From 63e9e55dd7060b2d5d7559d3ae6240cf6e9e0946 Mon Sep 17 00:00:00 2001 From: Marcus Chandra Date: Wed, 29 Jul 2026 23:36:00 -0700 Subject: [PATCH 01/10] feat(sailpoint): add SailPoint (IGA) integration Add a SailPoint Identity Security Cloud integration with 27 tools spanning identity-governance reads (search + count + aggregate, identities, accounts, entitlements, roles, access profiles, sources, account activities, campaigns, certifications, and entitlement expansion), the access-request write path (request, cancel, status), and CSV account/entitlement aggregation. Auth uses a service-identity Personal Access Token via the OAuth2 client-credentials grant against the per-tenant host (https://{tenant}.api.identitynow.com), resolved server-side in two internal routes (/api/tools/sailpoint/query and /load) with in-process token caching and Retry-After 429 backoff. The block enumerates the exact PAT scopes and the service-identity caveat. Access-request constraints (revoke one identity + one item, grant 25-entitlement / 10-identity caps, comment-on-revoke) are enforced pre-submission, and empty userAuth reads surface a permission-gap diagnostic. --- apps/docs/components/icons.tsx | 12 + apps/docs/components/ui/icon-mapping.ts | 2 + .../content/docs/en/integrations/meta.json | 1 + .../docs/en/integrations/sailpoint.mdx | 774 +++++++++++++++ apps/sim/app/api/tools/sailpoint/client.ts | 204 ++++ .../api/tools/sailpoint/load/route.test.ts | 75 ++ .../sim/app/api/tools/sailpoint/load/route.ts | 127 +++ .../api/tools/sailpoint/query/route.test.ts | 231 +++++ .../app/api/tools/sailpoint/query/route.ts | 476 ++++++++++ apps/sim/blocks/blocks/sailpoint.ts | 885 ++++++++++++++++++ apps/sim/blocks/registry-maps.ts | 3 + apps/sim/components/icons.tsx | 12 + apps/sim/lib/api/contracts/tools/sailpoint.ts | 471 ++++++++++ apps/sim/lib/integrations/icon-mapping.ts | 2 + apps/sim/lib/integrations/integrations.json | 127 +++ apps/sim/tools/registry.ts | 56 ++ .../tools/sailpoint/cancel_access_request.ts | 57 ++ apps/sim/tools/sailpoint/common.ts | 142 +++ .../get_access_profile_entitlements.ts | 69 ++ .../sailpoint/get_access_request_status.ts | 98 ++ apps/sim/tools/sailpoint/get_account.ts | 43 + .../tools/sailpoint/get_account_activity.ts | 46 + .../sailpoint/get_account_entitlements.ts | 55 ++ apps/sim/tools/sailpoint/get_campaign.ts | 53 ++ apps/sim/tools/sailpoint/get_entitlement.ts | 46 + apps/sim/tools/sailpoint/get_identity.ts | 43 + .../tools/sailpoint/get_role_entitlements.ts | 69 ++ apps/sim/tools/sailpoint/get_source.ts | 43 + apps/sim/tools/sailpoint/index.ts | 28 + .../tools/sailpoint/list_access_profiles.ts | 62 ++ .../sailpoint/list_account_activities.ts | 84 ++ apps/sim/tools/sailpoint/list_accounts.ts | 69 ++ apps/sim/tools/sailpoint/list_campaigns.ts | 70 ++ .../list_certification_review_items.ts | 90 ++ .../tools/sailpoint/list_certifications.ts | 70 ++ apps/sim/tools/sailpoint/list_entitlements.ts | 76 ++ apps/sim/tools/sailpoint/list_identities.ts | 70 ++ apps/sim/tools/sailpoint/list_roles.ts | 59 ++ apps/sim/tools/sailpoint/list_sources.ts | 76 ++ apps/sim/tools/sailpoint/load_accounts.ts | 61 ++ apps/sim/tools/sailpoint/load_entitlements.ts | 57 ++ apps/sim/tools/sailpoint/request_access.ts | 75 ++ apps/sim/tools/sailpoint/search.ts | 82 ++ apps/sim/tools/sailpoint/search_aggregate.ts | 72 ++ apps/sim/tools/sailpoint/search_count.ts | 54 ++ apps/sim/tools/sailpoint/types.ts | 185 ++++ scripts/check-api-validation-contracts.ts | 4 +- 47 files changed, 5564 insertions(+), 2 deletions(-) create mode 100644 apps/docs/content/docs/en/integrations/sailpoint.mdx create mode 100644 apps/sim/app/api/tools/sailpoint/client.ts create mode 100644 apps/sim/app/api/tools/sailpoint/load/route.test.ts create mode 100644 apps/sim/app/api/tools/sailpoint/load/route.ts create mode 100644 apps/sim/app/api/tools/sailpoint/query/route.test.ts create mode 100644 apps/sim/app/api/tools/sailpoint/query/route.ts create mode 100644 apps/sim/blocks/blocks/sailpoint.ts create mode 100644 apps/sim/lib/api/contracts/tools/sailpoint.ts create mode 100644 apps/sim/tools/sailpoint/cancel_access_request.ts create mode 100644 apps/sim/tools/sailpoint/common.ts create mode 100644 apps/sim/tools/sailpoint/get_access_profile_entitlements.ts create mode 100644 apps/sim/tools/sailpoint/get_access_request_status.ts create mode 100644 apps/sim/tools/sailpoint/get_account.ts create mode 100644 apps/sim/tools/sailpoint/get_account_activity.ts create mode 100644 apps/sim/tools/sailpoint/get_account_entitlements.ts create mode 100644 apps/sim/tools/sailpoint/get_campaign.ts create mode 100644 apps/sim/tools/sailpoint/get_entitlement.ts create mode 100644 apps/sim/tools/sailpoint/get_identity.ts create mode 100644 apps/sim/tools/sailpoint/get_role_entitlements.ts create mode 100644 apps/sim/tools/sailpoint/get_source.ts create mode 100644 apps/sim/tools/sailpoint/index.ts create mode 100644 apps/sim/tools/sailpoint/list_access_profiles.ts create mode 100644 apps/sim/tools/sailpoint/list_account_activities.ts create mode 100644 apps/sim/tools/sailpoint/list_accounts.ts create mode 100644 apps/sim/tools/sailpoint/list_campaigns.ts create mode 100644 apps/sim/tools/sailpoint/list_certification_review_items.ts create mode 100644 apps/sim/tools/sailpoint/list_certifications.ts create mode 100644 apps/sim/tools/sailpoint/list_entitlements.ts create mode 100644 apps/sim/tools/sailpoint/list_identities.ts create mode 100644 apps/sim/tools/sailpoint/list_roles.ts create mode 100644 apps/sim/tools/sailpoint/list_sources.ts create mode 100644 apps/sim/tools/sailpoint/load_accounts.ts create mode 100644 apps/sim/tools/sailpoint/load_entitlements.ts create mode 100644 apps/sim/tools/sailpoint/request_access.ts create mode 100644 apps/sim/tools/sailpoint/search.ts create mode 100644 apps/sim/tools/sailpoint/search_aggregate.ts create mode 100644 apps/sim/tools/sailpoint/search_count.ts create mode 100644 apps/sim/tools/sailpoint/types.ts diff --git a/apps/docs/components/icons.tsx b/apps/docs/components/icons.tsx index efedba2000d..b541e3328d9 100644 --- a/apps/docs/components/icons.tsx +++ b/apps/docs/components/icons.tsx @@ -5166,6 +5166,18 @@ export function PipedriveIcon(props: SVGProps) { ) } +export function SailPointIcon(props: SVGProps) { + return ( + + + + + ) +} + export function SalesforceIcon(props: SVGProps) { return ( diff --git a/apps/docs/components/ui/icon-mapping.ts b/apps/docs/components/ui/icon-mapping.ts index 8070694868b..5786dafaf20 100644 --- a/apps/docs/components/ui/icon-mapping.ts +++ b/apps/docs/components/ui/icon-mapping.ts @@ -190,6 +190,7 @@ import { RootlyIcon, RssIcon, S3Icon, + SailPointIcon, SalesforceIcon, SapConcurIcon, SapS4HanaIcon, @@ -470,6 +471,7 @@ export const blockTypeToIconMap: Record = { rootly: RootlyIcon, rss: RssIcon, s3: S3Icon, + sailpoint: SailPointIcon, salesforce: SalesforceIcon, sap_concur: SapConcurIcon, sap_s4hana: SapS4HanaIcon, diff --git a/apps/docs/content/docs/en/integrations/meta.json b/apps/docs/content/docs/en/integrations/meta.json index 56235d7d9c2..1b48b092fcc 100644 --- a/apps/docs/content/docs/en/integrations/meta.json +++ b/apps/docs/content/docs/en/integrations/meta.json @@ -200,6 +200,7 @@ "rocketlane", "rootly", "s3", + "sailpoint", "salesforce", "salesforce-service-account", "sap_concur", diff --git a/apps/docs/content/docs/en/integrations/sailpoint.mdx b/apps/docs/content/docs/en/integrations/sailpoint.mdx new file mode 100644 index 00000000000..cbe1c6ebfff --- /dev/null +++ b/apps/docs/content/docs/en/integrations/sailpoint.mdx @@ -0,0 +1,774 @@ +--- +title: SailPoint +description: Govern identities and access in SailPoint Identity Security Cloud +--- + +import { BlockInfoCard } from "@/components/ui/block-info-card" + + + +## Usage Instructions + +Read and act on identity governance data in SailPoint Identity Security Cloud (ISC): search identities, accounts, entitlements, roles, and access profiles; review account activities, campaigns, and certifications; and request, revoke, or cancel access. Authenticates with a Personal Access Token (PAT) using the OAuth2 client-credentials grant against your per-tenant host (https://{tenant}.api.identitynow.com). + + + +## Actions + +### `sailpoint_cancel_access_request` + +Cancel a pending SailPoint access request by its identity request ID. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `accountActivityId` | string | Yes | The identityRequestId of the access request to cancel | +| `comment` | string | Yes | Reason for cancellation | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_get_access_profile_entitlements` + +List the entitlements granted by a specific SailPoint access profile. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `id` | string | Yes | Access Profile ID | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_get_access_request_status` + +List the status of SailPoint access requests with optional identity and state filters. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `requestedFor` | string | No | Identity ID the request was made for | +| `requestedBy` | string | No | Identity ID that submitted the request | +| `regardingIdentity` | string | No | Identity ID the request is about \(requester or target\) | +| `assignedTo` | string | No | Identity ID a pending approval is assigned to | +| `requestState` | string | No | EXECUTING | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_get_account` + +Get a single SailPoint account by ID. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `id` | string | Yes | Account ID | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_get_account_activity` + +Get a single SailPoint account activity by ID. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `id` | string | Yes | Account Activity ID | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_get_account_entitlements` + +List the entitlements granted on a specific SailPoint account. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `id` | string | Yes | Account ID | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_get_campaign` + +Get a single SailPoint certification campaign by ID. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `id` | string | Yes | Campaign ID | +| `detail` | string | No | SLIM or FULL | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_get_entitlement` + +Get a single SailPoint entitlement by ID. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `id` | string | Yes | Entitlement ID | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_get_identity` + +Get a single SailPoint identity by ID. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `id` | string | Yes | Identity ID | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_get_role_entitlements` + +List the entitlements granted by a specific SailPoint role. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `id` | string | Yes | Role ID | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_get_source` + +Get a single SailPoint identity source by ID. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `id` | string | Yes | Source ID | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_list_access_profiles` + +List access profiles in SailPoint with optional filters, sorters, and pagination. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_list_account_activities` + +List account activities (provisioning events) in SailPoint with optional filters and pagination. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `requestedFor` | string | No | Identity ID the activity was requested for | +| `requestedBy` | string | No | Identity ID that requested the activity | +| `regardingIdentity` | string | No | Identity ID the activity is about \(requester or target\) | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_list_accounts` + +List accounts in SailPoint with optional filters, sorters, and pagination. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | +| `detailLevel` | string | No | SLIM or FULL \(default\) | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_list_campaigns` + +List certification campaigns in SailPoint with optional filters, sorters, and pagination. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `detail` | string | No | SLIM \(default\) or FULL | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_list_certification_review_items` + +List the access review items within a specific SailPoint certification. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `id` | string | Yes | Certification ID | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | +| `entitlements` | string | No | Filter review items to specific entitlement IDs | +| `accessProfiles` | string | No | Filter review items to specific access profile IDs | +| `roles` | string | No | Filter review items to specific role IDs | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_list_certifications` + +List certifications in SailPoint with optional reviewer filter, filters, sorters, and pagination. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `reviewerIdentity` | string | No | Reviewer identity ID or 'me' | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_list_entitlements` + +List entitlements in SailPoint with optional filters, sorters, and pagination. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | +| `accountId` | string | No | Filter to entitlements on a specific account ID | +| `segmentedForIdentity` | string | No | Return only entitlements visible to the given identity via segmentation | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_list_identities` + +List identities in SailPoint with optional Sailpoint filters, sorters, and pagination. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | +| `defaultFilter` | string | No | CORRELATED_ONLY \(default\) or NONE | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_list_roles` + +List roles in SailPoint with optional filters, sorters, and pagination. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_list_sources` + +List identity sources in SailPoint with optional filters, sorters, and pagination. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `filters` | string | No | SailPoint filter expression to narrow results | +| `sorters` | string | No | SailPoint sorters expression | +| `forSubadmin` | string | No | Return only sources the given source sub-admin identity can administer | +| `includeIDNSource` | boolean | No | Include the built-in IdentityNow source in results | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_load_accounts` + +Trigger an account aggregation for a SailPoint source, optionally uploading a CSV of accounts. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `sourceId` | string | Yes | Source ID to aggregate | +| `file` | file | No | CSV file of accounts to aggregate \(delimited-file sources only\) | +| `disableOptimization` | boolean | No | Reprocess every account regardless of change | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_load_entitlements` + +Trigger an entitlement aggregation for a SailPoint source, optionally uploading a CSV of entitlements. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `sourceId` | string | Yes | Source ID to aggregate | +| `file` | file | No | CSV file of entitlements to aggregate \(delimited-file sources only\) | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_request_access` + +Submit a SailPoint access request to grant, revoke, or modify access for one or more identities. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `requestedFor` | json | Yes | Array of identity IDs. For REVOKE_ACCESS exactly one identity. | +| `requestedItems` | json | Yes | Array of \{ type: ACCESS_PROFILE\|ROLE\|ENTITLEMENT, id, comment?, removeDate?, startDate?, assignmentId?, nativeIdentity?, clientMetadata? \}. REVOKE requires exactly one item with a comment. | +| `requestType` | string | No | GRANT_ACCESS \(default\), REVOKE_ACCESS, or MODIFY_ACCESS | +| `clientMetadata` | json | No | Optional key/value map, e.g. to record the human requester for correlation | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_search` + +Run a global search across SailPoint indices (identities, entitlements, roles, access profiles, account activities, events). Set includeNested to return nested access[] on identities. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `indices` | json | No | Indices to search: identities, accessprofiles, accountactivities, entitlements, events, roles, or * \(defaults to \["identities"\]\) | +| `query` | string | No | Elasticsearch query string \(e.g. "attributes.department:Engineering"\) | +| `sort` | json | No | Sort fields, e.g. \["displayName","+id"\] | +| `searchAfter` | json | No | searchAfter cursor for deep pagination beyond 10,000 records | +| `includeNested` | boolean | No | Include nested objects \(e.g. identity access\[\]\) in results. Defaults to true. | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_search_aggregate` + +Return aggregation buckets for a SailPoint search query (e.g. counts grouped by a field). + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `indices` | json | No | Indices to aggregate over \(defaults to \["identities"\]\) | +| `query` | string | No | Elasticsearch query string | +| `limit` | number | No | Maximum number of aggregation results \(max 250\) | +| `offset` | number | No | Pagination offset \(0-based\) | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + +### `sailpoint_search_count` + +Return the total number of documents matching a SailPoint search query, without the documents themselves. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `indices` | json | No | Indices to search \(defaults to \["identities"\]\) | +| `query` | string | No | Elasticsearch query string | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `items` | json | Raw SailPoint documents for list operations | +| `results` | json | Raw SailPoint documents for search operations | +| `item` | json | Raw SailPoint document for get operations | +| `total` | number | Total matching documents \(search count\) | +| `task` | json | Aggregation task for load operations | +| `accepted` | boolean | Whether an access-request write was accepted | +| `status` | number | HTTP status returned by SailPoint for writes | +| `count` | number | Number of records returned in the page | +| `totalCount` | number | Total matching records when count is requested | +| `complete` | boolean | False when an empty result may indicate a permission gap | +| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | + + diff --git a/apps/sim/app/api/tools/sailpoint/client.ts b/apps/sim/app/api/tools/sailpoint/client.ts new file mode 100644 index 00000000000..4ce9663fc3d --- /dev/null +++ b/apps/sim/app/api/tools/sailpoint/client.ts @@ -0,0 +1,204 @@ +import { sleep } from '@sim/utils/helpers' +import { isRecordLike } from '@sim/utils/object' +import { backoffWithJitter, parseRetryAfter } from '@sim/utils/retry' + +/** + * Shared server-side SailPoint client used by the SailPoint tool routes. Handles per-tenant host + * resolution, the client-credentials token exchange (cached in-process), and a fetch wrapper that + * refreshes the token on a 401 and backs off on a 429 honoring `Retry-After`. + * + * SailPoint enforces 100 requests per client_id per API version per 10 seconds, so a stateless + * per-call token exchange would double every operation against that budget - the cache avoids it. + */ + +export type SailPointApiVersion = 'v2025' | 'v2024' | 'v3' + +const SUPPORTED_VERSIONS: readonly SailPointApiVersion[] = ['v2025', 'v2024', 'v3'] + +export interface SailPointServerCredentials { + clientId: string + clientSecret: string + tenant: string + apiVersion: SailPointApiVersion +} + +export interface SailPointHosts { + /** `https://{host}/{apiVersion}` */ + apiBaseUrl: string + /** `https://{host}/oauth/token` */ + tokenUrl: string + host: string +} + +export interface SailPointFetchResult { + ok: boolean + status: number + data: unknown + headers: Headers +} + +/** Normalizes an incoming version string to a supported value, defaulting to v2025. */ +export function normalizeApiVersion(value: string | undefined | null): SailPointApiVersion { + if (value && SUPPORTED_VERSIONS.includes(value as SailPointApiVersion)) { + return value as SailPointApiVersion + } + return 'v2025' +} + +/** + * Resolves the API + token hosts for a tenant. Accepts either a bare tenant subdomain (`acme`) or a + * full host/URL (`https://acme.api.identitynow.com`, `acme.api.identitynow.com`), stripping any + * protocol, path, or version segment the caller may have included. + */ +export function resolveSailPointHosts( + tenant: string, + apiVersion: SailPointApiVersion +): SailPointHosts { + let host = tenant.trim().replace(/^https?:\/\//i, '') + host = host.replace(/[/?#].*$/, '').replace(/\.+$/, '') + if (!host.includes('.')) { + host = `${host}.api.identitynow.com` + } + return { + host, + apiBaseUrl: `https://${host}/${apiVersion}`, + tokenUrl: `https://${host}/oauth/token`, + } +} + +/** Extracts a human-readable message from a SailPoint error body (ISC `messages[]` or OAuth `error`). */ +export function getSailPointErrorMessage(data: unknown, fallback: string): string { + if (typeof data === 'string') return data || fallback + if (!isRecordLike(data)) return fallback + + if (Array.isArray(data.messages) && data.messages.length > 0) { + const first = data.messages[0] + if (isRecordLike(first) && typeof first.text === 'string' && first.text) { + const trackingId = typeof data.trackingId === 'string' ? data.trackingId : null + return trackingId ? `${first.text} (trackingId: ${trackingId})` : first.text + } + } + + if (typeof data.error_description === 'string' && data.error_description) + return data.error_description + if (typeof data.message === 'string' && data.message) return data.message + if (typeof data.error === 'string' && data.error) return data.error + return fallback +} + +interface CachedToken { + token: string + expiresAt: number +} + +const TOKEN_EXPIRY_BUFFER_MS = 60_000 +const tokenCache = new Map() + +function cacheKey(creds: SailPointServerCredentials): string { + return `${creds.tenant}:${creds.clientId}:${creds.apiVersion}` +} + +/** Drops any cached token for these credentials so the next call re-exchanges. */ +export function invalidateSailPointToken(creds: SailPointServerCredentials): void { + tokenCache.delete(cacheKey(creds)) +} + +/** Returns a cached bearer token or performs a client-credentials exchange and caches it. */ +export async function getSailPointAccessToken(creds: SailPointServerCredentials): Promise { + const key = cacheKey(creds) + const cached = tokenCache.get(key) + if (cached && cached.expiresAt > Date.now()) { + return cached.token + } + + const { tokenUrl } = resolveSailPointHosts(creds.tenant, creds.apiVersion) + const response = await fetch(tokenUrl, { + method: 'POST', + headers: { + Accept: 'application/json', + 'Content-Type': 'application/x-www-form-urlencoded', + }, + body: new URLSearchParams({ + grant_type: 'client_credentials', + client_id: creds.clientId, + client_secret: creds.clientSecret, + }).toString(), + cache: 'no-store', + }) + + const data: unknown = await response.json().catch(() => null) + if (!response.ok) { + throw new Error(getSailPointErrorMessage(data, 'Failed to authenticate with SailPoint')) + } + if (!isRecordLike(data) || typeof data.access_token !== 'string') { + throw new Error('SailPoint authentication did not return an access token') + } + + const expiresInSec = typeof data.expires_in === 'number' ? data.expires_in : 3600 + tokenCache.set(key, { + token: data.access_token, + expiresAt: Date.now() + Math.max(expiresInSec * 1000 - TOKEN_EXPIRY_BUFFER_MS, 0), + }) + return data.access_token +} + +async function parseResponseBody(response: Response): Promise { + if (response.status === 204) return null + const text = await response.text() + if (!text) return null + try { + return JSON.parse(text) + } catch { + return text + } +} + +/** + * Performs an authenticated SailPoint request, refreshing the token once on a 401 and backing off on + * a 429 (honoring `Retry-After`). `buildRequest` receives the current token + resolved hosts so it can + * compose the URL/body; the bearer header is applied automatically. + */ +export async function sailpointFetch( + creds: SailPointServerCredentials, + buildRequest: (token: string, hosts: SailPointHosts) => { url: string; init: RequestInit }, + options: { maxRetries?: number } = {} +): Promise { + const maxRetries = options.maxRetries ?? 