \(e.g., +15551234567\) | #### Output diff --git a/apps/docs/content/docs/integrations/twilio_voice.mdx b/apps/docs/content/docs/integrations/twilio_voice.mdx index d6b3458e6fe..8e7527ab8ae 100644 --- a/apps/docs/content/docs/integrations/twilio_voice.mdx +++ b/apps/docs/content/docs/integrations/twilio_voice.mdx @@ -2,7 +2,7 @@ title: Twilio Voice description: Make and manage phone calls integration: - type: "twilio_voice" + type: "twilio_voice_v2" color: "#F22F46" --- @@ -35,8 +35,6 @@ Make an outbound phone call using Twilio Voice API. | `twiml` | string | No | TwiML instructions to execute. Use square brackets instead of angle brackets \(e.g., \[Response\]\[Say\]Hello\[/Say\]\[/Response\]\) | | `statusCallback` | string | No | Webhook URL for call status updates | | `statusCallbackMethod` | string | No | HTTP method for status callback \(GET or POST\) | -| `accountSid` | string | Yes | Twilio Account SID | -| `authToken` | string | Yes | Twilio Auth Token | | `record` | boolean | No | Whether to record the call | | `recordingStatusCallback` | string | No | Webhook URL for recording status updates | | `timeout` | number | No | Time to wait for answer before giving up \(seconds, default: 60\) | @@ -69,8 +67,6 @@ Retrieve a list of calls made to and from an account. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `accountSid` | string | Yes | Twilio Account SID | -| `authToken` | string | Yes | Twilio Auth Token | | `to` | string | No | Filter by calls to this phone number in E.164 format \(e.g., +14155551234\) | | `from` | string | No | Filter by calls from this phone number in E.164 format \(e.g., +14155559876\) | | `status` | string | No | Filter by call status \(e.g., queued, ringing, in-progress, completed, busy, failed, no-answer, canceled\) | @@ -102,8 +98,6 @@ Retrieve call recording information and transcription (if enabled via TwiML). | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | | `recordingSid` | string | Yes | Recording SID to retrieve \(e.g., RExxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\) | -| `accountSid` | string | Yes | Twilio Account SID | -| `authToken` | string | Yes | Twilio Auth Token | #### Output diff --git a/apps/docs/content/docs/integrations/upstash.mdx b/apps/docs/content/docs/integrations/upstash.mdx index 4e1686b1b7d..26828ab92bd 100644 --- a/apps/docs/content/docs/integrations/upstash.mdx +++ b/apps/docs/content/docs/integrations/upstash.mdx @@ -2,7 +2,7 @@ title: Upstash description: Serverless Redis with Upstash integration: - type: "upstash" + type: "upstash_v2" color: "#181C1E" --- @@ -29,8 +29,6 @@ Get the value of a key from Upstash Redis. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The key to retrieve | #### Output @@ -52,8 +50,6 @@ Set the value of a key in Upstash Redis with an optional expiration time in seco | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The key to set | | `value` | string | Yes | The value to store | | `ex` | number | No | Expiration time in seconds \(optional\) | @@ -77,8 +73,6 @@ Delete a key from Upstash Redis. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The key to delete | #### Output @@ -100,8 +94,6 @@ List keys matching a pattern in Upstash Redis. Defaults to listing all keys (*). | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `pattern` | string | No | Pattern to match keys \(e.g., "user:*"\). Defaults to "*" for all keys. | #### Output @@ -124,8 +116,6 @@ Execute an arbitrary Redis command against Upstash Redis. Pass the full command | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `command` | string | Yes | Redis command as a JSON array \(e.g., \["HSET", "myhash", "field1", "value1"\]\) or a simple command string \(e.g., "PING"\) | #### Output @@ -147,8 +137,6 @@ Set a field in a hash stored at a key in Upstash Redis. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The hash key | | `field` | string | Yes | The field name within the hash | | `value` | string | Yes | The value to store in the hash field | @@ -173,8 +161,6 @@ Get the value of a field in a hash stored at a key in Upstash Redis. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The hash key | | `field` | string | Yes | The field name to retrieve | @@ -198,8 +184,6 @@ Get all fields and values of a hash stored at a key in Upstash Redis. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The hash key | #### Output @@ -222,8 +206,6 @@ Atomically increment the integer value of a key by one in Upstash Redis. If the | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The key to increment | #### Output @@ -245,8 +227,6 @@ Set a timeout on a key in Upstash Redis. After the timeout, the key is deleted. | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The key to set expiration on | | `seconds` | number | Yes | Timeout in seconds | @@ -269,8 +249,6 @@ Get the remaining time to live of a key in Upstash Redis. Returns -1 if the key | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The key to check TTL for | #### Output @@ -292,8 +270,6 @@ Prepend a value to the beginning of a list in Upstash Redis. Creates the list if | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The list key | | `value` | string | Yes | The value to prepend to the list | @@ -316,8 +292,6 @@ Get a range of elements from a list in Upstash Redis. Use 0 and -1 for start and | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The list key | | `start` | number | Yes | Start index \(0-based, negative values count from end\) | | `stop` | number | Yes | Stop index \(inclusive, -1 for last element\) | @@ -342,8 +316,6 @@ Check if a key exists in Upstash Redis. Returns true if the key exists, false ot | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The key to check | #### Output @@ -365,8 +337,6 @@ Set the value of a key only if it does not already exist. Returns true if the ke | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The key to set | | `value` | string | Yes | The value to store if the key does not exist | @@ -389,8 +359,6 @@ Increment the integer value of a key by a given amount. Use a negative value to | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `restUrl` | string | Yes | Upstash Redis REST URL | -| `restToken` | string | Yes | Upstash Redis REST Token | | `key` | string | Yes | The key to increment | | `increment` | number | Yes | Amount to increment by \(use negative value to decrement\) | diff --git a/apps/docs/content/docs/platform/self-hosting/environment-variables.mdx b/apps/docs/content/docs/platform/self-hosting/environment-variables.mdx index bef679c734a..fe349e5a87f 100644 --- a/apps/docs/content/docs/platform/self-hosting/environment-variables.mdx +++ b/apps/docs/content/docs/platform/self-hosting/environment-variables.mdx @@ -158,7 +158,7 @@ Google, GitHub, and Microsoft sign-in, their callback URLs, and the `DISABLE_*_A ## Integration credentials -OAuth integrations require a provider application and its credentials on a self-hosted deployment. API-key integrations use the keys supplied in their blocks. The full table, redirect-URI format, and setup steps are in [Integrations and OAuth](/platform/self-hosting/integrations-oauth). +OAuth integrations require a provider application and its credentials on a self-hosted deployment. API-key integrations use the saved credentials users add under **Integrations**, and need no deployment configuration. The full table, redirect-URI format, and setup steps are in [Integrations and OAuth](/platform/self-hosting/integrations-oauth). ### Keyless cloud credentials [#workload-identity] diff --git a/apps/sim/app/workspace/[workspaceId]/integrations/components/connect-service-account-modal/token-service-account-modal.tsx b/apps/sim/app/workspace/[workspaceId]/integrations/components/connect-service-account-modal/token-service-account-modal.tsx index 590b0e19bc3..4822a473ae8 100644 --- a/apps/sim/app/workspace/[workspaceId]/integrations/components/connect-service-account-modal/token-service-account-modal.tsx +++ b/apps/sim/app/workspace/[workspaceId]/integrations/components/connect-service-account-modal/token-service-account-modal.tsx @@ -110,7 +110,7 @@ function TokenServiceAccountModalForm({ const workspaceField = descriptor.fields.find((field) => field.id === 'providerWorkspaceId') const trimmedToken = apiToken.trim() - const normalizedDomain = normalizeDomainInput(domain) + const normalizedDomain = domainField?.url ? domain.trim() : normalizeDomainInput(domain) const isPending = createCredential.isPending || updateCredential.isPending || submitPending === true const isDisabled = diff --git a/apps/sim/blocks/blocks/algolia.ts b/apps/sim/blocks/blocks/algolia.ts index 8844c848648..fbcbe319e9e 100644 --- a/apps/sim/blocks/blocks/algolia.ts +++ b/apps/sim/blocks/blocks/algolia.ts @@ -1,9 +1,12 @@ import { AlgoliaIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' export const AlgoliaBlock: BlockConfig = { type: 'algolia', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'algolia_v2' }, name: 'Algolia', description: 'Search and manage Algolia indices', longDescription: @@ -847,3 +850,17 @@ export const AlgoliaBlockMeta = { }, ], } as const satisfies BlockMeta + +export const AlgoliaV2Block: BlockConfig = { + ...AlgoliaBlock, + type: 'algolia_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(AlgoliaBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'algolia', + title: 'Algolia Credential', + }), +} diff --git a/apps/sim/blocks/blocks/azure_devops.ts b/apps/sim/blocks/blocks/azure_devops.ts index cbc1a764fbc..00e429090a7 100644 --- a/apps/sim/blocks/blocks/azure_devops.ts +++ b/apps/sim/blocks/blocks/azure_devops.ts @@ -1,6 +1,7 @@ import { AzureIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' import type { AzureDevOpsBasicWorkItemType } from '@/tools/azure_devops/types' import { AZURE_DEVOPS_BASIC_WORK_ITEM_STATES } from '@/tools/azure_devops/utils' import { getTrigger } from '@/triggers' @@ -14,6 +15,8 @@ function normalizeDate(input: unknown): string | undefined { export const AzureDevOpsBlock: BlockConfig = { type: 'azure_devops', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'azure_devops_v2' }, name: 'Azure DevOps', description: 'Interact with Azure DevOps pipelines, builds, and work items', longDescription: @@ -797,3 +800,17 @@ export const AzureDevOpsBlockMeta = { }, ], } as const satisfies BlockMeta + +export const AzureDevOpsV2Block: BlockConfig = { + ...AzureDevOpsBlock, + type: 'azure_devops_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(AzureDevOpsBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'azure_devops', + title: 'Azure DevOps Credential', + }), +} diff --git a/apps/sim/blocks/blocks/convex.ts b/apps/sim/blocks/blocks/convex.ts index 95f0c2f51c6..bd0b7c42f6a 100644 --- a/apps/sim/blocks/blocks/convex.ts +++ b/apps/sim/blocks/blocks/convex.ts @@ -1,5 +1,6 @@ import { ConvexIcon } from '@/components/icons' import { AuthMode, type BlockConfig, type BlockMeta, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' /** * A List Documents page is resumed with either the page cursor or the snapshot @@ -9,6 +10,8 @@ const PAGE_RESUME_FIELD = ['pageCursor', 'snapshot'] as const export const ConvexBlock: BlockConfig = { type: 'convex', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'convex_v2' }, name: 'Convex', description: 'Use Convex database', authMode: AuthMode.ApiKey, @@ -333,3 +336,17 @@ export const ConvexBlockMeta = { }, ], } as const satisfies BlockMeta + +export const ConvexV2Block: BlockConfig = { + ...ConvexBlock, + type: 'convex_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(ConvexBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'convex', + title: 'Convex Credential', + }), +} diff --git a/apps/sim/blocks/blocks/devin.ts b/apps/sim/blocks/blocks/devin.ts index 3b9f6a4da35..fd1688fccdf 100644 --- a/apps/sim/blocks/blocks/devin.ts +++ b/apps/sim/blocks/blocks/devin.ts @@ -1,6 +1,7 @@ import { DevinIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' const SESSION_OBJECT_OPERATIONS = [ 'create_session', @@ -12,6 +13,8 @@ const SESSION_OBJECT_OPERATIONS = [ export const DevinBlock: BlockConfig = { type: 'devin', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'devin_v2' }, name: 'Devin', description: 'Autonomous AI software engineer', longDescription: @@ -451,3 +454,17 @@ export const DevinBlockMeta = { }, ], } as const satisfies BlockMeta + +export const DevinV2Block: BlockConfig = { + ...DevinBlock, + type: 'devin_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(DevinBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'devin', + title: 'Devin Credential', + }), +} diff --git a/apps/sim/blocks/blocks/dynatrace.ts b/apps/sim/blocks/blocks/dynatrace.ts index 61b74c9d7ff..7d22d6a2153 100644 --- a/apps/sim/blocks/blocks/dynatrace.ts +++ b/apps/sim/blocks/blocks/dynatrace.ts @@ -1,6 +1,7 @@ import { DynatraceIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' /** Operations that accept the shared `from` timeframe parameter. */ const FROM_OPERATIONS = [ @@ -111,6 +112,8 @@ const SETTINGS_OBJECT_ID_OPERATIONS = [ export const DynatraceBlock: BlockConfig = { type: 'dynatrace', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'dynatrace_v2' }, name: 'Dynatrace', description: 'Manage Dynatrace problems, metrics, entities, logs, SLOs, settings, and security', longDescription: @@ -2310,3 +2313,40 @@ export const DynatraceBlockMeta = { }, ], } as const satisfies BlockMeta + +export const DynatraceV2Block: BlockConfig = { + ...DynatraceBlock, + type: 'dynatrace_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + canvasPresentation: { + ...DynatraceBlock.canvasPresentation, + defaultTitle: 'Dynatrace', + sentences: { + byOperation: { + ...DynatraceBlock.canvasPresentation?.sentences?.byOperation, + dynatrace_list_problems: ['List problems', { text: 'matching', field: 'problemSelector' }], + dynatrace_list_metrics: ['List metrics', { text: 'matching', field: 'text' }], + dynatrace_list_entity_types: ['List entity types'], + dynatrace_list_events: ['List events', { text: 'matching', field: 'eventSelector' }], + dynatrace_search_logs: ['Search logs', { text: 'for', field: 'logQuery' }], + dynatrace_list_slos: ['List SLOs', { text: 'matching', field: 'sloSelector' }], + dynatrace_list_security_problems: [ + 'List security problems', + { text: 'matching', field: 'securityProblemSelector' }, + ], + dynatrace_list_attacks: ['List attacks', { text: 'matching', field: 'attackSelector' }], + dynatrace_list_settings_schemas: ['List settings schemas'], + dynatrace_list_synthetic_monitors: ['List synthetic monitors'], + dynatrace_get_audit_logs: ['Get audit logs', { text: 'matching', field: 'auditFilter' }], + }, + }, + }, + ...withSavedCredential(DynatraceBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'dynatrace', + title: 'Dynatrace Credential', + }), +} diff --git a/apps/sim/blocks/blocks/emailbison.ts b/apps/sim/blocks/blocks/emailbison.ts index ab373c27529..906fe981a87 100644 --- a/apps/sim/blocks/blocks/emailbison.ts +++ b/apps/sim/blocks/blocks/emailbison.ts @@ -1,6 +1,7 @@ import { EmailBisonIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' import { getTrigger } from '@/triggers' const LEAD_MUTATION_OPERATIONS = ['create_lead', 'update_lead'] as const @@ -34,6 +35,8 @@ const EMAILBISON_TRIGGER_IDS = [ export const EmailBisonBlock: BlockConfig = { type: 'emailbison', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'emailbison_v2' }, name: 'Email Bison', description: 'Manage Email Bison leads, campaigns, replies, and tags', longDescription: @@ -771,3 +774,17 @@ export const EmailBisonBlockMeta = { }, ], } as const satisfies BlockMeta + +export const EmailBisonV2Block: BlockConfig = { + ...EmailBisonBlock, + type: 'emailbison_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(EmailBisonBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'emailbison', + title: 'Email Bison Credential', + }), +} diff --git a/apps/sim/blocks/blocks/grafana.ts b/apps/sim/blocks/blocks/grafana.ts index 00fc54ead0c..e5811970090 100644 --- a/apps/sim/blocks/blocks/grafana.ts +++ b/apps/sim/blocks/blocks/grafana.ts @@ -1,9 +1,12 @@ import { GrafanaIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' export const GrafanaBlock: BlockConfig = { type: 'grafana', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'grafana_v2' }, name: 'Grafana', description: 'Interact with Grafana dashboards, alerts, and annotations', authMode: AuthMode.ApiKey, @@ -1596,3 +1599,17 @@ export const GrafanaBlockMeta = { }, ], } as const satisfies BlockMeta + +export const GrafanaV2Block: BlockConfig = { + ...GrafanaBlock, + type: 'grafana_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(GrafanaBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'grafana', + title: 'Grafana Credential', + }), +} diff --git a/apps/sim/blocks/blocks/infisical.ts b/apps/sim/blocks/blocks/infisical.ts index 7386f12234b..b233d6f3744 100644 --- a/apps/sim/blocks/blocks/infisical.ts +++ b/apps/sim/blocks/blocks/infisical.ts @@ -1,9 +1,12 @@ import { InfisicalIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' export const InfisicalBlock: BlockConfig = { type: 'infisical', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'infisical_v2' }, name: 'Infisical', description: 'Manage secrets with Infisical', longDescription: 'List, get, create, update, and delete secrets across project environments.', @@ -364,3 +367,23 @@ export const InfisicalBlockMeta = { }, ], } as const satisfies BlockMeta + +export const InfisicalV2Block: BlockConfig = { + ...InfisicalBlock, + type: 'infisical_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + longDescription: + 'List, get, create, update, and delete secrets across project environments on Infisical Cloud or a self-hosted instance.', + ...withSavedCredential( + InfisicalBlock, + { + id: 'credential', + type: 'oauth-input', + serviceId: 'infisical', + title: 'Infisical Credential', + }, + { required: true } + ), +} diff --git a/apps/sim/blocks/blocks/jotform.ts b/apps/sim/blocks/blocks/jotform.ts index d22a56dfcc7..7157680f467 100644 --- a/apps/sim/blocks/blocks/jotform.ts +++ b/apps/sim/blocks/blocks/jotform.ts @@ -1,5 +1,6 @@ import { JotformIcon } from '@/components/icons' import { AuthMode, type BlockConfig, type BlockMeta, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' import { getTrigger } from '@/triggers' /** @@ -53,6 +54,8 @@ const LABEL_RESOURCE_OPERATIONS = ['add_label_resources', 'remove_label_resource export const JotformBlock: BlockConfig = { type: 'jotform', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'jotform_v2' }, name: 'Jotform', description: 'Read submissions, manage forms, and wire up webhooks in Jotform', longDescription: @@ -1095,3 +1098,16 @@ export const JotformBlockMeta = { }, ], } as const satisfies BlockMeta + +export const JotformV2Block: BlockConfig = { + ...JotformBlock, + type: 'jotform_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential( + JotformBlock, + { id: 'credential', type: 'oauth-input', serviceId: 'jotform', title: 'Jotform Credential' }, + { required: true } + ), +} diff --git a/apps/sim/blocks/blocks/jupyter.ts b/apps/sim/blocks/blocks/jupyter.ts index 01f0f5d444d..12f41d9f88e 100644 --- a/apps/sim/blocks/blocks/jupyter.ts +++ b/apps/sim/blocks/blocks/jupyter.ts @@ -1,7 +1,11 @@ import { JupyterIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' -import { createVersionedToolSelector, normalizeFileInput } from '@/blocks/utils' +import { + createVersionedToolSelector, + normalizeFileInput, + withSavedCredential, +} from '@/blocks/utils' const PATH_OPERATIONS = [ 'jupyter_list_contents', @@ -35,7 +39,7 @@ export const JupyterBlock = { type: 'jupyter', name: 'Jupyter (Legacy)', hideFromToolbar: true, - sunset: { status: 'legacy', replacedBy: 'jupyter_v2' }, + sunset: { status: 'legacy', replacedBy: 'jupyter_v3' }, description: 'Manage files, notebooks, kernels, and sessions on a Jupyter server', longDescription: 'Browse, read, create, upload, rename, copy, and delete files and notebooks; start, stop, restart, and interrupt kernels; and manage sessions that bind notebooks to kernels.', @@ -406,8 +410,8 @@ export const JupyterV2Block: BlockConfig = { ...JupyterBlock, type: 'jupyter_v2', name: 'Jupyter', - hideFromToolbar: false, - sunset: undefined, + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'jupyter_v3' }, tools: { ...JupyterBlock.tools, access: JupyterBlock.tools.access.map((toolId) => @@ -492,3 +496,17 @@ export const JupyterBlockMeta = { }, ], } as const satisfies BlockMeta + +export const JupyterV3Block: BlockConfig = { + ...JupyterV2Block, + type: 'jupyter_v3', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(JupyterV2Block, { + id: 'credential', + type: 'oauth-input', + serviceId: 'jupyter', + title: 'Jupyter Credential', + }), +} diff --git a/apps/sim/blocks/blocks/logfire.ts b/apps/sim/blocks/blocks/logfire.ts index ffe79896faa..7c651b997ab 100644 --- a/apps/sim/blocks/blocks/logfire.ts +++ b/apps/sim/blocks/blocks/logfire.ts @@ -2,6 +2,7 @@ import { Bug, ClipboardList, Clock, Database, File, Search, Server } from '@sim/ import { LogfireIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' const toBoolean = (value: unknown): boolean | undefined => { if (value === true || value === 'true') return true @@ -75,6 +76,8 @@ const SEARCH_FILTER_FIELD = ['query', 'service', 'spanName'] as const export const LogfireBlock: BlockConfig = { type: 'logfire', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'logfire_v2' }, name: 'Logfire', description: 'Query traces, logs, and metrics in Pydantic Logfire', longDescription: @@ -543,3 +546,18 @@ export const LogfireBlockMeta = { }, ], } as const satisfies BlockMeta + +export const LogfireV2Block: BlockConfig = { + ...LogfireBlock, + type: 'logfire_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + longDescription: + 'Run SQL over your observability data, search spans and logs with structured filters, pull an entire trace by ID, and confirm which project a read token targets.', + ...withSavedCredential( + LogfireBlock, + { id: 'credential', type: 'oauth-input', serviceId: 'logfire', title: 'Logfire Credential' }, + { required: true } + ), +} diff --git a/apps/sim/blocks/blocks/mailgun.ts b/apps/sim/blocks/blocks/mailgun.ts index 2d6c9e4045a..58f90b9cb72 100644 --- a/apps/sim/blocks/blocks/mailgun.ts +++ b/apps/sim/blocks/blocks/mailgun.ts @@ -1,9 +1,12 @@ import { MailgunIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' -import { IntegrationType } from '@/blocks/types' +import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' export const MailgunBlock: BlockConfig = { type: 'mailgun', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'mailgun_v2' }, name: 'Mailgun', description: 'Send emails and manage mailing lists with Mailgun', longDescription: @@ -552,3 +555,16 @@ export const MailgunBlockMeta = { }, ], } as const satisfies BlockMeta + +export const MailgunV2Block: BlockConfig = { + ...MailgunBlock, + type: 'mailgun_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential( + MailgunBlock, + { id: 'credential', type: 'oauth-input', serviceId: 'mailgun', title: 'Mailgun Credential' }, + { required: true } + ), +} diff --git a/apps/sim/blocks/blocks/new_relic.ts b/apps/sim/blocks/blocks/new_relic.ts index d6e081e5702..58503bef61d 100644 --- a/apps/sim/blocks/blocks/new_relic.ts +++ b/apps/sim/blocks/blocks/new_relic.ts @@ -2,6 +2,7 @@ import { getErrorMessage } from '@sim/utils/errors' import { NewRelicIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' import type { NewRelicCustomAttributes } from '@/tools/new_relic/types' function parseCustomAttributes(value: unknown): NewRelicCustomAttributes | undefined { @@ -20,6 +21,8 @@ function parseCustomAttributes(value: unknown): NewRelicCustomAttributes | undef export const NewRelicBlock: BlockConfig = { type: 'new_relic', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'new_relic_v2' }, name: 'New Relic', description: 'Query observability data and record deployments in New Relic', longDescription: @@ -476,3 +479,23 @@ export const NewRelicBlockMeta = { }, ], } as const satisfies BlockMeta + +export const NewRelicV2Block: BlockConfig = { + ...NewRelicBlock, + type: 'new_relic_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + longDescription: + 'Run NRQL queries, search monitored entities, fetch entity details, and record deployment change events.', + ...withSavedCredential( + NewRelicBlock, + { + id: 'credential', + type: 'oauth-input', + serviceId: 'new_relic', + title: 'New Relic Credential', + }, + { required: true } + ), +} diff --git a/apps/sim/blocks/blocks/okta.ts b/apps/sim/blocks/blocks/okta.ts index 131526b8a4e..e9324f8336c 100644 --- a/apps/sim/blocks/blocks/okta.ts +++ b/apps/sim/blocks/blocks/okta.ts @@ -1,6 +1,7 @@ import { OktaIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' /** * Coerces a numeric subBlock value, dropping anything that is not a real number. @@ -45,6 +46,8 @@ function blankToUndefined(value: unknown): unknown { export const OktaBlock: BlockConfig = { type: 'okta', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'okta_v2' }, name: 'Okta', description: 'Manage users, groups, apps, and MFA in Okta', longDescription: @@ -1490,3 +1493,17 @@ export const OktaBlockMeta = { }, ], } as const satisfies BlockMeta + +export const OktaV2Block: BlockConfig = { + ...OktaBlock, + type: 'okta_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(OktaBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'okta', + title: 'Okta Credential', + }), +} diff --git a/apps/sim/blocks/blocks/plane.ts b/apps/sim/blocks/blocks/plane.ts index 07c0748a4e5..3c6dd503d61 100644 --- a/apps/sim/blocks/blocks/plane.ts +++ b/apps/sim/blocks/blocks/plane.ts @@ -1,6 +1,7 @@ import { PlaneIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' import { getTrigger } from '@/triggers' interface PlaneOperationField { @@ -922,6 +923,8 @@ const OPERATION_FIELDS: Record> = { export const PlaneBlock: BlockConfig = { triggerAllowed: true, type: 'plane', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'plane_v2' }, name: 'Plane', description: 'Manage projects and work items in Plane', authMode: AuthMode.ApiKey, @@ -4531,3 +4534,16 @@ export const PlaneBlockMeta: BlockMeta = { }, ], } + +export const PlaneV2Block: BlockConfig = { + ...PlaneBlock, + type: 'plane_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential( + PlaneBlock, + { id: 'credential', type: 'oauth-input', serviceId: 'plane', title: 'Plane Credential' }, + { required: true } + ), +} diff --git a/apps/sim/blocks/blocks/supabase.ts b/apps/sim/blocks/blocks/supabase.ts index 44b40829b00..01187471c6d 100644 --- a/apps/sim/blocks/blocks/supabase.ts +++ b/apps/sim/blocks/blocks/supabase.ts @@ -1,13 +1,15 @@ import { getErrorMessage } from '@sim/utils/errors' import { SupabaseIcon } from '@/components/icons' import { AuthMode, type BlockConfig, type BlockMeta, IntegrationType } from '@/blocks/types' -import { normalizeFileInput } from '@/blocks/utils' +import { normalizeFileInput, withSavedCredential } from '@/blocks/utils' /** Canonical basic/advanced pair for the storage upload payload. */ const FILE_DATA_FIELD = ['file', 'fileContent'] as const export const SupabaseBlock: BlockConfig = { type: 'supabase', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'supabase_v2' }, name: 'Supabase', description: 'Use Supabase database', authMode: AuthMode.ApiKey, @@ -1591,3 +1593,18 @@ export const SupabaseBlockMeta = { }, ], } as const satisfies BlockMeta + +export const SupabaseV2Block: BlockConfig = { + ...SupabaseBlock, + type: 'supabase_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + longDescription: + 'Supports database operations (query, insert, update, delete, upsert), full-text search, RPC functions, Edge Function invocation, row counting, vector search, and complete storage management (upload, download, list, move, copy, delete files and buckets).', + ...withSavedCredential( + SupabaseBlock, + { id: 'credential', type: 'oauth-input', serviceId: 'supabase', title: 'Supabase Credential' }, + { required: true } + ), +} diff --git a/apps/sim/blocks/blocks/thrive.ts b/apps/sim/blocks/blocks/thrive.ts index 5fe4162d4af..e8fb9d6c7ea 100644 --- a/apps/sim/blocks/blocks/thrive.ts +++ b/apps/sim/blocks/blocks/thrive.ts @@ -1,5 +1,6 @@ import { ThriveIcon } from '@/components/icons' import { AuthMode, type BlockConfig, type BlockMeta, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' const PAGINATED_OPS = [ 'search_users', @@ -71,6 +72,8 @@ const STATUS_FILTER_FIELD = ['userStatus', 'statuses'] as const export const ThriveBlock: BlockConfig = { type: 'thrive', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'thrive_v2' }, name: 'Thrive', description: 'Manage users, audiences, learning and CPD on Thrive', longDescription: @@ -1185,3 +1188,16 @@ export const ThriveBlockMeta = { }, ], } as const satisfies BlockMeta + +export const ThriveV2Block: BlockConfig = { + ...ThriveBlock, + type: 'thrive_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential( + ThriveBlock, + { id: 'credential', type: 'oauth-input', serviceId: 'thrive', title: 'Thrive Credential' }, + { required: true } + ), +} diff --git a/apps/sim/blocks/blocks/tinybird.ts b/apps/sim/blocks/blocks/tinybird.ts index 6a2289b0026..0beee5c963c 100644 --- a/apps/sim/blocks/blocks/tinybird.ts +++ b/apps/sim/blocks/blocks/tinybird.ts @@ -1,9 +1,12 @@ import { TinybirdIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' export const TinybirdBlock: BlockConfig = { type: 'tinybird', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'tinybird_v2' }, name: 'Tinybird', description: 'Send events, query data, and manage Data Sources with Tinybird', authMode: AuthMode.ApiKey, @@ -656,3 +659,17 @@ export const TinybirdBlockMeta = { }, ], } as const satisfies BlockMeta + +export const TinybirdV2Block: BlockConfig = { + ...TinybirdBlock, + type: 'tinybird_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(TinybirdBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'tinybird', + title: 'Tinybird Credential', + }), +} diff --git a/apps/sim/blocks/blocks/twilio.ts b/apps/sim/blocks/blocks/twilio.ts index 4cb3d7a2dcd..2b747a7a052 100644 --- a/apps/sim/blocks/blocks/twilio.ts +++ b/apps/sim/blocks/blocks/twilio.ts @@ -1,10 +1,13 @@ import { TwilioIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' import { getTrigger } from '@/triggers' export const TwilioSMSBlock: BlockConfig = { type: 'twilio_sms', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'twilio_sms_v2' }, name: 'Twilio SMS', description: 'Send SMS messages', authMode: AuthMode.ApiKey, @@ -196,3 +199,17 @@ export const TwilioSMSBlockMeta = { }, ], } as const satisfies BlockMeta + +export const TwilioSMSV2Block: BlockConfig = { + ...TwilioSMSBlock, + type: 'twilio_sms_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(TwilioSMSBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'twilio', + title: 'Twilio Credential', + }), +} diff --git a/apps/sim/blocks/blocks/twilio_voice.ts b/apps/sim/blocks/blocks/twilio_voice.ts index 92d41f70d9b..eac3f471e28 100644 --- a/apps/sim/blocks/blocks/twilio_voice.ts +++ b/apps/sim/blocks/blocks/twilio_voice.ts @@ -1,10 +1,13 @@ import { TwilioIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' import { getTrigger } from '@/triggers' export const TwilioVoiceBlock: BlockConfig = { type: 'twilio_voice', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'twilio_voice_v2' }, name: 'Twilio Voice', description: 'Make and manage phone calls', authMode: AuthMode.ApiKey, @@ -539,3 +542,17 @@ export const TwilioVoiceBlockMeta = { }, ], } as const satisfies BlockMeta + +export const TwilioVoiceV2Block: BlockConfig = { + ...TwilioVoiceBlock, + type: 'twilio_voice_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(TwilioVoiceBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'twilio', + title: 'Twilio Credential', + }), +} diff --git a/apps/sim/blocks/blocks/upstash.ts b/apps/sim/blocks/blocks/upstash.ts index 9200af4e568..b87a6b0c820 100644 --- a/apps/sim/blocks/blocks/upstash.ts +++ b/apps/sim/blocks/blocks/upstash.ts @@ -1,9 +1,12 @@ import { UpstashIcon } from '@/components/icons' import type { BlockConfig, BlockMeta } from '@/blocks/types' import { AuthMode, IntegrationType } from '@/blocks/types' +import { withSavedCredential } from '@/blocks/utils' export const UpstashBlock: BlockConfig = { type: 'upstash', + hideFromToolbar: true, + sunset: { status: 'legacy', replacedBy: 'upstash_v2' }, name: 'Upstash', description: 'Serverless Redis with Upstash', longDescription: @@ -469,3 +472,17 @@ export const UpstashBlockMeta = { }, ], } as const satisfies BlockMeta + +export const UpstashV2Block: BlockConfig = { + ...UpstashBlock, + type: 'upstash_v2', + authMode: AuthMode.OAuth, + hideFromToolbar: false, + sunset: undefined, + ...withSavedCredential(UpstashBlock, { + id: 'credential', + type: 'oauth-input', + serviceId: 'upstash', + title: 'Upstash Credential', + }), +} diff --git a/apps/sim/blocks/registry-maps.ts b/apps/sim/blocks/registry-maps.ts index 96226548888..af7149b90f2 100644 --- a/apps/sim/blocks/registry-maps.ts +++ b/apps/sim/blocks/registry-maps.ts @@ -6,7 +6,7 @@ import { AgentPhoneBlock, AgentPhoneBlockMeta, AgentPhoneV2Block } from '@/block import { AgiloftBlock, AgiloftBlockMeta } from '@/blocks/blocks/agiloft' import { AhrefsBlock, AhrefsBlockMeta, AhrefsV2Block } from '@/blocks/blocks/ahrefs' import { AirtableBlock, AirtableBlockMeta } from '@/blocks/blocks/airtable' -import { AlgoliaBlock, AlgoliaBlockMeta } from '@/blocks/blocks/algolia' +import { AlgoliaBlock, AlgoliaBlockMeta, AlgoliaV2Block } from '@/blocks/blocks/algolia' import { AmplitudeBlock, AmplitudeBlockMeta } from '@/blocks/blocks/amplitude' import { ApiBlock } from '@/blocks/blocks/api' import { ApiTriggerBlock } from '@/blocks/blocks/api_trigger' @@ -22,7 +22,11 @@ import { AzureDataExplorerBlock, AzureDataExplorerBlockMeta, } from '@/blocks/blocks/azure_data_explorer' -import { AzureDevOpsBlock, AzureDevOpsBlockMeta } from '@/blocks/blocks/azure_devops' +import { + AzureDevOpsBlock, + AzureDevOpsBlockMeta, + AzureDevOpsV2Block, +} from '@/blocks/blocks/azure_devops' import { BitbucketBlock, BitbucketBlockMeta } from '@/blocks/blocks/bitbucket' import { BoxBlock, BoxBlockMeta, BoxV2Block } from '@/blocks/blocks/box' import { BrandfetchBlock, BrandfetchBlockMeta } from '@/blocks/blocks/brandfetch' @@ -61,7 +65,7 @@ import { import { ConditionBlock } from '@/blocks/blocks/condition' import { ConfluenceBlock, ConfluenceBlockMeta, ConfluenceV2Block } from '@/blocks/blocks/confluence' import { ContextDevBlock, ContextDevBlockMeta } from '@/blocks/blocks/context_dev' -import { ConvexBlock, ConvexBlockMeta } from '@/blocks/blocks/convex' +import { ConvexBlock, ConvexBlockMeta, ConvexV2Block } from '@/blocks/blocks/convex' import { CredentialBlock } from '@/blocks/blocks/credential' import { CredentialGroupBlock } from '@/blocks/blocks/credential-group' import { CrowdStrikeBlock, CrowdStrikeBlockMeta } from '@/blocks/blocks/crowdstrike' @@ -73,7 +77,7 @@ import { DatadogBlock, DatadogBlockMeta } from '@/blocks/blocks/datadog' import { DatagmaBlock, DatagmaBlockMeta } from '@/blocks/blocks/datagma' import { DaytonaBlock, DaytonaBlockMeta, DaytonaV2Block } from '@/blocks/blocks/daytona' import { DeploymentsBlock } from '@/blocks/blocks/deployments' -import { DevinBlock, DevinBlockMeta } from '@/blocks/blocks/devin' +import { DevinBlock, DevinBlockMeta, DevinV2Block } from '@/blocks/blocks/devin' import { DiscordBlock, DiscordBlockMeta, DiscordV2Block } from '@/blocks/blocks/discord' import { DocuSignBlock, DocuSignBlockMeta } from '@/blocks/blocks/docusign' import { DowndetectorBlock, DowndetectorBlockMeta } from '@/blocks/blocks/downdetector' @@ -83,11 +87,11 @@ import { DSPyBlock, DSPyBlockMeta } from '@/blocks/blocks/dspy' import { DubBlock, DubBlockMeta, DubV2Block, DubV3Block } from '@/blocks/blocks/dub' import { DuckDuckGoBlock, DuckDuckGoBlockMeta } from '@/blocks/blocks/duckduckgo' import { DynamoDBBlock, DynamoDBBlockMeta, DynamoDBV2Block } from '@/blocks/blocks/dynamodb' -import { DynatraceBlock, DynatraceBlockMeta } from '@/blocks/blocks/dynatrace' +import { DynatraceBlock, DynatraceBlockMeta, DynatraceV2Block } from '@/blocks/blocks/dynatrace' import { EC2Block, EC2BlockMeta, EC2V2Block } from '@/blocks/blocks/ec2' import { ElasticsearchBlock, ElasticsearchBlockMeta } from '@/blocks/blocks/elasticsearch' import { ElevenLabsBlock, ElevenLabsBlockMeta, ElevenLabsV2Block } from '@/blocks/blocks/elevenlabs' -import { EmailBisonBlock, EmailBisonBlockMeta } from '@/blocks/blocks/emailbison' +import { EmailBisonBlock, EmailBisonBlockMeta, EmailBisonV2Block } from '@/blocks/blocks/emailbison' import { EmbeddingsBlock, EmbeddingsBlockMeta } from '@/blocks/blocks/embeddings' import { EnrichBlock, EnrichBlockMeta, EnrichV2Block } from '@/blocks/blocks/enrich' import { EnrichmentBlock, EnrichmentBlockMeta } from '@/blocks/blocks/enrichment' @@ -156,7 +160,7 @@ import { import { GoogleTasksBlock, GoogleTasksBlockMeta } from '@/blocks/blocks/google_tasks' import { GoogleTranslateBlock, GoogleTranslateBlockMeta } from '@/blocks/blocks/google_translate' import { GoogleVaultBlock, GoogleVaultBlockMeta } from '@/blocks/blocks/google_vault' -import { GrafanaBlock, GrafanaBlockMeta } from '@/blocks/blocks/grafana' +import { GrafanaBlock, GrafanaBlockMeta, GrafanaV2Block } from '@/blocks/blocks/grafana' import { GrainBlock, GrainBlockMeta, @@ -195,7 +199,7 @@ import { import { ImageGeneratorBlock, ImageGeneratorV2Block } from '@/blocks/blocks/image_generator' import { ImapBlock, ImapBlockMeta } from '@/blocks/blocks/imap' import { IncidentioBlock, IncidentioBlockMeta, IncidentioV2Block } from '@/blocks/blocks/incidentio' -import { InfisicalBlock, InfisicalBlockMeta } from '@/blocks/blocks/infisical' +import { InfisicalBlock, InfisicalBlockMeta, InfisicalV2Block } from '@/blocks/blocks/infisical' import { InputTriggerBlock } from '@/blocks/blocks/input_trigger' import { InstagramBlock, InstagramBlockMeta } from '@/blocks/blocks/instagram' import { InstantlyBlock, InstantlyBlockMeta, InstantlyV2Block } from '@/blocks/blocks/instantly' @@ -214,8 +218,13 @@ import { JiraServiceManagementBlock, JiraServiceManagementBlockMeta, } from '@/blocks/blocks/jira_service_management' -import { JotformBlock, JotformBlockMeta } from '@/blocks/blocks/jotform' -import { JupyterBlock, JupyterBlockMeta, JupyterV2Block } from '@/blocks/blocks/jupyter' +import { JotformBlock, JotformBlockMeta, JotformV2Block } from '@/blocks/blocks/jotform' +import { + JupyterBlock, + JupyterBlockMeta, + JupyterV2Block, + JupyterV3Block, +} from '@/blocks/blocks/jupyter' import { KalshiBlock, KalshiBlockMeta, @@ -238,13 +247,13 @@ import { LinearBlock, LinearBlockMeta, LinearV2Block } from '@/blocks/blocks/lin import { LinkedInBlock, LinkedInBlockMeta } from '@/blocks/blocks/linkedin' import { LinkupBlock, LinkupBlockMeta } from '@/blocks/blocks/linkup' import { LinqBlock, LinqBlockMeta, LinqV2Block } from '@/blocks/blocks/linq' -import { LogfireBlock, LogfireBlockMeta } from '@/blocks/blocks/logfire' +import { LogfireBlock, LogfireBlockMeta, LogfireV2Block } from '@/blocks/blocks/logfire' import { LogRocketBlock, LogRocketBlockMeta } from '@/blocks/blocks/logrocket' import { LogsBlock, LogsV2Block } from '@/blocks/blocks/logs' import { LoopsBlock, LoopsBlockMeta, LoopsV2Block } from '@/blocks/blocks/loops' import { LumaBlock, LumaBlockMeta, LumaV2Block } from '@/blocks/blocks/luma' import { MailchimpBlock, MailchimpBlockMeta, MailchimpV2Block } from '@/blocks/blocks/mailchimp' -import { MailgunBlock, MailgunBlockMeta } from '@/blocks/blocks/mailgun' +import { MailgunBlock, MailgunBlockMeta, MailgunV2Block } from '@/blocks/blocks/mailgun' import { ManagedAgentBlock, ManagedAgentBlockMeta } from '@/blocks/blocks/managed_agent' import { ManageEngineSdpBlock, ManageEngineSdpBlockMeta } from '@/blocks/blocks/manageengine-sdp' import { ManualTriggerBlock } from '@/blocks/blocks/manual_trigger' @@ -287,7 +296,7 @@ import { MySQLBlock, MySQLBlockMeta } from '@/blocks/blocks/mysql' import { Neo4jBlock, Neo4jBlockMeta } from '@/blocks/blocks/neo4j' import { NetSuiteBlock, NetSuiteBlockMeta } from '@/blocks/blocks/netsuite' import { NeverBounceBlock, NeverBounceBlockMeta } from '@/blocks/blocks/neverbounce' -import { NewRelicBlock, NewRelicBlockMeta } from '@/blocks/blocks/new_relic' +import { NewRelicBlock, NewRelicBlockMeta, NewRelicV2Block } from '@/blocks/blocks/new_relic' import { NoteBlock } from '@/blocks/blocks/note' import { NotionBlock, @@ -296,7 +305,7 @@ import { NotionV2BlockMeta, } from '@/blocks/blocks/notion' import { ObsidianBlock, ObsidianBlockMeta } from '@/blocks/blocks/obsidian' -import { OktaBlock, OktaBlockMeta } from '@/blocks/blocks/okta' +import { OktaBlock, OktaBlockMeta, OktaV2Block } from '@/blocks/blocks/okta' import { OneDriveBlock, OneDriveBlockMeta } from '@/blocks/blocks/onedrive' import { OnePasswordBlock, OnePasswordBlockMeta } from '@/blocks/blocks/onepassword' import { OpenAIBlock, OpenAIBlockMeta } from '@/blocks/blocks/openai' @@ -316,7 +325,7 @@ import { PiBlock } from '@/blocks/blocks/pi' import { PineconeBlock, PineconeBlockMeta } from '@/blocks/blocks/pinecone' import { PipedriveBlock, PipedriveBlockMeta } from '@/blocks/blocks/pipedrive' import { PitchBookBlock, PitchBookBlockMeta } from '@/blocks/blocks/pitchbook' -import { PlaneBlock, PlaneBlockMeta } from '@/blocks/blocks/plane' +import { PlaneBlock, PlaneBlockMeta, PlaneV2Block } from '@/blocks/blocks/plane' import { PlanetScaleBlock, PlanetScaleBlockMeta } from '@/blocks/blocks/planetscale' import { PolymarketBlock, PolymarketBlockMeta } from '@/blocks/blocks/polymarket' import { PostgreSQLBlock, PostgreSQLBlockMeta } from '@/blocks/blocks/postgresql' @@ -392,7 +401,7 @@ import { StarterBlock } from '@/blocks/blocks/starter' import { StripeBlock, StripeBlockMeta, StripeV2Block } from '@/blocks/blocks/stripe' import { STSBlock, STSBlockMeta, STSV2Block } from '@/blocks/blocks/sts' import { SttBlock, SttV2Block } from '@/blocks/blocks/stt' -import { SupabaseBlock, SupabaseBlockMeta } from '@/blocks/blocks/supabase' +import { SupabaseBlock, SupabaseBlockMeta, SupabaseV2Block } from '@/blocks/blocks/supabase' import { TableBlock } from '@/blocks/blocks/table' import { TableV2Block } from '@/blocks/blocks/table_v2' import { TailscaleBlock, TailscaleBlockMeta, TailscaleV2Block } from '@/blocks/blocks/tailscale' @@ -406,9 +415,9 @@ import { TextractV3Block, } from '@/blocks/blocks/textract' import { ThinkingBlock } from '@/blocks/blocks/thinking' -import { ThriveBlock, ThriveBlockMeta } from '@/blocks/blocks/thrive' +import { ThriveBlock, ThriveBlockMeta, ThriveV2Block } from '@/blocks/blocks/thrive' import { TikTokBlock, TikTokBlockMeta } from '@/blocks/blocks/tiktok' -import { TinybirdBlock, TinybirdBlockMeta } from '@/blocks/blocks/tinybird' +import { TinybirdBlock, TinybirdBlockMeta, TinybirdV2Block } from '@/blocks/blocks/tinybird' import { TinyFishBlock, TinyFishBlockMeta } from '@/blocks/blocks/tinyfish' import { TranslateBlock } from '@/blocks/blocks/translate' import { TrelloBlock, TrelloBlockMeta } from '@/blocks/blocks/trello' @@ -418,10 +427,14 @@ import { TriggerDevV2Block, } from '@/blocks/blocks/trigger_dev' import { TtsBlock } from '@/blocks/blocks/tts' -import { TwilioSMSBlock, TwilioSMSBlockMeta } from '@/blocks/blocks/twilio' -import { TwilioVoiceBlock, TwilioVoiceBlockMeta } from '@/blocks/blocks/twilio_voice' +import { TwilioSMSBlock, TwilioSMSBlockMeta, TwilioSMSV2Block } from '@/blocks/blocks/twilio' +import { + TwilioVoiceBlock, + TwilioVoiceBlockMeta, + TwilioVoiceV2Block, +} from '@/blocks/blocks/twilio_voice' import { TypeformBlock, TypeformBlockMeta, TypeformV2Block } from '@/blocks/blocks/typeform' -import { UpstashBlock, UpstashBlockMeta } from '@/blocks/blocks/upstash' +import { UpstashBlock, UpstashBlockMeta, UpstashV2Block } from '@/blocks/blocks/upstash' import { UptimeRobotBlock, UptimeRobotBlockMeta, @@ -474,6 +487,7 @@ export const BLOCK_REGISTRY: Record = { ahrefs_v2: AhrefsV2Block, airtable: AirtableBlock, algolia: AlgoliaBlock, + algolia_v2: AlgoliaV2Block, amplitude: AmplitudeBlock, api: ApiBlock, api_trigger: ApiTriggerBlock, @@ -492,6 +506,7 @@ export const BLOCK_REGISTRY: Record = { attio: AttioBlock, azure_data_explorer: AzureDataExplorerBlock, azure_devops: AzureDevOpsBlock, + azure_devops_v2: AzureDevOpsV2Block, bitbucket: BitbucketBlock, box: BoxBlock, box_v2: BoxV2Block, @@ -534,6 +549,7 @@ export const BLOCK_REGISTRY: Record = { confluence_v2: ConfluenceV2Block, context_dev: ContextDevBlock, convex: ConvexBlock, + convex_v2: ConvexV2Block, credential: CredentialBlock, credential_group: CredentialGroupBlock, crowdstrike: CrowdStrikeBlock, @@ -551,6 +567,7 @@ export const BLOCK_REGISTRY: Record = { daytona_v2: DaytonaV2Block, deployments: DeploymentsBlock, devin: DevinBlock, + devin_v2: DevinV2Block, discord: DiscordBlock, discord_v2: DiscordV2Block, docusign: DocuSignBlock, @@ -566,12 +583,14 @@ export const BLOCK_REGISTRY: Record = { dynamodb: DynamoDBBlock, dynamodb_v2: DynamoDBV2Block, dynatrace: DynatraceBlock, + dynatrace_v2: DynatraceV2Block, ec2: EC2Block, ec2_v2: EC2V2Block, elasticsearch: ElasticsearchBlock, elevenlabs: ElevenLabsBlock, elevenlabs_v2: ElevenLabsV2Block, emailbison: EmailBisonBlock, + emailbison_v2: EmailBisonV2Block, embeddings: EmbeddingsBlock, enrich: EnrichBlock, enrich_v2: EnrichV2Block, @@ -636,6 +655,7 @@ export const BLOCK_REGISTRY: Record = { google_translate: GoogleTranslateBlock, google_vault: GoogleVaultBlock, grafana: GrafanaBlock, + grafana_v2: GrafanaV2Block, grain: GrainBlock, grain_v2: GrainV2Block, grain_v3: GrainV3Block, @@ -667,6 +687,7 @@ export const BLOCK_REGISTRY: Record = { incidentio: IncidentioBlock, incidentio_v2: IncidentioV2Block, infisical: InfisicalBlock, + infisical_v2: InfisicalV2Block, input_trigger: InputTriggerBlock, instagram: InstagramBlock, instantly: InstantlyBlock, @@ -680,8 +701,10 @@ export const BLOCK_REGISTRY: Record = { jira: JiraBlock, jira_service_management: JiraServiceManagementBlock, jotform: JotformBlock, + jotform_v2: JotformV2Block, jupyter: JupyterBlock, jupyter_v2: JupyterV2Block, + jupyter_v3: JupyterV3Block, kalshi: KalshiBlock, kalshi_v2: KalshiV2Block, ketch: KetchBlock, @@ -703,6 +726,7 @@ export const BLOCK_REGISTRY: Record = { linq: LinqBlock, linq_v2: LinqV2Block, logfire: LogfireBlock, + logfire_v2: LogfireV2Block, logrocket: LogRocketBlock, logs: LogsBlock, logs_v2: LogsV2Block, @@ -713,6 +737,7 @@ export const BLOCK_REGISTRY: Record = { mailchimp: MailchimpBlock, mailchimp_v2: MailchimpV2Block, mailgun: MailgunBlock, + mailgun_v2: MailgunV2Block, managed_agent: ManagedAgentBlock, manageengine_sdp: ManageEngineSdpBlock, manual_trigger: ManualTriggerBlock, @@ -742,11 +767,13 @@ export const BLOCK_REGISTRY: Record = { neo4j: Neo4jBlock, netsuite: NetSuiteBlock, new_relic: NewRelicBlock, + new_relic_v2: NewRelicV2Block, note: NoteBlock, notion: NotionBlock, notion_v2: NotionV2Block, obsidian: ObsidianBlock, okta: OktaBlock, + okta_v2: OktaV2Block, onedrive: OneDriveBlock, onepassword: OnePasswordBlock, openai: OpenAIBlock, @@ -767,6 +794,7 @@ export const BLOCK_REGISTRY: Record = { pipedrive: PipedriveBlock, pitchbook: PitchBookBlock, plane: PlaneBlock, + plane_v2: PlaneV2Block, planetscale: PlanetScaleBlock, polymarket: PolymarketBlock, postgresql: PostgreSQLBlock, @@ -869,6 +897,7 @@ export const BLOCK_REGISTRY: Record = { stt: SttBlock, stt_v2: SttV2Block, supabase: SupabaseBlock, + supabase_v2: SupabaseV2Block, table: TableBlock, table_v2: TableV2Block, tailscale: TailscaleBlock, @@ -883,8 +912,10 @@ export const BLOCK_REGISTRY: Record = { textract_v3: TextractV3Block, thinking: ThinkingBlock, thrive: ThriveBlock, + thrive_v2: ThriveV2Block, tiktok: TikTokBlock, tinybird: TinybirdBlock, + tinybird_v2: TinybirdV2Block, tinyfish: TinyFishBlock, translate: TranslateBlock, trello: TrelloBlock, @@ -892,10 +923,13 @@ export const BLOCK_REGISTRY: Record = { trigger_dev_v2: TriggerDevV2Block, tts: TtsBlock, twilio_sms: TwilioSMSBlock, + twilio_sms_v2: TwilioSMSV2Block, twilio_voice: TwilioVoiceBlock, + twilio_voice_v2: TwilioVoiceV2Block, typeform: TypeformBlock, typeform_v2: TypeformV2Block, upstash: UpstashBlock, + upstash_v2: UpstashV2Block, uptimerobot: UptimeRobotBlock, uptimerobot_v2: UptimeRobotV2Block, vanta: VantaBlock, diff --git a/apps/sim/lib/block-metadata/names.generated.ts b/apps/sim/lib/block-metadata/names.generated.ts index c82d606b79a..f7c44c38f7e 100644 --- a/apps/sim/lib/block-metadata/names.generated.ts +++ b/apps/sim/lib/block-metadata/names.generated.ts @@ -11,7 +11,7 @@ export const BLOCK_NAMES: Readonly> = { agiloft: 'Agiloft', ahrefs_v2: 'Ahrefs', airtable: 'Airtable', - algolia: 'Algolia', + algolia_v2: 'Algolia', amplitude: 'Amplitude', api: 'API', apify_v2: 'Apify', @@ -23,7 +23,7 @@ export const BLOCK_NAMES: Readonly> = { athena_v2: 'Athena', attio: 'Attio', azure_data_explorer: 'Azure Data Explorer', - azure_devops: 'Azure