4 + const hosts = resolveSailPointHosts(creds.tenant, creds.apiVersion) + let attempt = 0 + let refreshedOn401 = false + + while (true) { + const token = await getSailPointAccessToken(creds) + const { url, init } = buildRequest(token, hosts) + const headers = new Headers(init.headers) + headers.set('Authorization', `Bearer ${token}`) + if (!headers.has('Accept')) headers.set('Accept', 'application/json') + + const response = await fetch(url, { ...init, headers, cache: 'no-store' }) + + if (response.status === 401 && !refreshedOn401) { + invalidateSailPointToken(creds) + refreshedOn401 = true + continue + } + + if (response.status === 429 && attempt < maxRetries) { + const retryAfterMs = parseRetryAfter(response.headers.get('retry-after')) + attempt += 1 + await sleep(backoffWithJitter(attempt, retryAfterMs)) + continue + } + + const data = await parseResponseBody(response) + return { ok: response.ok, status: response.status, data, headers: response.headers } + } +} + +/** Reads the `X-Total-Count` header as a number, or null when absent/unparseable. */ +export function readTotalCount(headers: Headers): number | null { + const raw = headers.get('x-total-count') + if (!raw) return null + const parsed = Number(raw) + return Number.isFinite(parsed) ? parsed : null +} diff --git a/apps/sim/app/api/tools/sailpoint/load/route.test.ts b/apps/sim/app/api/tools/sailpoint/load/route.test.ts new file mode 100644 index 00000000000..4cce2bce8bd --- /dev/null +++ b/apps/sim/app/api/tools/sailpoint/load/route.test.ts @@ -0,0 +1,75 @@ +/** + * @vitest-environment node + */ +import { createMockRequest, hybridAuthMockFns } from '@sim/testing' +import { beforeEach, describe, expect, it, vi } from 'vitest' + +const { fetchMock } = vi.hoisted(() => ({ + fetchMock: vi.fn(), +})) + +import { POST } from '@/app/api/tools/sailpoint/load/route' + +function jsonResponse(body: unknown, status = 200): Response { + return new Response(JSON.stringify(body), { + status, + headers: { 'Content-Type': 'application/json' }, + }) +} + +function tokenResponse(): Response { + return jsonResponse({ access_token: 'token-123', token_type: 'Bearer', expires_in: 3600 }) +} + +describe('SailPoint load route', () => { + beforeEach(() => { + vi.clearAllMocks() + vi.stubGlobal('fetch', fetchMock) + hybridAuthMockFns.mockCheckInternalAuth.mockResolvedValue({ + success: true, + userId: 'user-123', + authType: 'internal_jwt', + }) + }) + + it('triggers a source aggregation without a file and returns the task', async () => { + fetchMock + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(jsonResponse({ id: 'task-1', type: 'ACCOUNT_AGGREGATION' }, 202)) + + const request = createMockRequest('POST', { + clientId: 'client-id', + clientSecret: 'client-secret', + tenant: 'acme-load', + operation: 'sailpoint_load_accounts', + sourceId: 'src-1', + }) + + const response = await POST(request) + const data = await response.json() + + expect(response.status).toBe(200) + expect(fetchMock).toHaveBeenCalledTimes(2) + expect(fetchMock.mock.calls[1]?.[0]).toBe( + 'https://acme-load.api.identitynow.com/v2025/sources/src-1/load-accounts' + ) + const init = fetchMock.mock.calls[1]?.[1] as RequestInit + expect(init.method).toBe('POST') + expect(init.body).toBeInstanceOf(FormData) + expect(data.output).toEqual({ task: { id: 'task-1', type: 'ACCOUNT_AGGREGATION' } }) + }) + + it('rejects a load request that is missing a source ID', async () => { + const request = createMockRequest('POST', { + clientId: 'client-id', + clientSecret: 'client-secret', + tenant: 'acme-load', + operation: 'sailpoint_load_entitlements', + }) + + const response = await POST(request) + + expect(response.status).toBe(400) + expect(fetchMock).not.toHaveBeenCalled() + }) +}) diff --git a/apps/sim/app/api/tools/sailpoint/load/route.ts b/apps/sim/app/api/tools/sailpoint/load/route.ts new file mode 100644 index 00000000000..f8b8807f600 --- /dev/null +++ b/apps/sim/app/api/tools/sailpoint/load/route.ts @@ -0,0 +1,127 @@ +import { createLogger } from '@sim/logger' +import { getErrorMessage } from '@sim/utils/errors' +import { type NextRequest, NextResponse } from 'next/server' +import { sailpointLoadContract } from '@/lib/api/contracts/tools/sailpoint' +import { getValidationErrorMessage, parseRequest } from '@/lib/api/server' +import { checkInternalAuth } from '@/lib/auth/hybrid' +import { generateRequestId } from '@/lib/core/utils/request' +import { withRouteHandler } from '@/lib/core/utils/with-route-handler' +import { processFilesToUserFiles, type RawFileInput } from '@/lib/uploads/utils/file-utils' +import { downloadServableFileFromStorage } from '@/lib/uploads/utils/file-utils.server' +import { docNotReadyResponse } from '@/lib/uploads/utils/servable-file-response' +import { assertToolFileAccess } from '@/app/api/files/authorization' +import { + getSailPointErrorMessage, + normalizeApiVersion, + type SailPointServerCredentials, + sailpointFetch, +} from '@/app/api/tools/sailpoint/client' + +const logger = createLogger('SailPointLoadAPI') + +const LOAD_PATHS: Record = { + sailpoint_load_accounts: 'load-accounts', + sailpoint_load_entitlements: 'load-entitlements', +} + +export const POST = withRouteHandler(async (request: NextRequest) => { + const requestId = generateRequestId() + + const authResult = await checkInternalAuth(request, { requireWorkflowId: false }) + if (!authResult.success || !authResult.userId) { + return NextResponse.json( + { success: false, error: authResult.error || 'Unauthorized' }, + { status: 401 } + ) + } + + const parsed = await parseRequest( + sailpointLoadContract, + request, + {}, + { + validationErrorResponse: (error) => + NextResponse.json( + { + success: false, + error: getValidationErrorMessage(error, 'Invalid SailPoint load request'), + details: error.issues, + }, + { status: 400 } + ), + } + ) + if (!parsed.success) return parsed.response + + const body = parsed.data.body + const creds: SailPointServerCredentials = { + clientId: body.clientId, + clientSecret: body.clientSecret, + tenant: body.tenant, + apiVersion: normalizeApiVersion(body.apiVersion), + } + + const formData = new FormData() + + if (body.file && typeof body.file === 'object') { + const userFiles = processFilesToUserFiles([body.file as RawFileInput], requestId, logger) + if (userFiles.length === 0) { + return NextResponse.json({ success: false, error: 'Invalid file input' }, { status: 400 }) + } + const userFile = userFiles[0] + + const denied = await assertToolFileAccess(userFile.key, authResult.userId, requestId, logger) + if (denied) return denied + + try { + const { buffer } = await downloadServableFileFromStorage(userFile, requestId, logger) + formData.append( + 'file', + new Blob([new Uint8Array(buffer)], { type: userFile.type || 'text/csv' }), + userFile.name || 'aggregation.csv' + ) + } catch (error) { + const notReady = docNotReadyResponse(error) + if (notReady) return notReady + return NextResponse.json( + { success: false, error: getErrorMessage(error, 'Failed to download file') }, + { status: 500 } + ) + } + } + + if (body.operation === 'sailpoint_load_accounts' && body.disableOptimization) { + formData.append('disableOptimization', 'true') + } + + const loadPath = LOAD_PATHS[body.operation] + + try { + logger.info(`[${requestId}] SailPoint aggregation`, { + operation: body.operation, + apiVersion: creds.apiVersion, + hasFile: formData.has('file'), + }) + + const result = await sailpointFetch(creds, (_token, hosts) => ({ + url: `${hosts.apiBaseUrl}/sources/${encodeURIComponent(body.sourceId)}/${loadPath}`, + init: { method: 'POST', body: formData }, + })) + + if (!result.ok) { + return NextResponse.json( + { + success: false, + error: getSailPointErrorMessage(result.data, 'SailPoint aggregation failed'), + }, + { status: result.status || 502 } + ) + } + + return NextResponse.json({ success: true, output: { task: result.data ?? null } }) + } catch (error) { + const message = getErrorMessage(error, 'SailPoint aggregation failed') + logger.error(`[${requestId}] SailPoint aggregation failed`, { error: message }) + return NextResponse.json({ success: false, error: message }, { status: 500 }) + } +}) diff --git a/apps/sim/app/api/tools/sailpoint/query/route.test.ts b/apps/sim/app/api/tools/sailpoint/query/route.test.ts new file mode 100644 index 00000000000..f1c549f479e --- /dev/null +++ b/apps/sim/app/api/tools/sailpoint/query/route.test.ts @@ -0,0 +1,231 @@ +/** + * @vitest-environment node + */ +import { createMockRequest, hybridAuthMockFns } from '@sim/testing' +import { beforeEach, describe, expect, it, vi } from 'vitest' + +const { fetchMock } = vi.hoisted(() => ({ + fetchMock: vi.fn(), +})) + +import { POST } from '@/app/api/tools/sailpoint/query/route' + +function jsonResponse(body: unknown, status = 200, headers: Record = {}): Response { + return new Response(JSON.stringify(body), { + status, + headers: { 'Content-Type': 'application/json', ...headers }, + }) +} + +function emptyResponse(status: number): Response { + return new Response(null, { status }) +} + +function tokenResponse(): Response { + return jsonResponse({ access_token: 'token-123', token_type: 'Bearer', expires_in: 3600 }) +} + +const baseCreds = { + clientId: 'client-id', + clientSecret: 'client-secret', +} + +describe('SailPoint query route', () => { + beforeEach(() => { + vi.clearAllMocks() + vi.stubGlobal('fetch', fetchMock) + hybridAuthMockFns.mockCheckInternalAuth.mockResolvedValue({ + success: true, + userId: 'user-123', + authType: 'internal_jwt', + }) + }) + + it('lists identities, exchanging a token then calling the v2025 endpoint', async () => { + fetchMock + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce( + jsonResponse([{ id: 'i1', name: 'Alice' }], 200, { 'X-Total-Count': '1' }) + ) + + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'acme-identities', + operation: 'sailpoint_list_identities', + filters: 'name sw "A"', + limit: 50, + }) + + const response = await POST(request) + const data = await response.json() + + expect(response.status).toBe(200) + expect(fetchMock).toHaveBeenCalledTimes(2) + expect(fetchMock.mock.calls[0]?.[0]).toBe( + 'https://acme-identities.api.identitynow.com/oauth/token' + ) + expect(fetchMock.mock.calls[1]?.[0]).toBe( + 'https://acme-identities.api.identitynow.com/v2025/identities?filters=name+sw+%22A%22&limit=50' + ) + expect(data.output).toEqual({ + items: [{ id: 'i1', name: 'Alice' }], + count: 1, + totalCount: 1, + complete: true, + warnings: [], + }) + }) + + it('flags an empty identity result with a diagnostic warning', async () => { + fetchMock.mockResolvedValueOnce(tokenResponse()).mockResolvedValueOnce(jsonResponse([])) + + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'acme-empty', + operation: 'sailpoint_list_identities', + }) + + const response = await POST(request) + const data = await response.json() + + expect(response.status).toBe(200) + expect(data.output.count).toBe(0) + expect(data.output.complete).toBe(false) + expect(data.output.warnings).toHaveLength(1) + expect(data.output.warnings[0]).toContain('user level') + }) + + it('posts a search body with the query object and returns results', async () => { + fetchMock + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(jsonResponse([{ _type: 'identity', id: 'i1' }])) + + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'acme-search', + operation: 'sailpoint_search', + indices: 'identities', + query: 'name:A*', + }) + + const response = await POST(request) + const data = await response.json() + + expect(response.status).toBe(200) + expect(fetchMock.mock.calls[1]?.[0]).toBe( + 'https://acme-search.api.identitynow.com/v2025/search' + ) + const searchInit = fetchMock.mock.calls[1]?.