DevOps', + azure_devops_v2: 'Azure DevOps', bitbucket: 'Bitbucket', box_v2: 'Box', brandfetch: 'Brandfetch', @@ -49,7 +49,7 @@ export const BLOCK_NAMES: Readonly> = { condition: 'Condition', confluence_v2: 'Confluence', context_dev: 'Context.dev', - convex: 'Convex', + convex_v2: 'Convex', credential: 'Credential', credential_group: 'Connected Accounts (Legacy)', crowdstrike: 'CrowdStrike', @@ -61,7 +61,7 @@ export const BLOCK_NAMES: Readonly> = { datagma: 'Datagma', daytona_v2: 'Daytona', deployments: 'Deployments', - devin: 'Devin', + devin_v2: 'Devin', discord_v2: 'Discord', docusign: 'DocuSign', downdetector: 'Downdetector', @@ -71,11 +71,11 @@ export const BLOCK_NAMES: Readonly> = { dub_v3: 'Dub', duckduckgo: 'DuckDuckGo', dynamodb_v2: 'Amazon DynamoDB', - dynatrace: 'Dynatrace', + dynatrace_v2: 'Dynatrace', ec2_v2: 'Amazon EC2', elasticsearch: 'Elasticsearch', elevenlabs_v2: 'ElevenLabs', - emailbison: 'Email Bison', + emailbison_v2: 'Email Bison', embeddings: 'Embeddings', enrich_v2: 'Enrich', enrichment: 'Data Enrichment', @@ -118,7 +118,7 @@ export const BLOCK_NAMES: Readonly> = { google_tasks: 'Google Tasks', google_translate: 'Google Translate', google_vault: 'Google Vault', - grafana: 'Grafana', + grafana_v2: 'Grafana', grain_v3: 'Grain', granola_v2: 'Granola', greenhouse_v2: 'Greenhouse', @@ -138,7 +138,7 @@ export const BLOCK_NAMES: Readonly> = { image_generator_v2: 'Image Generator', imap: 'IMAP Email', incidentio_v2: 'incident.io', - infisical: 'Infisical', + infisical_v2: 'Infisical', instagram: 'Instagram', instantly_v2: 'Instantly', intercom_v3: 'Intercom', @@ -147,8 +147,8 @@ export const BLOCK_NAMES: Readonly> = { jina: 'Jina', jira: 'Jira', jira_service_management: 'Jira Service Management', - jotform: 'Jotform', - jupyter_v2: 'Jupyter', + jotform_v2: 'Jotform', + jupyter_v3: 'Jupyter', kalshi_v2: 'Kalshi', ketch: 'Ketch', knowledge: 'Knowledge', @@ -162,14 +162,14 @@ export const BLOCK_NAMES: Readonly> = { linkedin: 'LinkedIn', linkup: 'Linkup', linq_v2: 'Linq', - logfire: 'Logfire', + logfire_v2: 'Logfire', logrocket: 'LogRocket', logs_v2: 'Logs', loop: 'Loop', loops_v2: 'Loops', luma_v2: 'Luma', mailchimp_v2: 'Mailchimp', - mailgun: 'Mailgun', + mailgun_v2: 'Mailgun', managed_agent: 'Claude Managed Agents', manageengine_sdp: 'ManageEngine ServiceDesk Plus', mcp: 'MCP', @@ -194,11 +194,11 @@ export const BLOCK_NAMES: Readonly> = { neo4j: 'Neo4j', netsuite: 'Oracle NetSuite', neverbounce: 'NeverBounce', - new_relic: 'New Relic', + new_relic_v2: 'New Relic', note: 'Note', notion_v2: 'Notion', obsidian: 'Obsidian', - okta: 'Okta', + okta_v2: 'Okta', onedrive: 'OneDrive', onepassword: '1Password', oracle_fusion_financials: 'Oracle Fusion Financials', @@ -215,7 +215,7 @@ export const BLOCK_NAMES: Readonly> = { pinecone: 'Pinecone', pipedrive: 'Pipedrive', pitchbook: 'PitchBook', - plane: 'Plane', + plane_v2: 'Plane', planetscale: 'PlanetScale', polymarket: 'Polymarket', postgresql: 'PostgreSQL', @@ -281,7 +281,7 @@ export const BLOCK_NAMES: Readonly> = { stripe_v2: 'Stripe', sts_v2: 'AWS STS', stt_v2: 'Speech-to-Text', - supabase: 'Supabase', + supabase_v2: 'Supabase', table_v2: 'Table', tailscale_v2: 'Tailscale', tavily_v2: 'Tavily', @@ -289,18 +289,18 @@ export const BLOCK_NAMES: Readonly> = { temporal: 'Temporal', textract_v3: 'AWS Textract', thinking: 'Thinking', - thrive: 'Thrive', + thrive_v2: 'Thrive', tiktok: 'TikTok', - tinybird: 'Tinybird', + tinybird_v2: 'Tinybird', tinyfish: 'TinyFish', translate: 'Translate', trello: 'Trello', trigger_dev_v2: 'Trigger.dev', tts: 'Text-to-Speech', - twilio_sms: 'Twilio SMS', - twilio_voice: 'Twilio Voice', + twilio_sms_v2: 'Twilio SMS', + twilio_voice_v2: 'Twilio Voice', typeform_v2: 'Typeform', - upstash: 'Upstash', + upstash_v2: 'Upstash', uptimerobot_v2: 'UptimeRobot', vanta: 'Vanta', variables: 'Variables', diff --git a/apps/sim/lib/credentials/databricks-service-account.server.test.ts b/apps/sim/lib/credentials/databricks-service-account.server.test.ts index afbb90ed2a2..61a0e5c5b1f 100644 --- a/apps/sim/lib/credentials/databricks-service-account.server.test.ts +++ b/apps/sim/lib/credentials/databricks-service-account.server.test.ts @@ -9,6 +9,7 @@ import { beforeEach, describe, expect, it, vi } from 'vitest' vi.mock('@/lib/core/security/encryption', () => encryptionMock) vi.mock('@/lib/credentials/workload-identity/issuer', () => ({ + MAX_WORKLOAD_IDENTITY_TOKEN_TTL_SECONDS: 3600, mintWorkloadIdentityToken: async ({ subject }: { subject: string }) => `token-for:${subject}`, })) diff --git a/apps/sim/lib/credentials/databricks-service-account.server.ts b/apps/sim/lib/credentials/databricks-service-account.server.ts index fa94093a9be..8b3d46aba38 100644 --- a/apps/sim/lib/credentials/databricks-service-account.server.ts +++ b/apps/sim/lib/credentials/databricks-service-account.server.ts @@ -12,6 +12,7 @@ import { } from '@/lib/credentials/token-service-accounts/errors' import { WORKLOAD_IDENTITY_AUDIENCES } from '@/lib/credentials/workload-identity/audiences' import { + MAX_WORKLOAD_IDENTITY_TOKEN_TTL_SECONDS, mintWorkloadIdentityToken, type WorkloadIdentityOwner, } from '@/lib/credentials/workload-identity/issuer' @@ -182,6 +183,8 @@ async function resolveDatabricksAccessToken( subject: config.subject, audience: DATABRICKS_WORKLOAD_IDENTITY_AUDIENCE, owner, + // Databricks' token expires with this one, and Genie polls for up to five minutes. + ttlSeconds: MAX_WORKLOAD_IDENTITY_TOKEN_TTL_SECONDS, }) return requestWorkspaceToken( config.host, diff --git a/apps/sim/lib/credentials/token-service-accounts/descriptors.ts b/apps/sim/lib/credentials/token-service-accounts/descriptors.ts index 3eeeaf02a2f..808684be2ba 100644 --- a/apps/sim/lib/credentials/token-service-accounts/descriptors.ts +++ b/apps/sim/lib/credentials/token-service-accounts/descriptors.ts @@ -24,6 +24,12 @@ export interface TokenServiceAccountField { placeholder: string /** Rendered with SecretInput and never echoed back. */ secret: boolean + /** + * The value is a URL whose scheme and path matter (a self-hosted instance or + * deployment URL), so the connect form sends it as typed and the provider's + * check normalizes it. Other domains are reduced to a bare host first. + */ + url?: boolean /** Soft-format hint shown while the current value doesn't match `hintPattern`. */ hintPattern?: RegExp hintMessage?: string @@ -85,6 +91,26 @@ export const FLOW_SERVICE_ACCOUNT_PROVIDER_ID = 'flow-service-account' as const export const CODA_SERVICE_ACCOUNT_PROVIDER_ID = 'coda-service-account' as const export const GAUGE_SERVICE_ACCOUNT_PROVIDER_ID = 'gauge-service-account' as const export const HIGGSFIELD_SERVICE_ACCOUNT_PROVIDER_ID = 'higgsfield-service-account' as const +export const THRIVE_SERVICE_ACCOUNT_PROVIDER_ID = 'thrive-service-account' as const +export const SUPABASE_SERVICE_ACCOUNT_PROVIDER_ID = 'supabase-service-account' as const +export const INFISICAL_SERVICE_ACCOUNT_PROVIDER_ID = 'infisical-service-account' as const +export const OKTA_SERVICE_ACCOUNT_PROVIDER_ID = 'okta-service-account' as const +export const DEVIN_SERVICE_ACCOUNT_PROVIDER_ID = 'devin-service-account' as const +export const EMAILBISON_SERVICE_ACCOUNT_PROVIDER_ID = 'emailbison-service-account' as const +export const UPSTASH_SERVICE_ACCOUNT_PROVIDER_ID = 'upstash-service-account' as const +export const ALGOLIA_SERVICE_ACCOUNT_PROVIDER_ID = 'algolia-service-account' as const +export const TWILIO_SERVICE_ACCOUNT_PROVIDER_ID = 'twilio-service-account' as const +export const AZURE_DEVOPS_SERVICE_ACCOUNT_PROVIDER_ID = 'azure-devops-service-account' as const +export const PLANE_SERVICE_ACCOUNT_PROVIDER_ID = 'plane-service-account' as const +export const JOTFORM_SERVICE_ACCOUNT_PROVIDER_ID = 'jotform-service-account' as const +export const MAILGUN_SERVICE_ACCOUNT_PROVIDER_ID = 'mailgun-service-account' as const +export const LOGFIRE_SERVICE_ACCOUNT_PROVIDER_ID = 'logfire-service-account' as const +export const NEW_RELIC_SERVICE_ACCOUNT_PROVIDER_ID = 'new-relic-service-account' as const +export const DYNATRACE_SERVICE_ACCOUNT_PROVIDER_ID = 'dynatrace-service-account' as const +export const TINYBIRD_SERVICE_ACCOUNT_PROVIDER_ID = 'tinybird-service-account' as const +export const CONVEX_SERVICE_ACCOUNT_PROVIDER_ID = 'convex-service-account' as const +export const JUPYTER_SERVICE_ACCOUNT_PROVIDER_ID = 'jupyter-service-account' as const +export const GRAFANA_SERVICE_ACCOUNT_PROVIDER_ID = 'grafana-service-account' as const export const GITLAB_SERVICE_ACCOUNT_PROVIDER_ID = 'gitlab-service-account' as const export const WHATSAPP_SERVICE_ACCOUNT_PROVIDER_ID = 'whatsapp-service-account' as const export const VERCEL_SERVICE_ACCOUNT_PROVIDER_ID = 'vercel-service-account' as const @@ -192,6 +218,26 @@ export type TokenServiceAccountProviderId = | typeof CODA_SERVICE_ACCOUNT_PROVIDER_ID | typeof GAUGE_SERVICE_ACCOUNT_PROVIDER_ID | typeof HIGGSFIELD_SERVICE_ACCOUNT_PROVIDER_ID + | typeof THRIVE_SERVICE_ACCOUNT_PROVIDER_ID + | typeof SUPABASE_SERVICE_ACCOUNT_PROVIDER_ID + | typeof INFISICAL_SERVICE_ACCOUNT_PROVIDER_ID + | typeof OKTA_SERVICE_ACCOUNT_PROVIDER_ID + | typeof DEVIN_SERVICE_ACCOUNT_PROVIDER_ID + | typeof EMAILBISON_SERVICE_ACCOUNT_PROVIDER_ID + | typeof UPSTASH_SERVICE_ACCOUNT_PROVIDER_ID + | typeof ALGOLIA_SERVICE_ACCOUNT_PROVIDER_ID + | typeof TWILIO_SERVICE_ACCOUNT_PROVIDER_ID + | typeof AZURE_DEVOPS_SERVICE_ACCOUNT_PROVIDER_ID + | typeof PLANE_SERVICE_ACCOUNT_PROVIDER_ID + | typeof JOTFORM_SERVICE_ACCOUNT_PROVIDER_ID + | typeof MAILGUN_SERVICE_ACCOUNT_PROVIDER_ID + | typeof LOGFIRE_SERVICE_ACCOUNT_PROVIDER_ID + | typeof NEW_RELIC_SERVICE_ACCOUNT_PROVIDER_ID + | typeof DYNATRACE_SERVICE_ACCOUNT_PROVIDER_ID + | typeof TINYBIRD_SERVICE_ACCOUNT_PROVIDER_ID + | typeof CONVEX_SERVICE_ACCOUNT_PROVIDER_ID + | typeof JUPYTER_SERVICE_ACCOUNT_PROVIDER_ID + | typeof GRAFANA_SERVICE_ACCOUNT_PROVIDER_ID | typeof GITLAB_SERVICE_ACCOUNT_PROVIDER_ID | typeof WHATSAPP_SERVICE_ACCOUNT_PROVIDER_ID | typeof VERCEL_SERVICE_ACCOUNT_PROVIDER_ID @@ -918,9 +964,9 @@ export const TOKEN_SERVICE_ACCOUNT_DESCRIPTORS: Record< ], docsUrl: 'https://docs.sim.ai/integrations/elevenlabs', helpText: - 'A restricted key needs User read access to be verified, plus access to each endpoint your workflows call.', + 'Restricted keys are accepted; give the key access to each endpoint your workflows call.', invalidCredentialsHelp: - 'ElevenLabs rejected this key. A restricted key needs User read access, which Sim uses to check it.', + 'ElevenLabs rejected this key. Check that it was copied in full and has not been deleted.', }, [ENRICH_SERVICE_ACCOUNT_PROVIDER_ID]: { providerId: ENRICH_SERVICE_ACCOUNT_PROVIDER_ID, @@ -1006,8 +1052,7 @@ export const TOKEN_SERVICE_ACCOUNT_DESCRIPTORS: Record< }, ], docsUrl: 'https://docs.sim.ai/integrations/instantly', - helpText: - 'Sim checks the key by listing campaigns, so it needs campaign read access (or an all-access scope).', + helpText: 'Scoped keys are accepted; give the key the scopes your workflows call.', }, [LANGSMITH_SERVICE_ACCOUNT_PROVIDER_ID]: { providerId: LANGSMITH_SERVICE_ACCOUNT_PROVIDER_ID, @@ -1789,6 +1834,461 @@ export const TOKEN_SERVICE_ACCOUNT_DESCRIPTORS: Record< invalidCredentialsHelp: 'GitLab rejected this token. Check that it is active, has the api or read_api scope, and belongs to the host you entered.', }, + [GRAFANA_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: GRAFANA_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Grafana', + tokenNoun: 'service account token', + connectNoun: 'service account token', + fields: [ + { id: 'apiToken', label: 'Service account token', placeholder: 'glsa_...', secret: true }, + { + id: 'domain', + label: 'Grafana URL', + placeholder: 'https://your-stack.grafana.net', + secret: false, + url: true, + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/grafana', + helpText: + 'Create a service account and token in Grafana under Administration > Users and access > Service accounts. Give the service account a role that covers what your workflows change (Editor for dashboards and annotations, Admin for alerting and folders). Enter your Grafana Cloud stack URL or your self-managed instance URL.', + invalidCredentialsHelp: + 'Grafana rejected this token. Check that it has not expired or been revoked, and that it belongs to the instance you entered.', + }, + [JUPYTER_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: JUPYTER_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Jupyter', + tokenNoun: 'server token', + connectNoun: 'server token', + fields: [ + { + id: 'apiToken', + label: 'Token', + placeholder: 'Paste your Jupyter server token', + secret: true, + }, + { + id: 'domain', + label: 'Server URL', + placeholder: 'https://jupyter.example.com', + secret: false, + url: true, + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/jupyter', + helpText: + "Use the token your Jupyter server prints at startup (or the API token from JupyterHub under Token). Enter the server's base URL, including any path prefix such as /user/ on JupyterHub. The server must be reachable from Sim.", + invalidCredentialsHelp: + 'The Jupyter server rejected this token. Check that it matches the server you entered and that the server is still running.', + }, + [CONVEX_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: CONVEX_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Convex', + tokenNoun: 'deploy key', + connectNoun: 'deploy key', + fields: [ + { + id: 'apiToken', + label: 'Deploy key', + placeholder: 'prod:your-deployment|...', + secret: true, + }, + { + id: 'domain', + label: 'Deployment URL', + placeholder: 'https://your-deployment.convex.cloud', + secret: false, + url: true, + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/convex', + helpText: + 'Generate a deploy key for the deployment in the Convex dashboard under Settings > General, and copy the deployment URL from the same page. Listing tables and exporting documents need a key with permission to read data.', + invalidCredentialsHelp: + 'Convex rejected this key. Check that it was generated for the deployment URL you entered and has not been revoked.', + }, + [TINYBIRD_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: TINYBIRD_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Tinybird', + tokenNoun: 'API token', + connectNoun: 'API token', + fields: [ + { id: 'apiToken', label: 'API token', placeholder: 'p.eyJ...', secret: true }, + { + id: 'domain', + label: 'API base URL', + placeholder: 'https://api.tinybird.co', + secret: false, + url: true, + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/tinybird', + helpText: + "Copy a token from Tokens in your Tinybird workspace. Enter the API base URL for your workspace's region (for example https://api.us-east.aws.tinybird.co), or your self-managed URL. Give the token the scopes your workflows need, such as DATASOURCES:APPEND or PIPES:READ.", + invalidCredentialsHelp: + 'Tinybird rejected this token. Check that it was copied in full and that the base URL is the region your workspace lives in; a token only works in its own region.', + }, + [DYNATRACE_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: DYNATRACE_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Dynatrace', + tokenNoun: 'access token', + connectNoun: 'access token', + fields: [ + { id: 'apiToken', label: 'Access token', placeholder: 'dt0c01...', secret: true }, + { + id: 'domain', + label: 'Environment URL', + placeholder: 'https://abc12345.live.dynatrace.com', + secret: false, + url: true, + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/dynatrace', + helpText: + 'Generate an access token in Dynatrace under Access tokens with the scopes your workflows use (for example problems.read, metrics.read, logs.read). Enter your environment URL, such as https://abc12345.live.dynatrace.com, or https://your-activegate:9999/e/ for Managed.', + invalidCredentialsHelp: + 'Dynatrace rejected this token. Check that it is enabled, has not expired, and was created in the environment at this URL.', + }, + [NEW_RELIC_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: NEW_RELIC_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'New Relic', + tokenNoun: 'User API key', + connectNoun: 'API key', + fields: [ + { id: 'apiToken', label: 'User API key', placeholder: 'NRAK-...', secret: true }, + { id: 'domain', label: 'Region', placeholder: 'us or eu', secret: false }, + ], + docsUrl: 'https://docs.sim.ai/integrations/new_relic', + helpText: + 'Create a User API key (NRAK-...) in New Relic under API keys. Enter us, or eu if your account is in the EU data center.', + invalidCredentialsHelp: + "New Relic rejected this key. Check that it is a User API key (NRAK-...), not a license or browser key, and that the region matches your account's data center.", + }, + [LOGFIRE_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: LOGFIRE_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Logfire', + tokenNoun: 'read token', + connectNoun: 'read token', + fields: [ + { id: 'apiToken', label: 'Read token', placeholder: 'pylf_v1_us_...', secret: true }, + { + id: 'domain', + label: 'Region or host', + placeholder: 'auto, us, eu, or https://logfire.example.com', + secret: false, + url: true, + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/logfire', + helpText: + 'Create a read token in your Logfire project under Settings > Read tokens. Enter auto to use the region in the token, us or eu to choose a Logfire Cloud region, or the base URL of a self-hosted instance.', + invalidCredentialsHelp: + 'Logfire rejected this read token. Check that it is a read token (not a write token), has not expired, and belongs to the region or host you entered.', + }, + [MAILGUN_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: MAILGUN_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Mailgun', + tokenNoun: 'API key', + connectNoun: 'API key', + fields: [ + { id: 'apiToken', label: 'API key', placeholder: 'Paste Mailgun API key', secret: true }, + { + id: 'domain', + label: 'Region', + placeholder: 'us or eu', + secret: false, + hintPattern: /^(us|eu|US|EU)$/, + hintMessage: 'Enter us or eu, the region your Mailgun account is hosted in.', + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/mailgun', + helpText: + 'Use an account API key from API Security in Mailgun, and the region (us or eu) your account is hosted in. Domain sending keys only send mail and cannot be saved here.', + invalidCredentialsHelp: + 'Mailgun rejected this key. Check that it is an account API key, not a domain sending key, and that the region matches the one your account is hosted in.', + }, + [JOTFORM_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: JOTFORM_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Jotform', + tokenNoun: 'API key', + connectNoun: 'API key', + fields: [ + { id: 'apiToken', label: 'API key', placeholder: 'Paste Jotform API key', secret: true }, + { + id: 'domain', + label: 'Region', + placeholder: 'us, eu, or hipaa', + secret: false, + hintPattern: /^(us|eu|hipaa|US|EU|HIPAA)$/, + hintMessage: 'Enter us, eu, or hipaa, the region your Jotform account is hosted in.', + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/jotform', + helpText: + 'Create a key under Account Settings → API. Use eu for EU Safe accounts and hipaa for HIPAA accounts. A Read Access key validates here and then fails on actions that write.', + invalidCredentialsHelp: + 'Jotform rejected this key. Check that it is still enabled and that the region matches your account: a key only works on the host that issued it.', + }, + [PLANE_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: PLANE_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Plane', + tokenNoun: 'API token', + connectNoun: 'API token', + fields: [ + { id: 'apiToken', label: 'API token', placeholder: 'plane_api_...', secret: true }, + { + id: 'domain', + label: 'Instance URL', + placeholder: 'https://api.plane.so', + secret: false, + url: true, + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/plane', + helpText: + 'Create a token under Profile settings → API tokens. Enter https://api.plane.so for Plane Cloud, or your self-hosted instance URL including any reverse-proxy path, without /api/v1.', + invalidCredentialsHelp: + 'Plane rejected this token. Check that it is active and was created on the instance URL you entered.', + }, + [AZURE_DEVOPS_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: AZURE_DEVOPS_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Azure DevOps', + tokenNoun: 'personal access token', + connectNoun: 'personal access token', + fields: [ + { + id: 'apiToken', + label: 'Personal access token', + placeholder: 'Paste your Azure DevOps personal access token', + secret: true, + }, + { + id: 'providerWorkspaceId', + label: 'Organization', + placeholder: 'contoso', + secret: false, + hintPattern: /^[A-Za-z0-9][A-Za-z0-9-]*$/, + hintMessage: 'Enter the organization name only, as in dev.azure.com/contoso.', + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/azure_devops', + helpText: + 'Create a personal access token in Azure DevOps under User settings > Personal access tokens, scoped to this organization with Build: Read and Work Items: Read & write. Enter the organization name from dev.azure.com/.', + invalidCredentialsHelp: + 'Azure DevOps rejected this token. Check that it has not expired or been revoked, and that it was created for the organization you entered.', + }, + [TWILIO_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: TWILIO_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Twilio', + tokenNoun: 'auth token', + connectNoun: 'auth token', + fields: [ + { + id: 'apiToken', + label: 'Auth token', + placeholder: 'Paste your Twilio auth token', + secret: true, + }, + { + id: 'providerWorkspaceId', + label: 'Account SID', + placeholder: 'ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', + secret: false, + hintPattern: /^AC[0-9a-f]{32}$/, + hintMessage: 'Twilio Account SIDs start with AC followed by 32 characters.', + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/twilio_sms', + helpText: + 'Copy the Account SID and Auth Token from Account Info on your Twilio Console dashboard.', + invalidCredentialsHelp: + 'Twilio rejected this Account SID and auth token. Check that the token belongs to this account and has not been rotated.', + }, + [ALGOLIA_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: ALGOLIA_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Algolia', + tokenNoun: 'API key', + connectNoun: 'API key', + fields: [ + { id: 'apiToken', label: 'API key', placeholder: 'Paste your Algolia API key', secret: true }, + { + id: 'providerWorkspaceId', + label: 'Application ID', + placeholder: 'e.g. ABCD1234EF', + secret: false, + hintPattern: /^[A-Za-z0-9]+$/, + hintMessage: 'Algolia application IDs contain only letters and numbers.', + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/algolia', + helpText: + 'Copy the Application ID and an API key from Settings > API Keys in the Algolia dashboard. Use the Write API key, or a key with the ACLs your workflows need; a Search-only key can only search, and secured (derived) keys are not supported.', + invalidCredentialsHelp: + 'Algolia rejected this application ID and API key. Check that the key belongs to this application and has not been deleted.', + }, + [UPSTASH_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: UPSTASH_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Upstash', + tokenNoun: 'REST token', + connectNoun: 'REST token', + fields: [ + { + id: 'apiToken', + label: 'REST token', + placeholder: 'Paste your Upstash Redis REST token', + secret: true, + }, + { + id: 'domain', + label: 'REST URL', + placeholder: 'https://your-database.upstash.io', + secret: false, + url: true, + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/upstash', + helpText: + 'Copy the REST URL and token from the REST API section of your database in the Upstash console. A read-only token works for read operations only.', + invalidCredentialsHelp: + 'Upstash rejected this REST token. Check that it belongs to the database at this URL and was not reset.', + }, + [EMAILBISON_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: EMAILBISON_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Email Bison', + tokenNoun: 'API token', + connectNoun: 'API token', + fields: [ + { + id: 'apiToken', + label: 'API token', + placeholder: 'Paste your Email Bison API token', + secret: true, + }, + { + id: 'domain', + label: 'Instance URL', + placeholder: 'https://dedi.emailbison.com', + secret: false, + url: true, + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/emailbison', + helpText: + 'Create an API token in Email Bison under Settings > Developer API. Enter the URL you sign in to Email Bison at; a workspace token only works for the workspace it was created in.', + invalidCredentialsHelp: + 'Email Bison rejected this token. Check that it was copied in full and that the instance URL is the one where the token was created.', + }, + [DEVIN_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: DEVIN_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Devin', + tokenNoun: 'service user API key', + connectNoun: 'API key', + fields: [ + { + id: 'apiToken', + label: 'API key', + placeholder: 'cog_...', + secret: true, + hintPattern: /^cog_/, + hintMessage: 'Devin service user keys start with cog_.', + }, + { + id: 'providerWorkspaceId', + label: 'Organization ID', + placeholder: 'org-...', + secret: false, + hintPattern: /^org-/, + hintMessage: 'Devin organization IDs start with org-.', + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/devin', + helpText: + 'Create a service user in Devin under Settings > Service Users with permission to manage sessions, and copy its API key and your organization ID.', + invalidCredentialsHelp: + 'Devin rejected this key for that organization. Check that the key belongs to a service user in this organization and can view sessions.', + }, + [OKTA_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: OKTA_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Okta', + tokenNoun: 'API token', + connectNoun: 'API token', + fields: [ + { + id: 'apiToken', + label: 'API token', + placeholder: 'Paste your Okta API token', + secret: true, + }, + { id: 'domain', label: 'Okta domain', placeholder: 'dev-123456.okta.com', secret: false }, + ], + docsUrl: 'https://docs.sim.ai/integrations/okta', + helpText: + 'Create an API token in the Okta Admin Console under Security > API > Tokens. The token acts with the admin roles of the user who created it. Enter your Okta domain, such as dev-123456.okta.com; custom domains are not supported.', + invalidCredentialsHelp: + 'Okta rejected this token. Check that it is active, was created in this Okta org, and that the domain is your Okta-hosted domain (okta.com, oktapreview.com, okta-emea.com, okta-gov.com, or trexcloud.com).', + }, + [INFISICAL_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: INFISICAL_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Infisical', + tokenNoun: 'machine identity access token', + connectNoun: 'access token', + fields: [ + { + id: 'apiToken', + label: 'Access token', + placeholder: 'Paste a machine identity access token', + secret: true, + }, + { + id: 'domain', + label: 'Instance URL', + placeholder: 'https://us.infisical.com', + secret: false, + url: true, + }, + ], + docsUrl: 'https://docs.sim.ai/integrations/infisical', + helpText: + 'Use https://us.infisical.com for US Cloud, https://eu.infisical.com for EU Cloud, or your self-hosted URL. Universal Auth tokens expire with their TTL; a Token Auth token with a long TTL keeps runs working.', + invalidCredentialsHelp: + 'Paste a machine identity access token, not a client secret or service token, and make sure the instance URL matches the region the identity lives in.', + }, + [SUPABASE_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: SUPABASE_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Supabase', + tokenNoun: 'API key', + connectNoun: 'API key', + fields: [ + { id: 'apiToken', label: 'API key', placeholder: 'Paste your project API key', secret: true }, + { id: 'domain', label: 'Project ID', placeholder: 'abcdefghijklmnopqrst', secret: false }, + ], + docsUrl: 'https://docs.sim.ai/integrations/supabase', + helpText: + 'Use a key from Project Settings > API Keys. A secret or service_role key bypasses row-level security; an anon or publishable key is limited by your policies.', + invalidCredentialsHelp: + "Supabase rejected this key. Check that it belongs to the project you entered and hasn't been revoked.", + }, + [THRIVE_SERVICE_ACCOUNT_PROVIDER_ID]: { + providerId: THRIVE_SERVICE_ACCOUNT_PROVIDER_ID, + serviceLabel: 'Thrive', + tokenNoun: 'API key', + connectNoun: 'API key', + fields: [ + { id: 'apiToken', label: 'API key', placeholder: 'Paste your Thrive API key', secret: true }, + { + id: 'providerWorkspaceId', + label: 'Tenant ID', + placeholder: 'Your Thrive tenant ID', + secret: false, + }, + { id: 'domain', label: 'Region host', placeholder: 'public.api.learn.link', secret: false }, + ], + docsUrl: 'https://docs.sim.ai/integrations/thrive', + helpText: + 'Use the API key and tenant ID from your Thrive admin settings. Region host is public.api.learn.link, or public.api.mea.learn.tech for the Middle East and Africa (staging hosts also work).', + invalidCredentialsHelp: + 'Thrive rejected this API key. Check that the tenant ID matches the key and that the region host is the one your tenant uses.', + }, } /** diff --git a/apps/sim/lib/credentials/token-service-accounts/errors.ts b/apps/sim/lib/credentials/token-service-accounts/errors.ts index 6118c12118f..e334edb966c 100644 --- a/apps/sim/lib/credentials/token-service-accounts/errors.ts +++ b/apps/sim/lib/credentials/token-service-accounts/errors.ts @@ -109,6 +109,16 @@ export interface FetchProviderOptions { */ const PROVIDER_FETCH_TIMEOUT_MS = 10_000 +/** + * Whether a failed request proves the host doesn't exist (`ENOTFOUND`). Node's fetch + * puts the resolver code on `cause`, Bun's on the error itself; the transient + * `EAI_AGAIN` is not a missing host. + */ +export function isHostNotFound(error: unknown): boolean { + const failure = error as { code?: unknown; cause?: { code?: unknown } } | undefined + return (failure?.code ?? failure?.cause?.code) === 'ENOTFOUND' +} + export async function fetchProvider( url: string, init: RequestInit, @@ -121,10 +131,9 @@ export async function fetchProvider( return await fetch(url, { ...init, signal }) } catch (error) { init.signal?.throwIfAborted() - const causeCode = (error as { cause?: { code?: unknown } })?.cause?.code // Only ENOTFOUND proves the host doesn't exist; EAI_AGAIN is a transient // resolver failure and stays provider_unavailable. - if (options?.dnsFailureCode && causeCode === 'ENOTFOUND') { + if (options?.dnsFailureCode && isHostNotFound(error)) { throw new TokenServiceAccountValidationError(options.dnsFailureCode, 400, { step, reason: options.dnsFailureReason ?? 'host does not resolve', @@ -153,11 +162,19 @@ export async function parseProviderJson(res: Response, step: string): Promise } } +/** The parts of a provider response the checks read; both `fetch` and the guarded egress fetch return them. */ +export interface ProviderResponse { + ok: boolean + status: number + headers: { get(name: string): string | null } + body: ReadableStream | null +} + /** * Reads a bounded snippet of a provider error body for server logs. Never * throws — an unreadable body logs as an empty string. */ -export async function readProviderErrorSnippet(res: Response): Promise { +export async function readProviderErrorSnippet(res: ProviderResponse): Promise { try { // Bounded: a provider or proxy can answer with an arbitrarily large error body. const text = await readResponseTextWithLimit(res, { @@ -189,7 +206,7 @@ export async function readProviderErrorSnippet(res: Response): Promise { * Snowflake, Atlassian) already raise `site_not_found` before reaching here. */ export async function throwForProviderResponse( - res: Response, + res: ProviderResponse, step: string, context: Record = {} ): Promise { diff --git a/apps/sim/lib/credentials/token-service-accounts/server.ts b/apps/sim/lib/credentials/token-service-accounts/server.ts index 19998b723cb..2bc713557ae 100644 --- a/apps/sim/lib/credentials/token-service-accounts/server.ts +++ b/apps/sim/lib/credentials/token-service-accounts/server.ts @@ -5,11 +5,13 @@ import { AGENTPHONE_SERVICE_ACCOUNT_PROVIDER_ID, AHREFS_SERVICE_ACCOUNT_PROVIDER_ID, AIRTABLE_SERVICE_ACCOUNT_PROVIDER_ID, + ALGOLIA_SERVICE_ACCOUNT_PROVIDER_ID, APIFY_SERVICE_ACCOUNT_PROVIDER_ID, APOLLO_SERVICE_ACCOUNT_PROVIDER_ID, ASANA_SERVICE_ACCOUNT_PROVIDER_ID, ASHBY_SERVICE_ACCOUNT_PROVIDER_ID, ATTIO_SERVICE_ACCOUNT_PROVIDER_ID, + AZURE_DEVOPS_SERVICE_ACCOUNT_PROVIDER_ID, BREX_SERVICE_ACCOUNT_PROVIDER_ID, BRIGHTDATA_SERVICE_ACCOUNT_PROVIDER_ID, BROWSER_USE_SERVICE_ACCOUNT_PROVIDER_ID, @@ -23,12 +25,16 @@ import { CLICKUP_SERVICE_ACCOUNT_PROVIDER_ID, CLOUDFLARE_SERVICE_ACCOUNT_PROVIDER_ID, CODA_SERVICE_ACCOUNT_PROVIDER_ID, + CONVEX_SERVICE_ACCOUNT_PROVIDER_ID, CRUNCHBASE_SERVICE_ACCOUNT_PROVIDER_ID, CURSOR_SERVICE_ACCOUNT_PROVIDER_ID, DAYTONA_SERVICE_ACCOUNT_PROVIDER_ID, + DEVIN_SERVICE_ACCOUNT_PROVIDER_ID, DISCORD_SERVICE_ACCOUNT_PROVIDER_ID, DUB_SERVICE_ACCOUNT_PROVIDER_ID, + DYNATRACE_SERVICE_ACCOUNT_PROVIDER_ID, ELEVENLABS_SERVICE_ACCOUNT_PROVIDER_ID, + EMAILBISON_SERVICE_ACCOUNT_PROVIDER_ID, ENRICH_SERVICE_ACCOUNT_PROVIDER_ID, EXTEND_SERVICE_ACCOUNT_PROVIDER_ID, FATHOM_SERVICE_ACCOUNT_PROVIDER_ID, @@ -38,6 +44,7 @@ import { GAMMA_SERVICE_ACCOUNT_PROVIDER_ID, GAUGE_SERVICE_ACCOUNT_PROVIDER_ID, GITLAB_SERVICE_ACCOUNT_PROVIDER_ID, + GRAFANA_SERVICE_ACCOUNT_PROVIDER_ID, GRAIN_SERVICE_ACCOUNT_PROVIDER_ID, GRANOLA_SERVICE_ACCOUNT_PROVIDER_ID, HARMONIC_SERVICE_ACCOUNT_PROVIDER_ID, @@ -46,24 +53,32 @@ import { HUBSPOT_SERVICE_ACCOUNT_PROVIDER_ID, HUGGINGFACE_SERVICE_ACCOUNT_PROVIDER_ID, INCIDENTIO_SERVICE_ACCOUNT_PROVIDER_ID, + INFISICAL_SERVICE_ACCOUNT_PROVIDER_ID, INSTANTLY_SERVICE_ACCOUNT_PROVIDER_ID, INTERCOM_SERVICE_ACCOUNT_PROVIDER_ID, isTokenServiceAccountProviderId, + JOTFORM_SERVICE_ACCOUNT_PROVIDER_ID, + JUPYTER_SERVICE_ACCOUNT_PROVIDER_ID, LANGSMITH_SERVICE_ACCOUNT_PROVIDER_ID, LAUNCHDARKLY_SERVICE_ACCOUNT_PROVIDER_ID, LEMLIST_SERVICE_ACCOUNT_PROVIDER_ID, LINEAR_SERVICE_ACCOUNT_PROVIDER_ID, LINQ_SERVICE_ACCOUNT_PROVIDER_ID, + LOGFIRE_SERVICE_ACCOUNT_PROVIDER_ID, LOOPS_SERVICE_ACCOUNT_PROVIDER_ID, LUMA_SERVICE_ACCOUNT_PROVIDER_ID, MAILCHIMP_SERVICE_ACCOUNT_PROVIDER_ID, + MAILGUN_SERVICE_ACCOUNT_PROVIDER_ID, MEM0_SERVICE_ACCOUNT_PROVIDER_ID, MONDAY_SERVICE_ACCOUNT_PROVIDER_ID, + NEW_RELIC_SERVICE_ACCOUNT_PROVIDER_ID, NOTION_SERVICE_ACCOUNT_PROVIDER_ID, + OKTA_SERVICE_ACCOUNT_PROVIDER_ID, OTTER_SERVICE_ACCOUNT_PROVIDER_ID, PAGERDUTY_SERVICE_ACCOUNT_PROVIDER_ID, PERSONA_SERVICE_ACCOUNT_PROVIDER_ID, PIPEDRIVE_SERVICE_ACCOUNT_PROVIDER_ID, + PLANE_SERVICE_ACCOUNT_PROVIDER_ID, PROFOUND_SERVICE_ACCOUNT_PROVIDER_ID, PULSE_SERVICE_ACCOUNT_PROVIDER_ID, QUARTR_SERVICE_ACCOUNT_PROVIDER_ID, @@ -84,14 +99,19 @@ import { SPORTMONKS_SERVICE_ACCOUNT_PROVIDER_ID, SQUARE_SERVICE_ACCOUNT_PROVIDER_ID, STRIPE_SERVICE_ACCOUNT_PROVIDER_ID, + SUPABASE_SERVICE_ACCOUNT_PROVIDER_ID, TAILSCALE_SERVICE_ACCOUNT_PROVIDER_ID, TAVILY_SERVICE_ACCOUNT_PROVIDER_ID, TELEGRAM_SERVICE_ACCOUNT_PROVIDER_ID, + THRIVE_SERVICE_ACCOUNT_PROVIDER_ID, + TINYBIRD_SERVICE_ACCOUNT_PROVIDER_ID, TOKEN_SERVICE_ACCOUNT_SECRET_TYPE, type TokenServiceAccountProviderId, TRELLO_SERVICE_ACCOUNT_PROVIDER_ID, TRIGGER_DEV_SERVICE_ACCOUNT_PROVIDER_ID, + TWILIO_SERVICE_ACCOUNT_PROVIDER_ID, TYPEFORM_SERVICE_ACCOUNT_PROVIDER_ID, + UPSTASH_SERVICE_ACCOUNT_PROVIDER_ID, UPTIMEROBOT_SERVICE_ACCOUNT_PROVIDER_ID, VERCEL_SERVICE_ACCOUNT_PROVIDER_ID, WEALTHBOX_SERVICE_ACCOUNT_PROVIDER_ID, @@ -110,7 +130,6 @@ import { validateClickupServiceAccount } from '@/lib/credentials/token-service-a import { validateCodaServiceAccount } from '@/lib/credentials/token-service-accounts/validators/coda' import { validateFlowServiceAccount } from '@/lib/credentials/token-service-accounts/validators/flow' import { validateGaugeServiceAccount } from '@/lib/credentials/token-service-accounts/validators/gauge' -import { validateGitLabServiceAccount } from '@/lib/credentials/token-service-accounts/validators/gitlab' import { validateHarmonicServiceAccount } from '@/lib/credentials/token-service-accounts/validators/harmonic' import { validateHiggsfieldServiceAccount } from '@/lib/credentials/token-service-accounts/validators/higgsfield' import { validateHubspotServiceAccount } from '@/lib/credentials/token-service-accounts/validators/hubspot' @@ -125,9 +144,11 @@ import { validateAgentMailServiceAccount, validateAgentPhoneServiceAccount, validateAhrefsServiceAccount, + validateAlgoliaServiceAccount, validateApifyServiceAccount, validateApolloServiceAccount, validateAshbyServiceAccount, + validateAzureDevOpsServiceAccount, validateBrexServiceAccount, validateBrightDataServiceAccount, validateBrowserUseServiceAccount, @@ -137,36 +158,50 @@ import { validateCirclebackServiceAccount, validateClerkServiceAccount, validateCloudflareServiceAccount, + validateConvexServiceAccount, validateCrunchbaseServiceAccount, validateCursorServiceAccount, validateDaytonaServiceAccount, + validateDevinServiceAccount, validateDiscordServiceAccount, validateDubServiceAccount, + validateDynatraceServiceAccount, validateElevenLabsServiceAccount, + validateEmailBisonServiceAccount, validateEnrichServiceAccount, validateExtendServiceAccount, validateFathomServiceAccount, validateFirefliesServiceAccount, validateFlintServiceAccount, validateGammaServiceAccount, + validateGitLabServiceAccount, + validateGrafanaServiceAccount, validateGrainServiceAccount, validateGranolaServiceAccount, validateHexServiceAccount, validateHuggingfaceServiceAccount, validateIncidentioServiceAccount, + validateInfisicalServiceAccount, validateInstantlyServiceAccount, validateIntercomServiceAccount, + validateJotformServiceAccount, + validateJupyterServiceAccount, validateLangsmithServiceAccount, validateLaunchdarklyServiceAccount, validateLemlistServiceAccount, validateLinqServiceAccount, + validateLogfireServiceAccount, validateLoopsServiceAccount, validateLumaServiceAccount, validateMailchimpServiceAccount, + validateMailgunServiceAccount, validateMem0ServiceAccount, + validateNewRelicServiceAccount, + validateOktaServiceAccount, validateOtterServiceAccount, validatePagerDutyServiceAccount, validatePersonaServiceAccount, + validatePlaneServiceAccount, validateProfoundServiceAccount, validatePulseServiceAccount, validateQuartrServiceAccount, @@ -185,11 +220,16 @@ import { validateSportmonksServiceAccount, validateSquareServiceAccount, validateStripeServiceAccount, + validateSupabaseServiceAccount, validateTailscaleServiceAccount, validateTavilyServiceAccount, validateTelegramServiceAccount, + validateThriveServiceAccount, + validateTinybirdServiceAccount, validateTriggerDevServiceAccount, + validateTwilioServiceAccount, validateTypeformServiceAccount, + validateUpstashServiceAccount, validateUptimeRobotServiceAccount, validateVercelServiceAccount, validateWhatsAppServiceAccount, @@ -326,21 +366,41 @@ const TOKEN_SERVICE_ACCOUNT_VALIDATORS: Record< [AGENTMAIL_SERVICE_ACCOUNT_PROVIDER_ID]: validateAgentMailServiceAccount, [AFFINITY_SERVICE_ACCOUNT_PROVIDER_ID]: validateAffinityServiceAccount, [TAVILY_SERVICE_ACCOUNT_PROVIDER_ID]: validateTavilyServiceAccount, - [GITLAB_SERVICE_ACCOUNT_PROVIDER_ID]: validateGitLabServiceAccount, + [ALGOLIA_SERVICE_ACCOUNT_PROVIDER_ID]: validateAlgoliaServiceAccount, [ASHBY_SERVICE_ACCOUNT_PROVIDER_ID]: validateAshbyServiceAccount, + [AZURE_DEVOPS_SERVICE_ACCOUNT_PROVIDER_ID]: validateAzureDevOpsServiceAccount, [CALENDLY_SERVICE_ACCOUNT_PROVIDER_ID]: validateCalendlyServiceAccount, [CHECKR_SERVICE_ACCOUNT_PROVIDER_ID]: validateCheckrServiceAccount, + [CONVEX_SERVICE_ACCOUNT_PROVIDER_ID]: validateConvexServiceAccount, + [DEVIN_SERVICE_ACCOUNT_PROVIDER_ID]: validateDevinServiceAccount, + [DYNATRACE_SERVICE_ACCOUNT_PROVIDER_ID]: validateDynatraceServiceAccount, + [EMAILBISON_SERVICE_ACCOUNT_PROVIDER_ID]: validateEmailBisonServiceAccount, [FATHOM_SERVICE_ACCOUNT_PROVIDER_ID]: validateFathomServiceAccount, + [GITLAB_SERVICE_ACCOUNT_PROVIDER_ID]: validateGitLabServiceAccount, + [GRAFANA_SERVICE_ACCOUNT_PROVIDER_ID]: validateGrafanaServiceAccount, [GRAIN_SERVICE_ACCOUNT_PROVIDER_ID]: validateGrainServiceAccount, [GRANOLA_SERVICE_ACCOUNT_PROVIDER_ID]: validateGranolaServiceAccount, + [INFISICAL_SERVICE_ACCOUNT_PROVIDER_ID]: validateInfisicalServiceAccount, + [JOTFORM_SERVICE_ACCOUNT_PROVIDER_ID]: validateJotformServiceAccount, + [JUPYTER_SERVICE_ACCOUNT_PROVIDER_ID]: validateJupyterServiceAccount, [LEMLIST_SERVICE_ACCOUNT_PROVIDER_ID]: validateLemlistServiceAccount, + [LOGFIRE_SERVICE_ACCOUNT_PROVIDER_ID]: validateLogfireServiceAccount, + [MAILGUN_SERVICE_ACCOUNT_PROVIDER_ID]: validateMailgunServiceAccount, + [NEW_RELIC_SERVICE_ACCOUNT_PROVIDER_ID]: validateNewRelicServiceAccount, + [OKTA_SERVICE_ACCOUNT_PROVIDER_ID]: validateOktaServiceAccount, [PAGERDUTY_SERVICE_ACCOUNT_PROVIDER_ID]: validatePagerDutyServiceAccount, + [PLANE_SERVICE_ACCOUNT_PROVIDER_ID]: validatePlaneServiceAccount, [RESEND_SERVICE_ACCOUNT_PROVIDER_ID]: validateResendServiceAccount, [ROOTLY_SERVICE_ACCOUNT_PROVIDER_ID]: validateRootlyServiceAccount, [SENTRY_SERVICE_ACCOUNT_PROVIDER_ID]: validateSentryServiceAccount, [STRIPE_SERVICE_ACCOUNT_PROVIDER_ID]: validateStripeServiceAccount, + [SUPABASE_SERVICE_ACCOUNT_PROVIDER_ID]: validateSupabaseServiceAccount, [TELEGRAM_SERVICE_ACCOUNT_PROVIDER_ID]: validateTelegramServiceAccount, + [THRIVE_SERVICE_ACCOUNT_PROVIDER_ID]: validateThriveServiceAccount, + [TINYBIRD_SERVICE_ACCOUNT_PROVIDER_ID]: validateTinybirdServiceAccount, + [TWILIO_SERVICE_ACCOUNT_PROVIDER_ID]: validateTwilioServiceAccount, [TYPEFORM_SERVICE_ACCOUNT_PROVIDER_ID]: validateTypeformServiceAccount, + [UPSTASH_SERVICE_ACCOUNT_PROVIDER_ID]: validateUpstashServiceAccount, [VERCEL_SERVICE_ACCOUNT_PROVIDER_ID]: validateVercelServiceAccount, [WHATSAPP_SERVICE_ACCOUNT_PROVIDER_ID]: validateWhatsAppServiceAccount, } diff --git a/apps/sim/lib/credentials/token-service-accounts/validators/gitlab.test.ts b/apps/sim/lib/credentials/token-service-accounts/validators/gitlab.test.ts index 044ab9cbf0a..57cff93e77f 100644 --- a/apps/sim/lib/credentials/token-service-accounts/validators/gitlab.test.ts +++ b/apps/sim/lib/credentials/token-service-accounts/validators/gitlab.test.ts @@ -10,7 +10,7 @@ import { beforeEach, describe, expect, it, vi } from 'vitest' vi.mock('@/lib/core/security/input-validation.server', () => inputValidationMock) -import { validateGitLabServiceAccount } from '@/lib/credentials/token-service-accounts/validators/gitlab' +import { validateGitLabServiceAccount } from '@/lib/credentials/token-service-accounts/validators/token-checks' const activeToken = { name: 'sim-workflows', active: true, revoked: false, scopes: ['api'] } @@ -26,7 +26,11 @@ describe('GitLab saved token verification', () => { await expect( validateGitLabServiceAccount({ apiToken: 'glpat-x', domain: 'https://gitlab.example.com/' }) - ).resolves.toMatchObject({ normalizedDomain: 'gitlab.example.com' }) + ).resolves.toMatchObject({ + normalizedDomain: 'gitlab.example.com', + displayName: 'sim-workflows (gitlab.example.com)', + auditMetadata: { domain: 'gitlab.example.com' }, + }) expect(fetch).toHaveBeenCalledWith( 'https://gitlab.example.com/api/v4/personal_access_tokens/self', expect.objectContaining({ maxRedirects: 0, profile: 'configuredEndpoint' }) diff --git a/apps/sim/lib/credentials/token-service-accounts/validators/gitlab.ts b/apps/sim/lib/credentials/token-service-accounts/validators/gitlab.ts deleted file mode 100644 index afbc45fe495..00000000000 --- a/apps/sim/lib/credentials/token-service-accounts/validators/gitlab.ts +++ /dev/null @@ -1,96 +0,0 @@ -import { toRecord } from '@sim/utils/object' -import { - type SecureFetchResponse, - secureFetchWithValidation, -} from '@/lib/core/security/input-validation.server' -import { - providerFailureCode, - TokenServiceAccountValidationError, -} from '@/lib/credentials/token-service-accounts/errors' -import type { - TokenServiceAccountFields, - TokenServiceAccountValidationResult, -} from '@/lib/credentials/token-service-accounts/server' -import { normalizeGitLabHost } from '@/tools/gitlab/utils' - -/** Scopes that let the GitLab tools call the REST API. */ -const API_SCOPES = new Set(['api', 'read_api']) - -/** - * Verifies a GitLab personal, project, or group access token against the - * instance it was typed with (gitlab.com or self-managed). GitLab's token - * self-lookup answers for any of the three; the token must be active and carry - * an API scope. The host is normalized exactly as the tools normalize it and - * stored as the credential's domain, so runs only ever reach the verified host. - */ -export async function validateGitLabServiceAccount( - fields: TokenServiceAccountFields -): Promise { - let host: string - try { - host = normalizeGitLabHost(fields.domain) - } catch { - throw new TokenServiceAccountValidationError('invalid_credentials', 400, { - step: 'verify', - reason: 'invalid host', - }) - } - let response: SecureFetchResponse - try { - response = await secureFetchWithValidation( - `https://${host}/api/v4/personal_access_tokens/self`, - { - profile: 'configuredEndpoint', - headers: { 'PRIVATE-TOKEN': fields.apiToken, Accept: 'application/json' }, - timeout: 10_000, - maxResponseBytes: 64 * 1024, - maxRedirects: 0, - logUrlValidationDetails: false, - } - ) - } catch (error) { - // Only ENOTFOUND proves the host doesn't exist; other lookup and network failures may pass. - if ((error as { cause?: { code?: unknown } })?.cause?.code === 'ENOTFOUND') { - throw new TokenServiceAccountValidationError('site_not_found', 400, { - step: 'verify', - reason: 'host does not resolve', - }) - } - throw new TokenServiceAccountValidationError('provider_unavailable', 502, { - step: 'verify', - reason: 'could not reach the GitLab host', - }) - } - if (!response.ok) { - await response.body?.cancel().catch(() => undefined) - throw new TokenServiceAccountValidationError( - providerFailureCode(response.status), - response.status, - { step: 'verify' } - ) - } - const token = toRecord(await response.json().catch(() => null)) - if (typeof token.active !== 'boolean' || !Array.isArray(token.scopes)) { - throw new TokenServiceAccountValidationError('provider_unavailable', 502, { - step: 'verify', - reason: 'GitLab returned an unexpected token lookup', - }) - } - if ( - !token.active || - token.revoked === true || - !token.scopes.some((scope) => API_SCOPES.has(String(scope))) - ) { - throw new TokenServiceAccountValidationError('invalid_credentials', 400, { - step: 'verify', - reason: 'inactive token or no API scope', - }) - } - const name = typeof token.name === 'string' && token.name.trim() ? token.name.trim() : 'GitLab' - return { - displayName: `${name} (${host})`, - principal: null, - normalizedDomain: host, - auditMetadata: { host }, - } -} diff --git a/apps/sim/lib/credentials/token-service-accounts/validators/http.test.ts b/apps/sim/lib/credentials/token-service-accounts/validators/http.test.ts index a81d34306d6..5264ae1c622 100644 --- a/apps/sim/lib/credentials/token-service-accounts/validators/http.test.ts +++ b/apps/sim/lib/credentials/token-service-accounts/validators/http.test.ts @@ -1,6 +1,16 @@ import { jsonResponse } from '@sim/testing/helpers/http' -import { describe, expect, it, vi } from 'vitest' -import { tokenCheckValidator } from '@/lib/credentials/token-service-accounts/validators/http' +import { + inputValidationMock, + inputValidationMockFns, +} from '@sim/testing/mocks/input-validation.mock' +import { beforeEach, describe, expect, it, vi } from 'vitest' + +vi.mock('@/lib/core/security/input-validation.server', () => inputValidationMock) + +import { + normalizeHttpBaseUrl, + tokenCheckValidator, +} from '@/lib/credentials/token-service-accounts/validators/http' const validate = tokenCheckValidator({ serviceLabel: 'Example', @@ -116,3 +126,110 @@ describe('tokenCheckValidator', () => { await expect(check({ apiToken: 'any' })).rejects.toMatchObject({ code: 'provider_unavailable' }) }) }) + +describe('tokenCheckValidator with a typed host', () => { + const secureFetch = inputValidationMockFns.mockSecureFetchWithValidation + const validateHost = tokenCheckValidator({ + serviceLabel: 'Example', + domain: ({ domain }) => { + const url = new URL(`https://${domain?.trim()}`) + if (url.username || url.pathname !== '/') throw new Error('not a bare host') + return url.host + }, + egress: 'configuredEndpoint', + request: ({ apiToken, domain }) => ({ + url: `https://${domain}/api/me`, + headers: { Authorization: `Bearer ${apiToken}` }, + }), + }) + + beforeEach(() => { + secureFetch.mockReset() + }) + + it('verifies at the normalized host through the guarded egress and stores that host', async () => { + secureFetch.mockResolvedValue(jsonResponse({ ok: true })) + + await expect( + validateHost({ apiToken: 'good', domain: ' Tools.Example.com ' }) + ).resolves.toMatchObject({ normalizedDomain: 'tools.example.com' }) + expect(secureFetch).toHaveBeenCalledWith( + 'https://tools.example.com/api/me', + expect.objectContaining({ profile: 'configuredEndpoint', maxRedirects: 0 }) + ) + }) + + it('refuses a base URL with a mistyped scheme instead of reading the scheme as a host', () => { + expect(() => normalizeHttpBaseUrl('https:/grafana.example.com')).toThrow(/scheme/) + expect(normalizeHttpBaseUrl('grafana.example.com:3000/')).toBe( + 'https://grafana.example.com:3000' + ) + }) + + it('refuses a host its normalizer rejects without sending the token anywhere', async () => { + await expect( + validateHost({ apiToken: 'good', domain: 'evil.example.com@tools.example.com' }) + ).rejects.toMatchObject({ code: 'invalid_credentials' }) + expect(secureFetch).not.toHaveBeenCalled() + }) + + it.each([ + [ + 'Node (code on cause)', + new Error('fetch failed', { + cause: Object.assign(new Error('getaddrinfo ENOTFOUND'), { code: 'ENOTFOUND' }), + }), + ], + [ + 'Bun (code on the error)', + Object.assign(new TypeError('fetch failed'), { code: 'ENOTFOUND' }), + ], + ])('reports a host that does not exist as not found under %s', async (_runtime, error) => { + secureFetch.mockRejectedValue(error) + + await expect( + validateHost({ apiToken: 'good', domain: 'tools.exmaple.com' }) + ).rejects.toMatchObject({ code: 'site_not_found' }) + }) + + it('reports a fixed-host vendor whose typed account does not resolve as not found under Bun', async () => { + const accountHost = tokenCheckValidator({ + serviceLabel: 'Account', + workspaceId: ({ providerWorkspaceId }) => (providerWorkspaceId ?? '').trim(), + request: ({ apiToken, providerWorkspaceId = '' }) => ({ + url: `https://${providerWorkspaceId}.api.example.com/me`, + headers: { Authorization: `Bearer ${apiToken}` }, + }), + }) + vi.stubGlobal( + 'fetch', + vi.fn().mockRejectedValue(Object.assign(new TypeError('fetch failed'), { code: 'ENOTFOUND' })) + ) + + await expect( + accountHost({ apiToken: 'good', providerWorkspaceId: 'typo' }) + ).rejects.toMatchObject({ + code: 'site_not_found', + }) + }) + + it('keeps an error body that echoes the token out of the error details', async () => { + const echoing = tokenCheckValidator({ + serviceLabel: 'Echo', + errorBodyEchoesToken: true, + request: ({ apiToken }) => ({ + url: 'https://api.example.com/me', + headers: { Token: apiToken }, + }), + }) + vi.stubGlobal( + 'fetch', + vi.fn().mockResolvedValue(jsonResponse({ error: 'invalid token tok-secret' }, 401)) + ) + + const error = await echoing({ apiToken: 'tok-secret' }).catch((caught: unknown) => caught) + + expect(error).toMatchObject({ code: 'invalid_credentials' }) + expect(JSON.stringify(error)).not.toContain('tok-secret') + }) +}) diff --git a/apps/sim/lib/credentials/token-service-accounts/validators/http.ts b/apps/sim/lib/credentials/token-service-accounts/validators/http.ts index 301332a9619..0cb6143b455 100644 --- a/apps/sim/lib/credentials/token-service-accounts/validators/http.ts +++ b/apps/sim/lib/credentials/token-service-accounts/validators/http.ts @@ -1,7 +1,11 @@ import { truncate } from '@sim/utils/string' +import type { EgressProfile } from '@/lib/core/security/egress/profiles' +import { secureFetchWithValidation } from '@/lib/core/security/input-validation.server' import { readResponseJsonWithLimit } from '@/lib/core/utils/stream-limits' import { fetchProvider, + isHostNotFound, + type ProviderResponse, providerFailureCode, TokenServiceAccountValidationError, throwForProviderResponse, @@ -22,9 +26,32 @@ interface TokenCheckRequest { interface TokenCheck { /** Service name used as the default display name. */ serviceLabel: string + /** + * For a credential whose domain is part of the connection (a host, instance + * URL, or region): normalizes what was typed into exactly the form the tools + * use, throwing for anything they couldn't safely use. The result is what + * {@link request} sees and what the credential stores, so runs reach only the + * verified host. + */ + domain?: (fields: TokenServiceAccountFields) => string + /** + * For a credential whose account id is part of the connection (an org slug, + * account SID): returns it trimmed, throwing for a value that could steer the + * request's path or host. + */ + workspaceId?: (fields: TokenServiceAccountFields) => string + /** + * The request goes to a host the user chose (self-hosted or white-label), so + * it runs through the same SSRF-guarded egress profile as the tools instead + * of a plain fetch. + */ + egress?: Extract + /** The vendor echoes the token in its error body, so that body never reaches logs or error details. */ + errorBodyEchoesToken?: boolean /** * A cheap documented read that succeeds only with a valid token — the same - * host and auth scheme the service's tools use. + * host and auth scheme the service's tools use. `fields` carries the + * normalized domain and account id. */ request: (fields: TokenServiceAccountFields) => TokenCheckRequest /** @@ -36,9 +63,10 @@ interface TokenCheck { forbiddenMeansScoped?: boolean /** * For a vendor that reports a rejected key inside a successful response (a - * GraphQL `errors` array): returns whether the parsed body proves the key. + * GraphQL `errors` array): returns whether the parsed body proves the key, or + * a display name read from it (a GitLab token's name) when it does. */ - acceptsBody?: (body: unknown) => boolean + acceptsBody?: (body: unknown) => boolean | { displayName: string } /** * For a vendor whose error status alone doesn't say the key is bad (Fireflies * returns 500 with `auth_failed`; Brex returns its scope-error 403 for an @@ -56,15 +84,101 @@ interface TokenCheck { } const MAX_CHECK_RESPONSE_BYTES = 64 * 1024 +/** The guarded fetch refuses a larger declared body outright; JSON reads stay capped at {@link MAX_CHECK_RESPONSE_BYTES}. */ +const MAX_EGRESS_RESPONSE_BYTES = 1024 * 1024 /** Reads a credential check's JSON response, capped so a hostile body can't exhaust memory. */ -export function readJsonBody(response: Response, serviceLabel: string): Promise { +export function readJsonBody(response: ProviderResponse, serviceLabel: string): Promise { return readResponseJsonWithLimit(response, { maxBytes: MAX_CHECK_RESPONSE_BYTES, label: `${serviceLabel} credential check`, }) } +/** + * A typed http(s) base URL in the form tools build request paths on: a bare host + * is taken as https, trailing slashes are dropped, and any other scheme, + * credentials, a query, or a fragment is refused, since each would retarget the + * request. + */ +export function normalizeHttpBaseUrl(raw: string | undefined): string { + const typed = (raw ?? '').trim() + if (!typed) throw new Error('missing URL') + // `https:/host` would otherwise get a second scheme and parse as a host named `https`. + if (/^https?:(?!\/\/)/i.test(typed)) throw new Error('malformed scheme') + const url = new URL(/^[a-z][a-z\d+.-]*:\/\//i.test(typed) ? typed : `https://${typed}`) + if (url.protocol !== 'https:' && url.protocol !== 'http:') throw new Error('http(s) only') + if (url.username || url.password || url.search || url.hash) { + throw new Error('credentials, query, or fragment in URL') + } + return `${url.origin}${url.pathname.replace(/\/+$/, '')}` +} + +/** + * Refuses a typed URL that carries credentials or a non-http(s) scheme, before a + * tool's own normalizer can drop the credentials silently or read the scheme as + * a host, and so verify a different identity or host than the user meant. + */ +export function refuseUnsafeTypedUrl(raw: string | undefined): string { + const typed = (raw ?? '').trim() + if (/^(?!https?:\/\/)[a-z][a-z\d+.-]*:\/\//i.test(typed)) throw new Error('http(s) only') + const authority = typed.replace(/^[a-z][a-z\d+.-]*:\/\//i, '').split(/[/?#]/)[0] + if (authority.includes('@')) throw new Error('credentials in URL') + return typed +} + +/** A domain that must be one of a fixed set (a region or regional host), compared case-insensitively. */ +export function allowedDomain(allowed: ReadonlySet) { + return ({ domain }: TokenServiceAccountFields): string => { + const value = (domain ?? '').trim().toLowerCase() + if (!allowed.has(value)) throw new Error('unknown region') + return value + } +} + +/** Runs `normalize` on a typed connection field, rejecting what it refuses as the user's input. */ +function normalizedField( + normalize: ((fields: TokenServiceAccountFields) => string) | undefined, + fields: TokenServiceAccountFields, + field: 'domain' | 'account id' +): string | undefined { + if (!normalize) return undefined + try { + return normalize(fields) + } catch { + throw new TokenServiceAccountValidationError('invalid_credentials', 400, { + step: 'verify', + reason: `invalid ${field}`, + }) + } +} + +/** Sends a check through the guarded egress profile, mapping a host that doesn't exist to `site_not_found`. */ +async function sendThroughEgress( + profile: NonNullable, + { url, method = 'GET', headers, body }: TokenCheckRequest +): Promise { + try { + return await secureFetchWithValidation(url, { + profile, + method, + headers, + body, + timeout: 10_000, + maxRedirects: 0, + maxResponseBytes: MAX_EGRESS_RESPONSE_BYTES, + logUrlValidationDetails: false, + }) + } catch (error) { + const notFound = isHostNotFound(error) + throw new TokenServiceAccountValidationError( + notFound ? 'site_not_found' : 'provider_unavailable', + notFound ? 400 : 502, + { step: 'verify', reason: notFound ? 'host does not resolve' : 'host unreachable' } + ) + } +} + /** * Validator for a service whose token is accepted or rejected by one * authenticated request: 2xx accepts, a non-transient 4xx rejects the token, @@ -72,18 +186,41 @@ export function readJsonBody(response: Response, serviceLabel: string): Promise< * token is never forwarded to another host. */ export function tokenCheckValidator(check: TokenCheck): TokenServiceAccountValidator { - const accepted: TokenServiceAccountValidationResult = { - displayName: check.serviceLabel, - principal: null, - auditMetadata: {}, - } - return async (fields): Promise => { - const { url, method = 'GET', headers, body } = check.request(fields) - const response = await fetchProvider( - url, - { method, headers, body, redirect: 'error' }, - 'verify' - ) + return async (typed): Promise => { + const domain = normalizedField(check.domain, typed, 'domain') + const workspaceId = normalizedField(check.workspaceId, typed, 'account id') + const fields = { + ...typed, + ...(domain === undefined ? {} : { domain }), + ...(workspaceId === undefined ? {} : { providerWorkspaceId: workspaceId }), + } + const where = domain ?? workspaceId + const accepted: TokenServiceAccountValidationResult = { + displayName: where ? `${check.serviceLabel} (${where})` : check.serviceLabel, + principal: null, + auditMetadata: { + ...(domain === undefined ? {} : { domain }), + ...(workspaceId === undefined ? {} : { accountId: workspaceId }), + }, + ...(domain === undefined ? {} : { normalizedDomain: domain }), + } + const request = check.request(fields) + const response: ProviderResponse = check.egress + ? await sendThroughEgress(check.egress, request) + : await fetchProvider( + request.url, + { + method: request.method ?? 'GET', + headers: request.headers, + body: request.body, + redirect: 'error', + }, + 'verify', + // A host built from the typed domain or account id that doesn't exist is the user's typo. + domain === undefined && workspaceId === undefined + ? undefined + : { dnsFailureCode: 'site_not_found' } + ) // A JSON 403 is the vendor's own answer; an HTML one is a firewall or CDN page. const scopedForbidden = check.forbiddenMeansScoped && @@ -115,12 +252,22 @@ export function tokenCheckValidator(check: TokenCheck): TokenServiceAccountValid response.status, { step: 'verify', - body: errorBody === unreadable ? '' : truncate(JSON.stringify(errorBody) ?? '', 500), + body: + errorBody === unreadable || check.errorBodyEchoesToken + ? '' + : truncate(JSON.stringify(errorBody) ?? '', 500), } ) } - if (!scopedForbidden) { - await throwForProviderResponse(response, 'verify') + if (!scopedForbidden && !response.ok) { + if (!check.errorBodyEchoesToken) await throwForProviderResponse(response, 'verify') + // The body echoes the token, so it is dropped unread. + await response.body?.cancel().catch(() => undefined) + throw new TokenServiceAccountValidationError( + providerFailureCode(response.status), + response.status, + { step: 'verify' } + ) } if (check.acceptsBody && response.ok) { let body: unknown @@ -131,9 +278,14 @@ export function tokenCheckValidator(check: TokenCheck): TokenServiceAccountValid step: 'verify', }) } - if (!check.acceptsBody(body)) { + const verdict = check.acceptsBody(body) + if (!verdict) { throw new TokenServiceAccountValidationError('invalid_credentials', 400, { step: 'verify' }) } + if (typeof verdict === 'object') { + const name = verdict.displayName + return { ...accepted, displayName: where ? `${name} (${where})` : name } + } return accepted } await response.body?.cancel().catch(() => undefined) diff --git a/apps/sim/lib/credentials/token-service-accounts/validators/token-checks.test.ts b/apps/sim/lib/credentials/token-service-accounts/validators/token-checks.test.ts index f0c6411986d..5de8a993d5b 100644 --- a/apps/sim/lib/credentials/token-service-accounts/validators/token-checks.test.ts +++ b/apps/sim/lib/credentials/token-service-accounts/validators/token-checks.test.ts @@ -1,13 +1,40 @@ import { jsonResponse } from '@sim/testing/helpers/http' +import { + inputValidationMock, + inputValidationMockFns, +} from '@sim/testing/mocks/input-validation.mock' import { describe, expect, it, vi } from 'vitest' + +vi.mock('@/lib/core/security/input-validation.server', () => inputValidationMock) + import { + validateAlgoliaServiceAccount, validateAshbyServiceAccount, + validateAzureDevOpsServiceAccount, validateBrexServiceAccount, + validateConvexServiceAccount, + validateDevinServiceAccount, + validateDynatraceServiceAccount, validateElevenLabsServiceAccount, + validateEmailBisonServiceAccount, validateFlintServiceAccount, + validateGrafanaServiceAccount, + validateInfisicalServiceAccount, validateInstantlyServiceAccount, + validateJotformServiceAccount, + validateJupyterServiceAccount, + validateLogfireServiceAccount, + validateMailgunServiceAccount, + validateNewRelicServiceAccount, + validateOktaServiceAccount, + validatePlaneServiceAccount, validateResendServiceAccount, + validateSupabaseServiceAccount, + validateThriveServiceAccount, + validateTinybirdServiceAccount, + validateTwilioServiceAccount, validateTypeformServiceAccount, + validateUpstashServiceAccount, validateVercelServiceAccount, validateYouTubeServiceAccount, } from '@/lib/credentials/token-service-accounts/validators/token-checks' @@ -292,3 +319,128 @@ describe('ElevenLabs saved API key verification', () => { }) }) }) + +describe('saved credentials whose connection names a host, region, or account', () => { + it.each([ + ['Algolia', validateAlgoliaServiceAccount, { providerWorkspaceId: 'evil.example.com/' }], + ['Azure DevOps', validateAzureDevOpsServiceAccount, { providerWorkspaceId: 'org/../other' }], + ['Devin', validateDevinServiceAccount, { providerWorkspaceId: 'org/sessions?x' }], + ['Jotform', validateJotformServiceAccount, { domain: 'evil' }], + ['Mailgun', validateMailgunServiceAccount, { domain: 'mars' }], + ['New Relic', validateNewRelicServiceAccount, { domain: 'mars' }], + ['Okta', validateOktaServiceAccount, { domain: 'evil.example.com' }], + ['Supabase', validateSupabaseServiceAccount, { domain: 'ref.evil.example.com' }], + [ + 'Thrive', + validateThriveServiceAccount, + { domain: 'evil.example.com', providerWorkspaceId: 't1' }, + ], + ['Twilio', validateTwilioServiceAccount, { providerWorkspaceId: 'AC123/../Messages' }], + ])( + '%s refuses a typed value that could steer the request, before sending the key', + async (_, validate, typed) => { + const fetch = vi.fn() + vi.stubGlobal('fetch', fetch) + + await expect(validate({ apiToken: 'secret', ...typed })).rejects.toMatchObject({ + code: 'invalid_credentials', + }) + expect(fetch).not.toHaveBeenCalled() + } + ) + + it('rejects an Azure DevOps key that a public organization answers as an anonymous visitor', async () => { + vi.stubGlobal( + 'fetch', + vi.fn().mockResolvedValue( + jsonResponse({ + authenticatedUser: { + id: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa', + descriptor: 'System:PublicAccess;aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa', + }, + }) + ) + ) + + await expect( + validateAzureDevOpsServiceAccount({ apiToken: 'bad', providerWorkspaceId: 'public-org' }) + ).rejects.toMatchObject({ code: 'invalid_credentials' }) + }) +}) + +describe('saved credentials for a host the user chose', () => { + const HOST_CHOSEN_VALIDATORS = [ + ['Convex', validateConvexServiceAccount], + ['Dynatrace', validateDynatraceServiceAccount], + ['Email Bison', validateEmailBisonServiceAccount], + ['Grafana', validateGrafanaServiceAccount], + ['Infisical', validateInfisicalServiceAccount], + ['Jupyter', validateJupyterServiceAccount], + ['Logfire', validateLogfireServiceAccount], + ['Plane', validatePlaneServiceAccount], + ['Tinybird', validateTinybirdServiceAccount], + ['Upstash', validateUpstashServiceAccount], + ] as const + + it.each(HOST_CHOSEN_VALIDATORS)( + '%s refuses credentials smuggled into the URL before sending the key anywhere', + async (_, validate) => { + inputValidationMockFns.mockSecureFetchWithValidation.mockReset() + + await expect( + validate({ apiToken: 'secret', domain: 'https://user:pass@instance.example.com' }) + ).rejects.toMatchObject({ code: 'invalid_credentials' }) + expect(inputValidationMockFns.mockSecureFetchWithValidation).not.toHaveBeenCalled() + } + ) + + it.each(HOST_CHOSEN_VALIDATORS)( + '%s refuses a non-http scheme instead of reading it as a host', + async (_, validate) => { + inputValidationMockFns.mockSecureFetchWithValidation.mockReset() + + await expect( + validate({ apiToken: 'secret', domain: 'ftp://instance.example.com' }) + ).rejects.toMatchObject({ code: 'invalid_credentials' }) + expect(inputValidationMockFns.mockSecureFetchWithValidation).not.toHaveBeenCalled() + } + ) +}) + +describe('saved credentials whose vendor answers a restricted token in its error', () => { + const secureFetch = inputValidationMockFns.mockSecureFetchWithValidation + + it.each([ + [ + 'rejects an unknown Tinybird token', + validateTinybirdServiceAccount, + jsonResponse({ error: 'invalid authentication token. Token tok not found' }, 403), + 'invalid_credentials', + ], + [ + 'accepts a Tinybird token without read access', + validateTinybirdServiceAccount, + jsonResponse({ error: 'Not enough permissions to read from datasources' }, 403), + null, + ], + [ + 'accepts an Upstash token whose ACL refuses PING', + validateUpstashServiceAccount, + jsonResponse({ error: 'NOPERM this user has no permissions to run the ping command' }, 400), + null, + ], + [ + 'rejects an unknown Upstash token', + validateUpstashServiceAccount, + jsonResponse({ error: 'WRONGPASS invalid or missing auth token' }, 401), + 'invalid_credentials', + ], + ])('%s', async (_, validate, reply, code) => { + secureFetch.mockReset().mockResolvedValue(reply) + + const result = validate({ apiToken: 'tok', domain: 'https://instance.example.com' }) + + if (code) await expect(result).rejects.toMatchObject({ code }) + else await expect(result).resolves.toMatchObject({ principal: null }) + }) +}) diff --git a/apps/sim/lib/credentials/token-service-accounts/validators/token-checks.ts b/apps/sim/lib/credentials/token-service-accounts/validators/token-checks.ts index 3ac75516b5c..761003eb4e6 100644 --- a/apps/sim/lib/credentials/token-service-accounts/validators/token-checks.ts +++ b/apps/sim/lib/credentials/token-service-accounts/validators/token-checks.ts @@ -1,4 +1,5 @@ import { toArray, toRecord } from '@sim/utils/object' +import { validateOktaDomain, validateSupabaseProjectId } from '@/lib/core/security/input-validation' import { fetchProvider, TokenServiceAccountValidationError, @@ -9,12 +10,33 @@ import type { TokenServiceAccountValidationResult, } from '@/lib/credentials/token-service-accounts/server' import { + allowedDomain, + normalizeHttpBaseUrl, readJsonBody, + refuseUnsafeTypedUrl, tokenCheckValidator, } from '@/lib/credentials/token-service-accounts/validators/http' +import { buildJupyterAuthHeaders, normalizeJupyterServerUrl } from '@/lib/internal/jupyter/protocol' import { ashbyAuthHeaders } from '@/tools/ashby/utils' import { checkrHeaders } from '@/tools/checkr/utils' +import { convexApiUrl, convexAuthHeaders } from '@/tools/convex/utils' +import { buildDynatraceUrl, dynatraceHeaders } from '@/tools/dynatrace/utils' +import { normalizeEmailBisonBaseUrl } from '@/tools/emailbison/utils' +import { normalizeGitLabHost } from '@/tools/gitlab/utils' import { GRANOLA_API_BASE, granolaHeaders } from '@/tools/granola/utils' +import { buildJotformHeaders, buildJotformUrl, JOTFORM_REGION_HOSTS } from '@/tools/jotform/utils' +import { + getLogfireBaseUrl, + LOGFIRE_READ_TOKEN_INFO_PATH, + logfireHeaders, +} from '@/tools/logfire/utils' +import type { MailgunRegion } from '@/tools/mailgun/types' +import { getMailgunApiBaseUrl } from '@/tools/mailgun/utils' +import { getNerdGraphEndpoint, newRelicHeaders } from '@/tools/new_relic/utils' +import { oktaHeaders } from '@/tools/okta/utils' +import { planeApiUrl, planeHeaders } from '@/tools/plane/utils' +import { supabaseBaseUrl } from '@/tools/supabase/utils' +import { getThriveBaseUrl, getThriveHeaders, THRIVE_HOSTS } from '@/tools/thrive/utils' import { WHATSAPP_GRAPH_VERSION } from '@/tools/whatsapp/utils' /** @@ -25,6 +47,9 @@ import { WHATSAPP_GRAPH_VERSION } from '@/tools/whatsapp/utils' * costs a declaration, not a module, in every graph that verifies credentials. */ +/** Regions for vendors with one US and one EU API host. */ +const US_OR_EU: ReadonlySet = new Set(['us', 'eu']) + /** Affinity's whoami endpoint answers 200 for a valid key and 401 otherwise. */ export const validateAffinityServiceAccount = tokenCheckValidator({ serviceLabel: 'Affinity', @@ -61,6 +86,42 @@ export const validateAhrefsServiceAccount = tokenCheckValidator({ }), }) +/** Algolia application IDs are alphanumeric; anything else could rewrite the tools' host. */ +const ALGOLIA_APPLICATION_ID = /^[A-Za-z0-9]{1,32}$/ + +/** + * Algolia's get-API-key endpoint lets any key read its own permissions, at the + * `https://{applicationId}.algolia.net` host the tools use: 200 with the key's `acl` + * for a valid key, a JSON 403 ("Invalid Application-ID or API key") otherwise. + */ +export const validateAlgoliaServiceAccount = tokenCheckValidator({ + serviceLabel: 'Algolia', + workspaceId: ({ providerWorkspaceId }) => { + const applicationId = (providerWorkspaceId ?? '').trim() + if (!ALGOLIA_APPLICATION_ID.test(applicationId)) { + throw new Error('Algolia application IDs contain only letters and numbers') + } + return applicationId + }, + request: ({ apiToken, providerWorkspaceId = '' }) => ({ + url: `https://${providerWorkspaceId}.algolia.net/1/keys/${encodeURIComponent(apiToken)}`, + headers: { + 'x-algolia-application-id': providerWorkspaceId, + 'x-algolia-api-key': apiToken, + Accept: 'application/json', + }, + }), + acceptsBody: (body) => { + if (!Array.isArray(toRecord(body).acl)) { + throw new TokenServiceAccountValidationError('provider_unavailable', 502, { + step: 'verify', + reason: 'Algolia returned an unexpected key lookup', + }) + } + return true + }, +}) + /** Apify's current-user endpoint answers 200 for a valid token and 401 otherwise. */ export const validateApifyServiceAccount = tokenCheckValidator({ serviceLabel: 'Apify', @@ -114,6 +175,43 @@ export const validateAshbyServiceAccount = tokenCheckValidator({ }, }) +/** Azure DevOps organization names: letters, digits, and hyphens, up to 50 characters. */ +const AZURE_DEVOPS_ORGANIZATION = /^[A-Za-z0-9][A-Za-z0-9-]{0,49}$/ +/** The identity Azure DevOps reports when a request carries no usable credential. */ +const AZURE_DEVOPS_ANONYMOUS_ID = 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa' + +/** + * Azure DevOps' connection-data endpoint (what the official clients call on connect) answers any + * PAT valid for the organization with its user, and 401 for an unknown PAT or one issued for + * another organization once the sign-in redirect is suppressed. A public organization answers a + * bad PAT with 200 and the anonymous identity, so the body must name a real user. + */ +export const validateAzureDevOpsServiceAccount = tokenCheckValidator({ + serviceLabel: 'Azure DevOps', + workspaceId: ({ providerWorkspaceId }) => { + const organization = (providerWorkspaceId ?? '').trim() + if (!AZURE_DEVOPS_ORGANIZATION.test(organization)) throw new Error('invalid organization') + return organization + }, + request: ({ apiToken, providerWorkspaceId }) => ({ + url: `https://dev.azure.com/${providerWorkspaceId}/_apis/connectionData`, + headers: { + Authorization: `Basic ${Buffer.from(`:${apiToken}`).toString('base64')}`, + 'X-TFS-FedAuthRedirect': 'Suppress', + Accept: 'application/json', + }, + }), + acceptsBody: (body) => { + const user = toRecord(toRecord(body).authenticatedUser) + return ( + typeof user.id === 'string' && + user.id.length > 0 && + user.id !== AZURE_DEVOPS_ANONYMOUS_ID && + !(typeof user.descriptor === 'string' && user.descriptor.startsWith('System:PublicAccess')) + ) + }, +}) + /** * Brex's current-user endpoint answers 200 for a valid user token. An unknown * token gets the same JSON 403 as a token missing the user scope, told apart @@ -222,6 +320,29 @@ export const validateCloudflareServiceAccount = tokenCheckValidator({ }), }) +/** + * Listing table schemas is a read the List Tables tool already makes: a bad Convex deploy + * key gets 401, a key minted for another deployment gets 403 `BadDeployKey`, and any other + * JSON 403 is a valid key whose permissions exclude data reads. The deployment URL is + * normalized and SSRF-checked by the tools' own `convexApiUrl`. + */ +export const validateConvexServiceAccount = tokenCheckValidator({ + serviceLabel: 'Convex', + domain: ({ domain }) => { + const deploymentUrl = convexApiUrl(domain ?? '', '') + const parsed = new URL(deploymentUrl) + if (parsed.username || parsed.password) throw new Error('credentials in URL') + return deploymentUrl + }, + egress: 'configuredEndpoint', + request: ({ apiToken, domain = '' }) => ({ + url: convexApiUrl(domain, '/api/json_schemas?format=json'), + headers: { ...convexAuthHeaders(apiToken), Accept: 'application/json' }, + }), + forbiddenMeansScoped: true, + rejectsKey: (errorBody) => toRecord(errorBody).code === 'BadDeployKey', +}) + /** Crunchbase's autocomplete endpoint answers 200 for a valid user key and 401 otherwise. */ export const validateCrunchbaseServiceAccount = tokenCheckValidator({ serviceLabel: 'Crunchbase', @@ -252,6 +373,25 @@ export const validateDaytonaServiceAccount = tokenCheckValidator({ }), }) +/** + * Listing one session of the organization is the tools' own read on their host and auth: 200 + * proves the key and its access to that organization. Devin answers an unknown key, or a key + * from another organization, with a problem+json 403, so a 403 rejects. The id must survive + * URL encoding unchanged, so it can never steer the tools' unencoded path. + */ +export const validateDevinServiceAccount = tokenCheckValidator({ + serviceLabel: 'Devin', + workspaceId: ({ providerWorkspaceId }) => { + const orgId = (providerWorkspaceId ?? '').trim() + if (!/^[A-Za-z0-9_-]+$/.test(orgId)) throw new Error('invalid organization id') + return orgId + }, + request: ({ apiToken, providerWorkspaceId }) => ({ + url: `https://api.devin.ai/v3/organizations/${providerWorkspaceId}/sessions?first=1`, + headers: { Authorization: `Bearer ${apiToken.trim()}`, Accept: 'application/json' }, + }), +}) + /** Discord returns the bot's own user for a valid bot token and 401 otherwise. */ export const validateDiscordServiceAccount = tokenCheckValidator({ serviceLabel: 'Discord', @@ -274,6 +414,32 @@ export const validateDubServiceAccount = tokenCheckValidator({ forbiddenMeansScoped: true, }) +/** + * Dynatrace's token lookup accepts an access token with any scope and returns its own + * metadata, including whether it is enabled; an unknown token gets 401. + */ +export const validateDynatraceServiceAccount = tokenCheckValidator({ + serviceLabel: 'Dynatrace', + domain: ({ domain }) => normalizeHttpBaseUrl(domain).replace(/\/api\/v[12]$/, ''), + egress: 'configuredEndpoint', + request: ({ apiToken, domain = '' }) => ({ + url: buildDynatraceUrl(domain, '/apiTokens/lookup'), + method: 'POST', + headers: dynatraceHeaders(apiToken), + body: JSON.stringify({ token: apiToken }), + }), + acceptsBody: (body) => { + const token = toRecord(body) + if (typeof token.enabled !== 'boolean') { + throw new TokenServiceAccountValidationError('provider_unavailable', 502, { + step: 'verify', + reason: 'Dynatrace returned an unexpected token lookup', + }) + } + return token.enabled + }, +}) + /** * ElevenLabs returns the key owner's account for a valid key and 400/401 for a bad one. A key * without the user permission gets a 401 naming `missing_permissions`, or a 403, both of which @@ -289,6 +455,25 @@ export const validateElevenLabsServiceAccount = tokenCheckValidator({ provesKey: (errorBody) => toRecord(toRecord(errorBody).detail).status === 'missing_permissions', }) +/** + * Email Bison's `GET /api/users` returns the token's user on the instance it was typed with + * (dedi.emailbison.com or a white-labeled host), stored as the HTTPS origin the tools use; an + * unknown token answers 401. A 200 without Email Bison's user envelope is some other site. + */ +export const validateEmailBisonServiceAccount = tokenCheckValidator({ + serviceLabel: 'Email Bison', + domain: ({ domain }) => normalizeEmailBisonBaseUrl(refuseUnsafeTypedUrl(domain)), + egress: 'configuredEndpoint', + request: ({ apiToken, domain }) => ({ + url: `${domain}/api/users`, + headers: { Authorization: `Bearer ${apiToken.trim()}`, Accept: 'application/json' }, + }), + acceptsBody: (body) => { + const user = toRecord(toRecord(body).data) + return user.id !== undefined && user.id !== null + }, +}) + /** Enrich's credit-balance endpoint costs no credits and succeeds only for a valid key. */ export const validateEnrichServiceAccount = tokenCheckValidator({ serviceLabel: 'Enrich', @@ -392,6 +577,64 @@ export const validateGammaServiceAccount = tokenCheckValidator({ }), }) +/** Scopes that let the GitLab tools call the REST API. */ +const GITLAB_API_SCOPES = new Set(['api', 'read_api']) + +/** + * GitLab's token self-lookup answers for a personal, project, or group access token at the + * instance it was typed with (gitlab.com or self-managed); the token must be active and carry an + * API scope. A reply that isn't a token lookup is the instance misbehaving, not a bad token. + */ +export const validateGitLabServiceAccount = tokenCheckValidator({ + serviceLabel: 'GitLab', + domain: ({ domain }) => normalizeGitLabHost(domain), + egress: 'configuredEndpoint', + request: ({ apiToken, domain }) => ({ + url: `https://${domain}/api/v4/personal_access_tokens/self`, + headers: { 'PRIVATE-TOKEN': apiToken, Accept: 'application/json' }, + }), + acceptsBody: (body) => { + const token = toRecord(body) + if (typeof token.active !== 'boolean' || !Array.isArray(token.scopes)) { + throw new TokenServiceAccountValidationError('provider_unavailable', 502, { + step: 'verify', + reason: 'GitLab returned an unexpected token lookup', + }) + } + const usable = + token.active && + token.revoked !== true && + token.scopes.some((scope) => GITLAB_API_SCOPES.has(String(scope))) + const name = typeof token.name === 'string' ? token.name.trim() : '' + return usable && name ? { displayName: name } : usable + }, +}) + +/** + * Grafana's `GET /api/user` needs a signed-in, non-anonymous identity but no role, so it + * answers 200 for any valid service account token and 401 for a bad one, even where + * anonymous access lets most reads answer 200 to any token. + */ +export const validateGrafanaServiceAccount = tokenCheckValidator({ + serviceLabel: 'Grafana', + domain: ({ domain }) => normalizeHttpBaseUrl(domain), + egress: 'configuredEndpoint', + request: ({ apiToken, domain }) => ({ + url: `${domain}/api/user`, + headers: { Authorization: `Bearer ${apiToken}`, Accept: 'application/json' }, + }), + acceptsBody: (body) => { + const login = toRecord(body).login + if (typeof login !== 'string' || !login.trim()) { + throw new TokenServiceAccountValidationError('provider_unavailable', 502, { + step: 'verify', + reason: 'Grafana returned an unexpected user lookup', + }) + } + return true + }, +}) + /** * Grain's list-teams endpoint (a read-only POST, as the tools call it) answers 200 for a valid * access token and 401 `invalid_token` otherwise. @@ -450,6 +693,31 @@ export const validateIncidentioServiceAccount = tokenCheckValidator({ }), }) +/** + * Infisical's `GET /api/v1/identities/details`, called with a machine identity's own access token + * on its instance (US, EU, or self-hosted), needs no project permission and answers the identity's + * organization; a malformed, expired, or wrong-instance token gets a JSON 403 TokenError. + */ +export const validateInfisicalServiceAccount = tokenCheckValidator({ + serviceLabel: 'Infisical', + domain: ({ domain }) => normalizeHttpBaseUrl(domain), + egress: 'configuredEndpoint', + request: ({ apiToken, domain }) => ({ + url: `${domain}/api/v1/identities/details`, + headers: { Authorization: `Bearer ${apiToken}`, Accept: 'application/json' }, + }), + acceptsBody: (body) => { + const organization = toRecord(toRecord(toRecord(body).identityDetails).organization) + if (typeof organization.id !== 'string' || !organization.id) { + throw new TokenServiceAccountValidationError('provider_unavailable', 502, { + step: 'verify', + reason: 'Infisical returned unexpected identity details', + }) + } + return true + }, +}) + /** * Instantly's campaign list (the one the Instantly tools call) answers 200 for a valid key and * 401 for a bad one; a valid key without the campaigns scope gets 403. @@ -476,6 +744,45 @@ export const validateIntercomServiceAccount = tokenCheckValidator({ }), }) +/** + * Jotform's account endpoint on the region's host (via the tools' URL builder) answers 200 for a + * valid key and 401 otherwise; a key only works on the host that issued it, so a wrong region is + * refused too. Jotform reports some failures inside a 200, so `responseCode` must also be 200. + */ +export const validateJotformServiceAccount = tokenCheckValidator({ + serviceLabel: 'Jotform', + domain: allowedDomain(new Set(Object.keys(JOTFORM_REGION_HOSTS))), + request: ({ apiToken, domain }) => ({ + url: buildJotformUrl({ apiKey: apiToken, region: domain }, 'user').toString(), + headers: { ...buildJotformHeaders(apiToken), Accept: 'application/json' }, + }), + acceptsBody: (body) => Number(toRecord(body).responseCode) === 200, +}) + +/** + * Jupyter's `GET /api/status` is authenticated and answers a bad token with 403, never a + * login redirect. The server URL is normalized as the tools normalize it and reached + * under the same `selfHostedService` egress profile. + */ +export const validateJupyterServiceAccount = tokenCheckValidator({ + serviceLabel: 'Jupyter', + domain: ({ domain }) => normalizeJupyterServerUrl(refuseUnsafeTypedUrl(domain)), + egress: 'selfHostedService', + request: ({ apiToken, domain }) => ({ + url: `${domain}/api/status`, + headers: { ...buildJupyterAuthHeaders(apiToken), Accept: 'application/json' }, + }), + acceptsBody: (body) => { + if (typeof toRecord(body).started !== 'string') { + throw new TokenServiceAccountValidationError('provider_unavailable', 502, { + step: 'verify', + reason: 'Jupyter returned an unexpected status', + }) + } + return true + }, +}) + /** LangSmith's workspace list answers 200 for a valid API key and 401/403 otherwise. */ export const validateLangsmithServiceAccount = tokenCheckValidator({ serviceLabel: 'LangSmith', @@ -518,6 +825,45 @@ export const validateLinqServiceAccount = tokenCheckValidator({ }), }) +const LOGFIRE_CLOUD_REGIONS = new Set(['auto', 'us', 'eu']) + +/** + * Logfire's read-token-info endpoint answers any read token with its organization and + * project, and 401 for an unknown token (including one from the other region). The + * region or host field resolves through the tools' own `getLogfireBaseUrl` (`us`/`eu` + * picks that Cloud region, `auto` reads it from the token's prefix, anything else is a + * self-hosted base URL), and the stored base URL fills the tools' `host`, which wins. + */ +export const validateLogfireServiceAccount = tokenCheckValidator({ + serviceLabel: 'Logfire', + domain: ({ apiToken, domain }) => { + const typed = (domain ?? '').trim() + if (!typed) throw new Error('missing region or host') + const region = typed.toLowerCase() + if (LOGFIRE_CLOUD_REGIONS.has(region)) { + return getLogfireBaseUrl(apiToken, region as 'auto' | 'us' | 'eu') + } + // A self-hosted base URL names a domain, a port, or a scheme; a bare word is a mistyped region. + if (!/[.:]/.test(typed)) throw new Error('unknown region') + return getLogfireBaseUrl(apiToken, 'auto', refuseUnsafeTypedUrl(typed)) + }, + egress: 'configuredEndpoint', + request: ({ apiToken, domain }) => ({ + url: `${domain}${LOGFIRE_READ_TOKEN_INFO_PATH}`, + headers: logfireHeaders(apiToken), + }), + acceptsBody: (body) => { + const project = toRecord(body).project_name + if (typeof project !== 'string' || !project.trim()) { + throw new TokenServiceAccountValidationError('provider_unavailable', 502, { + step: 'verify', + reason: 'Logfire returned an unexpected token lookup', + }) + } + return true + }, +}) + /** Loops' API-key test endpoint answers 200 for a valid key and 401 otherwise. */ export const validateLoopsServiceAccount = tokenCheckValidator({ serviceLabel: 'Loops', @@ -561,6 +907,25 @@ export const validateMailchimpServiceAccount = tokenCheckValidator({ }, }) +/** + * Listing one domain on the region's host answers 200 for a valid account API key and 401 + * ("Invalid private key") otherwise; a key from the other region is refused the same way, so the + * check also proves the region. The region is checked first because the tools send any value + * other than `eu` to the US host. A role-restricted key's JSON 403 still proves the key. + */ +export const validateMailgunServiceAccount = tokenCheckValidator({ + serviceLabel: 'Mailgun', + domain: allowedDomain(US_OR_EU), + forbiddenMeansScoped: true, + request: ({ apiToken, domain }) => ({ + url: `${getMailgunApiBaseUrl(domain as MailgunRegion)}/domains?limit=1`, + headers: { + Authorization: `Basic ${Buffer.from(`api:${apiToken}`).toString('base64')}`, + Accept: 'application/json', + }, + }), +}) + /** Mem0's ping endpoint (the one its SDK calls on startup) answers 200 for a valid key and 401 otherwise. */ export const validateMem0ServiceAccount = tokenCheckValidator({ serviceLabel: 'Mem0', @@ -570,6 +935,49 @@ export const validateMem0ServiceAccount = tokenCheckValidator({ }), }) +/** + * A New Relic User API key is bound to its data center, so it is checked against the + * NerdGraph host of the region typed with it (`us` or `eu`, stored lower-cased because + * the tools send anything but `eu` to the US host). An unknown key, or one from the other + * region, gets 401; NerdGraph can also answer 200 with an `errors` array, so only a + * resolved user proves the key. + */ +export const validateNewRelicServiceAccount = tokenCheckValidator({ + serviceLabel: 'New Relic', + domain: allowedDomain(US_OR_EU), + request: ({ apiToken, domain }) => ({ + url: getNerdGraphEndpoint(domain as 'us' | 'eu'), + method: 'POST', + headers: { ...newRelicHeaders(apiToken), Accept: 'application/json' }, + body: JSON.stringify({ query: '{ actor { user { id } } }' }), + }), + acceptsBody: (body) => toRecord(toRecord(toRecord(body).data).actor).user != null, +}) + +/** + * With an API token, Okta's `GET /api/v1/users/me` returns the admin the token acts as on the + * org whose Okta-owned domain the tools' `validateOktaDomain` accepts; a bad or revoked token + * gets 401 `E0000011`. A reply without a user id is Okta misbehaving, not a bad token. + */ +export const validateOktaServiceAccount = tokenCheckValidator({ + serviceLabel: 'Okta', + domain: ({ domain }) => validateOktaDomain(domain ?? ''), + request: ({ apiToken, domain }) => ({ + url: `https://${domain}/api/v1/users/me`, + headers: oktaHeaders(apiToken.trim()), + }), + acceptsBody: (body) => { + const id = toRecord(body).id + if (typeof id !== 'string' || !id) { + throw new TokenServiceAccountValidationError('provider_unavailable', 502, { + step: 'verify', + reason: 'Okta returned an unexpected user', + }) + } + return true + }, +}) + /** Otter's workspace endpoint answers 200 for a valid key and 401 otherwise. */ export const validateOtterServiceAccount = tokenCheckValidator({ serviceLabel: 'Otter.ai', @@ -609,6 +1017,50 @@ export const validatePersonaServiceAccount = tokenCheckValidator({ }), }) +/** + * The instance URL in the form the tools build on: an http(s) origin plus any reverse-proxy path + * prefix, without a trailing slash; a bare host is taken as https. `planeApiUrl` applies the tools' + * own checks (no credentials, query, fragment, dot segments, or /api/vN suffix). + */ +function normalizePlaneInstanceUrl(raw: string | undefined): string { + const base = normalizeHttpBaseUrl(raw) + // The tools' own checks: no dot segments or /api/vN suffix. + planeApiUrl(base, '/api/v1/users/me/') + return base +} + +/** + * Plane's documented current-user read, served under /api/v1 by Plane Cloud and Community + * Edition, answers 200 with the user for a valid token on the instance it was typed with, and 401 + * or 403 for a bad one. A reply without a user id is the instance misbehaving. + */ +export const validatePlaneServiceAccount = tokenCheckValidator({ + serviceLabel: 'Plane', + domain: ({ domain }) => normalizePlaneInstanceUrl(domain), + egress: 'configuredEndpoint', + request: ({ apiToken, domain }) => { + let headers: Record + try { + headers = planeHeaders(apiToken) + } catch { + throw new TokenServiceAccountValidationError('invalid_credentials', 400, { + step: 'verify', + reason: 'invalid Plane API token', + }) + } + return { url: planeApiUrl(domain, '/api/v1/users/me/'), headers } + }, + acceptsBody: (body) => { + if (typeof toRecord(body).id !== 'string') { + throw new TokenServiceAccountValidationError('provider_unavailable', 502, { + step: 'verify', + reason: 'Plane returned an unexpected current user', + }) + } + return true + }, +}) + /** Profound's organization categories endpoint answers 200 for a valid key and 401 otherwise. */ export const validateProfoundServiceAccount = tokenCheckValidator({ serviceLabel: 'Profound', @@ -794,6 +1246,33 @@ export const validateStripeServiceAccount = tokenCheckValidator({ }), }) +/** + * Reduces a typed Supabase project to the bare ref the tools take as `projectId`: the ref, its + * `.supabase.co` host, or the project URL, which must then pass `validateSupabaseProjectId`. + */ +function normalizeSupabaseProjectRef(raw: string | undefined): string { + const typed = (raw ?? '').trim().toLowerCase() + const host = /^https?:\/\//.test(typed) ? new URL(typed).hostname : typed.replace(/\/+$/, '') + const ref = host.endsWith('.supabase.co') ? host.slice(0, -'.supabase.co'.length) : host + const result = validateSupabaseProjectId(ref) + if (!result.isValid || !result.sanitized) throw new Error('invalid project ref') + return result.sanitized +} + +/** + * The API gateway key-checks every `/auth/v1/` route but a few open ones, so Auth's settings read + * on `.supabase.co` (host built by the tools' `supabaseBaseUrl`) answers 200 for any key of + * that project (anon, publishable, secret, or service_role) and 401 for a key it doesn't know. + */ +export const validateSupabaseServiceAccount = tokenCheckValidator({ + serviceLabel: 'Supabase', + domain: ({ domain }) => normalizeSupabaseProjectRef(domain), + request: ({ apiToken, domain }) => ({ + url: `${supabaseBaseUrl(domain ?? '')}/auth/v1/settings`, + headers: { apikey: apiToken, Accept: 'application/json' }, + }), +}) + /** * Listing devices in the token's default tailnet (`-`) answers 200 for a valid token and 401 for a * bad one; an OAuth token without the devices scope gets 403. @@ -825,6 +1304,45 @@ export const validateTelegramServiceAccount = tokenCheckValidator({ }), }) +/** + * Listing Thrive tags is a read with the same Basic `tenantId:apiKey` auth the tools send, on the + * region host the key belongs to; a bad key or tenant gets 401. + */ +export const validateThriveServiceAccount = tokenCheckValidator({ + serviceLabel: 'Thrive', + domain: allowedDomain(THRIVE_HOSTS), + workspaceId: ({ providerWorkspaceId }) => { + const tenantId = (providerWorkspaceId ?? '').trim() + // The tenant id is the Basic-auth username: printable ASCII, and no colon, which would split it. + if (!/^[\x21-\x39\x3b-\x7e]+$/.test(tenantId)) throw new Error('invalid tenant id') + return tenantId + }, + request: ({ apiToken, domain, providerWorkspaceId = '' }) => ({ + url: `${getThriveBaseUrl(domain, 'v1')}/tags`, + headers: { ...getThriveHeaders(providerWorkspaceId, apiToken), Accept: 'application/json' }, + }), +}) + +/** + * `SELECT 1` on Tinybird's Query API touches no resource and answers 200 for a token with a read + * scope at the base URL it was typed with. An unknown or other-region token gets a 403 naming an + * invalid authentication token (and echoing it); any other JSON 403 is a valid token without a + * read scope, such as an append-only token. + */ +export const validateTinybirdServiceAccount = tokenCheckValidator({ + serviceLabel: 'Tinybird', + domain: ({ domain }) => normalizeHttpBaseUrl(domain), + egress: 'configuredEndpoint', + errorBodyEchoesToken: true, + forbiddenMeansScoped: true, + rejectsKey: (errorBody) => + String(toRecord(errorBody).error ?? '').includes('invalid authentication token'), + request: ({ apiToken, domain }) => ({ + url: `${domain}/v0/sql?q=${encodeURIComponent('SELECT 1 FORMAT JSON')}`, + headers: { Authorization: `Bearer ${apiToken}`, Accept: 'application/json' }, + }), +}) + /** Listing one run needs a valid environment secret key; Trigger.dev answers 401 for any other. */ export const validateTriggerDevServiceAccount = tokenCheckValidator({ serviceLabel: 'Trigger.dev', @@ -834,6 +1352,30 @@ export const validateTriggerDevServiceAccount = tokenCheckValidator({ }), }) +/** Twilio Account SIDs: AC followed by 32 lowercase hex digits. */ +const TWILIO_ACCOUNT_SID = /^AC[0-9a-f]{32}$/ + +/** + * Fetching the account resource with the SID and auth token as Basic auth (the tools' scheme) + * answers 200 for a matching pair and 401 (code 20003) for a wrong token, an unknown SID, or a SID + * the token doesn't belong to. The SID is checked first so it can never rewrite the path. + */ +export const validateTwilioServiceAccount = tokenCheckValidator({ + serviceLabel: 'Twilio', + workspaceId: ({ providerWorkspaceId }) => { + const accountSid = (providerWorkspaceId ?? '').trim() + if (!TWILIO_ACCOUNT_SID.test(accountSid)) throw new Error('invalid Account SID') + return accountSid + }, + request: ({ apiToken, providerWorkspaceId }) => ({ + url: `https://api.twilio.com/2010-04-01/Accounts/${providerWorkspaceId}.json`, + headers: { + Authorization: `Basic ${Buffer.from(`${providerWorkspaceId}:${apiToken}`).toString('base64')}`, + Accept: 'application/json', + }, + }), +}) + /** * Listing one form answers 200 for a token with the forms:read scope the * Typeform tools need. Typeform answers an unknown token with a 403, so every @@ -847,6 +1389,32 @@ export const validateTypeformServiceAccount = tokenCheckValidator({ }), }) +/** + * PING answers `{"result":"PONG"}` for a standard token; a bad token gets 401. A token whose + * ACL doesn't allow PING (a read-only or ACL-user token) gets a NOPERM error, which still + * proves it authenticated. Any http(s) origin is accepted, as the legacy block accepted any + * URL, so the check goes through the guarded egress. + */ +export const validateUpstashServiceAccount = tokenCheckValidator({ + serviceLabel: 'Upstash', + domain: ({ domain }) => normalizeHttpBaseUrl(domain), + egress: 'configuredEndpoint', + request: ({ apiToken, domain }) => ({ + url: `${domain}/ping`, + headers: { Authorization: `Bearer ${apiToken}`, Accept: 'application/json' }, + }), + provesKey: (errorBody) => /^NOPERM/i.test(String(toRecord(errorBody).error ?? '')), + acceptsBody: (body) => { + if (toRecord(body).result !