[1] as RequestInit + expect(searchInit.method).toBe('POST') + expect(JSON.parse(searchInit.body as string)).toEqual({ + indices: ['identities'], + query: { query: 'name:A*' }, + }) + expect(data.output.results).toEqual([{ _type: 'identity', id: 'i1' }]) + }) + + it('caches the token across calls with the same credentials', async () => { + fetchMock + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(jsonResponse([{ id: 'a1' }])) + .mockResolvedValueOnce(jsonResponse([{ id: 'a2' }])) + + const makeRequest = () => + createMockRequest('POST', { + ...baseCreds, + tenant: 'acme-cache', + operation: 'sailpoint_list_accounts', + }) + + await POST(makeRequest()) + await POST(makeRequest()) + + // 1 token exchange + 2 API calls (not 4) - the token is reused + expect(fetchMock).toHaveBeenCalledTimes(3) + expect(fetchMock.mock.calls[0]?.[0]).toBe('https://acme-cache.api.identitynow.com/oauth/token') + expect(fetchMock.mock.calls[1]?.[0]).toContain('/v2025/accounts') + expect(fetchMock.mock.calls[2]?.[0]).toContain('/v2025/accounts') + }) + + it('backs off and retries on a 429 response', async () => { + fetchMock + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(emptyResponse(429)) + .mockResolvedValueOnce(jsonResponse([{ id: 'r1' }])) + + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'acme-429', + operation: 'sailpoint_list_roles', + }) + + const response = await POST(request) + const data = await response.json() + + expect(response.status).toBe(200) + expect(fetchMock).toHaveBeenCalledTimes(3) + expect(data.output.items).toEqual([{ id: 'r1' }]) + }) + + it('accepts an access-request write (202) as accepted', async () => { + fetchMock.mockResolvedValueOnce(tokenResponse()).mockResolvedValueOnce(emptyResponse(202)) + + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'acme-grant', + operation: 'sailpoint_request_access', + requestedFor: ['identity-1'], + requestedItems: [{ type: 'ENTITLEMENT', id: 'ent-1' }], + }) + + const response = await POST(request) + const data = await response.json() + + expect(response.status).toBe(200) + expect(fetchMock.mock.calls[1]?.[0]).toBe( + 'https://acme-grant.api.identitynow.com/v2025/access-requests' + ) + expect(data.output).toEqual({ accepted: true, status: 202 }) + }) + + it('rejects a revoke that targets more than one identity before calling SailPoint', async () => { + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'acme-revoke', + operation: 'sailpoint_request_access', + requestType: 'REVOKE_ACCESS', + requestedFor: ['identity-1', 'identity-2'], + requestedItems: [{ type: 'ENTITLEMENT', id: 'ent-1', comment: 'offboarding' }], + }) + + const response = await POST(request) + + expect(response.status).toBe(400) + expect(fetchMock).not.toHaveBeenCalled() + }) + + it('propagates a SailPoint error body', async () => { + fetchMock + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce( + jsonResponse( + { messages: [{ locale: 'en', text: 'Insufficient access' }], trackingId: 'trk-1' }, + 403 + ) + ) + + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'acme-error', + operation: 'sailpoint_get_identity', + id: 'identity-1', + }) + + const response = await POST(request) + const data = await response.json() + + expect(response.status).toBe(403) + expect(data.success).toBe(false) + expect(data.error).toContain('Insufficient access') + }) +}) diff --git a/apps/sim/app/api/tools/sailpoint/query/route.ts b/apps/sim/app/api/tools/sailpoint/query/route.ts new file mode 100644 index 00000000000..87a02a0edc7 --- /dev/null +++ b/apps/sim/app/api/tools/sailpoint/query/route.ts @@ -0,0 +1,476 @@ +import { createLogger } from '@sim/logger' +import { toError } from '@sim/utils/errors' +import { filterUndefined } from '@sim/utils/object' +import { type NextRequest, NextResponse } from 'next/server' +import { + type SailpointQueryBody, + sailpointQueryContract, +} from '@/lib/api/contracts/tools/sailpoint' +import { getValidationErrorMessage, parseRequest } from '@/lib/api/server' +import { checkInternalAuth } from '@/lib/auth/hybrid' +import { generateRequestId } from '@/lib/core/utils/request' +import { withRouteHandler } from '@/lib/core/utils/with-route-handler' +import { + getSailPointErrorMessage, + normalizeApiVersion, + readTotalCount, + type SailPointFetchResult, + type SailPointHosts, + type SailPointServerCredentials, + sailpointFetch, +} from '@/app/api/tools/sailpoint/client' + +const logger = createLogger('SailPointQueryAPI') + +/** + * Operations for which an empty result set warrants a diagnostic. These read endpoints are userAuth + * gated, so an empty 200 commonly means the PAT lacks the required user level (e.g. an API-Management + * client with no user context) or that segmentation restricts visibility. + */ +const EMPTY_DIAGNOSTIC_OPERATIONS = new Set([ + 'sailpoint_search', + 'sailpoint_list_identities', + 'sailpoint_list_entitlements', + 'sailpoint_list_roles', +]) + +const EMPTY_RESULT_WARNING = + 'Zero rows returned - this can indicate the PAT lacks sufficient ISC user level (e.g. an API-Management client with no user context), or that Data Segmentation / Access Request Segments restrict visibility. Confirm the PAT is owned by a service identity with the required user level and scopes.' + +type ResultKind = 'list' | 'search' | 'item' | 'count' | 'write' + +function diagnose(operation: string, count: number): { complete: boolean; warnings: string[] } { + if (count === 0 && EMPTY_DIAGNOSTIC_OPERATIONS.has(operation)) { + return { complete: false, warnings: [EMPTY_RESULT_WARNING] } + } + return { complete: true, warnings: [] } +} + +/** Builds a `?a=b&c=d` query string, dropping undefined/null/empty values. */ +function qs(params: Record): string { + const usp = new URLSearchParams() + for (const [key, value] of Object.entries(params)) { + if (value === undefined || value === null || value === '') continue + usp.set(key, String(value)) + } + const serialized = usp.toString() + return serialized ? `?