== 'PONG') { + throw new TokenServiceAccountValidationError('provider_unavailable', 502, { + step: 'verify', + reason: 'Upstash returned an unexpected PING reply', + }) + } + return true + }, +}) + /** UptimeRobot's v3 user/me returns the key owner's profile, so it succeeds only for a valid key. */ export const validateUptimeRobotServiceAccount = tokenCheckValidator({ serviceLabel: 'UptimeRobot', diff --git a/apps/sim/lib/credentials/workload-identity/issuer.test.ts b/apps/sim/lib/credentials/workload-identity/issuer.test.ts index be20ba66e51..68b7777731e 100644 --- a/apps/sim/lib/credentials/workload-identity/issuer.test.ts +++ b/apps/sim/lib/credentials/workload-identity/issuer.test.ts @@ -57,6 +57,19 @@ describe('workload identity issuer', () => { expect((payload.exp ?? 0) - (payload.iat ?? 0)).toBe(issuer.WORKLOAD_IDENTITY_TOKEN_TTL_SECONDS) }) + it('refuses a token lifetime beyond an hour', async () => { + const issuer = await loadIssuer() + + await expect( + issuer.mintWorkloadIdentityToken({ + subject: 'sim:workspace:ws-1:credential:abc123def456', + audience: 'sim-databricks', + owner: { workspaceId: 'ws-1' }, + ttlSeconds: 7200, + }) + ).rejects.toThrow(/an hour/) + }) + it('rejects a token presented to a different audience', async () => { const issuer = await loadIssuer() const token = await issuer.mintWorkloadIdentityToken({ diff --git a/apps/sim/lib/credentials/workload-identity/issuer.ts b/apps/sim/lib/credentials/workload-identity/issuer.ts index 72e13424412..0c77debcc8d 100644 --- a/apps/sim/lib/credentials/workload-identity/issuer.ts +++ b/apps/sim/lib/credentials/workload-identity/issuer.ts @@ -23,6 +23,8 @@ const logger = createLogger('WorkloadIdentityIssuer') export const WORKLOAD_IDENTITY_PATH = '/oidc/workload' export const WORKLOAD_IDENTITY_ALGORITHM = 'RS256' export const WORKLOAD_IDENTITY_TOKEN_TTL_SECONDS = 300 +/** The longest lifetime a relying party may ask for; Databricks caps its own token at an hour. */ +export const MAX_WORKLOAD_IDENTITY_TOKEN_TTL_SECONDS = 3600 const PRIVATE_JWK_FIELDS = ['d', 'p', 'q', 'dp', 'dq', 'qi'] as const @@ -181,12 +183,21 @@ export interface MintWorkloadIdentityTokenInput { /** Relying party, e.g. `sts.amazonaws.com`. */ audience: string owner: WorkloadIdentityOwner + /** + * Lifetime in seconds, for a relying party whose own token inherits it + * (Databricks). Defaults to {@link WORKLOAD_IDENTITY_TOKEN_TTL_SECONDS}. + */ + ttlSeconds?: number } /** Signs one short-lived token for a single credential resolution. */ export async function mintWorkloadIdentityToken( input: MintWorkloadIdentityTokenInput ): Promise { + const ttl = input.ttlSeconds ?? WORKLOAD_IDENTITY_TOKEN_TTL_SECONDS + if (!Number.isInteger(ttl) || ttl <= 0 || ttl > MAX_WORKLOAD_IDENTITY_TOKEN_TTL_SECONDS) { + throw new Error('Workload identity token lifetime must be between 1 second and an hour') + } const { privateKey, kid } = await loadSigningMaterial() const claims: Record = {} if (input.owner.workspaceId) claims.sim_workspace_id = input.owner.workspaceId @@ -199,7 +210,7 @@ export async function mintWorkloadIdentityToken( .setAudience(input.audience) .setIssuedAt(now) .setNotBefore(now - 30) - .setExpirationTime(now + WORKLOAD_IDENTITY_TOKEN_TTL_SECONDS) + .setExpirationTime(now + ttl) .setJti(generateId()) .sign(privateKey) } diff --git a/apps/sim/lib/integrations/icon-mapping.ts b/apps/sim/lib/integrations/icon-mapping.ts index 9b58127768d..46cbc2ed32f 100644 --- a/apps/sim/lib/integrations/icon-mapping.ts +++ b/apps/sim/lib/integrations/icon-mapping.ts @@ -308,6 +308,7 @@ export const blockTypeToIconMap: Record = { ahrefs_v2: AhrefsIcon, airtable: AirtableIcon, algolia: AlgoliaIcon, + algolia_v2: AlgoliaIcon, amplitude: AmplitudeIcon, apify: ApifyIcon, apify_v2: ApifyIcon, @@ -324,6 +325,7 @@ export const blockTypeToIconMap: Record = { attio: AttioIcon, azure_data_explorer: AzureDataExplorerIcon, azure_devops: AzureIcon, + azure_devops_v2: AzureIcon, bitbucket: BitbucketIcon, box: BoxCompanyIcon, box_v2: BoxCompanyIcon, @@ -364,6 +366,7 @@ export const blockTypeToIconMap: Record = { confluence_v2: ConfluenceIcon, context_dev: ContextDevIcon, convex: ConvexIcon, + convex_v2: ConvexIcon, crowdstrike: CrowdStrikeIcon, crunchbase: CrunchbaseIcon, crunchbase_v2: CrunchbaseIcon, @@ -378,6 +381,7 @@ export const blockTypeToIconMap: Record = { daytona_v2: DaytonaIcon, deployments: Rocket, devin: DevinIcon, + devin_v2: DevinIcon, discord: DiscordIcon, discord_v2: DiscordIcon, docusign: DocuSignIcon, @@ -392,12 +396,14 @@ export const blockTypeToIconMap: Record = { dynamodb: DynamoDBIcon, dynamodb_v2: DynamoDBIcon, dynatrace: DynatraceIcon, + dynatrace_v2: DynatraceIcon, ec2: EC2Icon, ec2_v2: EC2Icon, elasticsearch: ElasticsearchIcon, elevenlabs: ElevenLabsIcon, elevenlabs_v2: ElevenLabsIcon, emailbison: EmailBisonIcon, + emailbison_v2: EmailBisonIcon, embeddings: EmbeddingsIcon, enrich: EnrichSoIcon, enrich_v2: EnrichSoIcon, @@ -455,6 +461,7 @@ export const blockTypeToIconMap: Record = { 'google-drive': GoogleDriveIcon, 'google-sheets': GoogleSheetsIcon, grafana: GrafanaIcon, + grafana_v2: GrafanaIcon, grain: GrainIcon, grain_v3: GrainIcon, granola: GranolaIcon, @@ -482,6 +489,7 @@ export const blockTypeToIconMap: Record = { incidentio: IncidentioIcon, incidentio_v2: IncidentioIcon, infisical: InfisicalIcon, + infisical_v2: InfisicalIcon, instantly: InstantlyIcon, instantly_v2: InstantlyIcon, intercom: IntercomIcon, @@ -492,9 +500,10 @@ export const blockTypeToIconMap: Record = { jira: JiraIcon, jira_service_management: JiraServiceManagementIcon, jotform: JotformIcon, + jotform_v2: JotformIcon, jsm: JiraServiceManagementIcon, jupyter: JupyterIcon, - jupyter_v2: JupyterIcon, + jupyter_v3: JupyterIcon, kalshi: KalshiIcon, kalshi_v2: KalshiIcon, ketch: KetchIcon, @@ -516,6 +525,7 @@ export const blockTypeToIconMap: Record = { linq: LinqIcon, linq_v2: LinqIcon, logfire: LogfireIcon, + logfire_v2: LogfireIcon, logrocket: LogRocketIcon, logs: Library, logs_v2: Library, @@ -526,6 +536,7 @@ export const blockTypeToIconMap: Record = { mailchimp: MailchimpIcon, mailchimp_v2: MailchimpIcon, mailgun: MailgunIcon, + mailgun_v2: MailgunIcon, managed_agent: ClaudeIcon, manageengine_sdp: ManageEngineIcon, mem0: Mem0Icon, @@ -554,10 +565,12 @@ export const blockTypeToIconMap: Record = { netsuite: NetSuiteIcon, neverbounce: NeverBounceIcon, new_relic: NewRelicIcon, + new_relic_v2: NewRelicIcon, notion: NotionIcon, notion_v2: NotionIcon, obsidian: ObsidianIcon, okta: OktaIcon, + okta_v2: OktaIcon, onedrive: MicrosoftOneDriveIcon, onepassword: OnePasswordIcon, oracle_fusion_financials: OracleIcon, @@ -576,6 +589,7 @@ export const blockTypeToIconMap: Record = { pipedrive: PipedriveIcon, pitchbook: PitchBookIcon, plane: PlaneIcon, + plane_v2: PlaneIcon, planetscale: PlanetScaleIcon, polymarket: PolymarketIcon, postgresql: PostgresIcon, @@ -668,6 +682,7 @@ export const blockTypeToIconMap: Record = { stt: STTIcon, stt_v2: STTIcon, supabase: SupabaseIcon, + supabase_v2: SupabaseIcon, table: Table, table_v2: Table, tailscale: TailscaleIcon, @@ -680,18 +695,23 @@ export const blockTypeToIconMap: Record = { textract: TextractIcon, textract_v3: TextractIcon, thrive: ThriveIcon, + thrive_v2: ThriveIcon, tiktok: TikTokIcon, tinybird: TinybirdIcon, + tinybird_v2: TinybirdIcon, tinyfish: TinyFishIcon, trello: TrelloIcon, trigger_dev: TriggerDevIcon, trigger_dev_v2: TriggerDevIcon, twilio: TwilioIcon, twilio_sms: TwilioIcon, + twilio_sms_v2: TwilioIcon, twilio_voice: TwilioIcon, + twilio_voice_v2: TwilioIcon, typeform: TypeformIcon, typeform_v2: TypeformIcon, upstash: UpstashIcon, + upstash_v2: UpstashIcon, uptimerobot: UptimeRobotIcon, uptimerobot_v2: UptimeRobotIcon, vanta: VantaIcon, diff --git a/apps/sim/lib/oauth/oauth.ts b/apps/sim/lib/oauth/oauth.ts index 58e11cea128..e2805cb2755 100644 --- a/apps/sim/lib/oauth/oauth.ts +++ b/apps/sim/lib/oauth/oauth.ts @@ -11,6 +11,7 @@ import { AgentPhoneIcon, AhrefsIcon, AirtableIcon, + AlgoliaIcon, ApifyIcon, ApolloIcon, AsanaIcon, @@ -34,15 +35,19 @@ import { CloudflareIcon, CodaIcon, ConfluenceIcon, + ConvexIcon, CrunchbaseIcon, CursorIcon, DatabricksIcon, DaytonaIcon, + DevinIcon, DiscordIcon, DocuSignIcon, DropboxIcon, DubIcon, + DynatraceIcon, ElevenLabsIcon, + EmailBisonIcon, EnrichSoIcon, ExtendIcon, FathomIcon, @@ -69,6 +74,7 @@ import { GoogleSheetsIcon, GoogleTasksIcon, GoogleVaultIcon, + GrafanaIcon, GrainIcon, GranolaIcon, GreenhouseIcon, @@ -80,21 +86,26 @@ import { HuggingFaceIcon, IAMIcon, IncidentioIcon, + InfisicalIcon, InstagramIcon, InstantlyIcon, IntercomIcon, IntuneIcon, JamaIcon, JiraIcon, + JotformIcon, + JupyterIcon, LangsmithIcon, LaunchDarklyIcon, LemlistIcon, LinearIcon, LinkedInIcon, LinqIcon, + LogfireIcon, LoopsIcon, LumaIcon, MailchimpIcon, + MailgunIcon, ManageEngineIcon, Mem0Icon, MicrosoftDataverseIcon, @@ -107,13 +118,16 @@ import { MicrosoftWordIcon, MondayIcon, NetSuiteIcon, + NewRelicIcon, NotionIcon, + OktaIcon, OracleIcon, OtterIcon, OutlookIcon, PagerDutyIcon, PersonaIcon, PipedriveIcon, + PlaneIcon, PowerBIIcon, ProfoundIcon, PulseIcon, @@ -141,13 +155,18 @@ import { SpotifyIcon, SquareIcon, StripeIcon, + SupabaseIcon, TailscaleIcon, TavilyIcon, TelegramIcon, + ThriveIcon, TikTokIcon, + TinybirdIcon, TrelloIcon, TriggerDevIcon, + TwilioIcon, TypeformIcon, + UpstashIcon, UptimeRobotIcon, VantaIcon, VercelIcon, @@ -3085,6 +3104,351 @@ export const OAUTH_PROVIDERS: Record = { }, defaultService: 'gitlab', }, + grafana: { + name: 'Grafana', + icon: GrafanaIcon, + services: { + grafana: { + name: 'Grafana', + description: + 'Manage dashboards, alert rules, annotations, contact points, data sources, and folders in Grafana.', + providerId: 'grafana', + serviceAccountProviderId: 'grafana-service-account', + icon: GrafanaIcon, + baseProviderIcon: GrafanaIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'grafana', + }, + jupyter: { + name: 'Jupyter', + icon: JupyterIcon, + services: { + jupyter: { + name: 'Jupyter', + description: 'Manage files, notebooks, kernels, and sessions on a Jupyter server.', + providerId: 'jupyter', + serviceAccountProviderId: 'jupyter-service-account', + icon: JupyterIcon, + baseProviderIcon: JupyterIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'jupyter', + }, + convex: { + name: 'Convex', + icon: ConvexIcon, + services: { + convex: { + name: 'Convex', + description: 'Run functions, list tables, and export documents from a Convex deployment.', + providerId: 'convex', + serviceAccountProviderId: 'convex-service-account', + icon: ConvexIcon, + baseProviderIcon: ConvexIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'convex', + }, + tinybird: { + name: 'Tinybird', + icon: TinybirdIcon, + services: { + tinybird: { + name: 'Tinybird', + description: + 'Send events, run SQL, call Pipe endpoints, and manage Data Sources in Tinybird.', + providerId: 'tinybird', + serviceAccountProviderId: 'tinybird-service-account', + icon: TinybirdIcon, + baseProviderIcon: TinybirdIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'tinybird', + }, + dynatrace: { + name: 'Dynatrace', + icon: DynatraceIcon, + services: { + dynatrace: { + name: 'Dynatrace', + description: + 'Manage Dynatrace problems, metrics, entities, logs, SLOs, settings, and security.', + providerId: 'dynatrace', + serviceAccountProviderId: 'dynatrace-service-account', + icon: DynatraceIcon, + baseProviderIcon: DynatraceIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'dynatrace', + }, + new_relic: { + name: 'New Relic', + icon: NewRelicIcon, + services: { + new_relic: { + name: 'New Relic', + description: 'Run NRQL queries, search entities, and record deployments in New Relic.', + providerId: 'new_relic', + serviceAccountProviderId: 'new-relic-service-account', + icon: NewRelicIcon, + baseProviderIcon: NewRelicIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'new_relic', + }, + logfire: { + name: 'Logfire', + icon: LogfireIcon, + services: { + logfire: { + name: 'Logfire', + description: 'Query traces, logs, and metrics in Pydantic Logfire.', + providerId: 'logfire', + serviceAccountProviderId: 'logfire-service-account', + icon: LogfireIcon, + baseProviderIcon: LogfireIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'logfire', + }, + mailgun: { + name: 'Mailgun', + icon: MailgunIcon, + services: { + mailgun: { + name: 'Mailgun', + description: + 'Send emails, manage mailing lists, and inspect domains and events in Mailgun.', + providerId: 'mailgun', + serviceAccountProviderId: 'mailgun-service-account', + icon: MailgunIcon, + baseProviderIcon: MailgunIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'mailgun', + }, + jotform: { + name: 'Jotform', + icon: JotformIcon, + services: { + jotform: { + name: 'Jotform', + description: 'Read submissions, manage forms, and register webhooks in Jotform.', + providerId: 'jotform', + serviceAccountProviderId: 'jotform-service-account', + icon: JotformIcon, + baseProviderIcon: JotformIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'jotform', + }, + plane: { + name: 'Plane', + icon: PlaneIcon, + services: { + plane: { + name: 'Plane', + description: 'Manage projects, work items, cycles, modules, and pages in Plane.', + providerId: 'plane', + serviceAccountProviderId: 'plane-service-account', + icon: PlaneIcon, + baseProviderIcon: PlaneIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'plane', + }, + azure_devops: { + name: 'Azure DevOps', + icon: AzureIcon, + services: { + azure_devops: { + name: 'Azure DevOps', + description: + 'Work with pipelines, builds, and work items in your Azure DevOps organization.', + providerId: 'azure_devops', + serviceAccountProviderId: 'azure-devops-service-account', + icon: AzureIcon, + baseProviderIcon: AzureIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'azure_devops', + }, + twilio: { + name: 'Twilio', + icon: TwilioIcon, + services: { + twilio: { + name: 'Twilio', + description: 'Send SMS and make calls from your Twilio account.', + providerId: 'twilio', + serviceAccountProviderId: 'twilio-service-account', + icon: TwilioIcon, + baseProviderIcon: TwilioIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'twilio', + }, + algolia: { + name: 'Algolia', + icon: AlgoliaIcon, + services: { + algolia: { + name: 'Algolia', + description: 'Search and manage records and indices in your Algolia application.', + providerId: 'algolia', + serviceAccountProviderId: 'algolia-service-account', + icon: AlgoliaIcon, + baseProviderIcon: AlgoliaIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'algolia', + }, + upstash: { + name: 'Upstash', + icon: UpstashIcon, + services: { + upstash: { + name: 'Upstash', + description: 'Read and write keys in your Upstash Redis database.', + providerId: 'upstash', + serviceAccountProviderId: 'upstash-service-account', + icon: UpstashIcon, + baseProviderIcon: UpstashIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'upstash', + }, + emailbison: { + name: 'Email Bison', + icon: EmailBisonIcon, + services: { + emailbison: { + name: 'Email Bison', + description: 'Manage Email Bison leads, campaigns, replies, and tags.', + providerId: 'emailbison', + serviceAccountProviderId: 'emailbison-service-account', + icon: EmailBisonIcon, + baseProviderIcon: EmailBisonIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'emailbison', + }, + devin: { + name: 'Devin', + icon: DevinIcon, + services: { + devin: { + name: 'Devin', + description: 'Create, guide, and track Devin coding sessions.', + providerId: 'devin', + serviceAccountProviderId: 'devin-service-account', + icon: DevinIcon, + baseProviderIcon: DevinIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'devin', + }, + okta: { + name: 'Okta', + icon: OktaIcon, + services: { + okta: { + name: 'Okta', + description: 'Manage users, groups, apps, and MFA in Okta.', + providerId: 'okta', + serviceAccountProviderId: 'okta-service-account', + icon: OktaIcon, + baseProviderIcon: OktaIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'okta', + }, + infisical: { + name: 'Infisical', + icon: InfisicalIcon, + services: { + infisical: { + name: 'Infisical', + description: 'Manage secrets with Infisical', + providerId: 'infisical', + serviceAccountProviderId: 'infisical-service-account', + icon: InfisicalIcon, + baseProviderIcon: InfisicalIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'infisical', + }, + supabase: { + name: 'Supabase', + icon: SupabaseIcon, + services: { + supabase: { + name: 'Supabase', + description: 'Use Supabase database', + providerId: 'supabase', + serviceAccountProviderId: 'supabase-service-account', + icon: SupabaseIcon, + baseProviderIcon: SupabaseIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'supabase', + }, + thrive: { + name: 'Thrive', + icon: ThriveIcon, + services: { + thrive: { + name: 'Thrive', + description: 'Manage Thrive users, audiences, assignments, content, and CPD records.', + providerId: 'thrive', + serviceAccountProviderId: 'thrive-service-account', + icon: ThriveIcon, + baseProviderIcon: ThriveIcon, + scopes: [], + authType: 'service_account', + }, + }, + defaultService: 'thrive', + }, higgsfield: { name: 'Higgsfield', icon: HiggsfieldIcon, diff --git a/apps/sim/lib/oauth/token-resolution.test.ts b/apps/sim/lib/oauth/token-resolution.test.ts index f7f654dcaa0..3607961ef1f 100644 --- a/apps/sim/lib/oauth/token-resolution.test.ts +++ b/apps/sim/lib/oauth/token-resolution.test.ts @@ -457,6 +457,17 @@ describe('ordinary tool credential binding', () => { }) }) + it('refuses to release a service-account secret without a tool to bind it to', async () => { + const result = await resolveCredentialAccessToken({ + requestId: 'binding-test', + credentialId: 'credential-1', + authenticate, + }) + + expect(result).toMatchObject({ ok: false, status: 400, code: 'SERVICE_ACCOUNT_TOOL_REQUIRED' }) + expect(mockResolveServiceAccountToken).not.toHaveBeenCalled() + }) + it.each(['vanta', 'oracle-epm-service-account', 'unknown-provider'])( 'rejects an authorized %s credential before minting a Fusion token', async (providerId) => { diff --git a/apps/sim/lib/oauth/token-resolution.ts b/apps/sim/lib/oauth/token-resolution.ts index 234f98e741d..ded642770db 100644 --- a/apps/sim/lib/oauth/token-resolution.ts +++ b/apps/sim/lib/oauth/token-resolution.ts @@ -357,6 +357,15 @@ export async function resolveCredentialToken( return { ok: false, status: 403, error: authz.error || 'Unauthorized' } } + // A saved secret is released only to a tool of its own provider, never on a bare ID. + if (!input.toolId) { + return { + ok: false, + status: 400, + code: 'SERVICE_ACCOUNT_TOOL_REQUIRED', + error: 'A tool ID is required to use a saved credential', + } + } const bindingError = validateToolCredentialBinding( input.toolId, resolved.providerId, diff --git a/apps/sim/lib/oauth/types.ts b/apps/sim/lib/oauth/types.ts index 92a685fa4d5..5bc2b90d841 100644 --- a/apps/sim/lib/oauth/types.ts +++ b/apps/sim/lib/oauth/types.ts @@ -115,6 +115,26 @@ export type OAuthProvider = | 'coda' | 'gauge' | 'higgsfield' + | 'thrive' + | 'supabase' + | 'infisical' + | 'okta' + | 'devin' + | 'emailbison' + | 'upstash' + | 'algolia' + | 'twilio' + | 'azure_devops' + | 'plane' + | 'jotform' + | 'mailgun' + | 'logfire' + | 'new_relic' + | 'dynatrace' + | 'tinybird' + | 'convex' + | 'jupyter' + | 'grafana' | 'gitlab' | 'whatsapp' | 'vercel' @@ -271,6 +291,26 @@ export type OAuthService = | 'coda' | 'gauge' | 'higgsfield' + | 'thrive' + | 'supabase' + | 'infisical' + | 'okta' + | 'devin' + | 'emailbison' + | 'upstash' + | 'algolia' + | 'twilio' + | 'azure_devops' + | 'plane' + | 'jotform' + | 'mailgun' + | 'logfire' + | 'new_relic' + | 'dynatrace' + | 'tinybird' + | 'convex' + | 'jupyter' + | 'grafana' | 'gitlab' | 'whatsapp' | 'vercel' diff --git a/apps/sim/lib/permission-groups/block-successors.generated.ts b/apps/sim/lib/permission-groups/block-successors.generated.ts index 76fce6e3bbe..a8712c2fdce 100644 --- a/apps/sim/lib/permission-groups/block-successors.generated.ts +++ b/apps/sim/lib/permission-groups/block-successors.generated.ts @@ -12,12 +12,14 @@ export const BLOCK_ACCESS_SUCCESSORS: Record = { agentmail: 'agentmail_v2', agentphone: 'agentphone_v2', ahrefs: 'ahrefs_v2', + algolia: 'algolia_v2', api_trigger: 'start_trigger', apify: 'apify_v2', apollo: 'apollo_v2', appconfig: 'appconfig_v2', ashby: 'ashby_v2', athena: 'athena_v2', + azure_devops: 'azure_devops_v2', box: 'box_v2', brex: 'brex_v2', brightdata: 'brightdata_v2', @@ -34,18 +36,22 @@ export const BLOCK_ACCESS_SUCCESSORS: Record = { cloudwatch: 'cloudwatch_v2', codepipeline: 'codepipeline_v2', confluence: 'confluence_v2', + convex: 'convex_v2', crunchbase: 'crunchbase_v2', cursor: 'cursor_v3', cursor_v2: 'cursor_v3', databricks: 'databricks_v2', daytona: 'daytona_v2', + devin: 'devin_v2', discord: 'discord_v2', dropbox: 'dropbox_v2', dub: 'dub_v3', dub_v2: 'dub_v3', dynamodb: 'dynamodb_v2', + dynatrace: 'dynatrace_v2', ec2: 'ec2_v2', elevenlabs: 'elevenlabs_v2', + emailbison: 'emailbison_v2', enrich: 'enrich_v2', extend: 'extend_v3', extend_v2: 'extend_v3', @@ -64,6 +70,7 @@ export const BLOCK_ACCESS_SUCCESSORS: Record = { google_calendar: 'google_calendar_v2', google_sheets: 'google_sheets_v2', google_slides: 'google_slides_v2', + grafana: 'grafana_v2', grain: 'grain_v3', grain_v2: 'grain_v3', granola: 'granola_v2', @@ -75,11 +82,14 @@ export const BLOCK_ACCESS_SUCCESSORS: Record = { identity_center: 'identity_center_v2', image_generator: 'image_generator_v2', incidentio: 'incidentio_v2', + infisical: 'infisical_v2', input_trigger: 'start_trigger', instantly: 'instantly_v2', intercom: 'intercom_v3', intercom_v2: 'intercom_v3', - jupyter: 'jupyter_v2', + jotform: 'jotform_v2', + jupyter: 'jupyter_v3', + jupyter_v2: 'jupyter_v3', kalshi: 'kalshi_v2', lambda: 'lambda_v2', langsmith: 'langsmith_v2', @@ -87,21 +97,26 @@ export const BLOCK_ACCESS_SUCCESSORS: Record = { lemlist: 'lemlist_v2', linear: 'linear_v2', linq: 'linq_v2', + logfire: 'logfire_v2', logs: 'logs_v2', loops: 'loops_v2', luma: 'luma_v2', mailchimp: 'mailchimp_v2', + mailgun: 'mailgun_v2', manual_trigger: 'start_trigger', mem0: 'mem0_v2', microsoft_dataverse: 'microsoft_dataverse_v2', microsoft_excel: 'microsoft_excel_v2', mistral_parse: 'mistral_parse_v3', mistral_parse_v2: 'mistral_parse_v3', + new_relic: 'new_relic_v2', notion: 'notion_v2', + okta: 'okta_v2', openai: 'embeddings', otter: 'otter_v2', pagerduty: 'pagerduty_v2', persona: 'persona_v2', + plane: 'plane_v2', profound: 'profound_v2', pulse: 'pulse_v3', pulse_v2: 'pulse_v3', @@ -138,14 +153,20 @@ export const BLOCK_ACCESS_SUCCESSORS: Record = { stripe: 'stripe_v2', sts: 'sts_v2', stt: 'stt_v2', + supabase: 'supabase_v2', table: 'table_v2', tailscale: 'tailscale_v2', tavily: 'tavily_v2', telegram: 'telegram_v2', textract: 'textract_v3', textract_v2: 'textract_v3', + thrive: 'thrive_v2', + tinybird: 'tinybird_v2', trigger_dev: 'trigger_dev_v2', + twilio_sms: 'twilio_sms_v2', + twilio_voice: 'twilio_voice_v2', typeform: 'typeform_v2', + upstash: 'upstash_v2', uptimerobot: 'uptimerobot_v2', vercel: 'vercel_v2', video_generator: 'video_generator_v3', diff --git a/apps/sim/scripts/saved-credential-contract.ts b/apps/sim/scripts/saved-credential-contract.ts index 1297c5dfcca..7071450ac24 100644 --- a/apps/sim/scripts/saved-credential-contract.ts +++ b/apps/sim/scripts/saved-credential-contract.ts @@ -46,6 +46,8 @@ const STRING_PLACEHOLDERS = [ 'example.com', 'https://example.com', 'dbc-00000000-0000.cloud.databricks.com', + // A Twilio account SID: Twilio tools refuse to build a URL without one. + 'AC00000000000000000000000000000000', ] function placeholderFor(param: ProbeableParam, text: string): unknown { diff --git a/apps/sim/serializer/saved-credentials.test.ts b/apps/sim/serializer/saved-credentials.test.ts index eee841241c3..6dc28653548 100644 --- a/apps/sim/serializer/saved-credentials.test.ts +++ b/apps/sim/serializer/saved-credentials.test.ts @@ -8,11 +8,13 @@ import { AffinityBlock, AffinityV2Block } from '@/blocks/blocks/affinity' import { AgentMailBlock, AgentMailV2Block } from '@/blocks/blocks/agentmail' import { AgentPhoneBlock, AgentPhoneV2Block } from '@/blocks/blocks/agentphone' import { AhrefsBlock, AhrefsV2Block } from '@/blocks/blocks/ahrefs' +import { AlgoliaBlock, AlgoliaV2Block } from '@/blocks/blocks/algolia' import { ApifyBlock, ApifyV2Block } from '@/blocks/blocks/apify' import { ApolloBlock, ApolloV2Block } from '@/blocks/blocks/apollo' import { AppConfigBlock, AppConfigV2Block } from '@/blocks/blocks/appconfig' import { AshbyBlock, AshbyV2Block } from '@/blocks/blocks/ashby' import { AthenaBlock, AthenaV2Block } from '@/blocks/blocks/athena' +import { AzureDevOpsBlock, AzureDevOpsV2Block } from '@/blocks/blocks/azure_devops' import { BrexBlock, BrexV2Block } from '@/blocks/blocks/brex' import { BrightDataBlock, BrightDataV2Block } from '@/blocks/blocks/brightdata' import { BrowserUseBlock, BrowserUseV2Block } from '@/blocks/blocks/browser_use' @@ -26,15 +28,19 @@ import { CloudFormationBlock, CloudFormationV2Block } from '@/blocks/blocks/clou import { CloudTrailBlock, CloudTrailV2Block } from '@/blocks/blocks/cloudtrail' import { CloudWatchBlock, CloudWatchV2Block } from '@/blocks/blocks/cloudwatch' import { CodePipelineBlock, CodePipelineV2Block } from '@/blocks/blocks/codepipeline' +import { ConvexBlock, ConvexV2Block } from '@/blocks/blocks/convex' import { CrunchbaseBlock, CrunchbaseV2Block } from '@/blocks/blocks/crunchbase' import { CursorV2Block, CursorV3Block } from '@/blocks/blocks/cursor' import { DatabricksBlock, DatabricksV2Block } from '@/blocks/blocks/databricks' import { DaytonaBlock, DaytonaV2Block } from '@/blocks/blocks/daytona' +import { DevinBlock, DevinV2Block } from '@/blocks/blocks/devin' import { DiscordBlock, DiscordV2Block } from '@/blocks/blocks/discord' import { DubV2Block, DubV3Block } from '@/blocks/blocks/dub' import { DynamoDBBlock, DynamoDBV2Block } from '@/blocks/blocks/dynamodb' +import { DynatraceBlock, DynatraceV2Block } from '@/blocks/blocks/dynatrace' import { EC2Block, EC2V2Block } from '@/blocks/blocks/ec2' import { ElevenLabsBlock, ElevenLabsV2Block } from '@/blocks/blocks/elevenlabs' +import { EmailBisonBlock, EmailBisonV2Block } from '@/blocks/blocks/emailbison' import { EnrichBlock, EnrichV2Block } from '@/blocks/blocks/enrich' import { ExtendV2Block, ExtendV3Block } from '@/blocks/blocks/extend' import { FathomBlock, FathomV2Block } from '@/blocks/blocks/fathom' @@ -42,6 +48,7 @@ import { FirefliesV2Block, FirefliesV3Block } from '@/blocks/blocks/fireflies' import { FlintBlock, FlintV2Block } from '@/blocks/blocks/flint' import { GammaBlock, GammaV2Block } from '@/blocks/blocks/gamma' import { GitLabBlock, GitLabV2Block } from '@/blocks/blocks/gitlab' +import { GrafanaBlock, GrafanaV2Block } from '@/blocks/blocks/grafana' import { GrainV2Block, GrainV3Block } from '@/blocks/blocks/grain' import { GranolaBlock, GranolaV2Block } from '@/blocks/blocks/granola' import { HexBlock, HexV2Block } from '@/blocks/blocks/hex' @@ -49,20 +56,28 @@ import { HuggingFaceBlock, HuggingFaceV2Block } from '@/blocks/blocks/huggingfac import { IAMBlock, IAMV2Block } from '@/blocks/blocks/iam' import { IdentityCenterBlock, IdentityCenterV2Block } from '@/blocks/blocks/identity_center' import { IncidentioBlock, IncidentioV2Block } from '@/blocks/blocks/incidentio' +import { InfisicalBlock, InfisicalV2Block } from '@/blocks/blocks/infisical' import { InstantlyBlock, InstantlyV2Block } from '@/blocks/blocks/instantly' import { IntercomV2Block, IntercomV3Block } from '@/blocks/blocks/intercom' +import { JotformBlock, JotformV2Block } from '@/blocks/blocks/jotform' +import { JupyterV2Block, JupyterV3Block } from '@/blocks/blocks/jupyter' import { LambdaBlock, LambdaV2Block } from '@/blocks/blocks/lambda' import { LangsmithBlock, LangsmithV2Block } from '@/blocks/blocks/langsmith' import { LaunchDarklyBlock, LaunchDarklyV2Block } from '@/blocks/blocks/launchdarkly' import { LemlistBlock, LemlistV2Block } from '@/blocks/blocks/lemlist' import { LinqBlock, LinqV2Block } from '@/blocks/blocks/linq' +import { LogfireBlock, LogfireV2Block } from '@/blocks/blocks/logfire' import { LoopsBlock, LoopsV2Block } from '@/blocks/blocks/loops' import { LumaBlock, LumaV2Block } from '@/blocks/blocks/luma' import { MailchimpBlock, MailchimpV2Block } from '@/blocks/blocks/mailchimp' +import { MailgunBlock, MailgunV2Block } from '@/blocks/blocks/mailgun' import { Mem0Block, Mem0V2Block } from '@/blocks/blocks/mem0' +import { NewRelicBlock, NewRelicV2Block } from '@/blocks/blocks/new_relic' +import { OktaBlock, OktaV2Block } from '@/blocks/blocks/okta' import { OtterBlock, OtterV2Block } from '@/blocks/blocks/otter' import { PagerDutyBlock, PagerDutyV2Block } from '@/blocks/blocks/pagerduty' import { PersonaBlock, PersonaV2Block } from '@/blocks/blocks/persona' +import { PlaneBlock, PlaneV2Block } from '@/blocks/blocks/plane' import { ProfoundBlock, ProfoundV2Block } from '@/blocks/blocks/profound' import { PulseV2Block, PulseV3Block } from '@/blocks/blocks/pulse' import { QuartrBlock, QuartrV2Block } from '@/blocks/blocks/quartr' @@ -88,12 +103,18 @@ import { SquareBlock, SquareV2Block } from '@/blocks/blocks/square' import { SSMBlock, SSMV2Block } from '@/blocks/blocks/ssm' import { StripeBlock, StripeV2Block } from '@/blocks/blocks/stripe' import { STSBlock, STSV2Block } from '@/blocks/blocks/sts' +import { SupabaseBlock, SupabaseV2Block } from '@/blocks/blocks/supabase' import { TailscaleBlock, TailscaleV2Block } from '@/blocks/blocks/tailscale' import { TavilyBlock, TavilyV2Block } from '@/blocks/blocks/tavily' import { TelegramBlock, TelegramV2Block } from '@/blocks/blocks/telegram' import { TextractBlock, TextractV2Block, TextractV3Block } from '@/blocks/blocks/textract' +import { ThriveBlock, ThriveV2Block } from '@/blocks/blocks/thrive' +import { TinybirdBlock, TinybirdV2Block } from '@/blocks/blocks/tinybird' import { TriggerDevBlock, TriggerDevV2Block } from '@/blocks/blocks/trigger_dev' +import { TwilioSMSBlock, TwilioSMSV2Block } from '@/blocks/blocks/twilio' +import { TwilioVoiceBlock, TwilioVoiceV2Block } from '@/blocks/blocks/twilio_voice' import { TypeformBlock, TypeformV2Block } from '@/blocks/blocks/typeform' +import { UpstashBlock, UpstashV2Block } from '@/blocks/blocks/upstash' import { UptimeRobotBlock, UptimeRobotV2Block } from '@/blocks/blocks/uptimerobot' import { VercelBlock, VercelV2Block } from '@/blocks/blocks/vercel' import { WhatsAppBlock, WhatsAppV2Block } from '@/blocks/blocks/whatsapp' @@ -271,6 +292,75 @@ const VERSIONS: Array<{ secretIds: ['accessToken', 'host'], optionalIds: ['host'], }, + { legacy: GrafanaBlock, successor: GrafanaV2Block, secretIds: ['baseUrl', 'apiKey'] }, + { legacy: JupyterV2Block, successor: JupyterV3Block, secretIds: ['serverUrl', 'token'] }, + { legacy: ConvexBlock, successor: ConvexV2Block, secretIds: ['deploymentUrl', 'deployKey'] }, + { legacy: TinybirdBlock, successor: TinybirdV2Block, secretIds: ['token', 'base_url'] }, + { + legacy: DynatraceBlock, + successor: DynatraceV2Block, + secretIds: ['apiToken', 'environmentUrl'], + }, + { + legacy: NewRelicBlock, + successor: NewRelicV2Block, + secretIds: ['apiKey', 'region'], + optionalIds: ['region'], + }, + { + legacy: LogfireBlock, + successor: LogfireV2Block, + secretIds: ['apiKey', 'host', 'region'], + optionalIds: ['host', 'region'], + }, + { + legacy: MailgunBlock, + successor: MailgunV2Block, + secretIds: ['apiKey', 'region'], + optionalIds: ['region'], + }, + { + legacy: JotformBlock, + successor: JotformV2Block, + secretIds: ['apiKey', 'region'], + optionalIds: ['region'], + }, + { + legacy: PlaneBlock, + successor: PlaneV2Block, + secretIds: ['apiKey', 'baseUrl'], + optionalIds: ['baseUrl'], + }, + { + legacy: AzureDevOpsBlock, + successor: AzureDevOpsV2Block, + secretIds: ['accessToken', 'organization'], + optionalIds: ['organization'], + }, + { legacy: TwilioSMSBlock, successor: TwilioSMSV2Block, secretIds: ['accountSid', 'authToken'] }, + { + legacy: TwilioVoiceBlock, + successor: TwilioVoiceV2Block, + secretIds: ['accountSid', 'authToken'], + }, + { legacy: AlgoliaBlock, successor: AlgoliaV2Block, secretIds: ['applicationId', 'apiKey'] }, + { legacy: UpstashBlock, successor: UpstashV2Block, secretIds: ['restUrl', 'restToken'] }, + { legacy: EmailBisonBlock, successor: EmailBisonV2Block, secretIds: ['apiKey'] }, + { legacy: DevinBlock, successor: DevinV2Block, secretIds: ['apiKey'] }, + { legacy: OktaBlock, successor: OktaV2Block, secretIds: ['apiKey'] }, + { + legacy: InfisicalBlock, + successor: InfisicalV2Block, + secretIds: ['apiKey', 'baseUrl'], + optionalIds: ['baseUrl'], + }, + { legacy: SupabaseBlock, successor: SupabaseV2Block, secretIds: ['apiKey', 'projectId'] }, + { + legacy: ThriveBlock, + successor: ThriveV2Block, + secretIds: ['tenantId', 'apiKey', 'host'], + optionalIds: ['host'], + }, ] function valuesFor(ids: readonly string[], prefix: string): Record { diff --git a/apps/sim/tools/algolia/add_record.ts b/apps/sim/tools/algolia/add_record.ts index a6f5623ac44..948fa2e2ff3 100644 --- a/apps/sim/tools/algolia/add_record.ts +++ b/apps/sim/tools/algolia/add_record.ts @@ -1,4 +1,5 @@ import type { AlgoliaAddRecordParams, AlgoliaAddRecordResponse } from '@/tools/algolia/types' +import { ALGOLIA_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' export const addRecordTool: ToolConfig = { @@ -6,6 +7,7 @@ export const addRecordTool: ToolConfig = @@ -8,6 +9,7 @@ export const clearRecordsTool: ToolConfig = { @@ -6,6 +7,7 @@ export const deleteIndexTool: ToolConfig = @@ -7,6 +8,7 @@ export const deleteRecordTool: ToolConfig = { @@ -6,6 +7,7 @@ export const getRecordTool: ToolConfig = { @@ -6,6 +7,7 @@ export const getRecordsTool: ToolConfig = { @@ -6,6 +7,7 @@ export const getSettingsTool: ToolConfig = { @@ -6,6 +7,7 @@ export const listIndicesTool: ToolConfig = { @@ -6,6 +7,7 @@ export const searchTool: ToolConfig name: 'Algolia Search', description: 'Search an Algolia index', version: '1.0', + oauth: ALGOLIA_CREDENTIAL_OAUTH, params: { applicationId: { diff --git a/apps/sim/tools/algolia/update_settings.ts b/apps/sim/tools/algolia/update_settings.ts index e3c4dd367fa..f91b02583ba 100644 --- a/apps/sim/tools/algolia/update_settings.ts +++ b/apps/sim/tools/algolia/update_settings.ts @@ -2,6 +2,7 @@ import type { AlgoliaUpdateSettingsParams, AlgoliaUpdateSettingsResponse, } from '@/tools/algolia/types' +import { ALGOLIA_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' export const updateSettingsTool: ToolConfig< @@ -12,6 +13,7 @@ export const updateSettingsTool: ToolConfig< name: 'Algolia Update Settings', description: 'Update the settings of an Algolia index', version: '1.0', + oauth: ALGOLIA_CREDENTIAL_OAUTH, params: { applicationId: { diff --git a/apps/sim/tools/azure_devops/add_comment.ts b/apps/sim/tools/azure_devops/add_comment.ts index 36630ffeeaf..58a4b910613 100644 --- a/apps/sim/tools/azure_devops/add_comment.ts +++ b/apps/sim/tools/azure_devops/add_comment.ts @@ -4,7 +4,8 @@ import type { AzureDevOpsComment, } from '@/tools/azure_devops/types' import type { AzureDevOpsRawComment } from '@/tools/azure_devops/utils' -import { formatComment, mapComment } from '@/tools/azure_devops/utils' +import { azureDevOpsProjectUrl, formatComment, mapComment } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' export const addCommentTool: ToolConfig = { @@ -12,6 +13,7 @@ export const addCommentTool: ToolConfig = name: 'Azure DevOps Add Comment', description: 'Add a comment to a work item in Azure DevOps.', version: '1.0.0', + oauth: AZURE_DEVOPS_CREDENTIAL_OAUTH, params: { organization: { @@ -49,7 +51,7 @@ export const addCommentTool: ToolConfig = request: { url: (params) => { const url = new URL( - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/wit/workitems/${Number(params.workItemId)}/comments` + `${azureDevOpsProjectUrl(params)}/_apis/wit/workitems/${Number(params.workItemId)}/comments` ) url.searchParams.set('api-version', '7.0-preview.3') return url.toString() diff --git a/apps/sim/tools/azure_devops/azure-devops.test.ts b/apps/sim/tools/azure_devops/azure-devops.test.ts index 1dbfc3add6f..41a23ff4a51 100644 --- a/apps/sim/tools/azure_devops/azure-devops.test.ts +++ b/apps/sim/tools/azure_devops/azure-devops.test.ts @@ -554,3 +554,26 @@ describe('Azure DevOps trigger event matching', () => { expect(azureDevOpsHandler.extractIdempotencyId!(null)).toBeNull() }) }) + +describe('Azure DevOps project-scoped URLs', () => { + const base = { accessToken: 'pat', organization: 'contoso', workItemId: 7 } + + it('keeps a project name with spaces in its own path segment, as before', () => { + const url = new URL(buildUrl(getWorkItemTool, { ...base, project: 'My Project' } as never)) + + expect(url.pathname).toBe('/contoso/My%20Project/_apis/wit/workitems/7') + }) + + it('sends a project name pasted already encoded from the address bar unchanged', () => { + const url = new URL(buildUrl(getWorkItemTool, { ...base, project: 'My%20Project' } as never)) + + expect(url.pathname).toBe('/contoso/My%20Project/_apis/wit/workitems/7') + }) + + it.each(['../../other-org/proj', '..', 'proj/../../other-org', '%2e%2e'])( + 'refuses a project that would climb into another organization (%s)', + (project) => { + expect(() => buildUrl(getWorkItemTool, { ...base, project } as never)).toThrow(/project/) + } + ) +}) diff --git a/apps/sim/tools/azure_devops/create_work_item.ts b/apps/sim/tools/azure_devops/create_work_item.ts index 8ba561930ca..74ad9241e77 100644 --- a/apps/sim/tools/azure_devops/create_work_item.ts +++ b/apps/sim/tools/azure_devops/create_work_item.ts @@ -7,9 +7,11 @@ import type { AzureDevOpsJsonPatchOp, AzureDevOpsRawWorkItem } from '@/tools/azu import { appendEffortPatchOp, appendFieldPatchOp, + azureDevOpsProjectUrl, formatWorkItem, mapWorkItem, } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' export const createWorkItemTool: ToolConfig = { @@ -18,6 +20,7 @@ export const createWorkItemTool: ToolConfig - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/wit/workitems/$${encodeURIComponent(params.workItemType)}?api-version=7.2-preview.3`, + `${azureDevOpsProjectUrl(params)}/_apis/wit/workitems/$${encodeURIComponent(params.workItemType)}?api-version=7.2-preview.3`, method: 'POST', headers: (params) => ({ 'Content-Type': 'application/json-patch+json', diff --git a/apps/sim/tools/azure_devops/get_build_log.ts b/apps/sim/tools/azure_devops/get_build_log.ts index 300082db80f..dbc6a09ee25 100644 --- a/apps/sim/tools/azure_devops/get_build_log.ts +++ b/apps/sim/tools/azure_devops/get_build_log.ts @@ -1,5 +1,8 @@ import type { GetBuildLogParams, GetBuildLogResponse } from '@/tools/azure_devops/types' +import { azureDevOpsProjectUrl } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' +import { safeUrlPathSegment } from '@/tools/url-path' export const getBuildLogTool: ToolConfig = { id: 'azure_devops_get_build_log', @@ -7,6 +10,7 @@ export const getBuildLogTool: ToolConfig description: 'Fetch the text content of a specific build log in Azure DevOps. Use List Build Logs first to get the log ID. Optionally retrieve only a line range with startLine/endLine.', version: '1.0.0', + oauth: AZURE_DEVOPS_CREDENTIAL_OAUTH, params: { organization: { @@ -56,7 +60,7 @@ export const getBuildLogTool: ToolConfig request: { url: (params) => { const url = new URL( - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/build/builds/${params.buildId}/logs/${params.logId}` + `${azureDevOpsProjectUrl(params)}/_apis/build/builds/${safeUrlPathSegment(params.buildId, 'buildId')}/logs/${safeUrlPathSegment(params.logId, 'logId')}` ) url.searchParams.set('api-version', '7.2-preview.2') if (params.startLine !== undefined) diff --git a/apps/sim/tools/azure_devops/get_build_timeline.ts b/apps/sim/tools/azure_devops/get_build_timeline.ts index fbb10bdbaa7..03545049f7f 100644 --- a/apps/sim/tools/azure_devops/get_build_timeline.ts +++ b/apps/sim/tools/azure_devops/get_build_timeline.ts @@ -3,6 +3,8 @@ import type { GetBuildTimelineParams, GetBuildTimelineResponse, } from '@/tools/azure_devops/types' +import { azureDevOpsProjectUrl } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' export const getBuildTimelineTool: ToolConfig = { @@ -11,6 +13,7 @@ export const getBuildTimelineTool: ToolConfig - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/build/builds/${Number(params.buildId)}/timeline?api-version=7.2-preview.3`, + `${azureDevOpsProjectUrl(params)}/_apis/build/builds/${Number(params.buildId)}/timeline?api-version=7.2-preview.3`, method: 'GET', headers: (params) => ({ 'Content-Type': 'application/json', diff --git a/apps/sim/tools/azure_devops/get_comments.ts b/apps/sim/tools/azure_devops/get_comments.ts index 0b41036ec46..32db58c81b1 100644 --- a/apps/sim/tools/azure_devops/get_comments.ts +++ b/apps/sim/tools/azure_devops/get_comments.ts @@ -4,7 +4,8 @@ import type { GetCommentsResponse, } from '@/tools/azure_devops/types' import type { AzureDevOpsRawComment } from '@/tools/azure_devops/utils' -import { formatComment, mapComment } from '@/tools/azure_devops/utils' +import { azureDevOpsProjectUrl, formatComment, mapComment } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' export const getCommentsTool: ToolConfig = { @@ -12,6 +13,7 @@ export const getCommentsTool: ToolConfig name: 'Azure DevOps Get Comments', description: 'List comments for an Azure DevOps work item.', version: '1.0.0', + oauth: AZURE_DEVOPS_CREDENTIAL_OAUTH, params: { organization: { @@ -74,7 +76,7 @@ export const getCommentsTool: ToolConfig request: { url: (params) => { const url = new URL( - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/wit/workitems/${Number(params.workItemId)}/comments` + `${azureDevOpsProjectUrl(params)}/_apis/wit/workitems/${Number(params.workItemId)}/comments` ) url.searchParams.set('api-version', '7.2-preview.4') if (params.top) url.searchParams.set('$top', Number(params.top).toString()) diff --git a/apps/sim/tools/azure_devops/get_pipeline.ts b/apps/sim/tools/azure_devops/get_pipeline.ts index c08af037ecd..cebac855fbc 100644 --- a/apps/sim/tools/azure_devops/get_pipeline.ts +++ b/apps/sim/tools/azure_devops/get_pipeline.ts @@ -1,5 +1,8 @@ import type { GetPipelineParams, GetPipelineResponse } from '@/tools/azure_devops/types' +import { azureDevOpsProjectUrl } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' +import { safeUrlPathSegment } from '@/tools/url-path' export const getPipelineTool: ToolConfig = { id: 'azure_devops_get_pipeline', @@ -7,6 +10,7 @@ export const getPipelineTool: ToolConfig description: 'Get details for a specific pipeline in an Azure DevOps project, including configuration and repository info.', version: '1.0.0', + oauth: AZURE_DEVOPS_CREDENTIAL_OAUTH, params: { organization: { @@ -44,7 +48,7 @@ export const getPipelineTool: ToolConfig request: { url: (params) => { const url = new URL( - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/pipelines/${params.pipelineId}` + `${azureDevOpsProjectUrl(params)}/_apis/pipelines/${safeUrlPathSegment(params.pipelineId, 'pipelineId')}` ) url.searchParams.set('api-version', '7.2-preview.1') if (params.pipelineVersion) diff --git a/apps/sim/tools/azure_devops/get_pipeline_run.ts b/apps/sim/tools/azure_devops/get_pipeline_run.ts index e17959e3459..dc33965825b 100644 --- a/apps/sim/tools/azure_devops/get_pipeline_run.ts +++ b/apps/sim/tools/azure_devops/get_pipeline_run.ts @@ -1,5 +1,8 @@ import type { GetPipelineRunParams, GetPipelineRunResponse } from '@/tools/azure_devops/types' +import { azureDevOpsProjectUrl } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' +import { safeUrlPathSegment } from '@/tools/url-path' export const getPipelineRunTool: ToolConfig = { id: 'azure_devops_get_pipeline_run', @@ -7,6 +10,7 @@ export const getPipelineRunTool: ToolConfig { const url = new URL( - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/pipelines/${params.pipelineId}/runs/${params.runId}` + `${azureDevOpsProjectUrl(params)}/_apis/pipelines/${safeUrlPathSegment(params.pipelineId, 'pipelineId')}/runs/${safeUrlPathSegment(params.runId, 'runId')}` ) url.searchParams.set('api-version', '7.2-preview.1') return url.toString() diff --git a/apps/sim/tools/azure_devops/get_work_item.ts b/apps/sim/tools/azure_devops/get_work_item.ts index f1731cd444d..4ac8f36fc7f 100644 --- a/apps/sim/tools/azure_devops/get_work_item.ts +++ b/apps/sim/tools/azure_devops/get_work_item.ts @@ -1,6 +1,7 @@ import type { GetWorkItemParams, GetWorkItemResponse } from '@/tools/azure_devops/types' import type { AzureDevOpsRawWorkItem } from '@/tools/azure_devops/utils' -import { formatWorkItem, mapWorkItem } from '@/tools/azure_devops/utils' +import { azureDevOpsProjectUrl, formatWorkItem, mapWorkItem } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' export const getWorkItemTool: ToolConfig = { @@ -9,6 +10,7 @@ export const getWorkItemTool: ToolConfig description: 'Fetch full details of a single work item by ID from Azure DevOps, including title, state, type, assignee, and area path.', version: '1.0.0', + oauth: AZURE_DEVOPS_CREDENTIAL_OAUTH, params: { organization: { @@ -40,7 +42,7 @@ export const getWorkItemTool: ToolConfig request: { url: (params) => { const url = new URL( - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/wit/workitems/${Number(params.workItemId)}` + `${azureDevOpsProjectUrl(params)}/_apis/wit/workitems/${Number(params.workItemId)}` ) url.searchParams.set('$expand', 'all') url.searchParams.set('api-version', '7.2-preview.3') diff --git a/apps/sim/tools/azure_devops/get_work_items_batch.ts b/apps/sim/tools/azure_devops/get_work_items_batch.ts index 3b5200d2af3..60964f76a23 100644 --- a/apps/sim/tools/azure_devops/get_work_items_batch.ts +++ b/apps/sim/tools/azure_devops/get_work_items_batch.ts @@ -4,7 +4,8 @@ import type { GetWorkItemsBatchResponse, } from '@/tools/azure_devops/types' import type { AzureDevOpsRawWorkItem } from '@/tools/azure_devops/utils' -import { formatWorkItem, mapWorkItem } from '@/tools/azure_devops/utils' +import { azureDevOpsProjectUrl, formatWorkItem, mapWorkItem } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' export const getWorkItemsBatchTool: ToolConfig = @@ -14,6 +15,7 @@ export const getWorkItemsBatchTool: ToolConfig { - const url = new URL( - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/build/workitems` - ) + const url = new URL(`${azureDevOpsProjectUrl(params)}/_apis/build/workitems`) url.searchParams.set('fromBuildId', Number(params.fromBuildId).toString()) url.searchParams.set('toBuildId', Number(params.toBuildId).toString()) url.searchParams.set('api-version', '7.2-preview.2') diff --git a/apps/sim/tools/azure_devops/list_build_logs.ts b/apps/sim/tools/azure_devops/list_build_logs.ts index 1f8183d02c1..0ea2f3134ec 100644 --- a/apps/sim/tools/azure_devops/list_build_logs.ts +++ b/apps/sim/tools/azure_devops/list_build_logs.ts @@ -1,5 +1,8 @@ import type { ListBuildLogsParams, ListBuildLogsResponse } from '@/tools/azure_devops/types' +import { azureDevOpsProjectUrl } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' +import { safeUrlPathSegment } from '@/tools/url-path' export const listBuildLogsTool: ToolConfig = { id: 'azure_devops_list_build_logs', @@ -7,6 +10,7 @@ export const listBuildLogsTool: ToolConfig - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/build/builds/${params.buildId}/logs?api-version=7.2-preview.2`, + `${azureDevOpsProjectUrl(params)}/_apis/build/builds/${safeUrlPathSegment(params.buildId, 'buildId')}/logs?api-version=7.2-preview.2`, method: 'GET', headers: (params) => ({ 'Content-Type': 'application/json', diff --git a/apps/sim/tools/azure_devops/list_builds.ts b/apps/sim/tools/azure_devops/list_builds.ts index dfdc087ed21..6e863c40daf 100644 --- a/apps/sim/tools/azure_devops/list_builds.ts +++ b/apps/sim/tools/azure_devops/list_builds.ts @@ -1,4 +1,6 @@ import type { ListBuildsParams, ListBuildsResponse } from '@/tools/azure_devops/types' +import { azureDevOpsProjectUrl } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' export const listBuildsTool: ToolConfig = { @@ -7,6 +9,7 @@ export const listBuildsTool: ToolConfig = description: 'List builds in an Azure DevOps project. Optionally filter by pipeline definition, status, result, or branch.', version: '1.0.0', + oauth: AZURE_DEVOPS_CREDENTIAL_OAUTH, params: { organization: { @@ -62,9 +65,7 @@ export const listBuildsTool: ToolConfig = request: { url: (params) => { - const url = new URL( - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/build/builds` - ) + const url = new URL(`${azureDevOpsProjectUrl(params)}/_apis/build/builds`) url.searchParams.set('api-version', '7.2-preview.8') if (params.definitionIds) url.searchParams.set('definitions', params.definitionIds) if (params.top) url.searchParams.set('$top', Number(params.top).toString()) diff --git a/apps/sim/tools/azure_devops/list_pipeline_runs.ts b/apps/sim/tools/azure_devops/list_pipeline_runs.ts index ce84c5eb822..c177c52eb63 100644 --- a/apps/sim/tools/azure_devops/list_pipeline_runs.ts +++ b/apps/sim/tools/azure_devops/list_pipeline_runs.ts @@ -1,5 +1,8 @@ import type { ListPipelineRunsParams, ListPipelineRunsResponse } from '@/tools/azure_devops/types' +import { azureDevOpsProjectUrl } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' +import { safeUrlPathSegment } from '@/tools/url-path' export const listPipelineRunsTool: ToolConfig = { id: 'azure_devops_list_pipeline_runs', @@ -7,6 +10,7 @@ export const listPipelineRunsTool: ToolConfig { const url = new URL( - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/pipelines/${params.pipelineId}/runs` + `${azureDevOpsProjectUrl(params)}/_apis/pipelines/${safeUrlPathSegment(params.pipelineId, 'pipelineId')}/runs` ) url.searchParams.set('api-version', '7.2-preview.1') return url.toString() diff --git a/apps/sim/tools/azure_devops/list_pipelines.ts b/apps/sim/tools/azure_devops/list_pipelines.ts index 913aebfda9f..8c41dd9e870 100644 --- a/apps/sim/tools/azure_devops/list_pipelines.ts +++ b/apps/sim/tools/azure_devops/list_pipelines.ts @@ -1,4 +1,6 @@ import type { ListPipelinesParams, ListPipelinesResponse } from '@/tools/azure_devops/types' +import { azureDevOpsProjectUrl } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' export const listPipelinesTool: ToolConfig = { @@ -7,6 +9,7 @@ export const listPipelinesTool: ToolConfig { - const url = new URL( - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/pipelines` - ) + const url = new URL(`${azureDevOpsProjectUrl(params)}/_apis/pipelines`) url.searchParams.set('api-version', '7.2-preview.1') if (params.orderBy) url.searchParams.set('orderBy', params.orderBy) if (params.top) url.searchParams.set('$top', Number(params.top).toString()) diff --git a/apps/sim/tools/azure_devops/query_work_items.ts b/apps/sim/tools/azure_devops/query_work_items.ts index f57c6c901da..1d811dd60e3 100644 --- a/apps/sim/tools/azure_devops/query_work_items.ts +++ b/apps/sim/tools/azure_devops/query_work_items.ts @@ -4,7 +4,8 @@ import type { QueryWorkItemsResponse, } from '@/tools/azure_devops/types' import type { AzureDevOpsRawWorkItem } from '@/tools/azure_devops/utils' -import { formatWorkItem, mapWorkItem } from '@/tools/azure_devops/utils' +import { azureDevOpsProjectUrl, formatWorkItem, mapWorkItem } from '@/tools/azure_devops/utils' +import { AZURE_DEVOPS_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' export const queryWorkItemsTool: ToolConfig = { @@ -13,6 +14,7 @@ export const queryWorkItemsTool: ToolConfig - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/wit/wiql?api-version=7.2-preview.2`, + url: (params) => `${azureDevOpsProjectUrl(params)}/_apis/wit/wiql?api-version=7.2-preview.2`, method: 'POST', headers: (params) => ({ 'Content-Type': 'application/json', @@ -77,7 +78,7 @@ export const queryWorkItemsTool: ToolConfig = { @@ -18,6 +20,7 @@ export const updateWorkItemTool: ToolConfig - `https://dev.azure.com/${params.organization.trim()}/${params.project.trim()}/_apis/wit/workitems/${Number(params.workItemId)}?api-version=7.2-preview.3`, + `${azureDevOpsProjectUrl(params)}/_apis/wit/workitems/${Number(params.workItemId)}?api-version=7.2-preview.3`, method: 'PATCH', headers: (params) => ({ 'Content-Type': 'application/json-patch+json', diff --git a/apps/sim/tools/azure_devops/utils.ts b/apps/sim/tools/azure_devops/utils.ts index 9b59d7f5651..8e9539ed68c 100644 --- a/apps/sim/tools/azure_devops/utils.ts +++ b/apps/sim/tools/azure_devops/utils.ts @@ -1,4 +1,24 @@ import type { AzureDevOpsComment, AzureDevOpsWorkItem } from '@/tools/azure_devops/types' +import { safeUrlPathSegment } from '@/tools/url-path' + +/** + * The `https://dev.azure.com//` prefix every project-scoped + * request is built on. Each segment is traversal-safe, so a project or id can never + * climb into another organization's endpoints with the caller's token. + */ +export function azureDevOpsProjectUrl(params: { organization: string; project: string }): string { + return `https://dev.azure.com/${pathSegment(params.organization, 'organization')}/${pathSegment(params.project, 'project')}` +} + +/** A name copied from the browser's address bar arrives encoded; decode it once so it isn't encoded twice. */ +function pathSegment(value: string, paramName: string): string { + const typed = value.trim() + let decoded = typed + try { + decoded = decodeURIComponent(typed) + } catch {} + return safeUrlPathSegment(decoded, paramName) +} /** States for Azure DevOps Basic process work items (Issue, Task, Epic). */ export const AZURE_DEVOPS_BASIC_WORK_ITEM_STATES = ['To Do', 'Doing', 'Done'] as const diff --git a/apps/sim/tools/convex/action.ts b/apps/sim/tools/convex/action.ts index 3d0e3ac4722..599ae1de6d5 100644 --- a/apps/sim/tools/convex/action.ts +++ b/apps/sim/tools/convex/action.ts @@ -5,6 +5,7 @@ import { parseFunctionArgs, transformFunctionCallResponse, } from '@/tools/convex/utils' +import { CONVEX_CREDENTIAL_OAUTH } from '@/tools/shared/saved-credentials' import type { ToolConfig } from '@/tools/types' export const actionTool: ToolConfig = { @@ -12,6 +13,7 @@ export const actionTool: ToolConfig = @@ -13,6 +14,7 @@ export const listDocumentsTool: ToolConfig = { @@ -9,6 +10,7 @@ export const listTablesTool: ToolConfig = { @@ -12,6 +13,7 @@ export const mutationTool: ToolConfig = { @@ -12,6 +13,7 @@ export const queryTool: ToolConfig = { @@ -13,6 +14,7 @@ export const runFunctionTool: ToolConfig = { @@ -16,6 +17,7 @@ export const addTagsTool: ToolConfig = { @@ -14,6 +15,7 @@ export const createSloTool: ToolConfig = { @@ -8,6 +9,7 @@ export const deleteSloTool: ToolConfig = { @@ -9,6 +10,7 @@ export const deleteTagTool: ToolConfig = { @@ -16,6 +17,7 @@ export const getEntityTool: ToolConfig = { @@ -15,6 +16,7 @@ export const getEventTool: ToolConfig = { @@ -16,6 +17,7 @@ export const getMetricTool: ToolConfig = { @@ -16,6 +17,7 @@ export const getSloTool: ToolConfig = @@ -18,6 +19,7 @@ export const ingestEventTool: ToolConfig = { @@ -17,6 +18,7 @@ export const ingestLogsTool: ToolConfig = @@ -24,6 +25,7 @@ export const listAttacksTool: ToolConfig = { @@ -25,6 +26,7 @@ export const listEventsTool: ToolConfig = @@ -25,6 +26,7 @@ export const listMetricsTool: ToolConfig = { @@ -15,6 +16,7 @@ export const listSlosTool: ToolConfig = { @@ -9,6 +10,7 @@ export const listTagsTool: ToolConfig = { @@ -17,6 +18,7 @@ export const searchLogsTool: ToolConfig = { @@ -14,6 +15,7 @@ export const updateSloTool: ToolConfig = { @@ -15,6 +16,7 @@ export const createLeadTool: ToolConfig = { @@ -15,6 +16,7 @@ export const createTagTool: ToolConfig = { @@ -14,6 +15,7 @@ export const getLeadTool: ToolConfig = @@ -18,6 +19,7 @@ export const listCampaignsTool: ToolConfig = { @@ -17,6 +18,7 @@ export const listLeadsTool: ToolConfig = { @@ -14,6 +15,7 @@ export const listTagsTool: ToolConfig = { @@ -16,6 +17,7 @@ export const updateLeadTool: ToolConfig = JSON.parse( - '{"a2a_cancel_task":{"id":"a2a_cancel_task","name":"A2A Cancel Task","description":"Request cancellation of an in-progress A2A task.","version":"1.0.0","params":{"agentUrl":{"type":"string","required":true,"visibility":"user-only","description":"The A2A agent endpoint URL"},"taskId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The task ID to cancel"},"apiKey":{"type":"string","required":false,"visibility":"user-only","description":"API key for authentication (if required)"}},"hostedApiKey":"none"},"a2a_get_agent_card":{"id":"a2a_get_agent_card","name":"A2A Get Agent Card","description":"Fetch the Agent Card (discovery document) for an external A2A agent.","version":"1.0.0","params":{"agentUrl":{"type":"string","required":true,"visibility":"user-only","description":"The A2A agent endpoint URL"},"apiKey":{"type":"string","required":false,"visibility":"user-only","description":"API key for authentication (if required)"}},"hostedApiKey":"none"},"a2a_get_task":{"id":"a2a_get_task","name":"A2A Get Task","description":"Retrieve the current state and result of an A2A task.","version":"1.0.0","params":{"agentUrl":{"type":"string","required":true,"visibility":"user-only","description":"The A2A agent endpoint URL"},"taskId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The task ID to retrieve"},"historyLength":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of history messages to include"},"apiKey":{"type":"string","required":false,"visibility":"user-only","description":"API key for authentication (if required)"}},"hostedApiKey":"none"},"a2a_send_message":{"id":"a2a_send_message","name":"A2A Send Message","description":"Send a message to an external A2A agent and return its response.","version":"1.0.0","params":{"agentUrl":{"type":"string","required":true,"visibility":"user-only","description":"The A2A agent endpoint URL"},"message":{"type":"string","required":true,"visibility":"user-or-llm","description":"The message text to send"},"data":{"type":"json","required":false,"visibility":"user-or-llm","description":"Optional structured JSON data to attach"},"files":{"type":"json","required":false,"visibility":"user-or-llm","description":"Optional files to attach"},"taskId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Existing task ID to continue"},"contextId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Conversation context ID to continue"},"apiKey":{"type":"string","required":false,"visibility":"user-only","description":"API key for authentication (if required)"}},"hostedApiKey":"none"},"affinity_batch_update_entity_fields":{"id":"affinity_batch_update_entity_fields","name":"Affinity Batch Update Entity Fields","description":"Write up to 100 non-list field values on one company or person in a single request.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to write the fields on: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"updates":{"type":"json","required":true,"visibility":"user-or-llm","description":"Up to 100 field updates as [{\\"id\\":\\"\\",\\"value\\":{\\"type\\":\\"…\\",\\"data\\":…}}], using the same value shapes as a single field update"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_batch_update_list_entry_fields":{"id":"affinity_batch_update_list_entry_fields","name":"Affinity Batch Update List Entry Fields","description":"Write up to 100 field values on one list row in a single request. Requires the \\"Export data from Lists\\" permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"listEntryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list entry ID"},"updates":{"type":"json","required":true,"visibility":"user-or-llm","description":"Up to 100 field updates as [{\\"id\\":\\"\\",\\"value\\":{\\"type\\":\\"…\\",\\"data\\":…}}], using the same value shapes as a single field update"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_create_list":{"id":"affinity_create_list","name":"Affinity Create List","description":"Create a list. Its type fixes which entities it can hold, and the API key holder becomes its creator and owner.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the new list"},"type":{"type":"string","required":true,"visibility":"user-or-llm","description":"Entity kind the list holds: company, opportunity, or person"},"isPublic":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Whether everyone in the organization can see the list"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_create_list_field_dropdown_option":{"id":"affinity_create_list_field_dropdown_option","name":"Affinity Create List Field Dropdown Option","description":"Add a selectable option to a dropdown field on a list. A ranked or status option also needs a rank and a color.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown field ID on that list"},"type":{"type":"string","required":true,"visibility":"user-or-llm","description":"Kind of option to create, matching the field. dropdown takes only a label; ranked-dropdown also requires rank and color; status-dropdown additionally requires a status category. Sending a field the kind does not accept is rejected"},"text":{"type":"string","required":true,"visibility":"user-or-llm","description":"The option label"},"rank":{"type":"number","required":false,"visibility":"user-or-llm","description":"Sort order. Required on a ranked-dropdown or status-dropdown option"},"color":{"type":"string","required":false,"visibility":"user-or-llm","description":"Option color: white, gray, blue, green, purple, orange, or red. Required on a ranked-dropdown or status-dropdown option"},"statusCategory":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pipeline meaning of the option: open, won, lost, or on-hold. Status-dropdown options only"},"winRate":{"type":"number","required":false,"visibility":"user-or-llm","description":"Expected win rate of the status. Status-dropdown options only"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_create_merge":{"id":"affinity_create_merge","name":"Affinity Create Merge","description":"Fold a duplicate company or person into the record you are keeping. The merge runs asynchronously — poll the returned task to see it finish. Requires the \\"Manage duplicates\\" permission and an admin role.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"What to merge: companies or persons"},"primaryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to keep"},"duplicateId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the duplicate record to fold in"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_create_note":{"id":"affinity_create_note","name":"Affinity Create Note","description":"Write a note — attached to companies, persons, and opportunities, anchored to a meeting, call, or chat message, or posted as a reply to an existing note.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"type":{"type":"string","required":true,"visibility":"user-or-llm","description":"Note shape: entities to attach it to records, interaction to anchor it to a meeting, call, or chat message, or user-reply to reply to a note"},"html":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note body as HTML"},"companyIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Companies to attach the note to, e.g. [1, 2]. Not used on a reply"},"personIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Persons to attach the note to, e.g. [1, 2]. Not used on a reply"},"opportunityIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Opportunities to attach the note to, e.g. [1, 2]. Not used on a reply"},"interactionId":{"type":"string","required":false,"visibility":"user-or-llm","description":"The interaction to anchor the note to. Required for an interaction note"},"interactionType":{"type":"string","required":false,"visibility":"user-or-llm","description":"Kind of the anchoring interaction: meeting, call, or chat-message. Required for an interaction note"},"parentId":{"type":"string","required":false,"visibility":"user-or-llm","description":"The note being replied to. Required for a user-reply note"},"creatorId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Attribute the note to another internal person. Defaults to the API key holder"},"createdAt":{"type":"string","required":false,"visibility":"user-or-llm","description":"Backdate the note to this ISO 8601 timestamp"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_create_reminder":{"id":"affinity_create_reminder","name":"Affinity Create Reminder","description":"Create a reminder on one company, person, or opportunity. A recurring reminder resets whenever the chosen signal happens instead of firing once.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"type":{"type":"string","required":true,"visibility":"user-or-llm","description":"one-time to fire once, or recurring to reset on a signal"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"What the reminder is about: company, person, or opportunity"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company, person, or opportunity"},"dueDate":{"type":"string","required":false,"visibility":"user-or-llm","description":"When the reminder is due, as an ISO 8601 timestamp. Required for a one-time reminder; on a recurring one Affinity computes it from the period when omitted"},"content":{"type":"string","required":false,"visibility":"user-or-llm","description":"What the reminder says"},"ownerId":{"type":"string","required":true,"visibility":"user-or-llm","description":"User the reminder is assigned to. Must be an internal user. The API key holder is recorded as the creator, which is a separate field"},"resetTrigger":{"type":"string","required":false,"visibility":"user-or-llm","description":"What restarts a recurring reminder: interaction, email, or event. Required when the type is recurring"},"periodDays":{"type":"number","required":false,"visibility":"user-or-llm","description":"Days between firings of a recurring reminder. Required when the type is recurring"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_delete_list_field_dropdown_option":{"id":"affinity_delete_list_field_dropdown_option","name":"Affinity Delete List Field Dropdown Option","description":"Permanently delete a dropdown option on a list field. Every list entry currently set to it is cleared, and those values cannot be recovered.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown field ID on that list"},"dropdownOptionId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown option ID to delete"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_delete_note":{"id":"affinity_delete_note","name":"Affinity Delete Note","description":"Delete a note you created. Deleting a root note also deletes its replies; deleting a reply removes only that reply.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID to delete"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_company":{"id":"affinity_get_company","name":"Affinity Get Company","description":"Look up one company by ID. Field data is returned only for the Field IDs or Field Types asked for.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"companyId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The company ID"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, or relationship-intelligence. Mutually exclusive with Field IDs"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_current_user":{"id":"affinity_get_current_user","name":"Affinity Get Current User","description":"Verify an Affinity API key and return the tenant, the user behind the key, and the scopes the grant carries.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_entity_field_value":{"id":"affinity_get_entity_field_value","name":"Affinity Get Entity Field Value","description":"Read one non-list field value from a company or person.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to read the field from: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The field ID to read"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_list":{"id":"affinity_get_list","name":"Affinity Get List","description":"Read one list — its name, type, owner, and privacy setting.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_list_entry":{"id":"affinity_get_list_entry","name":"Affinity Get List Entry","description":"Read one row of a list with its entity. Field data is returned only for the Field IDs or Field Types asked for.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"listEntryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list entry ID"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, list, or relationship-intelligence. Mutually exclusive with Field IDs"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_list_entry_field":{"id":"affinity_get_list_entry_field","name":"Affinity Get List Entry Field","description":"Read one field value on a list row.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"listEntryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list entry ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The field ID to read"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_list_field_dropdown_option":{"id":"affinity_get_list_field_dropdown_option","name":"Affinity Get List Field Dropdown Option","description":"Read one dropdown option on a list field.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown field ID on that list"},"dropdownOptionId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown option ID"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_merge":{"id":"affinity_get_merge","name":"Affinity Get Merge","description":"Read the status of one company or person merge, including why it failed if it did.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which merge to read: companies or persons"},"mergeId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The merge ID"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_merge_task":{"id":"affinity_get_merge_task","name":"Affinity Get Merge Task","description":"Read one merge task and how its merges are progressing. Poll this after starting a merge.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which merge task to read: companies or persons"},"taskId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The merge task ID"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_note":{"id":"affinity_get_note","name":"Affinity Get Note","description":"Read one note with its body, author, mentions, and attached records.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID"},"includes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Extra properties to return, e.g. [\\"repliesCount\\",\\"personsPreview\\",\\"companiesPreview\\",\\"opportunitiesPreview\\"]. Those four fields are omitted unless requested here"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_opportunity":{"id":"affinity_get_opportunity","name":"Affinity Get Opportunity","description":"Read one opportunity and the list it belongs to. Its field data lives on the list entry.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"opportunityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The opportunity ID"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_person":{"id":"affinity_get_person","name":"Affinity Get Person","description":"Look up one person by ID. Field data is returned only for the Field IDs or Field Types asked for.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"personId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The person ID"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, or relationship-intelligence. Mutually exclusive with Field IDs"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_saved_view":{"id":"affinity_get_saved_view","name":"Affinity Get Saved View","description":"Read one saved view — its name, kind, and creation date.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"viewId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The saved view ID"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_transcript":{"id":"affinity_get_transcript","name":"Affinity Get Transcript","description":"Read one transcript with its first 100 fragments. Page the fragments endpoint for a longer meeting.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"transcriptId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The transcript ID"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_get_user":{"id":"affinity_get_user","name":"Affinity Get User","description":"Read one internal user. A user and their person record share the same numeric ID, so a person ID works here.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"userId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The user ID, which is also their person ID"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_calls":{"id":"affinity_list_calls","name":"Affinity List Calls","description":"Page through logged calls and their participants. Only calls the API key holder can see are returned.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_chat_messages":{"id":"affinity_list_chat_messages","name":"Affinity List Chat Messages","description":"Page through logged chat messages and their participants. Only messages the API key holder can see are returned.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_companies":{"id":"affinity_list_companies","name":"Affinity List Companies","description":"Page through companies. Companies come back without field data unless Field IDs or Field Types asks for it.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict the page to these company IDs, e.g. [1, 2, 3]"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, or relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_coworker_connections":{"id":"affinity_list_coworker_connections","name":"Affinity List Coworker Connections","description":"Find warm paths into a company through shared work history: who in your Affinity data once worked alongside the people you want to reach. Grouped by target, strongest first.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":true,"visibility":"user-or-llm","description":"Required scope. The only supported filter is target.currentCompany.id, e.g. \\"target.currentCompany.id=123\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of targets to return per page, 1-50. Defaults to 20"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_emails":{"id":"affinity_list_emails","name":"Affinity List Emails","description":"Page through email metadata — subject, participants, and timestamps. Affinity never exposes email bodies through the API.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_entity_field_values":{"id":"affinity_list_entity_field_values","name":"Affinity List Entity Field Values","description":"Page through a company\'s or person\'s non-list field values. List fields are not returned here — read those through the list entry.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to read field values from: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict to these field IDs. Mutually exclusive with Field Types"},"types":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict to these field categories: enriched, global, relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 20"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_entity_list_entries":{"id":"affinity_list_entity_list_entries","name":"Affinity List Entity List Entries","description":"Page through a company\'s or person\'s rows across every list, each carrying that list\'s field values and when the entity was added.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to look up the rows of: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_entity_lists":{"id":"affinity_list_entity_lists","name":"Affinity List Entity Lists","description":"List every list a company or person appears on that the caller can view.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to look up the lists of: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_entity_notes":{"id":"affinity_list_entity_notes","name":"Affinity List Entity Notes","description":"List the notes relevant to one company, person, or opportunity — directly attached notes plus notes reaching it through its people and meetings.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity the notes hang off: companies, persons, or opportunities"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company, person, or opportunity"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_entity_relationships":{"id":"affinity_list_entity_relationships","name":"Affinity List Entity Relationships","description":"List who knows a company or person, scored 0.0 to 1.0 by how much the two actually interact. Strongest first by default.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to look up relationships for: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression. This endpoint filters on interactionScore only, e.g. \\"interactionScore>=0.5\\""},"orderBy":{"type":"json","required":false,"visibility":"user-or-llm","description":"Sort order: [\\"interactionScore\\"] for weakest first, [\\"-interactionScore\\"] for strongest first (the default)"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_field_dropdown_options":{"id":"affinity_list_field_dropdown_options","name":"Affinity List Field Dropdown Options","description":"List the selectable options on a dropdown or ranked-dropdown company or person field. Writing such a field needs the option ID, not its text.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which field family the field belongs to: companies or persons"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown or ranked-dropdown field ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_field_metadata":{"id":"affinity_list_field_metadata","name":"Affinity List Field Metadata","description":"List the non-list company or person fields, with the value type, filter operators, and sort support of each. Start here to find the Field IDs the read and write tools take.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which fields to describe: companies or persons"},"includes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Extra properties to return: [\\"filterability\\",\\"sortability\\"]. Both are omitted unless requested here"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression. This endpoint filters on name only, e.g. \\"name=~Status\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_field_value_changes":{"id":"affinity_list_field_value_changes","name":"Affinity List Field Value Changes","description":"Page through field value changes across the whole workspace. Built for delta sync: follow nextCursor to the end of a run, then resume from the last cursor next time.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression over field.id, listEntry.id, changer.id, changedAt, or actionType. Resume a sync with e.g. \\"changedAt>2026-06-01T12:00:00Z\\""},"orderBy":{"type":"json","required":false,"visibility":"user-or-llm","description":"Sort order: [\\"changedAt\\"] for oldest first (the default), [\\"-changedAt\\"] for newest first"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_investor_executive_connections":{"id":"affinity_list_investor_executive_connections","name":"Affinity List Investor Executive Connections","description":"Find warm paths into a company through investment history: which investors in your Affinity data backed a company the people you want to reach once led. Grouped by target, strongest first.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":true,"visibility":"user-or-llm","description":"Required scope. The only supported filter is target.currentCompany.id, e.g. \\"target.currentCompany.id=123\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of targets to return per page, 1-50. Defaults to 20"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_list_entries":{"id":"affinity_list_list_entries","name":"Affinity List List Entries","description":"Page through the rows of a list. Rows come back without field data unless Field IDs or Field Types asks for it.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, list, or relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_list_entry_field_value_changes":{"id":"affinity_list_list_entry_field_value_changes","name":"Affinity List List Entry Field Value Changes","description":"Page through the history of one list row — who changed which field, when, and to what.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"listEntryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list entry ID"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression over field.id, changer.id, changedAt, or actionType, e.g. \\"field.id=field-1234\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_list_entry_fields":{"id":"affinity_list_list_entry_fields","name":"Affinity List List Entry Fields","description":"Page through every field value on one list row, including the list-specific columns. All fields are returned unless narrowed.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"listEntryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list entry ID"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict to these field IDs. Mutually exclusive with Field Types"},"types":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict to these field categories: enriched, global, list, relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 20"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_list_field_dropdown_options":{"id":"affinity_list_list_field_dropdown_options","name":"Affinity List List Field Dropdown Options","description":"List the selectable options on a dropdown, ranked-dropdown, or status-dropdown field of a list.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown field ID on that list"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_list_fields":{"id":"affinity_list_list_fields","name":"Affinity List List Fields","description":"List the fields available on one list, including its list-specific columns. Use these Field IDs when reading or writing list entries.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"includes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Extra properties to return: [\\"filterability\\",\\"sortability\\"]. Both are omitted unless requested here"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression. This endpoint filters on name only, e.g. \\"name=~Stage\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_lists":{"id":"affinity_list_lists","name":"Affinity List Lists","description":"Page through the lists in the organization that the caller can view.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"term":{"type":"string","required":false,"visibility":"user-or-llm","description":"Case-insensitive substring match on the list name"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_meetings":{"id":"affinity_list_meetings","name":"Affinity List Meetings","description":"Page through past and upcoming meetings with their organizer and attendees.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_merge_tasks":{"id":"affinity_list_merge_tasks","name":"Affinity List Merge Tasks","description":"Page through merge tasks, each summarizing how many of its merges are in progress, succeeded, or failed.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which merge tasks to list: companies or persons"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression. This endpoint filters on status only, e.g. \\"status=in-progress\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_merges":{"id":"affinity_list_merges","name":"Affinity List Merges","description":"Page through the company or person merges the organization has run, with the status and the records involved in each.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which merges to list: companies or persons"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression over status or taskId, e.g. \\"status=failed\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_note_attached_companies":{"id":"affinity_list_note_attached_companies","name":"Affinity List Note Attached Companies","description":"List the companies directly attached to one note.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_note_attached_opportunities":{"id":"affinity_list_note_attached_opportunities","name":"Affinity List Note Attached Opportunities","description":"List the opportunities directly attached to one note.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_note_attached_persons":{"id":"affinity_list_note_attached_persons","name":"Affinity List Note Attached Persons","description":"List the persons directly attached to one note.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_note_replies":{"id":"affinity_list_note_replies","name":"Affinity List Note Replies","description":"Page through the replies on one note, including AI Notetaker replies.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID whose replies to read"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_notes":{"id":"affinity_list_notes","name":"Affinity List Notes","description":"Page through every note the caller can see. Replies are excluded.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"includes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Extra properties to return, e.g. [\\"repliesCount\\",\\"personsPreview\\",\\"companiesPreview\\",\\"opportunitiesPreview\\"]. Those four fields are omitted unless requested here"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_opportunities":{"id":"affinity_list_opportunities","name":"Affinity List Opportunities","description":"Page through opportunities. Field data lives on the list entry, not here — read it through the list or saved view the opportunity belongs to.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict the page to these opportunity IDs, e.g. [1, 2, 3]"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_persons":{"id":"affinity_list_persons","name":"Affinity List Persons","description":"Page through persons. Persons come back without field data unless Field IDs or Field Types asks for it.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict the page to these person IDs, e.g. [1, 2, 3]"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, or relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_reminders":{"id":"affinity_list_reminders","name":"Affinity List Reminders","description":"Page through the reminders the caller can see. Filter by status to surface what is overdue.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_saved_view_entries":{"id":"affinity_list_saved_view_entries","name":"Affinity List Saved View Entries","description":"Page through the rows of a saved view. The view\'s own filters and columns decide which rows and which field data come back.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"viewId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The saved view ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_saved_views":{"id":"affinity_list_saved_views","name":"Affinity List Saved Views","description":"List the saved views on a list that the caller can view.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_transcript_fragments":{"id":"affinity_list_transcript_fragments","name":"Affinity List Transcript Fragments","description":"Page through everything said in a meeting, segment by segment with the speaker.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"transcriptId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The transcript ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_transcripts":{"id":"affinity_list_transcripts","name":"Affinity List Transcripts","description":"Page through meeting transcript metadata. Read one transcript to get what was actually said.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_list_users":{"id":"affinity_list_users","name":"Affinity List Users","description":"Page through the internal users in the organization. Email addresses and roles are returned only to callers with the \\"Manage Users\\" permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"term":{"type":"string","required":false,"visibility":"user-or-llm","description":"Case-insensitive match across first name, last name, and primary email"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression over id or status, e.g. \\"status=active\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_search_companies":{"id":"affinity_search_companies","name":"Affinity Search Companies","description":"Search companies by filters, sorts, and a free-text term. Requires the \\"Export All Organizations directory\\" permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filters":{"type":"json","required":false,"visibility":"user-or-llm","description":"Filter group as {operator: \\"and\\"|\\"or\\", filters: [...]}, at most 50 leaves. Each leaf is {valueType, fieldId, operator, value}, and a leaf may itself be a nested group"},"searchTerm":{"type":"string","required":false,"visibility":"user-or-llm","description":"Free-text term matched against the searchable fields. At least 3 characters"},"searchFieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs the search term is matched against. Defaults to the searchable fields"},"sorts":{"type":"json","required":false,"visibility":"user-or-llm","description":"Sort order as [{fieldId, direction: \\"asc\\"|\\"desc\\", attributeId?}], up to 5, applied in order"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, or relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_search_files":{"id":"affinity_search_files","name":"Affinity Search Files","description":"Search files by keyword, ordered by relevance. Narrow to specific files or to one company, or leave both unset to search the whole account.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"prompt":{"type":"string","required":true,"visibility":"user-or-llm","description":"What to search for. Between 3 and 500 characters"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict the search to these file IDs. Cannot be combined with Company ID"},"companyId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Restrict the search to one company\'s files. Cannot be combined with file IDs"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of files to return, 1-100. Defaults to 20"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_search_list_entries":{"id":"affinity_search_list_entries","name":"Affinity Search List Entries","description":"Search the rows of one list by filters, sorts, and a free-text term. Requires the \\"Export data from Lists\\" permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID to search"},"filters":{"type":"json","required":false,"visibility":"user-or-llm","description":"Filter group as {operator: \\"and\\"|\\"or\\", filters: [...]}, at most 50 leaves. Each leaf is {valueType, fieldId, operator, value}, and a leaf may itself be a nested group"},"searchTerm":{"type":"string","required":false,"visibility":"user-or-llm","description":"Free-text term matched against the searchable fields. At least 3 characters"},"searchFieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs the search term is matched against. Defaults to the searchable fields"},"sorts":{"type":"json","required":false,"visibility":"user-or-llm","description":"Sort order as [{fieldId, direction: \\"asc\\"|\\"desc\\", attributeId?}], up to 5, applied in order"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, list, or relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_search_notes":{"id":"affinity_search_notes","name":"Affinity Search Notes","description":"Search notes by keyword, ordered by relevance. Narrow to specific notes or to one company, or leave both unset to search the whole account.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"prompt":{"type":"string","required":true,"visibility":"user-or-llm","description":"What to search for. Between 3 and 500 characters"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict the search to these note IDs. Cannot be combined with Company ID"},"companyId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Restrict the search to one company\'s notes. Cannot be combined with note IDs"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of notes to return, 1-100. Defaults to 20"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_search_persons":{"id":"affinity_search_persons","name":"Affinity Search Persons","description":"Search persons by filters, sorts, and a free-text term. Requires the \\"Export All People directory\\" permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filters":{"type":"json","required":false,"visibility":"user-or-llm","description":"Filter group as {operator: \\"and\\"|\\"or\\", filters: [...]}, at most 50 leaves. Each leaf is {valueType, fieldId, operator, value}, and a leaf may itself be a nested group"},"searchTerm":{"type":"string","required":false,"visibility":"user-or-llm","description":"Free-text term matched against the searchable fields. At least 3 characters"},"searchFieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs the search term is matched against. Defaults to the searchable fields"},"sorts":{"type":"json","required":false,"visibility":"user-or-llm","description":"Sort order as [{fieldId, direction: \\"asc\\"|\\"desc\\", attributeId?}], up to 5, applied in order"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, or relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_semantic_search":{"id":"affinity_semantic_search","name":"Affinity Semantic Search","description":"Find companies from a description in plain language — industry, technology, stage, or business model. Currently searches companies only.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"prompt":{"type":"string","required":true,"visibility":"user-or-llm","description":"What to look for, in plain language, e.g. \\"climate tech companies in our pipeline\\". Up to 500 characters"},"listIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict the search to companies on these lists, e.g. [1, 2]"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of companies to return, 1-100. Defaults to 100"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_update_entity_field_value":{"id":"affinity_update_entity_field_value","name":"Affinity Update Entity Field Value","description":"Write one non-list field value on a company or person. The value type must match how the field is defined.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to write the field on: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The field ID to write"},"value":{"type":"json","required":true,"visibility":"user-or-llm","description":"The new value as {type, data}, where type matches the field\'s value type. Examples: {\\"type\\":\\"text\\",\\"data\\":\\"Series B\\"}, {\\"type\\":\\"number\\",\\"data\\":42}, {\\"type\\":\\"dropdown\\",\\"data\\":{\\"dropdownOptionId\\":7}}, {\\"type\\":\\"person\\",\\"data\\":{\\"id\\":123}}, {\\"type\\":\\"person-multi\\",\\"data\\":[{\\"id\\":123}]}. Pass data as null to clear the field"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_update_list_entry_field":{"id":"affinity_update_list_entry_field","name":"Affinity Update List Entry Field","description":"Write one field value on a list row. Requires the \\"Export data from Lists\\" permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"listEntryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list entry ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The field ID to write"},"value":{"type":"json","required":true,"visibility":"user-or-llm","description":"The new value as {type, data}, where type matches the field\'s value type. Examples: {\\"type\\":\\"text\\",\\"data\\":\\"Series B\\"}, {\\"type\\":\\"number\\",\\"data\\":42}, {\\"type\\":\\"dropdown\\",\\"data\\":{\\"dropdownOptionId\\":7}}, {\\"type\\":\\"person\\",\\"data\\":{\\"id\\":123}}, {\\"type\\":\\"person-multi\\",\\"data\\":[{\\"id\\":123}]}. Pass data as null to clear the field"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_update_list_field_dropdown_option":{"id":"affinity_update_list_field_dropdown_option","name":"Affinity Update List Field Dropdown Option","description":"Change a dropdown option on a list field. Every field is optional — supply only what should change, and only fields the option\'s kind actually has.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown field ID on that list"},"dropdownOptionId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown option ID to update"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Replacement option label. Supply at least one field to change"},"rank":{"type":"number","required":false,"visibility":"user-or-llm","description":"Sort order. Required on a ranked-dropdown or status-dropdown option"},"color":{"type":"string","required":false,"visibility":"user-or-llm","description":"Option color: white, gray, blue, green, purple, orange, or red. Required on a ranked-dropdown or status-dropdown option"},"statusCategory":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pipeline meaning of the option: open, won, lost, or on-hold. Status-dropdown options only"},"winRate":{"type":"number","required":false,"visibility":"user-or-llm","description":"Expected win rate of the status. Status-dropdown options only"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"affinity_update_note":{"id":"affinity_update_note","name":"Affinity Update Note","description":"Rewrite a note\'s body or replace which records it is attached to. Each list of IDs replaces that association wholesale, an empty list clears it, and omitting one leaves it untouched. A note\'s type cannot be changed.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID to update"},"html":{"type":"string","required":false,"visibility":"user-or-llm","description":"Replacement note body as HTML"},"companyIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Replacement set of attached companies, e.g. [1, 2]. Send [] to detach every company; omit to leave them unchanged"},"personIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Replacement set of attached persons, e.g. [1, 2]. Send [] to detach every person; omit to leave them unchanged"},"opportunityIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Replacement set of attached opportunities, e.g. [1, 2]. Send [] to detach every opportunity; omit to leave them unchanged"}},"oauth":{"required":false,"provider":"affinity","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_create_draft":{"id":"agentmail_create_draft","name":"Create Draft","description":"Create a new email draft in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to create the draft in"},"to":{"type":"string","required":false,"visibility":"user-or-llm","description":"Recipient email addresses (comma-separated)"},"subject":{"type":"string","required":false,"visibility":"user-or-llm","description":"Draft subject line"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Plain text draft body"},"html":{"type":"string","required":false,"visibility":"user-or-llm","description":"HTML draft body"},"cc":{"type":"string","required":false,"visibility":"user-or-llm","description":"CC recipient email addresses (comma-separated)"},"bcc":{"type":"string","required":false,"visibility":"user-or-llm","description":"BCC recipient email addresses (comma-separated)"},"inReplyTo":{"type":"string","required":false,"visibility":"user-or-llm","description":"ID of message being replied to"},"sendAt":{"type":"string","required":false,"visibility":"user-or-llm","description":"ISO 8601 timestamp to schedule sending"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_create_inbox":{"id":"agentmail_create_inbox","name":"Create Inbox","description":"Create a new email inbox with AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"username":{"type":"string","required":false,"visibility":"user-or-llm","description":"Username for the inbox email address"},"domain":{"type":"string","required":false,"visibility":"user-or-llm","description":"Domain for the inbox email address"},"displayName":{"type":"string","required":false,"visibility":"user-or-llm","description":"Display name for the inbox"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_delete_draft":{"id":"agentmail_delete_draft","name":"Delete Draft","description":"Delete an email draft in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the draft"},"draftId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the draft to delete"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_delete_inbox":{"id":"agentmail_delete_inbox","name":"Delete Inbox","description":"Delete an email inbox in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to delete"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_delete_thread":{"id":"agentmail_delete_thread","name":"Delete Thread","description":"Delete an email thread in AgentMail (moves to trash, or permanently deletes if already in trash)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the thread"},"threadId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the thread to delete"},"permanent":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Force permanent deletion instead of moving to trash"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_forward_message":{"id":"agentmail_forward_message","name":"Forward Message","description":"Forward an email message to new recipients in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the message"},"messageId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the message to forward"},"to":{"type":"string","required":true,"visibility":"user-or-llm","description":"Recipient email addresses (comma-separated)"},"subject":{"type":"string","required":false,"visibility":"user-or-llm","description":"Override subject line"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Additional plain text to prepend"},"html":{"type":"string","required":false,"visibility":"user-or-llm","description":"Additional HTML to prepend"},"cc":{"type":"string","required":false,"visibility":"user-or-llm","description":"CC recipient email addresses (comma-separated)"},"bcc":{"type":"string","required":false,"visibility":"user-or-llm","description":"BCC recipient email addresses (comma-separated)"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_get_draft":{"id":"agentmail_get_draft","name":"Get Draft","description":"Get details of a specific email draft in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox the draft belongs to"},"draftId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the draft to retrieve"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_get_inbox":{"id":"agentmail_get_inbox","name":"Get Inbox","description":"Get details of a specific email inbox in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to retrieve"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_get_message":{"id":"agentmail_get_message","name":"Get Message","description":"Get details of a specific email message in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the message"},"messageId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the message to retrieve"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_get_thread":{"id":"agentmail_get_thread","name":"Get Thread","description":"Get details of a specific email thread including messages in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the thread"},"threadId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the thread to retrieve"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_list_drafts":{"id":"agentmail_list_drafts","name":"List Drafts","description":"List email drafts in an inbox in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to list drafts from"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of drafts to return"},"pageToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token for next page of results"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_list_inboxes":{"id":"agentmail_list_inboxes","name":"List Inboxes","description":"List all email inboxes in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of inboxes to return"},"pageToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token for next page of results"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_list_messages":{"id":"agentmail_list_messages","name":"List Messages","description":"List messages in an inbox in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to list messages from"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of messages to return"},"pageToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token for next page of results"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_list_threads":{"id":"agentmail_list_threads","name":"List Threads","description":"List email threads in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to list threads from"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of threads to return"},"pageToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token for next page of results"},"labels":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated labels to filter threads by"},"before":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter threads before this ISO 8601 timestamp"},"after":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter threads after this ISO 8601 timestamp"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_reply_message":{"id":"agentmail_reply_message","name":"Reply to Message","description":"Reply to an existing email message in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to reply from"},"messageId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the message to reply to"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Plain text reply body"},"html":{"type":"string","required":false,"visibility":"user-or-llm","description":"HTML reply body"},"to":{"type":"string","required":false,"visibility":"user-or-llm","description":"Override recipient email addresses (comma-separated)"},"cc":{"type":"string","required":false,"visibility":"user-or-llm","description":"CC email addresses (comma-separated)"},"bcc":{"type":"string","required":false,"visibility":"user-or-llm","description":"BCC email addresses (comma-separated)"},"replyAll":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Reply to all recipients of the original message"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_send_draft":{"id":"agentmail_send_draft","name":"Send Draft","description":"Send an existing email draft in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the draft"},"draftId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the draft to send"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_send_message":{"id":"agentmail_send_message","name":"Send Message","description":"Send an email message from an AgentMail inbox","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to send from"},"to":{"type":"string","required":true,"visibility":"user-or-llm","description":"Recipient email address (comma-separated for multiple)"},"subject":{"type":"string","required":true,"visibility":"user-or-llm","description":"Email subject line"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Plain text email body"},"html":{"type":"string","required":false,"visibility":"user-or-llm","description":"HTML email body"},"cc":{"type":"string","required":false,"visibility":"user-or-llm","description":"CC recipient email addresses (comma-separated)"},"bcc":{"type":"string","required":false,"visibility":"user-or-llm","description":"BCC recipient email addresses (comma-separated)"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_update_draft":{"id":"agentmail_update_draft","name":"Update Draft","description":"Update an existing email draft in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the draft"},"draftId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the draft to update"},"to":{"type":"string","required":false,"visibility":"user-or-llm","description":"Recipient email addresses (comma-separated)"},"subject":{"type":"string","required":false,"visibility":"user-or-llm","description":"Draft subject line"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Plain text draft body"},"html":{"type":"string","required":false,"visibility":"user-or-llm","description":"HTML draft body"},"cc":{"type":"string","required":false,"visibility":"user-or-llm","description":"CC recipient email addresses (comma-separated)"},"bcc":{"type":"string","required":false,"visibility":"user-or-llm","description":"BCC recipient email addresses (comma-separated)"},"sendAt":{"type":"string","required":false,"visibility":"user-or-llm","description":"ISO 8601 timestamp to schedule sending"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_update_inbox":{"id":"agentmail_update_inbox","name":"Update Inbox","description":"Update the display name of an email inbox in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to update"},"displayName":{"type":"string","required":true,"visibility":"user-or-llm","description":"New display name for the inbox"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_update_message":{"id":"agentmail_update_message","name":"Update Message","description":"Add or remove labels on an email message in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the message"},"messageId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the message to update"},"addLabels":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated labels to add to the message"},"removeLabels":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated labels to remove from the message"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentmail_update_thread":{"id":"agentmail_update_thread","name":"Update Thread Labels","description":"Add or remove labels on an email thread in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the thread"},"threadId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the thread to update"},"addLabels":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated labels to add to the thread"},"removeLabels":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated labels to remove from the thread"}},"oauth":{"required":false,"provider":"agentmail","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_create_call":{"id":"agentphone_create_call","name":"Create Outbound Call","description":"Initiate an outbound voice call from an AgentPhone agent","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"agentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Agent that will handle the call"},"toNumber":{"type":"string","required":true,"visibility":"user-or-llm","description":"Phone number to call in E.164 format (e.g. +14155551234)"},"fromNumberId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Phone number ID to use as caller ID. Must belong to the agent. If omitted, the agent\'s first assigned number is used."},"initialGreeting":{"type":"string","required":false,"visibility":"user-or-llm","description":"Optional greeting spoken when the recipient answers"},"voice":{"type":"string","required":false,"visibility":"user-or-llm","description":"Voice ID override for this call (defaults to the agent\'s configured voice)"},"systemPrompt":{"type":"string","required":false,"visibility":"user-or-llm","description":"When provided, uses a built-in LLM for the conversation instead of forwarding to your webhook"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_create_contact":{"id":"agentphone_create_contact","name":"Create Contact","description":"Create a new contact in AgentPhone","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"phoneNumber":{"type":"string","required":true,"visibility":"user-or-llm","description":"Phone number in E.164 format (e.g. +14155551234)"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Contact\'s full name"},"email":{"type":"string","required":false,"visibility":"user-or-llm","description":"Contact\'s email address"},"notes":{"type":"string","required":false,"visibility":"user-or-llm","description":"Freeform notes stored on the contact"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_create_number":{"id":"agentphone_create_number","name":"Create Phone Number","description":"Provision a new SMS- and voice-enabled phone number","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Two-letter country code (e.g. US, CA). Defaults to US."},"areaCode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Preferred area code (US/CA only, e.g. \\"415\\"). Best-effort — may be ignored if unavailable."},"agentId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Optionally attach the number to an agent immediately"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_delete_contact":{"id":"agentphone_delete_contact","name":"Delete Contact","description":"Delete a contact by ID","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"contactId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Contact ID"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_get_call":{"id":"agentphone_get_call","name":"Get Call","description":"Fetch a call and its full transcript","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"callId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the call to retrieve"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_get_call_transcript":{"id":"agentphone_get_call_transcript","name":"Get Call Transcript","description":"Get the full ordered transcript for a call","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"callId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the call to retrieve the transcript for"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_get_contact":{"id":"agentphone_get_contact","name":"Get Contact","description":"Fetch a single contact by ID","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"contactId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Contact ID"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_get_conversation":{"id":"agentphone_get_conversation","name":"Get Conversation","description":"Get a conversation along with its recent messages","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"conversationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Conversation ID"},"messageLimit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of recent messages to include (default 50, max 100)"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_get_conversation_messages":{"id":"agentphone_get_conversation_messages","name":"Get Conversation Messages","description":"Get paginated messages for a conversation","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"conversationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Conversation ID"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of messages to return (default 50, max 200)"},"before":{"type":"string","required":false,"visibility":"user-or-llm","description":"Return messages received before this ISO 8601 timestamp"},"after":{"type":"string","required":false,"visibility":"user-or-llm","description":"Return messages received after this ISO 8601 timestamp"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_get_number_messages":{"id":"agentphone_get_number_messages","name":"Get Phone Number Messages","description":"Fetch messages received on a specific phone number","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"numberId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the phone number"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of messages to return (default 50, max 200)"},"before":{"type":"string","required":false,"visibility":"user-or-llm","description":"Return messages received before this ISO 8601 timestamp"},"after":{"type":"string","required":false,"visibility":"user-or-llm","description":"Return messages received after this ISO 8601 timestamp"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_get_usage":{"id":"agentphone_get_usage","name":"Get Usage","description":"Retrieve current usage statistics for the AgentPhone account","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_get_usage_daily":{"id":"agentphone_get_usage_daily","name":"Get Daily Usage","description":"Get a daily breakdown of usage (messages, calls, webhooks) for the last N days","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"days":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of days to return (1-365, default 30)"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_get_usage_monthly":{"id":"agentphone_get_usage_monthly","name":"Get Monthly Usage","description":"Get monthly usage aggregation (messages, calls, webhooks) for the last N months","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"months":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of months to return (1-24, default 6)"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_list_calls":{"id":"agentphone_list_calls","name":"List Calls","description":"List voice calls for this AgentPhone account","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to return (default 20, max 100)"},"offset":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to skip (min 0)"},"status":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter by status (completed, in-progress, failed)"},"direction":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter by direction (inbound, outbound)"},"type":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter by call type (pstn, web)"},"search":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search by phone number (matches fromNumber or toNumber)"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_list_contacts":{"id":"agentphone_list_contacts","name":"List Contacts","description":"List contacts for this AgentPhone account","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"search":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter by name or phone number (case-insensitive contains)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to return (default 50, max 200)"},"offset":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to skip (min 0)"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_list_conversations":{"id":"agentphone_list_conversations","name":"List Conversations","description":"List conversations (message threads) for this AgentPhone account","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to return (default 20, max 100)"},"offset":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to skip (min 0)"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_list_numbers":{"id":"agentphone_list_numbers","name":"List Phone Numbers","description":"List all phone numbers provisioned for this AgentPhone account","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to return (default 20, max 100)"},"offset":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to skip (min 0)"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_react_to_message":{"id":"agentphone_react_to_message","name":"React to Message","description":"Send an iMessage tapback reaction to a message (iMessage only)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"messageId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the message to react to"},"reaction":{"type":"string","required":true,"visibility":"user-or-llm","description":"Reaction type: love, like, dislike, laugh, emphasize, or question"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_release_number":{"id":"agentphone_release_number","name":"Release Phone Number","description":"Release (delete) a phone number. This action is irreversible.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"numberId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the phone number to release"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_send_message":{"id":"agentphone_send_message","name":"Send Message","description":"Send an outbound SMS or iMessage from an AgentPhone agent","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"agentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Agent sending the message"},"toNumber":{"type":"string","required":true,"visibility":"user-or-llm","description":"Recipient phone number in E.164 format (e.g. +14155551234)"},"body":{"type":"string","required":true,"visibility":"user-or-llm","description":"Message text to send"},"mediaUrl":{"type":"string","required":false,"visibility":"user-or-llm","description":"Optional URL of an image, video, or file to attach"},"numberId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Phone number ID to send from. If omitted, the agent\'s first assigned number is used."}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_update_contact":{"id":"agentphone_update_contact","name":"Update Contact","description":"Update a contact\'s fields","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"contactId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Contact ID"},"phoneNumber":{"type":"string","required":false,"visibility":"user-or-llm","description":"New phone number in E.164 format"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"New contact name"},"email":{"type":"string","required":false,"visibility":"user-or-llm","description":"New email address"},"notes":{"type":"string","required":false,"visibility":"user-or-llm","description":"New freeform notes"}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agentphone_update_conversation":{"id":"agentphone_update_conversation","name":"Update Conversation","description":"Update conversation metadata (stored state). Pass null to clear existing metadata.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"conversationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Conversation ID"},"metadata":{"type":"json","required":false,"visibility":"user-or-llm","description":"Custom key-value metadata to store on the conversation. Pass null to clear existing metadata."}},"oauth":{"required":false,"provider":"agentphone","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"agiloft_async_status":{"id":"agiloft_async_status","name":"Agiloft Async Status","description":"Check whether an asynchronous Agiloft call, such as a run action button, has completed.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table the asynchronous call was made against"},"callbackId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Callback ID returned by the asynchronous call, e.g. from Run Action Button"}},"hostedApiKey":"none"},"agiloft_attach_file":{"id":"agiloft_attach_file","name":"Agiloft Attach File","description":"Attach a file to a field in an Agiloft record.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to attach the file to"},"fieldName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the attachment field"},"file":{"type":"file","required":true,"visibility":"user-or-llm","description":"File to attach"},"fileName":{"type":"string","required":false,"visibility":"user-or-llm","description":"Name to assign to the file (defaults to original file name)"},"overwrite":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Replace the contents of the field instead of adding another file to it"}},"hostedApiKey":"none"},"agiloft_attachment_info":{"id":"agiloft_attachment_info","name":"Agiloft Attachment Info","description":"Get information about file attachments on a record field.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to check attachments on"},"fieldName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the attachment field to inspect"}},"hostedApiKey":"none"},"agiloft_create_record":{"id":"agiloft_create_record","name":"Agiloft Create Record","description":"Create a new record in an Agiloft table.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"contacts.employees\\")"},"data":{"type":"string","required":true,"visibility":"user-or-llm","description":"Record field values as a JSON object (e.g., {\\"first_name\\": \\"John\\", \\"status\\": \\"Active\\"})"}},"hostedApiKey":"none"},"agiloft_delete_record":{"id":"agiloft_delete_record","name":"Agiloft Delete Record","description":"Delete a record from an Agiloft table.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"contacts.employees\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to delete"},"substituteIds":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated IDs of records that adopt the dependants of the deleted record. Read only when the delete rule is REPLACE_WITH_ANOTHER."},"deleteRule":{"type":"string","required":false,"visibility":"user-or-llm","description":"How to treat records that depend on this one: ERROR_IF_DEPENDANTS (default — fails rather than cascading), APPLY_DELETE_WHERE_POSSIBLE, DELETE_WHERE_POSSIBLE_OTHERWISE_UNLINK, APPLY_UNLINK, UNLINK_WHERE_POSSIBLE_OTHERWISE_DELETE, or REPLACE_WITH_ANOTHER"}},"hostedApiKey":"none"},"agiloft_get_choice_line_id":{"id":"agiloft_get_choice_line_id","name":"Agiloft Get Choice Line ID","description":"Resolve the internal numeric ID of a choice-list value, for use in EWSelect WHERE clauses against choice fields.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"case\\", \\"contracts\\")"},"fieldName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Choice field name (e.g., \\"priority\\", \\"status\\")"},"value":{"type":"string","required":true,"visibility":"user-or-llm","description":"Choice display value to resolve (e.g., \\"High\\", \\"Active\\")"}},"hostedApiKey":"none"},"agiloft_list_tables":{"id":"agiloft_list_tables","name":"Agiloft List Tables","description":"List the tables and fields in an Agiloft knowledge base, to discover the logical names other operations need.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":false,"visibility":"user-or-llm","description":"Logical name of a single table to describe (e.g., \\"contacts\\"). Leave empty to list every table in the knowledge base."},"includeLinkedInfo":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the source table and column behind each linked field"},"skipColumnsInfo":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Return table names only, omitting field details, for a much smaller response"}},"hostedApiKey":"none"},"agiloft_lock_record":{"id":"agiloft_lock_record","name":"Agiloft Lock Record","description":"Lock, unlock, or check the lock status of an Agiloft record.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to lock, unlock, or check"},"lockAction":{"type":"string","required":true,"visibility":"user-or-llm","description":"Action to perform: \\"lock\\", \\"unlock\\", or \\"check\\""},"force":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Unlock only: release a lock held by another user."}},"hostedApiKey":"none"},"agiloft_nlp_search":{"id":"agiloft_nlp_search","name":"Agiloft Natural Language Search","description":"Search Agiloft records by describing what you want in plain language, such as \\"active NDAs submitted last month\\".","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"nlpQuery":{"type":"string","required":true,"visibility":"user-or-llm","description":"The request in plain language, e.g. \\"Show me open, high-priority contracts\\". Structured field filters are not accepted — use Search Records for those."},"fields":{"type":"string","required":true,"visibility":"user-or-llm","description":"Comma-separated field names to return, e.g. \\"id, contract_title1, company_name\\""},"page":{"type":"string","required":false,"visibility":"user-or-llm","description":"Page number, starting from 0"},"limit":{"type":"string","required":false,"visibility":"user-or-llm","description":"Records per page"}},"hostedApiKey":"none"},"agiloft_read_record":{"id":"agiloft_read_record","name":"Agiloft Read Record","description":"Read a record by ID from an Agiloft table.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"contacts.employees\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to read"},"fields":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of field names to include in the response"}},"hostedApiKey":"none"},"agiloft_remove_attachment":{"id":"agiloft_remove_attachment","name":"Agiloft Remove Attachment","description":"Remove an attached file from a field in an Agiloft record.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record containing the attachment"},"fieldName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the attachment field"},"position":{"type":"string","required":true,"visibility":"user-or-llm","description":"Position index of the file to remove (starting from 0)"}},"hostedApiKey":"none"},"agiloft_retrieve_attachment":{"id":"agiloft_retrieve_attachment","name":"Agiloft Retrieve Attachment","description":"Download an attached file from an Agiloft record field.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record containing the attachment"},"fieldName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the attachment field"},"position":{"type":"string","required":true,"visibility":"user-or-llm","description":"Position index of the file in the field (starting from 0)"}},"hostedApiKey":"none"},"agiloft_run_action_button":{"id":"agiloft_run_action_button","name":"Agiloft Run Action Button","description":"Run an action button on an Agiloft record, such as an approval or send-for-signature step.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"case\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to run the action button on"},"actionButtonField":{"type":"string","required":true,"visibility":"user-or-llm","description":"Logical name of the field holding the action button (e.g., \\"ab_field\\")"}},"hostedApiKey":"none"},"agiloft_saved_search":{"id":"agiloft_saved_search","name":"Agiloft Saved Search","description":"List the saved searches defined for an Agiloft table.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Logical table name to list saved searches for (e.g., \\"contract\\")"}},"hostedApiKey":"none"},"agiloft_search_records":{"id":"agiloft_search_records","name":"Agiloft Search Records","description":"Search for records in an Agiloft table using a query.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name to search in (e.g., \\"contracts\\", \\"contacts.employees\\")"},"query":{"type":"string","required":false,"visibility":"user-or-llm","description":"Ad hoc EWSearch query. Combine conditions with && (and) or || (or) and quote every value — e.g. \\"summary~=\'test\'&&priority=\'High\'\\". Required unless a saved search is given."},"search":{"type":"string","required":false,"visibility":"user-or-llm","description":"Label of a saved search defined on the table (e.g., \\"C: Status is Closed\\"). Can be combined with a query to narrow it further."},"fields":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of field names to include in the results"},"page":{"type":"string","required":false,"visibility":"user-or-llm","description":"Page number for paginated results (starting from 0)"},"limit":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum number of records to return per page. Agiloft treats 0 as \\"all records\\", so leave it unset or use a positive value to keep result sizes bounded."}},"hostedApiKey":"none"},"agiloft_select_records":{"id":"agiloft_select_records","name":"Agiloft Select Records","description":"Select record IDs matching a SQL WHERE clause from an Agiloft table.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"contacts.employees\\")"},"where":{"type":"string","required":true,"visibility":"user-or-llm","description":"SQL WHERE clause using database column names (e.g., \\"summary like \'%new%\'\\" or \\"assigned_person=\'John Doe\'\\"). EWSelect has no page size and returns every matching ID, so append a database limit such as \\"limit 0,200\\" to bound the result."}},"hostedApiKey":"none"},"agiloft_update_record":{"id":"agiloft_update_record","name":"Agiloft Update Record","description":"Update an existing record in an Agiloft table.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"contacts.employees\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to update"},"data":{"type":"string","required":true,"visibility":"user-or-llm","description":"Updated field values as a JSON object (e.g., {\\"status\\": \\"Active\\", \\"priority\\": \\"High\\"})"}},"hostedApiKey":"none"},"agiloft_upsert_record":{"id":"agiloft_upsert_record","name":"Agiloft Upsert Record","description":"Create an Agiloft record, or update it when a record already matches the given fields.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"contacts.employees\\")"},"match":{"type":"string","required":true,"visibility":"user-or-llm","description":"Field used to find an existing record (e.g., \\"ext_id\\"). Pick something that identifies a record uniquely — if more than one record matches, Agiloft writes nothing and returns a conflict."},"async":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Queue the write instead of waiting for it. Returns a callback ID instead of a record ID; pass that to Async Status to poll the result."},"data":{"type":"string","required":true,"visibility":"user-or-llm","description":"Field values as a JSON object. On create these populate the new record; on update only the supplied fields change."}},"hostedApiKey":"none"},"ahrefs_anchors":{"id":"ahrefs_anchors","name":"Ahrefs Anchors","description":"Get the anchor text distribution for a target domain or URL\'s backlinks, showing how many links and referring domains use each anchor text.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\" or \\"https://example.com/page\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match)"},"history":{"type":"string","required":false,"visibility":"user-or-llm","description":"Historical scope: \\"live\\" (currently live), \\"all_time\\" (default, includes lost backlinks), or \\"since:YYYY-MM-DD\\" (backlinks found since a date)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_backlinks":{"id":"ahrefs_backlinks","name":"Ahrefs Backlinks","description":"Get a list of backlinks pointing to a target domain or URL. Returns details about each backlink including source URL, anchor text, and domain rating.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\" or \\"https://example.com/page\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"history":{"type":"string","required":false,"visibility":"user-or-llm","description":"Historical scope: \\"live\\" (currently live backlinks), \\"all_time\\" (default, includes lost backlinks), or \\"since:YYYY-MM-DD\\" (backlinks found since a date)."},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_backlinks_stats":{"id":"ahrefs_backlinks_stats","name":"Ahrefs Backlinks Stats","description":"Get backlink and referring domain totals for a target domain or URL, both currently live and across all time.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\" or \\"https://example.com/page\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date to report metrics on, in YYYY-MM-DD format (defaults to today)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_batch_analysis":{"id":"ahrefs_batch_analysis","name":"Ahrefs Batch Analysis","description":"Get bulk SEO metrics (Domain Rating, backlinks, referring domains, organic traffic, and more) for multiple domains or URLs in a single request. Useful for comparing many competitors at once.","version":"1.0.0","params":{"targets":{"type":"string","required":true,"visibility":"user-or-llm","description":"Comma-separated list of domains or URLs to analyze. Example: \\"example.com,competitor.com\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode applied to every target: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match)"},"protocol":{"type":"string","required":false,"visibility":"user-or-llm","description":"Protocol applied to every target: \\"both\\" (default), \\"http\\", or \\"https\\""},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for traffic data. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"volumeMode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search volume calculation: \\"monthly\\" or \\"average\\" (default: \\"monthly\\")"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_broken_backlinks":{"id":"ahrefs_broken_backlinks","name":"Ahrefs Broken Backlinks","description":"Get a list of broken backlinks pointing to a target domain or URL. Useful for identifying link reclamation opportunities.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\" or \\"https://example.com/page\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_domain_rating":{"id":"ahrefs_domain_rating","name":"Ahrefs Domain Rating","description":"Get the Domain Rating (DR) and Ahrefs Rank for a target domain. Domain Rating shows the strength of a website\'s backlink profile on a scale from 0 to 100.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain to analyze (e.g., example.com)"},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date for historical data in YYYY-MM-DD format (defaults to today)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_domain_rating_history":{"id":"ahrefs_domain_rating_history","name":"Ahrefs Domain Rating History","description":"Get the historical Domain Rating (DR) trend for a target domain or URL over a date range, grouped daily, weekly, or monthly.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"dateFrom":{"type":"string","required":true,"visibility":"user-only","description":"Start date of the historical period, in YYYY-MM-DD format"},"dateTo":{"type":"string","required":false,"visibility":"user-only","description":"End date of the historical period, in YYYY-MM-DD format (defaults to today)"},"historyGrouping":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval for grouping data points: \\"daily\\", \\"weekly\\", or \\"monthly\\" (default: \\"monthly\\")"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_keyword_overview":{"id":"ahrefs_keyword_overview","name":"Ahrefs Keyword Overview","description":"Get detailed metrics for a keyword including search volume, keyword difficulty, CPC, clicks, and traffic potential.","version":"1.0.0","params":{"keyword":{"type":"string","required":true,"visibility":"user-or-llm","description":"The keyword to analyze"},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for keyword data. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_keywords_history":{"id":"ahrefs_keywords_history","name":"Ahrefs Keywords History","description":"Get the historical organic keyword ranking distribution for a target domain or URL over a date range: how many keywords rank in each position bucket at each point in time.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"dateFrom":{"type":"string","required":true,"visibility":"user-only","description":"Start date of the historical period, in YYYY-MM-DD format"},"dateTo":{"type":"string","required":false,"visibility":"user-only","description":"End date of the historical period, in YYYY-MM-DD format (defaults to today)"},"historyGrouping":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval for grouping data points: \\"daily\\", \\"weekly\\", or \\"monthly\\" (default: \\"monthly\\")"},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for search results. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_metrics":{"id":"ahrefs_metrics","name":"Ahrefs Metrics","description":"Get a one-call organic and paid search overview for a target domain or URL: organic traffic, organic keywords, paid traffic, paid keywords, and estimated traffic cost.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for traffic data. Example: \\"us\\", \\"gb\\", \\"de\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date to report metrics on, in YYYY-MM-DD format (defaults to today)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_metrics_history":{"id":"ahrefs_metrics_history","name":"Ahrefs Metrics History","description":"Get the historical organic and paid traffic trend for a target domain or URL over a date range: organic traffic/cost and paid traffic/cost at each point in time.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"dateFrom":{"type":"string","required":true,"visibility":"user-only","description":"Start date of the historical period, in YYYY-MM-DD format"},"dateTo":{"type":"string","required":false,"visibility":"user-only","description":"End date of the historical period, in YYYY-MM-DD format (defaults to today)"},"volumeMode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search volume calculation: \\"monthly\\" or \\"average\\" (default: \\"monthly\\")"},"historyGrouping":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval for grouping data points: \\"daily\\", \\"weekly\\", or \\"monthly\\" (default: \\"monthly\\")"},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for traffic data. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_organic_competitors":{"id":"ahrefs_organic_competitors","name":"Ahrefs Organic Competitors","description":"Get domains that compete with a target domain or URL for the same organic keywords, ranked by keyword overlap.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for search results. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date to report metrics on, in YYYY-MM-DD format (defaults to today)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_organic_keywords":{"id":"ahrefs_organic_keywords","name":"Ahrefs Organic Keywords","description":"Get organic keywords that a target domain or URL ranks for in Google search results. Returns keyword details including search volume, ranking position, and estimated traffic.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\" or \\"https://example.com/page\\""},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for search results. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date to report metrics on, in YYYY-MM-DD format (defaults to today)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_paid_pages":{"id":"ahrefs_paid_pages","name":"Ahrefs Paid Pages","description":"Get a target domain\'s pages that receive paid search traffic, sorted by estimated paid traffic. Returns page URLs with their paid traffic, keyword counts, and estimated spend.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for traffic data. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match)"},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date to report metrics on, in YYYY-MM-DD format (defaults to today)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_rank_tracker_competitors_overview":{"id":"ahrefs_rank_tracker_competitors_overview","name":"Ahrefs Rank Tracker Competitors Overview","description":"Get competitor rankings for the keywords tracked in an Ahrefs Rank Tracker project: each tracked keyword\'s volume and difficulty alongside every competitor\'s position, traffic, and traffic value. This endpoint is free and does not consume API units.","version":"1.0.0","params":{"projectId":{"type":"number","required":true,"visibility":"user-or-llm","description":"The Rank Tracker project ID (found in the project URL in Ahrefs)"},"date":{"type":"string","required":true,"visibility":"user-only","description":"Date to report rankings for, in YYYY-MM-DD format"},"device":{"type":"string","required":true,"visibility":"user-or-llm","description":"Rankings device type: \\"desktop\\" or \\"mobile\\""},"dateCompared":{"type":"string","required":false,"visibility":"user-only","description":"Comparison date in YYYY-MM-DD format, to compute position/traffic deltas"},"volumeMode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search volume calculation: \\"monthly\\" or \\"average\\" (default: \\"monthly\\")"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_rank_tracker_competitors_stats":{"id":"ahrefs_rank_tracker_competitors_stats","name":"Ahrefs Rank Tracker Competitors Stats","description":"Get aggregate competitor stats for an Ahrefs Rank Tracker project: each competitor\'s traffic, traffic value, average position, and share of voice across all tracked keywords. This endpoint is free and does not consume API units.","version":"1.0.0","params":{"projectId":{"type":"number","required":true,"visibility":"user-or-llm","description":"The Rank Tracker project ID (found in the project URL in Ahrefs)"},"date":{"type":"string","required":true,"visibility":"user-only","description":"Date to report metrics for, in YYYY-MM-DD format"},"device":{"type":"string","required":true,"visibility":"user-or-llm","description":"Rankings device type: \\"desktop\\" or \\"mobile\\""},"volumeMode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search volume calculation: \\"monthly\\" or \\"average\\" (default: \\"monthly\\")"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_rank_tracker_overview":{"id":"ahrefs_rank_tracker_overview","name":"Ahrefs Rank Tracker Overview","description":"Get ranking overview metrics for the keywords tracked in an Ahrefs Rank Tracker project: position, search volume, keyword difficulty, and estimated traffic. This endpoint is free and does not consume API units.","version":"1.0.0","params":{"projectId":{"type":"number","required":true,"visibility":"user-or-llm","description":"The Rank Tracker project ID (found in the project URL in Ahrefs)"},"date":{"type":"string","required":true,"visibility":"user-only","description":"Date to report rankings for, in YYYY-MM-DD format"},"device":{"type":"string","required":true,"visibility":"user-or-llm","description":"Rankings device type: \\"desktop\\" or \\"mobile\\""},"dateCompared":{"type":"string","required":false,"visibility":"user-only","description":"Comparison date in YYYY-MM-DD format, to compute position/traffic deltas"},"volumeMode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search volume calculation: \\"monthly\\" or \\"average\\" (default: \\"monthly\\")"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_rank_tracker_serp_overview":{"id":"ahrefs_rank_tracker_serp_overview","name":"Ahrefs Rank Tracker SERP Overview","description":"Get the full SERP (search engine results page) for a keyword tracked in an Ahrefs Rank Tracker project, including every ranking URL with its position, title, and authority metrics. This endpoint is free and does not consume API units.","version":"1.0.0","params":{"projectId":{"type":"number","required":true,"visibility":"user-or-llm","description":"The Rank Tracker project ID (found in the project URL in Ahrefs)"},"keyword":{"type":"string","required":true,"visibility":"user-or-llm","description":"The tracked keyword to retrieve SERP data for"},"country":{"type":"string","required":true,"visibility":"user-or-llm","description":"Country code for the tracked keyword. Example: \\"us\\", \\"gb\\", \\"de\\""},"device":{"type":"string","required":true,"visibility":"user-or-llm","description":"Rankings device type: \\"desktop\\" or \\"mobile\\""},"topPositions":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of top organic positions to return (defaults to all available)"},"date":{"type":"string","required":false,"visibility":"user-only","description":"Timestamp to return the last available SERP Overview at, in YYYY-MM-DDThh:mm:ss format"},"locationId":{"type":"number","required":false,"visibility":"user-or-llm","description":"Location ID of the tracked keyword, if tracked at a specific location"},"languageCode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Language code of the tracked keyword"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_refdomains_history":{"id":"ahrefs_refdomains_history","name":"Ahrefs Referring Domains History","description":"Get the historical referring domains trend for a target domain or URL over a date range, grouped daily, weekly, or monthly.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"dateFrom":{"type":"string","required":true,"visibility":"user-only","description":"Start date of the historical period, in YYYY-MM-DD format"},"dateTo":{"type":"string","required":false,"visibility":"user-only","description":"End date of the historical period, in YYYY-MM-DD format (defaults to today)"},"historyGrouping":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval for grouping data points: \\"daily\\", \\"weekly\\", or \\"monthly\\" (default: \\"monthly\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_referring_domains":{"id":"ahrefs_referring_domains","name":"Ahrefs Referring Domains","description":"Get a list of domains that link to a target domain or URL. Returns unique referring domains with their domain rating, backlink counts, and discovery dates.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\" or \\"https://example.com/page\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"history":{"type":"string","required":false,"visibility":"user-or-llm","description":"Historical scope: \\"live\\" (currently live), \\"all_time\\" (default, includes lost domains), or \\"since:YYYY-MM-DD\\" (domains found since a date)."},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_related_terms":{"id":"ahrefs_related_terms","name":"Ahrefs Related Terms","description":"Get keyword ideas related to a seed keyword: terms the same top-ranking pages also rank for (\\"also rank for\\") or also discuss (\\"also talk about\\"), with volume, difficulty, and CPC.","version":"1.0.0","params":{"keyword":{"type":"string","required":true,"visibility":"user-or-llm","description":"The seed keyword to find related terms for"},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for keyword data. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"terms":{"type":"string","required":false,"visibility":"user-or-llm","description":"Type of related keywords to return: \\"also_rank_for\\", \\"also_talk_about\\", or \\"all\\" (default: \\"all\\")"},"viewFor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Whether to derive related terms from the top 10 or top 100 ranking pages (default: \\"top_10\\")"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_site_audit_page_explorer":{"id":"ahrefs_site_audit_page_explorer","name":"Ahrefs Site Audit Page Explorer","description":"Get crawled pages from an Ahrefs Site Audit project with health and SEO metrics: HTTP status, title, link counts, backlinks, indexability, and traffic. Optionally filter to pages affected by a specific issue.","version":"1.0.0","params":{"projectId":{"type":"number","required":true,"visibility":"user-or-llm","description":"The Site Audit project ID (found in the project URL in Ahrefs)"},"date":{"type":"string","required":false,"visibility":"user-only","description":"Crawl date in YYYY-MM-DDThh:mm:ss format (defaults to the most recent crawl)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"offset":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to skip, for pagination"},"issueId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Only return pages affected by this issue ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ahrefs_top_pages":{"id":"ahrefs_top_pages","name":"Ahrefs Top Pages","description":"Get the top pages of a target domain sorted by organic traffic. Returns page URLs with their traffic, keyword counts, and estimated traffic value.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain to analyze. Example: \\"example.com\\""},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for traffic data. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date to report metrics on, in YYYY-MM-DD format (defaults to today)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"oauth":{"required":false,"provider":"ahrefs","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"airtable_create_records":{"id":"airtable_create_records","name":"Airtable Create Records","description":"Write new records to an Airtable table","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"records":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of records to create, each with a `fields` object"},"typecast":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"When true, Airtable automatically converts string values to the field type"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_delete_records":{"id":"airtable_delete_records","name":"Airtable Delete Records","description":"Delete one or more records from an Airtable table by ID","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"recordIds":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of record IDs to delete (each starts with \\"rec\\", e.g., [\\"recXXXXXXXXXXXXXX\\"]). Pass a single-element array to delete one record."}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_get_base_schema":{"id":"airtable_get_base_schema","name":"Airtable Get Base Schema","description":"Get the schema of all tables, fields, and views in an Airtable base","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_get_record":{"id":"airtable_get_record","name":"Airtable Get Record","description":"Retrieve a single record from an Airtable table by its ID","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Record ID to retrieve (starts with \\"rec\\", e.g., \\"recXXXXXXXXXXXXXX\\")"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_list_bases":{"id":"airtable_list_bases","name":"Airtable List Bases","description":"List all bases the authenticated user has access to","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"offset":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination offset for retrieving additional bases"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_list_records":{"id":"airtable_list_records","name":"Airtable List Records","description":"Read records from an Airtable table","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"maxRecords":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of records to return (default: all records)"},"filterFormula":{"type":"string","required":false,"visibility":"user-or-llm","description":"Formula to filter records (e.g., \\"({Field Name} = \'Value\')\\")"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_list_tables":{"id":"airtable_list_tables","name":"Airtable List Tables","description":"List all tables and their schema in an Airtable base","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_update_multiple_records":{"id":"airtable_update_multiple_records","name":"Airtable Update Multiple Records","description":"Update multiple existing records in an Airtable table","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"records":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of records to update, each with an `id` and a `fields` object"},"typecast":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"When true, Airtable automatically converts string values to the field type"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_update_record":{"id":"airtable_update_record","name":"Airtable Update Record","description":"Update an existing record in an Airtable table by ID","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Record ID to update (starts with \\"rec\\", e.g., \\"recXXXXXXXXXXXXXX\\")"},"fields":{"type":"json","required":true,"visibility":"user-or-llm","description":"An object containing the field names and their new values"},"typecast":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"When true, Airtable automatically converts string values to the field type"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_upsert_records":{"id":"airtable_upsert_records","name":"Airtable Upsert Records","description":"Update existing records or create new ones in an Airtable table, matching on the specified merge fields","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"records":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of records to upsert, each with a `fields` object"},"fieldsToMergeOn":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of field names used to match existing records (max 3). A record is updated when all merge fields match, otherwise it is created. Example: [\\"Name\\"]"},"typecast":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"When true, Airtable automatically converts string values to the field type"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"algolia_add_record":{"id":"algolia_add_record","name":"Algolia Add Record","description":"Add or replace a record in an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"objectID":{"type":"string","required":false,"visibility":"user-or-llm","description":"Object ID for the record (auto-generated if not provided)"},"record":{"type":"json","required":true,"visibility":"user-or-llm","description":"JSON object representing the record to add"}},"hostedApiKey":"none"},"algolia_batch_operations":{"id":"algolia_batch_operations","name":"Algolia Batch Operations","description":"Perform batch add, update, partial update, or delete operations on records in an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"requests":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of batch operations. Each item has \\"action\\" (addObject, updateObject, partialUpdateObject, partialUpdateObjectNoCreate, deleteObject, delete, clear) and \\"body\\" (the record data; must include objectID for update/delete; use an empty object {} for the index-level delete/clear actions)"}},"hostedApiKey":"none"},"algolia_browse_records":{"id":"algolia_browse_records","name":"Algolia Browse Records","description":"Browse and iterate over all records in an Algolia index using cursor pagination","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key (must have browse ACL)"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index to browse"},"query":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search query to filter browsed records"},"filters":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter string to narrow down results"},"attributesToRetrieve":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of attributes to retrieve"},"hitsPerPage":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of hits per page (default: 1000, max: 1000)"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous browse response for pagination"},"aroundLatLng":{"type":"string","required":false,"visibility":"user-or-llm","description":"Coordinates for geo-search (e.g., \\"40.71,-74.01\\")"},"aroundRadius":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum radius in meters for geo-search, or \\"all\\" for unlimited"},"insideBoundingBox":{"type":"json","required":false,"visibility":"user-or-llm","description":"Bounding box coordinates as [[lat1, lng1, lat2, lng2]] for geo-search"},"insidePolygon":{"type":"json","required":false,"visibility":"user-or-llm","description":"Polygon coordinates as [[lat1, lng1, lat2, lng2, lat3, lng3, ...]] for geo-search"}},"hostedApiKey":"none"},"algolia_clear_records":{"id":"algolia_clear_records","name":"Algolia Clear Records","description":"Clear all records from an Algolia index while keeping settings, synonyms, and rules","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key (must have deleteIndex ACL)"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index to clear"}},"hostedApiKey":"none"},"algolia_copy_move_index":{"id":"algolia_copy_move_index","name":"Algolia Copy/Move Index","description":"Copy or move an Algolia index to a new destination","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the source index"},"operation":{"type":"string","required":true,"visibility":"user-or-llm","description":"Operation to perform: \\"copy\\" or \\"move\\""},"destination":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the destination index"},"scope":{"type":"json","required":false,"visibility":"user-or-llm","description":"Array of scopes to copy (only for \\"copy\\" operation): [\\"settings\\", \\"synonyms\\", \\"rules\\"]. Omit to copy everything including records."}},"hostedApiKey":"none"},"algolia_delete_by_filter":{"id":"algolia_delete_by_filter","name":"Algolia Delete By Filter","description":"Delete all records matching a filter from an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key (must have deleteIndex ACL)"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"filters":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter expression to match records for deletion (e.g., \\"category:outdated\\")"},"facetFilters":{"type":"json","required":false,"visibility":"user-or-llm","description":"Array of facet filters (e.g., [\\"brand:Acme\\"])"},"numericFilters":{"type":"json","required":false,"visibility":"user-or-llm","description":"Array of numeric filters (e.g., [\\"price > 100\\"])"},"tagFilters":{"type":"json","required":false,"visibility":"user-or-llm","description":"Array of tag filters using the _tags attribute (e.g., [\\"published\\"])"},"aroundLatLng":{"type":"string","required":false,"visibility":"user-or-llm","description":"Coordinates for geo-search filter (e.g., \\"40.71,-74.01\\")"},"aroundRadius":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum radius in meters for geo-search, or \\"all\\" for unlimited"},"insideBoundingBox":{"type":"json","required":false,"visibility":"user-or-llm","description":"Bounding box coordinates as [[lat1, lng1, lat2, lng2]] for geo-search filter"},"insidePolygon":{"type":"json","required":false,"visibility":"user-or-llm","description":"Polygon coordinates as [[lat1, lng1, lat2, lng2, lat3, lng3, ...]] for geo-search filter"}},"hostedApiKey":"none"},"algolia_delete_index":{"id":"algolia_delete_index","name":"Algolia Delete Index","description":"Delete an entire Algolia index and all its records","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key (must have deleteIndex ACL)"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index to delete"}},"hostedApiKey":"none"},"algolia_delete_record":{"id":"algolia_delete_record","name":"Algolia Delete Record","description":"Delete a record by objectID from an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"objectID":{"type":"string","required":true,"visibility":"user-or-llm","description":"The objectID of the record to delete"}},"hostedApiKey":"none"},"algolia_get_record":{"id":"algolia_get_record","name":"Algolia Get Record","description":"Get a record by objectID from an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"objectID":{"type":"string","required":true,"visibility":"user-or-llm","description":"The objectID of the record to retrieve"},"attributesToRetrieve":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of attributes to retrieve"}},"hostedApiKey":"none"},"algolia_get_records":{"id":"algolia_get_records","name":"Algolia Get Records","description":"Retrieve multiple records by objectID from one or more Algolia indices","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Default index name for all requests"},"requests":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of objects specifying records to retrieve. Each must have \\"objectID\\" and optionally \\"indexName\\" and \\"attributesToRetrieve\\"."}},"hostedApiKey":"none"},"algolia_get_settings":{"id":"algolia_get_settings","name":"Algolia Get Settings","description":"Retrieve the settings of an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"}},"hostedApiKey":"none"},"algolia_get_task_status":{"id":"algolia_get_task_status","name":"Algolia Get Task Status","description":"Check whether an Algolia indexing task has finished publishing","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index the task ran against"},"taskID":{"type":"number","required":true,"visibility":"user-or-llm","description":"The taskID returned by a previous write operation"}},"hostedApiKey":"none"},"algolia_list_indices":{"id":"algolia_list_indices","name":"Algolia List Indices","description":"List all indices in an Algolia application","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key"},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for paginating indices (default: not paginated)"},"hitsPerPage":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of indices per page (default: 100)"}},"hostedApiKey":"none"},"algolia_partial_update_record":{"id":"algolia_partial_update_record","name":"Algolia Partial Update Record","description":"Partially update a record in an Algolia index without replacing it entirely","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"objectID":{"type":"string","required":true,"visibility":"user-or-llm","description":"The objectID of the record to update"},"attributes":{"type":"json","required":true,"visibility":"user-or-llm","description":"JSON object with attributes to update. Supports built-in operations like {\\"stock\\": {\\"_operation\\": \\"Decrement\\", \\"value\\": 1}}"},"createIfNotExists":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Whether to create the record if it does not exist (default: true)"}},"hostedApiKey":"none"},"algolia_search":{"id":"algolia_search","name":"Algolia Search","description":"Search an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index to search"},"query":{"type":"string","required":true,"visibility":"user-or-llm","description":"Search query text"},"hitsPerPage":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of hits per page (default: 20)"},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number to retrieve (default: 0)"},"filters":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter string (e.g., \\"category:electronics AND price < 100\\")"},"attributesToRetrieve":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of attributes to retrieve"},"facets":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of facet attribute names to retrieve counts for (use \\"*\\" for all)"},"getRankingInfo":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Whether to include detailed ranking information in each hit"},"aroundLatLng":{"type":"string","required":false,"visibility":"user-or-llm","description":"Coordinates for geo-search (e.g., \\"40.71,-74.01\\")"},"aroundRadius":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum radius in meters for geo-search, or \\"all\\" for unlimited"},"insideBoundingBox":{"type":"json","required":false,"visibility":"user-or-llm","description":"Bounding box coordinates as [[lat1, lng1, lat2, lng2]] for geo-search"},"insidePolygon":{"type":"json","required":false,"visibility":"user-or-llm","description":"Polygon coordinates as [[lat1, lng1, lat2, lng2, lat3, lng3, ...]] for geo-search"}},"hostedApiKey":"none"},"algolia_update_settings":{"id":"algolia_update_settings","name":"Algolia Update Settings","description":"Update the settings of an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key (must have editSettings ACL)"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"settings":{"type":"json","required":true,"visibility":"user-or-llm","description":"JSON object with settings to update (e.g., {\\"searchableAttributes\\": [\\"name\\", \\"description\\"], \\"customRanking\\": [\\"desc(popularity)\\"]})"},"forwardToReplicas":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Whether to apply changes to replica indices (default: false)"}},"hostedApiKey":"none"},"amplitude_event_segmentation":{"id":"amplitude_event_segmentation","name":"Amplitude Event Segmentation","description":"Query event analytics data with segmentation. Get event counts, uniques, averages, and more.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"eventType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Event type name to analyze"},"start":{"type":"string","required":true,"visibility":"user-or-llm","description":"Start date in YYYYMMDD format"},"end":{"type":"string","required":true,"visibility":"user-or-llm","description":"End date in YYYYMMDD format"},"metric":{"type":"string","required":false,"visibility":"user-or-llm","description":"Metric type: uniques, totals, pct_dau, average, histogram, sums, value_avg, or formula (default: uniques)"},"interval":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval: 1 (daily), 7 (weekly), or 30 (monthly)"},"groupBy":{"type":"string","required":false,"visibility":"user-or-llm","description":"Property name to group by (prefix custom user properties with \\"gp:\\")"},"groupBy2":{"type":"string","required":false,"visibility":"user-or-llm","description":"Second property name to group by (prefix custom user properties with \\"gp:\\")"},"limit":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum number of group-by values (max 1000)"},"filters":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON array of filter objects applied to the event, e.g. [{\\"subprop_type\\":\\"event\\",\\"subprop_key\\":\\"city\\",\\"subprop_op\\":\\"is\\",\\"subprop_value\\":[\\"San Francisco\\"]}]"},"formula":{"type":"string","required":false,"visibility":"user-or-llm","description":"Required when metric is \\"formula\\", e.g. \\"UNIQUES(A)/UNIQUES(B)\\""},"segment":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON segment definition(s) applied to the query"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_funnels":{"id":"amplitude_funnels","name":"Amplitude Funnels","description":"Analyze conversion rates and drop-off between a sequence of events.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"events":{"type":"string","required":true,"visibility":"user-or-llm","description":"JSON array of event objects, one per funnel step in order, e.g. [{\\"event_type\\":\\"signup\\"},{\\"event_type\\":\\"purchase\\"}]"},"start":{"type":"string","required":true,"visibility":"user-or-llm","description":"Start date in YYYYMMDD format"},"end":{"type":"string","required":true,"visibility":"user-or-llm","description":"End date in YYYYMMDD format"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Funnel ordering: \\"ordered\\", \\"unordered\\", or \\"sequential\\" (default: ordered)"},"userType":{"type":"string","required":false,"visibility":"user-or-llm","description":"User type: \\"new\\" or \\"active\\" (default: active)"},"interval":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval: -300000 (real-time), -3600000 (hourly), 1 (daily), 7 (weekly), or 30 (monthly)"},"conversionWindowSeconds":{"type":"string","required":false,"visibility":"user-or-llm","description":"Conversion window in seconds (default: 2592000, i.e. 30 days)"},"groupBy":{"type":"string","required":false,"visibility":"user-or-llm","description":"Property to group by (limit: one; prefix custom properties with \\"gp:\\")"},"limit":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum number of group-by values (default: 100, max: 1000)"},"segment":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON segment definition(s) applied to the query"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_get_active_users":{"id":"amplitude_get_active_users","name":"Amplitude Get Active Users","description":"Get active or new user counts over a date range from the Dashboard REST API.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"start":{"type":"string","required":true,"visibility":"user-or-llm","description":"Start date in YYYYMMDD format"},"end":{"type":"string","required":true,"visibility":"user-or-llm","description":"End date in YYYYMMDD format"},"metric":{"type":"string","required":false,"visibility":"user-or-llm","description":"Metric type: \\"active\\" or \\"new\\" (default: active)"},"interval":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval: 1 (daily), 7 (weekly), or 30 (monthly)"},"groupBy":{"type":"string","required":false,"visibility":"user-or-llm","description":"Property name to group by"},"segment":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON segment definition(s) applied to the query"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_get_revenue":{"id":"amplitude_get_revenue","name":"Amplitude Get Revenue","description":"Get revenue LTV data including ARPU, ARPPU, total revenue, and paying user counts.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"start":{"type":"string","required":true,"visibility":"user-or-llm","description":"Start date in YYYYMMDD format"},"end":{"type":"string","required":true,"visibility":"user-or-llm","description":"End date in YYYYMMDD format"},"metric":{"type":"string","required":false,"visibility":"user-or-llm","description":"Metric: 0 (ARPU), 1 (ARPPU), 2 (Total Revenue), 3 (Paying Users)"},"interval":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval: 1 (daily), 7 (weekly), or 30 (monthly)"},"groupBy":{"type":"string","required":false,"visibility":"user-or-llm","description":"Property name to group by (limit: one)"},"segment":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON segment definition(s) applied to the query"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_group_identify":{"id":"amplitude_group_identify","name":"Amplitude Group Identify","description":"Set group-level properties in Amplitude. Supports $set, $setOnce, $add, $append, $unset operations.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"groupType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Group classification (e.g., \\"company\\", \\"org_id\\")"},"groupValue":{"type":"string","required":true,"visibility":"user-or-llm","description":"Specific group identifier (e.g., \\"Acme Corp\\")"},"groupProperties":{"type":"string","required":true,"visibility":"user-or-llm","description":"JSON object of group properties. Use operations like $set, $setOnce, $add, $append, $unset."},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_identify_user":{"id":"amplitude_identify_user","name":"Amplitude Identify User","description":"Set user properties in Amplitude using the Identify API. Supports $set, $setOnce, $add, $append, $unset operations.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"userId":{"type":"string","required":false,"visibility":"user-or-llm","description":"User ID (required if no device_id)"},"deviceId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Device ID (required if no user_id)"},"userProperties":{"type":"string","required":true,"visibility":"user-or-llm","description":"JSON object of user properties. Use operations like $set, $setOnce, $add, $append, $unset."},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_list_events":{"id":"amplitude_list_events","name":"Amplitude List Events","description":"List all event types in the Amplitude project with their weekly totals and unique counts.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_realtime_active_users":{"id":"amplitude_realtime_active_users","name":"Amplitude Real-time Active Users","description":"Get real-time active user counts at 5-minute granularity for the last 2 days.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_retention":{"id":"amplitude_retention","name":"Amplitude Retention","description":"Measure how many users return to perform an action after a starting action.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"startEvent":{"type":"string","required":true,"visibility":"user-or-llm","description":"JSON starting event object, e.g. {\\"event_type\\":\\"_new\\"} or {\\"event_type\\":\\"_active\\"}"},"returnEvent":{"type":"string","required":true,"visibility":"user-or-llm","description":"JSON returning event object, e.g. {\\"event_type\\":\\"_all\\"} or {\\"event_type\\":\\"_active\\"}"},"start":{"type":"string","required":true,"visibility":"user-or-llm","description":"Start date in YYYYMMDD format"},"end":{"type":"string","required":true,"visibility":"user-or-llm","description":"End date in YYYYMMDD format"},"retentionMode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Retention type: \\"bracket\\", \\"rolling\\", or \\"n-day\\" (default: n-day)"},"retentionBrackets":{"type":"string","required":false,"visibility":"user-or-llm","description":"Required when Retention Mode is \\"bracket\\". Day ranges, e.g. [[0,4]]"},"interval":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval: 1 (daily), 7 (weekly), or 30 (monthly)"},"groupBy":{"type":"string","required":false,"visibility":"user-or-llm","description":"Property to group by (limit: one; prefix custom properties with \\"gp:\\")"},"segment":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON segment definition(s) applied to the query"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_send_event":{"id":"amplitude_send_event","name":"Amplitude Send Event","description":"Track an event in Amplitude using the HTTP V2 API.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"userId":{"type":"string","required":false,"visibility":"user-or-llm","description":"User ID (required if no device_id)"},"deviceId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Device ID (required if no user_id)"},"eventType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the event (e.g., \\"page_view\\", \\"purchase\\")"},"eventProperties":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON object of custom event properties"},"userProperties":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON object of user properties to set (supports $set, $setOnce, $add, $append, $unset)"},"time":{"type":"string","required":false,"visibility":"user-or-llm","description":"Event timestamp in milliseconds since epoch"},"sessionId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Session start time in milliseconds since epoch"},"insertId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Unique ID for deduplication (within 7-day window)"},"appVersion":{"type":"string","required":false,"visibility":"user-or-llm","description":"Application version string"},"platform":{"type":"string","required":false,"visibility":"user-or-llm","description":"Platform (e.g., \\"Web\\", \\"iOS\\", \\"Android\\")"},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Two-letter country code"},"language":{"type":"string","required":false,"visibility":"user-or-llm","description":"Language code (e.g., \\"en\\")"},"ip":{"type":"string","required":false,"visibility":"user-or-llm","description":"IP address for geo-location"},"price":{"type":"string","required":false,"visibility":"user-or-llm","description":"Price of the item purchased"},"quantity":{"type":"string","required":false,"visibility":"user-or-llm","description":"Quantity of items purchased"},"revenue":{"type":"string","required":false,"visibility":"user-or-llm","description":"Revenue amount"},"productId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Product identifier"},"revenueType":{"type":"string","required":false,"visibility":"user-or-llm","description":"Revenue type (e.g., \\"purchase\\", \\"refund\\")"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_user_activity":{"id":"amplitude_user_activity","name":"Amplitude User Activity","description":"Get the event stream for a specific user by their Amplitude ID.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"amplitudeId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Amplitude internal user ID"},"offset":{"type":"string","required":false,"visibility":"user-or-llm","description":"Offset for pagination (default 0)"},"limit":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum number of events to return (default 1000, max 1000)"},"direction":{"type":"string","required":false,"visibility":"user-or-llm","description":"Sort direction: \\"latest\\" or \\"earliest\\" (default: latest)"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_user_profile":{"id":"amplitude_user_profile","name":"Amplitude User Profile","description":"Get a user profile including properties, cohort memberships, and computed properties. Not available for EU data-residency projects.","version":"1.0.0","params":{"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"userId":{"type":"string","required":false,"visibility":"user-or-llm","description":"External user ID (required if no device_id)"},"deviceId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Device ID (required if no user_id)"},"getAmpProps":{"type":"string","required":false,"visibility":"user-or-llm","description":"Include Amplitude user properties (true/false, default: false)"},"getCohortIds":{"type":"string","required":false,"visibility":"user-or-llm","description":"Include cohort IDs the user belongs to (true/false, default: false)"},"getComputations":{"type":"string","required":false,"visibility":"user-or-llm","description":"Include computed user properties (true/false, default: false)"}},"hostedApiKey":"none"},"amplitude_user_search":{"id":"amplitude_user_search","name":"Amplitude User Search","description":"Search for a user by User ID, Device ID, or Amplitude ID using the Dashboard REST API.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"user":{"type":"string","required":true,"visibility":"user-or-llm","description":"User ID, Device ID, or Amplitude ID to search for"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"apify_get_dataset_items":{"id":"apify_get_dataset_items","name":"APIFY Get Dataset Items","description":"Retrieve items stored in an APIFY dataset","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"APIFY API token from console.apify.com/account#/integrations"},"datasetId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Dataset ID to read items from. Example: \\"9RnD3Pql2vGZkc5H5\\""},"itemLimit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Max items to return (1-250000). Default: all items. Example: 500"},"offset":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to skip at the start. Default: 0"},"fields":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of fields to include. Example: \\"title,url,price\\""}},"oauth":{"required":false,"provider":"apify","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apify_get_run":{"id":"apify_get_run","name":"APIFY Get Run","description":"Get the status and details of an APIFY actor run","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"APIFY API token from console.apify.com/account#/integrations"},"runId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Actor run ID to fetch. Example: \\"HG7ML7M8z78YcAPEB\\""}},"oauth":{"required":false,"provider":"apify","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apify_run_actor_async":{"id":"apify_run_actor_async","name":"APIFY Run Actor (Async)","description":"Start an APIFY Actor run and poll it within the same workflow step until completion or the polling deadline","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"APIFY API token from console.apify.com/account#/integrations"},"actorId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Actor ID or username/actor-name. Examples: \\"apify/web-scraper\\", \\"janedoe/my-actor\\", \\"moJRLRc85AitArpNN\\""},"input":{"type":"string","required":false,"visibility":"user-or-llm","description":"Actor input as JSON string. Example: { \\"startUrls\\": [ { \\"url\\": \\"https://example.com\\" } ], \\"maxPages\\": 10 }"},"waitForFinish":{"type":"number","required":false,"visibility":"user-or-llm","description":"Initial wait time in seconds (0-60) before polling starts. Example: 30"},"itemLimit":{"type":"number","required":false,"default":100,"visibility":"user-or-llm","description":"Max dataset items to fetch (1-250000). Default: 100. Example: 500"},"memory":{"type":"number","required":false,"visibility":"user-or-llm","description":"Memory in megabytes allocated for the actor run (128-32768). Example: 1024 for 1GB, 2048 for 2GB"},"timeout":{"type":"number","required":false,"visibility":"user-or-llm","description":"Timeout in seconds for the actor run. Example: 300 for 5 minutes, 3600 for 1 hour"},"build":{"type":"string","required":false,"visibility":"user-or-llm","description":"Actor build to run. Examples: \\"latest\\", \\"beta\\", \\"1.2.3\\", \\"build-tag-name\\""}},"oauth":{"required":false,"provider":"apify","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apify_run_actor_sync":{"id":"apify_run_actor_sync","name":"APIFY Run Actor (Sync)","description":"Run an APIFY actor synchronously and get results (max 5 minutes)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"APIFY API token from console.apify.com/account#/integrations"},"actorId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Actor ID or username/actor-name. Examples: \\"apify/web-scraper\\", \\"janedoe/my-actor\\", \\"moJRLRc85AitArpNN\\""},"input":{"type":"string","required":false,"visibility":"user-or-llm","description":"Actor input as JSON string. Example: { \\"startUrls\\": [ { \\"url\\": \\"https://example.com\\" } ], \\"maxPages\\": 10 }"},"memory":{"type":"number","required":false,"visibility":"user-or-llm","description":"Memory in megabytes allocated for the actor run (128-32768). Example: 1024 for 1GB, 2048 for 2GB"},"timeout":{"type":"number","required":false,"visibility":"user-or-llm","description":"Timeout in seconds for the actor run. Example: 300 for 5 minutes, 3600 for 1 hour"},"build":{"type":"string","required":false,"visibility":"user-or-llm","description":"Actor build to run. Examples: \\"latest\\", \\"beta\\", \\"1.2.3\\", \\"build-tag-name\\""}},"oauth":{"required":false,"provider":"apify","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apify_run_task":{"id":"apify_run_task","name":"APIFY Run Task","description":"Run a saved APIFY actor task synchronously and get dataset items (max 5 minutes)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"APIFY API token from console.apify.com/account#/integrations"},"taskId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Task ID or username/task-name. Examples: \\"janedoe/my-task\\", \\"moJRLRc85AitArpNN\\""},"input":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON string that overrides the task\'s saved input. Example: { \\"startUrls\\": [ { \\"url\\": \\"https://example.com\\" } ] }"},"itemLimit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Max dataset items to return (1-250000). Example: 500"},"memory":{"type":"number","required":false,"visibility":"user-or-llm","description":"Memory in megabytes allocated for the run (128-32768). Example: 1024 for 1GB"},"timeout":{"type":"number","required":false,"visibility":"user-or-llm","description":"Timeout in seconds for the run. Example: 300 for 5 minutes"},"build":{"type":"string","required":false,"visibility":"user-or-llm","description":"Actor build to run. Examples: \\"latest\\", \\"beta\\", \\"1.2.3\\""}},"oauth":{"required":false,"provider":"apify","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_account_bulk_create":{"id":"apollo_account_bulk_create","name":"Apollo Bulk Create Accounts","description":"Create up to 100 accounts at once in your Apollo database. Set run_dedupe=true to deduplicate by domain, organization_id, and name. Master key required.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"accounts":{"type":"array","required":true,"visibility":"user-or-llm","description":"Array of accounts to create (max 100). Each account should include a name, and may optionally include domain, phone, phone_status_cd, raw_address, owner_id, linkedin_url, facebook_url, twitter_url, salesforce_id, and hubspot_id."},"append_label_names":{"type":"array","required":false,"visibility":"user-only","description":"Array of label names to add to ALL accounts in this request"},"run_dedupe":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"When true, performs aggressive deduplication by domain, organization_id, and name (defaults to false)"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_account_bulk_update":{"id":"apollo_account_bulk_update","name":"Apollo Bulk Update Accounts","description":"Update up to 1000 existing accounts at once in your Apollo database (higher limit than contacts!). Each account must include an id field. Master key required.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"account_ids":{"type":"array","required":false,"visibility":"user-or-llm","description":"Array of account IDs to update with the same values (max 1000). Use with name/owner_id for uniform updates. Use either this OR account_attributes."},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"When using account_ids, apply this name to all accounts"},"owner_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"When using account_ids, apply this owner to all accounts"},"account_stage_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"When using account_ids, apply this account stage to all accounts"},"account_attributes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Array of account objects with individual updates (each must include id). Example: [{\\"id\\": \\"acc1\\", \\"name\\": \\"Acme\\", \\"owner_id\\": \\"u1\\", \\"account_stage_id\\": \\"s1\\", \\"typed_custom_fields\\": {\\"field_id\\": \\"value\\"}}]"},"async":{"type":"boolean","required":false,"visibility":"user-only","description":"When true, processes the update asynchronously. Only supported when using account_ids; returns 422 if used with account_attributes."}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_account_create":{"id":"apollo_account_create","name":"Apollo Create Account","description":"Create a new account (company) in your Apollo database","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Company name (e.g., \\"Acme Corporation\\")"},"domain":{"type":"string","required":false,"visibility":"user-or-llm","description":"Company domain without www. prefix (e.g., \\"acme.com\\")"},"phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Primary phone number for the account"},"owner_id":{"type":"string","required":false,"visibility":"user-only","description":"Apollo user ID of the account owner"},"account_stage_id":{"type":"string","required":false,"visibility":"user-only","description":"Apollo ID for the account stage to assign this account to"},"raw_address":{"type":"string","required":false,"visibility":"user-or-llm","description":"Corporate location (e.g., \\"San Francisco, CA, USA\\")"},"typed_custom_fields":{"type":"json","required":false,"visibility":"user-only","description":"Custom field values as { custom_field_id: value } map"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_account_search":{"id":"apollo_account_search","name":"Apollo Search Accounts","description":"Search your team\'s accounts in Apollo. Display limit: 50,000 records (100 records per page, 500 pages max). Use filters to narrow results. Master key required.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"q_organization_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter accounts by organization name (partial-match search)"},"account_stage_ids":{"type":"array","required":false,"visibility":"user-only","description":"Filter by account stage IDs"},"account_label_ids":{"type":"array","required":false,"visibility":"user-only","description":"Filter by account label IDs"},"sort_by_field":{"type":"string","required":false,"visibility":"user-or-llm","description":"Sort field: \\"account_last_activity_date\\", \\"account_created_at\\", or \\"account_updated_at\\""},"sort_ascending":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Sort ascending when true. Defaults to descending."},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, max 100 (e.g., 25, 50, 100)"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_account_update":{"id":"apollo_account_update","name":"Apollo Update Account","description":"Update an existing account in your Apollo database","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"account_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the account to update (e.g., \\"acc_abc123\\")"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Company name (e.g., \\"Acme Corporation\\")"},"domain":{"type":"string","required":false,"visibility":"user-or-llm","description":"Company domain (e.g., \\"acme.com\\")"},"phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Company phone number"},"owner_id":{"type":"string","required":false,"visibility":"user-only","description":"Apollo user ID of the account owner"},"account_stage_id":{"type":"string","required":false,"visibility":"user-only","description":"Apollo ID for the account stage to assign this account to"},"raw_address":{"type":"string","required":false,"visibility":"user-or-llm","description":"Corporate location (e.g., \\"San Francisco, CA, USA\\")"},"typed_custom_fields":{"type":"json","required":false,"visibility":"user-only","description":"Custom field values as { custom_field_id: value } map"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_contact_bulk_create":{"id":"apollo_contact_bulk_create","name":"Apollo Bulk Create Contacts","description":"Create up to 100 contacts at once in your Apollo database. Supports deduplication to prevent creating duplicate contacts. Master key required.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"contacts":{"type":"array","required":true,"visibility":"user-or-llm","description":"Array of contacts to create (max 100). Each contact may include first_name, last_name, email, title, organization_name, account_id, owner_id, contact_stage_id, linkedin_url, phone (single string) or phone_numbers (array of {raw_number, position}), contact_emails, typed_custom_fields, and CRM IDs (salesforce_contact_id, hubspot_id, team_id) for cross-system matching"},"append_label_names":{"type":"array","required":false,"visibility":"user-or-llm","description":"Label names to add to all contacts in this request (e.g., [\\"Hot Lead\\"])"},"run_dedupe":{"type":"boolean","required":false,"visibility":"user-only","description":"Enable deduplication to prevent creating duplicate contacts. When true, existing contacts are returned without modification"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_contact_bulk_update":{"id":"apollo_contact_bulk_update","name":"Apollo Bulk Update Contacts","description":"Update up to 100 existing contacts at once in your Apollo database. Each contact must include an id field. Master key required.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"contact_ids":{"type":"array","required":false,"visibility":"user-or-llm","description":"Array of contact IDs to update. Must be paired with an object-form contact_attributes specifying the fields to apply uniformly to all listed contacts."},"contact_attributes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Required. Either an array of per-contact updates (each with id) — used standalone — or a single object of attributes to apply to all contact_ids. Supported fields: owner_id, email, organization_name, title, first_name, last_name, account_id, present_raw_address, linkedin_url, typed_custom_fields"},"async":{"type":"boolean","required":false,"visibility":"user-only","description":"Force asynchronous processing. Automatically enabled for >100 contacts"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_contact_create":{"id":"apollo_contact_create","name":"Apollo Create Contact","description":"Create a new contact in your Apollo database","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"first_name":{"type":"string","required":true,"visibility":"user-or-llm","description":"First name of the contact"},"last_name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Last name of the contact"},"email":{"type":"string","required":false,"visibility":"user-or-llm","description":"Email address of the contact"},"title":{"type":"string","required":false,"visibility":"user-or-llm","description":"Job title (e.g., \\"VP of Sales\\", \\"Software Engineer\\")"},"account_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"Apollo account ID to associate with (e.g., \\"acc_abc123\\")"},"owner_id":{"type":"string","required":false,"visibility":"user-only","description":"User ID of the contact owner (accepted by Apollo but not officially documented for POST /contacts)"},"organization_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Name of the contact\'s employer (e.g., \\"Apollo\\")"},"website_url":{"type":"string","required":false,"visibility":"user-or-llm","description":"Corporate website URL (e.g., \\"https://www.apollo.io/\\")"},"label_names":{"type":"array","required":false,"visibility":"user-or-llm","description":"Lists/labels to add the contact to (e.g., [\\"Prospects\\"])"},"contact_stage_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"Apollo ID for the contact stage"},"present_raw_address":{"type":"string","required":false,"visibility":"user-or-llm","description":"Personal location for the contact (e.g., \\"Atlanta, United States\\")"},"direct_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Primary phone number"},"corporate_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Work/office phone number"},"mobile_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Mobile phone number"},"home_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Home phone number"},"other_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Alternative phone number"},"typed_custom_fields":{"type":"json","required":false,"visibility":"user-or-llm","description":"Custom field values keyed by custom field ID"},"run_dedupe":{"type":"boolean","required":false,"visibility":"user-only","description":"When true, Apollo deduplicates against existing contacts"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_contact_search":{"id":"apollo_contact_search","name":"Apollo Search Contacts","description":"Search your team\'s contacts in Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"q_keywords":{"type":"string","required":false,"visibility":"user-or-llm","description":"Keywords to search for"},"contact_stage_ids":{"type":"array","required":false,"visibility":"user-only","description":"Filter by contact stage IDs"},"contact_label_ids":{"type":"array","required":false,"visibility":"user-only","description":"Filter by Apollo label IDs (lists)"},"sort_by_field":{"type":"string","required":false,"visibility":"user-only","description":"Sort field: contact_last_activity_date, contact_email_last_opened_at, contact_email_last_clicked_at, contact_created_at, or contact_updated_at"},"sort_ascending":{"type":"boolean","required":false,"visibility":"user-only","description":"When true, sort ascending. Must be used together with sort_by_field"},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, max 100 (e.g., 25, 50, 100)"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_contact_update":{"id":"apollo_contact_update","name":"Apollo Update Contact","description":"Update an existing contact in your Apollo database","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"contact_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the contact to update (e.g., \\"con_abc123\\")"},"first_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"First name of the contact"},"last_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Last name of the contact"},"email":{"type":"string","required":false,"visibility":"user-or-llm","description":"Email address"},"title":{"type":"string","required":false,"visibility":"user-or-llm","description":"Job title (e.g., \\"VP of Sales\\", \\"Software Engineer\\")"},"account_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"Apollo account ID (e.g., \\"acc_abc123\\")"},"owner_id":{"type":"string","required":false,"visibility":"user-only","description":"User ID of the contact owner (accepted by Apollo but not officially documented for PATCH /contacts/{id})"},"organization_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Name of the contact\'s employer (e.g., \\"Apollo\\")"},"website_url":{"type":"string","required":false,"visibility":"user-or-llm","description":"Corporate website URL (e.g., \\"https://www.apollo.io/\\")"},"label_names":{"type":"array","required":false,"visibility":"user-or-llm","description":"Lists/labels to add the contact to (e.g., [\\"Prospects\\"])"},"contact_stage_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"Apollo ID for the contact stage"},"present_raw_address":{"type":"string","required":false,"visibility":"user-or-llm","description":"Personal location for the contact (e.g., \\"Atlanta, United States\\")"},"direct_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Primary phone number"},"corporate_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Work/office phone number"},"mobile_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Mobile phone number"},"home_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Home phone number"},"other_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Alternative phone number"},"typed_custom_fields":{"type":"json","required":false,"visibility":"user-or-llm","description":"Custom field values keyed by custom field ID"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_email_accounts":{"id":"apollo_email_accounts","name":"Apollo Get Email Accounts","description":"Get list of team\'s linked email accounts in Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_opportunity_create":{"id":"apollo_opportunity_create","name":"Apollo Create Opportunity","description":"Create a new deal for an account in your Apollo database (master key required)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the opportunity/deal (e.g., \\"Enterprise License - Q1\\")"},"account_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"ID of the account this opportunity belongs to (e.g., \\"acc_abc123\\")"},"amount":{"type":"string","required":false,"visibility":"user-or-llm","description":"Monetary value as a plain number string with no commas or currency symbols"},"opportunity_stage_id":{"type":"string","required":false,"visibility":"user-only","description":"ID of the opportunity stage"},"owner_id":{"type":"string","required":false,"visibility":"user-only","description":"User ID of the opportunity owner"},"closed_date":{"type":"string","required":false,"visibility":"user-or-llm","description":"Expected close date in YYYY-MM-DD format"},"typed_custom_fields":{"type":"json","required":false,"visibility":"user-only","description":"Custom field values as { custom_field_id: value } map"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_opportunity_get":{"id":"apollo_opportunity_get","name":"Apollo Get Opportunity","description":"Retrieve complete details of a specific deal/opportunity by ID","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"opportunity_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the opportunity to retrieve (e.g., \\"opp_abc123\\")"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_opportunity_search":{"id":"apollo_opportunity_search","name":"Apollo Search Opportunities","description":"Search and list all deals/opportunities in your team\'s Apollo account","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"sort_by_field":{"type":"string","required":false,"visibility":"user-or-llm","description":"Sort field: \\"amount\\", \\"is_closed\\", or \\"is_won\\""},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, max 100 (e.g., 25, 50, 100)"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_opportunity_update":{"id":"apollo_opportunity_update","name":"Apollo Update Opportunity","description":"Update an existing deal/opportunity in your Apollo database","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"opportunity_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the opportunity to update (e.g., \\"opp_abc123\\")"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Name of the opportunity/deal (e.g., \\"Enterprise License - Q1\\")"},"amount":{"type":"string","required":false,"visibility":"user-or-llm","description":"Monetary value as a plain number string with no commas or currency symbols"},"opportunity_stage_id":{"type":"string","required":false,"visibility":"user-only","description":"ID of the opportunity stage"},"owner_id":{"type":"string","required":false,"visibility":"user-only","description":"User ID of the opportunity owner"},"closed_date":{"type":"string","required":false,"visibility":"user-or-llm","description":"Expected close date in YYYY-MM-DD format"},"typed_custom_fields":{"type":"json","required":false,"visibility":"user-only","description":"Custom field values as { custom_field_id: value } map"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_organization_bulk_enrich":{"id":"apollo_organization_bulk_enrich","name":"Apollo Bulk Organization Enrichment","description":"Enrich data for up to 10 organizations at once using Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"domains":{"type":"array","required":true,"visibility":"user-or-llm","description":"Array of company domains to enrich (max 10, no www. or @, e.g., [\\"apollo.io\\", \\"stripe.com\\"])"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_organization_enrich":{"id":"apollo_organization_enrich","name":"Apollo Organization Enrichment","description":"Enrich data for a single organization using Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"domain":{"type":"string","required":true,"visibility":"user-or-llm","description":"Company domain (e.g., \\"apollo.io\\", \\"acme.com\\")"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_organization_search":{"id":"apollo_organization_search","name":"Apollo Organization Search","description":"Search Apollo\'s database for companies using filters","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"organization_locations":{"type":"array","required":false,"visibility":"user-or-llm","description":"Company HQ locations (cities, US states, or countries)"},"organization_not_locations":{"type":"array","required":false,"visibility":"user-or-llm","description":"Exclude companies whose HQ is in these locations"},"organization_num_employees_ranges":{"type":"array","required":false,"visibility":"user-or-llm","description":"Employee count ranges as \\"min,max\\" strings (e.g., [\\"1,10\\", \\"250,500\\", \\"10000,20000\\"])"},"q_organization_keyword_tags":{"type":"array","required":false,"visibility":"user-or-llm","description":"Industry or keyword tags"},"q_organization_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Organization name to search for (e.g., \\"Acme\\", \\"TechCorp\\")"},"organization_ids":{"type":"array","required":false,"visibility":"user-or-llm","description":"Apollo organization IDs to include (e.g., [\\"5e66b6381e05b4008c8331b8\\"])"},"q_organization_domains_list":{"type":"array","required":false,"visibility":"user-or-llm","description":"Domain names to filter by (no www. or @, up to 1,000)"},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, max 100 (e.g., 25, 50, 100)"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_people_bulk_enrich":{"id":"apollo_people_bulk_enrich","name":"Apollo Bulk People Enrichment","description":"Enrich data for up to 10 people at once using Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"people":{"type":"array","required":true,"visibility":"user-or-llm","description":"Array of people to enrich (max 10)"},"reveal_personal_emails":{"type":"boolean","required":false,"visibility":"user-only","description":"Reveal personal email addresses (uses credits)"},"reveal_phone_number":{"type":"boolean","required":false,"visibility":"user-only","description":"Reveal phone numbers (uses credits, requires webhook_url)"},"webhook_url":{"type":"string","required":false,"visibility":"user-only","description":"Webhook URL for async phone number delivery (required when reveal_phone_number is true)"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_people_enrich":{"id":"apollo_people_enrich","name":"Apollo People Enrichment","description":"Enrich data for a single person using Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"first_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"First name of the person"},"last_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Last name of the person"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Full name of the person (alternative to first_name/last_name)"},"id":{"type":"string","required":false,"visibility":"user-or-llm","description":"Apollo ID for the person"},"hashed_email":{"type":"string","required":false,"visibility":"user-or-llm","description":"MD5 or SHA-256 hashed email"},"email":{"type":"string","required":false,"visibility":"user-or-llm","description":"Email address of the person"},"organization_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Company name where the person works"},"domain":{"type":"string","required":false,"visibility":"user-or-llm","description":"Company domain (e.g., \\"apollo.io\\", \\"acme.com\\")"},"linkedin_url":{"type":"string","required":false,"visibility":"user-or-llm","description":"LinkedIn profile URL"},"reveal_personal_emails":{"type":"boolean","required":false,"visibility":"user-only","description":"Reveal personal email addresses (uses credits)"},"reveal_phone_number":{"type":"boolean","required":false,"visibility":"user-only","description":"Reveal phone numbers (uses credits, requires webhook_url)"},"webhook_url":{"type":"string","required":false,"visibility":"user-only","description":"Webhook URL for async phone number delivery (required when reveal_phone_number is true)"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_people_search":{"id":"apollo_people_search","name":"Apollo People Search","description":"Search Apollo\'s database for people using demographic filters","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"person_titles":{"type":"array","required":false,"visibility":"user-or-llm","description":"Job titles to search for (e.g., [\\"CEO\\", \\"VP of Sales\\"])"},"include_similar_titles":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Whether to return people with job titles similar to person_titles"},"person_locations":{"type":"array","required":false,"visibility":"user-or-llm","description":"Locations to search in (e.g., [\\"San Francisco, CA\\", \\"New York, NY\\"])"},"person_seniorities":{"type":"array","required":false,"visibility":"user-or-llm","description":"Seniority levels (one of: owner, founder, c_suite, partner, vp, head, director, manager, senior, entry, intern)"},"organization_ids":{"type":"array","required":false,"visibility":"user-or-llm","description":"Apollo organization IDs to filter by (e.g., [\\"5e66b6381e05b4008c8331b8\\"])"},"organization_names":{"type":"array","required":false,"visibility":"user-or-llm","description":"Company names to search within (legacy filter)"},"organization_locations":{"type":"array","required":false,"visibility":"user-or-llm","description":"Headquarters locations of the people\'s current employer (e.g., [\'texas\', \'tokyo\', \'spain\'])"},"q_organization_domains_list":{"type":"array","required":false,"visibility":"user-or-llm","description":"Employer domain names (e.g., [\\"apollo.io\\", \\"microsoft.com\\"]) — up to 1,000, no www. or @"},"organization_num_employees_ranges":{"type":"array","required":false,"visibility":"user-or-llm","description":"Employee count ranges for the person\'s current employer. Each entry is \\"min,max\\" (e.g., [\\"1,10\\", \\"250,500\\", \\"10000,20000\\"])"},"contact_email_status":{"type":"array","required":false,"visibility":"user-or-llm","description":"Email statuses to filter by: \\"verified\\", \\"unverified\\", \\"likely to engage\\", \\"unavailable\\""},"q_keywords":{"type":"string","required":false,"visibility":"user-or-llm","description":"Keywords to search for"},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination, default 1 (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, default 25, max 100 (e.g., 25, 50, 100)"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_sequence_add_contacts":{"id":"apollo_sequence_add_contacts","name":"Apollo Add Contacts to Sequence","description":"Add contacts to an Apollo sequence","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"sequence_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the sequence to add contacts to (e.g., \\"seq_abc123\\")"},"contact_ids":{"type":"array","required":false,"visibility":"user-or-llm","description":"Array of contact IDs to add to the sequence (e.g., [\\"con_abc123\\", \\"con_def456\\"]). Either contact_ids or label_names must be provided."},"label_names":{"type":"array","required":false,"visibility":"user-or-llm","description":"Array of label names to identify contacts to add to the sequence. Either contact_ids or label_names must be provided."},"send_email_from_email_account_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the email account to send from. Use the Get Email Accounts operation to look this up."},"send_email_from_email_address":{"type":"string","required":false,"visibility":"user-only","description":"Specific email address to send from within the email account."},"sequence_no_email":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts even if they have no email address"},"sequence_unverified_email":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts with unverified email addresses"},"sequence_job_change":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts who recently changed jobs"},"sequence_active_in_other_campaigns":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts active in other campaigns"},"sequence_finished_in_other_campaigns":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts who finished other campaigns"},"sequence_same_company_in_same_campaign":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts even if others from the same company are in the sequence"},"contacts_without_ownership_permission":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts without ownership permission"},"add_if_in_queue":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts even if they are in the queue"},"contact_verification_skipped":{"type":"boolean","required":false,"visibility":"user-only","description":"Skip contact verification when adding"},"user_id":{"type":"string","required":false,"visibility":"user-only","description":"ID of the user performing the action"},"status":{"type":"string","required":false,"visibility":"user-only","description":"Initial status for added contacts: \\"active\\" or \\"paused\\""},"auto_unpause_at":{"type":"string","required":false,"visibility":"user-only","description":"ISO 8601 datetime to automatically unpause contacts"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_sequence_search":{"id":"apollo_sequence_search","name":"Apollo Search Sequences","description":"Search for sequences/campaigns in your team\'s Apollo account (master key required)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"q_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search sequences by name (e.g., \\"Outbound Q1\\", \\"Follow-up\\")"},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, max 100 (e.g., 25, 50, 100)"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_task_create":{"id":"apollo_task_create","name":"Apollo Create Task","description":"Create one or more tasks in Apollo (one task per contact_id, master key required)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"user_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the Apollo user the task is assigned to"},"contact_ids":{"type":"array","required":true,"visibility":"user-or-llm","description":"Array of contact IDs. One task is created per contact."},"priority":{"type":"string","required":false,"visibility":"user-or-llm","description":"Task priority: \\"high\\", \\"medium\\", or \\"low\\" (defaults to \\"medium\\")"},"due_at":{"type":"string","required":true,"visibility":"user-or-llm","description":"Due date/time in ISO 8601 format (e.g., \\"2024-12-31T23:59:59Z\\")"},"type":{"type":"string","required":true,"visibility":"user-or-llm","description":"Task type: \\"call\\", \\"outreach_manual_email\\", \\"linkedin_step_connect\\", \\"linkedin_step_message\\", \\"linkedin_step_view_profile\\", \\"linkedin_step_interact_post\\", or \\"action_item\\""},"status":{"type":"string","required":true,"visibility":"user-or-llm","description":"Task status: \\"scheduled\\", \\"completed\\", or \\"skipped\\""},"note":{"type":"string","required":false,"visibility":"user-or-llm","description":"Free-form note providing context for the task"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"apollo_task_search":{"id":"apollo_task_search","name":"Apollo Search Tasks","description":"Search for tasks in Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"sort_by_field":{"type":"string","required":false,"visibility":"user-or-llm","description":"Sort field: \\"task_due_at\\" or \\"task_priority\\""},"open_factor_names":{"type":"array","required":false,"visibility":"user-or-llm","description":"Filter by status. Common values: [\\"task_types\\"] for open tasks, [\\"task_completed_at\\"] for completed tasks."},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, max 100 (e.g., 25, 50, 100)"}},"oauth":{"required":false,"provider":"apollo","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"appconfig_create_application":{"id":"appconfig_create_application","name":"AppConfig Create Application","description":"Create an application in AWS AppConfig","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the application to create"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"Description of the application"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_create_configuration_profile":{"id":"appconfig_create_configuration_profile","name":"AppConfig Create Configuration Profile","description":"Create a configuration profile in an AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID to create the configuration profile in"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the configuration profile"},"locationUri":{"type":"string","required":true,"visibility":"user-or-llm","description":"Where the configuration is stored. Use \\"hosted\\" for AppConfig-hosted configurations, or an SSM/S3 URI"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"Description of the configuration profile"},"retrievalRoleArn":{"type":"string","required":false,"visibility":"user-or-llm","description":"ARN of an IAM role to retrieve the configuration (required for non-hosted URIs)"},"type":{"type":"string","required":false,"visibility":"user-or-llm","description":"Profile type: AWS.Freeform (default) or AWS.AppConfig.FeatureFlags"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_create_environment":{"id":"appconfig_create_environment","name":"AppConfig Create Environment","description":"Create an environment for an AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID to create the environment in"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the environment to create"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"Description of the environment"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_create_hosted_configuration_version":{"id":"appconfig_create_hosted_configuration_version","name":"AppConfig Create Hosted Configuration Version","description":"Create a new hosted configuration version for an AppConfig configuration profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to add the version to"},"content":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration content (e.g., a JSON or YAML document)"},"contentType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Content type of the configuration (e.g., application/json, text/plain)"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"Description of the configuration version"},"latestVersionNumber":{"type":"number","required":false,"visibility":"user-or-llm","description":"The version number of the latest version, used for optimistic concurrency"},"versionLabel":{"type":"string","required":false,"visibility":"user-or-llm","description":"A user-defined label for the configuration version"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_delete_application":{"id":"appconfig_delete_application","name":"AppConfig Delete Application","description":"Delete an AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID to delete"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_delete_configuration_profile":{"id":"appconfig_delete_configuration_profile","name":"AppConfig Delete Configuration Profile","description":"Delete an AWS AppConfig configuration profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to delete"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_delete_environment":{"id":"appconfig_delete_environment","name":"AppConfig Delete Environment","description":"Delete an AWS AppConfig environment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the environment"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID to delete"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_delete_hosted_configuration_version":{"id":"appconfig_delete_hosted_configuration_version","name":"AppConfig Delete Hosted Configuration Version","description":"Delete a specific hosted configuration version from an AppConfig profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID that owns the version"},"versionNumber":{"type":"number","required":true,"visibility":"user-or-llm","description":"The version number to delete"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_get_application":{"id":"appconfig_get_application","name":"AppConfig Get Application","description":"Get details about a single AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID to retrieve"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_get_configuration":{"id":"appconfig_get_configuration","name":"AppConfig Get Configuration","description":"Retrieve the latest deployed configuration for an AppConfig application, environment, and profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID or name to retrieve configuration for"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID or name to retrieve configuration for"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID or name to retrieve"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_get_configuration_profile":{"id":"appconfig_get_configuration_profile","name":"AppConfig Get Configuration Profile","description":"Get details about a single AWS AppConfig configuration profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to retrieve"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_get_deployment":{"id":"appconfig_get_deployment","name":"AppConfig Get Deployment","description":"Get details about a specific AWS AppConfig deployment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID of the deployment"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID of the deployment"},"deploymentNumber":{"type":"number","required":true,"visibility":"user-or-llm","description":"The sequence number of the deployment"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_get_environment":{"id":"appconfig_get_environment","name":"AppConfig Get Environment","description":"Get details about a single AWS AppConfig environment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the environment"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID to retrieve"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_get_hosted_configuration_version":{"id":"appconfig_get_hosted_configuration_version","name":"AppConfig Get Hosted Configuration Version","description":"Retrieve a specific hosted configuration version from an AppConfig profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to read the version from"},"versionNumber":{"type":"number","required":true,"visibility":"user-or-llm","description":"The version number to retrieve"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_list_applications":{"id":"appconfig_list_applications","name":"AppConfig List Applications","description":"List applications in AWS AppConfig","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"maxResults":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of applications to return (1-50)"},"nextToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token from a previous response"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_list_configuration_profiles":{"id":"appconfig_list_configuration_profiles","name":"AppConfig List Configuration Profiles","description":"List configuration profiles for an AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profiles"},"maxResults":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of configuration profiles to return (1-50)"},"nextToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token from a previous response"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_list_deployment_strategies":{"id":"appconfig_list_deployment_strategies","name":"AppConfig List Deployment Strategies","description":"List deployment strategies available in AWS AppConfig","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"maxResults":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of deployment strategies to return (1-50)"},"nextToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token from a previous response"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_list_deployments":{"id":"appconfig_list_deployments","name":"AppConfig List Deployments","description":"List deployments for an AWS AppConfig environment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID of the deployments"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID of the deployments"},"maxResults":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of deployments to return (1-50)"},"nextToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token from a previous response"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_list_environments":{"id":"appconfig_list_environments","name":"AppConfig List Environments","description":"List environments for an AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the environments"},"maxResults":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of environments to return (1-50)"},"nextToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token from a previous response"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_list_hosted_configuration_versions":{"id":"appconfig_list_hosted_configuration_versions","name":"AppConfig List Hosted Configuration Versions","description":"List hosted configuration versions for an AWS AppConfig configuration profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to list versions for"},"maxResults":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of versions to return (1-50)"},"nextToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token from a previous response"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_start_deployment":{"id":"appconfig_start_deployment","name":"AppConfig Start Deployment","description":"Start deploying a configuration version to an AWS AppConfig environment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID to deploy in"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID to deploy to"},"deploymentStrategyId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The deployment strategy ID to use"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to deploy"},"configurationVersion":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration version to deploy"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"Description of the deployment"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_stop_deployment":{"id":"appconfig_stop_deployment","name":"AppConfig Stop Deployment","description":"Stop an in-progress AWS AppConfig deployment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID of the deployment"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID of the deployment"},"deploymentNumber":{"type":"number","required":true,"visibility":"user-or-llm","description":"The sequence number of the deployment to stop"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_update_application":{"id":"appconfig_update_application","name":"AppConfig Update Application","description":"Update the name or description of an AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID to update"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"New name for the application"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"New description for the application"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_update_configuration_profile":{"id":"appconfig_update_configuration_profile","name":"AppConfig Update Configuration Profile","description":"Update the name, description, or retrieval role of an AppConfig configuration profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to update"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"New name for the configuration profile"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"New description for the configuration profile"},"retrievalRoleArn":{"type":"string","required":false,"visibility":"user-or-llm","description":"New ARN of the IAM role used to retrieve the configuration"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"appconfig_update_environment":{"id":"appconfig_update_environment","name":"AppConfig Update Environment","description":"Update the name or description of an AWS AppConfig environment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the environment"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID to update"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"New name for the environment"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"New description for the environment"}},"oauth":{"required":false,"provider":"aws","credentialKind":"service-account","credentialSuppliedParams":["accessKeyId","secretAccessKey","awsAccessKeyId","awsSecretAccessKey"]},"hostedApiKey":"none"},"arxiv_get_author_papers":{"id":"arxiv_get_author_papers","name":"ArXiv Get Author Papers","description":"Search for papers by a specific author on ArXiv.","version":"1.0.0","params":{"authorName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Author name to search for"},"maxResults":{"type":"number","required":false,"visibility":"user-only","description":"Maximum number of results to return (default: 10, max: 2000)"}},"hostedApiKey":"none"},"arxiv_get_paper":{"id":"arxiv_get_paper","name":"ArXiv Get Paper","description":"Get detailed information about a specific ArXiv paper by its ID.","version":"1.0.0","params":{"paperId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ArXiv paper ID (e.g., \\"1706.03762\\")"}},"hostedApiKey":"none"},"arxiv_search":{"id":"arxiv_search","name":"ArXiv Search","description":"Search for academic papers on ArXiv by keywords, authors, titles, or other fields.","version":"1.0.0","params":{"searchQuery":{"type":"string","required":true,"visibility":"user-or-llm","description":"The search query to execute"},"searchField":{"type":"string","required":false,"visibility":"user-only","description":"Field to search in: all, ti (title), au (author), abs (abstract), co (comment), jr (journal), cat (category), rn (report number)"},"maxResults":{"type":"number","required":false,"visibility":"user-only","description":"Maximum number of results to return (default: 10, max: 2000)"},"sortBy":{"type":"string","required":false,"visibility":"user-only","description":"Sort by: relevance, lastUpdatedDate, submittedDate (default: relevance)"},"sortOrder":{"type":"string","required":false,"visibility":"user-only","description":"Sort order: ascending, descending (default: descending)"}},"hostedApiKey":"none"},"asana_add_comment":{"id":"asana_add_comment","name":"Asana Add Comment","description":"Add a comment (story) to an Asana task","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"taskGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana task GID (numeric string)"},"text":{"type":"string","required":true,"visibility":"user-or-llm","description":"The text content of the comment"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_add_followers":{"id":"asana_add_followers","name":"Asana Add Followers","description":"Add one or more followers to an Asana task","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"taskGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"GID of the Asana task (numeric string)"},"followers":{"type":"array","required":true,"visibility":"user-or-llm","description":"Array of user GIDs to add as followers to the task"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_create_project":{"id":"asana_create_project","name":"Asana Create Project","description":"Create a new project in an Asana workspace","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"workspace":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana workspace GID (numeric string) where the project will be created"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the project"},"notes":{"type":"string","required":false,"visibility":"user-or-llm","description":"Notes or description for the project"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_create_section":{"id":"asana_create_section","name":"Asana Create Section","description":"Create a new section in an Asana project","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"projectGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"GID of the Asana project (numeric string) to add the section to"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the section"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_create_subtask":{"id":"asana_create_subtask","name":"Asana Create Subtask","description":"Create a subtask under an existing Asana task","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"taskGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"GID of the parent Asana task (numeric string)"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the subtask"},"notes":{"type":"string","required":false,"visibility":"user-or-llm","description":"Notes or description for the subtask"},"assignee":{"type":"string","required":false,"visibility":"user-or-llm","description":"User GID to assign the subtask to"},"due_on":{"type":"string","required":false,"visibility":"user-or-llm","description":"Due date in YYYY-MM-DD format"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_create_task":{"id":"asana_create_task","name":"Asana Create Task","description":"Create a new task in Asana","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"workspace":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana workspace GID (numeric string) where the task will be created"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the task"},"notes":{"type":"string","required":false,"visibility":"user-or-llm","description":"Notes or description for the task"},"assignee":{"type":"string","required":false,"visibility":"user-or-llm","description":"User GID to assign the task to"},"due_on":{"type":"string","required":false,"visibility":"user-or-llm","description":"Due date in YYYY-MM-DD format"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_delete_task":{"id":"asana_delete_task","name":"Asana Delete Task","description":"Delete an Asana task by its GID (moves it to the trash)","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"taskGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"GID of the Asana task to delete (numeric string)"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_get_project":{"id":"asana_get_project","name":"Asana Get Project","description":"Retrieve a single Asana project by its GID","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"projectGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana project GID (numeric string) to retrieve"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_get_projects":{"id":"asana_get_projects","name":"Asana Get Projects","description":"Retrieve all projects from an Asana workspace","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"workspace":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana workspace GID (numeric string) to retrieve projects from"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_get_task":{"id":"asana_get_task","name":"Asana Get Task","description":"Retrieve a single task by GID or get multiple tasks with filters","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"taskGid":{"type":"string","required":false,"visibility":"user-or-llm","description":"The globally unique identifier (GID) of the task. If not provided, will get multiple tasks."},"workspace":{"type":"string","required":false,"visibility":"user-or-llm","description":"Asana workspace GID (numeric string) to filter tasks (required when not using taskGid)"},"project":{"type":"string","required":false,"visibility":"user-or-llm","description":"Asana project GID (numeric string) to filter tasks"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of tasks to return (default: 50)"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_list_sections":{"id":"asana_list_sections","name":"Asana List Sections","description":"List all sections in an Asana project","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"projectGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"GID of the Asana project (numeric string) to list sections from"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_list_workspaces":{"id":"asana_list_workspaces","name":"Asana List Workspaces","description":"List all Asana workspaces and organizations the authenticated user belongs to","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_search_tasks":{"id":"asana_search_tasks","name":"Asana Search Tasks","description":"Search for tasks in an Asana workspace","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"workspace":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana workspace GID (numeric string) to search tasks in"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Text to search for in task names"},"assignee":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter tasks by assignee user GID"},"projects":{"type":"array","required":false,"visibility":"user-or-llm","description":"Array of Asana project GIDs (numeric strings) to filter tasks by"},"completed":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Filter by completion status"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_update_task":{"id":"asana_update_task","name":"Asana Update Task","description":"Update an existing task in Asana","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"taskGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana task GID (numeric string) of the task to update"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Updated name for the task"},"notes":{"type":"string","required":false,"visibility":"user-or-llm","description":"Updated notes or description for the task"},"assignee":{"type":"string","required":false,"visibility":"user-or-llm","description":"Updated assignee user GID"},"completed":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Mark task as completed or not completed"},"due_on":{"type":"string","required":false,"visibility":"user-or-llm","description":"Updated due date in YYYY-MM-DD format"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"ashby_add_candidate_tag":{"id":"ashby_add_candidate_tag","name":"Ashby Add Candidate Tag","description":"Adds a tag to a candidate in Ashby and returns the updated candidate.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"onBehalfOfUserId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Active Ashby user UUID to attribute this mutation to; the API key must permit on-behalf-of calls"},"candidateId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the candidate to add the tag to"},"tagId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the tag to add"}},"oauth":{"required":false,"provider":"ashby","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ashby_anonymize_candidate":{"id":"ashby_anonymize_candidate","name":"Ashby Anonymize Candidate","description":"Remove personally identifiable information from an Ashby candidate while retaining the candidate record and its applications. This operation does not delete the candidate. Requires the candidatesWrite permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"onBehalfOfUserId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Active Ashby user UUID to attribute this mutation to; the API key must permit on-behalf-of calls"},"candidateId":{"type":"string","required":true,"visibility":"user-or-llm","description":"UUID of the candidate to anonymize"}},"oauth":{"required":false,"provider":"ashby","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ashby_change_application_source":{"id":"ashby_change_application_source","name":"Ashby Change Application Source","description":"Changes the source attributed to an existing application, so programmatically created applications report correctly on the recruiting side. Requires the candidatesWrite permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"onBehalfOfUserId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Active Ashby user UUID to attribute this mutation to; the API key must permit on-behalf-of calls"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"UUID of the application whose source should change"},"sourceId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the source to attribute the application to, as returned by List Sources. Omit only when unsetSource is true."},"unsetSource":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Set true to deliberately clear the application source. Required to unset, so that a missing or empty sourceId cannot wipe attribution by accident."}},"oauth":{"required":false,"provider":"ashby","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ashby_change_application_stage":{"id":"ashby_change_application_stage","name":"Ashby Change Application Stage","description":"Moves an application to a different interview stage. Requires an archive reason when moving to an Archived stage.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"onBehalfOfUserId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Active Ashby user UUID to attribute this mutation to; the API key must permit on-behalf-of calls"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the application to update the stage of"},"interviewStageId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the interview stage to move the application to"},"archiveReasonId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Archive reason UUID. Required when moving to an Archived stage, ignored otherwise"},"archiveEmail":{"type":"json","required":false,"visibility":"user-or-llm","description":"Archive email configuration with communicationTemplateId and optional sendAt ISO 8601 timestamp. Pass null or omit to send no archive email."}},"oauth":{"required":false,"provider":"ashby","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ashby_create_application":{"id":"ashby_create_application","name":"Ashby Create Application","description":"Creates a new application for a candidate on a job. Optionally specify interview plan, stage, source, and credited user.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"onBehalfOfUserId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Active Ashby user UUID to attribute this mutation to; the API key must permit on-behalf-of calls"},"candidateId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the candidate to consider for the job"},"jobId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the job to consider the candidate for"},"interviewPlanId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the interview plan to use (defaults to the job default plan)"},"interviewStageId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the interview stage to place the application in, or FirstPreInterviewScreen (defaults to the first Lead stage)"},"sourceId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the source to set on the application"},"creditedToUserId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the user the application is credited to"},"createdAt":{"type":"string","required":false,"visibility":"user-or-llm","description":"ISO 8601 timestamp to set as the application creation date (defaults to now)"},"applicationHistory":{"type":"json","required":false,"visibility":"user-or-llm","description":"Optional documented application history entries to create with the application"}},"oauth":{"required":false,"provider":"ashby","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ashby_create_candidate":{"id":"ashby_create_candidate","name":"Ashby Create Candidate","description":"Creates a new candidate record in Ashby.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"onBehalfOfUserId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Active Ashby user UUID to attribute this mutation to; the API key must permit on-behalf-of calls"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"The candidate full name"},"email":{"type":"string","required":false,"visibility":"user-or-llm","description":"Primary email address for the candidate"},"phoneNumber":{"type":"string","required":false,"visibility":"user-or-llm","description":"Primary phone number for the candidate"},"linkedInUrl":{"type":"string","required":false,"visibility":"user-or-llm","description":"LinkedIn profile URL"},"githubUrl":{"type":"string","required":false,"visibility":"user-or-llm","description":"GitHub profile URL"},"website":{"type":"string","required":false,"visibility":"user-or-llm","description":"Personal website URL"},"sourceId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the source to attribute the candidate to"},"creditedToUserId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the Ashby user to credit with sourcing this candidate"},"createdAt":{"type":"string","required":false,"visibility":"user-or-llm","description":"Backdated creation timestamp in ISO 8601 (e.g. 2024-01-01T00:00:00Z). Defaults to now."},"alternateEmailAddresses":{"type":"json","required":false,"visibility":"user-or-llm","description":"Array of additional email address strings to add to the candidate, e.g. [\\"a@x.com\\",\\"b@y.com\\"]"},"location":{"type":"json","required":false,"visibility":"user-or-llm","description":"Candidate location object with optional city, region, and country"}},"oauth":{"required":false,"provider":"ashby","credentialKind":"service-account","credentialParams":{"apiKey":"accessToken"},"credentialSuppliedParams":["apiKey"]},"hostedApiKey":"none"},"ashby_create_note":{"id":"ashby_create_note","name":"Ashby Create Note","description":"Creates a note on a candidate in Ashby. Supports plain text and HTML content (bold, italic, underline, links, lists, code).","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"onBehalfOfUserId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Active Ashby user UUID to attribute this mutation to; the API key must permit on-behalf-of calls"},"candidateId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the candidate to add the note to"},"note":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note content. If noteType is text/html, supports: , , , ,