${serialized}` : '' +} + +/** Normalizes an array/JSON-string/comma-list into a string[] (or undefined when empty). */ +function toStringList(value: unknown): string[] | undefined { + if (value == null) return undefined + if (Array.isArray(value)) { + const arr = value.filter((v): v is string => typeof v === 'string' && v.length > 0) + return arr.length ? arr : undefined + } + if (typeof value === 'string') { + const trimmed = value.trim() + if (!trimmed) return undefined + if (trimmed.startsWith('[')) { + try { + const parsed: unknown = JSON.parse(trimmed) + if (Array.isArray(parsed)) { + const arr = parsed.filter((v): v is string => typeof v === 'string') + return arr.length ? arr : undefined + } + } catch { + // fall through to comma splitting + } + } + const parts = trimmed + .split(',') + .map((part) => part.trim()) + .filter(Boolean) + return parts.length ? parts : undefined + } + return undefined +} + +function id(value: string): string { + return encodeURIComponent(value) +} + +function errorResponse(result: SailPointFetchResult): NextResponse { + return NextResponse.json( + { success: false, error: getSailPointErrorMessage(result.data, 'SailPoint request failed') }, + { status: result.status || 502 } + ) +} + +function buildListOutput( + result: SailPointFetchResult, + operation: string, + key: 'items' | 'results' +) { + const items = Array.isArray(result.data) ? result.data : [] + const { complete, warnings } = diagnose(operation, items.length) + const base = { + count: items.length, + totalCount: readTotalCount(result.headers), + complete, + warnings, + } + return key === 'results' ? { results: items, ...base } : { items, ...base } +} + +async function execute( + creds: SailPointServerCredentials, + operation: string, + buildRequest: (token: string, hosts: SailPointHosts) => { url: string; init: RequestInit }, + kind: ResultKind +): Promise { + const result = await sailpointFetch(creds, buildRequest) + if (!result.ok) return errorResponse(result) + + let output: Record + switch (kind) { + case 'list': + output = buildListOutput(result, operation, 'items') + break + case 'search': + output = buildListOutput(result, operation, 'results') + break + case 'item': + output = { item: result.data ?? null } + break + case 'count': + output = { + total: + readTotalCount(result.headers) ?? (typeof result.data === 'number' ? result.data : 0), + } + break + case 'write': + output = { accepted: result.ok, status: result.status } + break + } + + return NextResponse.json({ success: true, output }) +} + +function jsonInit(body: unknown): RequestInit { + return { + method: 'POST', + headers: { 'Content-Type': 'application/json' }, + body: JSON.stringify(body), + } +} + +function dispatch( + creds: SailPointServerCredentials, + body: SailpointQueryBody +): Promise { + switch (body.operation) { + case 'sailpoint_search': { + const searchBody = filterUndefined({ + indices: toStringList(body.indices) ?? ['identities'], + query: body.query ? { query: body.query } : undefined, + sort: toStringList(body.sort), + searchAfter: toStringList(body.searchAfter), + includeNested: body.includeNested, + }) + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/search${qs({ limit: body.limit, offset: body.offset, count: body.count })}`, + init: jsonInit(searchBody), + }), + 'search' + ) + } + case 'sailpoint_search_count': { + const searchBody = filterUndefined({ + indices: toStringList(body.indices) ?? ['identities'], + query: body.query ? { query: body.query } : undefined, + }) + return execute( + creds, + body.operation, + (_t, h) => ({ url: `${h.apiBaseUrl}/search/count`, init: jsonInit(searchBody) }), + 'count' + ) + } + case 'sailpoint_search_aggregate': { + const searchBody = filterUndefined({ + indices: toStringList(body.indices) ?? ['identities'], + query: body.query ? { query: body.query } : undefined, + }) + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/search/aggregate${qs({ limit: body.limit, offset: body.offset })}`, + init: jsonInit(searchBody), + }), + 'search' + ) + } + case 'sailpoint_list_identities': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/identities${qs({ filters: body.filters, sorters: body.sorters, defaultFilter: body.defaultFilter, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_identity': + return execute( + creds, + body.operation, + (_t, h) => ({ url: `${h.apiBaseUrl}/identities/${id(body.id)}`, init: { method: 'GET' } }), + 'item' + ) + case 'sailpoint_list_accounts': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/accounts${qs({ filters: body.filters, sorters: body.sorters, detailLevel: body.detailLevel, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_account': + return execute( + creds, + body.operation, + (_t, h) => ({ url: `${h.apiBaseUrl}/accounts/${id(body.id)}`, init: { method: 'GET' } }), + 'item' + ) + case 'sailpoint_get_account_entitlements': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/accounts/${id(body.id)}/entitlements${qs({ limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_list_entitlements': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/entitlements${qs({ filters: body.filters, sorters: body.sorters, 'account-id': body.accountId, 'segmented-for-identity': body.segmentedForIdentity, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_entitlement': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/entitlements/${id(body.id)}`, + init: { method: 'GET' }, + }), + 'item' + ) + case 'sailpoint_list_roles': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/roles${qs({ filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_role_entitlements': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/roles/${id(body.id)}/entitlements${qs({ filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_list_access_profiles': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/access-profiles${qs({ filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_access_profile_entitlements': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/access-profiles/${id(body.id)}/entitlements${qs({ filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_list_sources': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/sources${qs({ filters: body.filters, sorters: body.sorters, 'for-subadmin': body.forSubadmin, includeIDNSource: body.includeIDNSource, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_source': + return execute( + creds, + body.operation, + (_t, h) => ({ url: `${h.apiBaseUrl}/sources/${id(body.id)}`, init: { method: 'GET' } }), + 'item' + ) + case 'sailpoint_list_account_activities': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/account-activities${qs({ 'requested-for': body.requestedFor, 'requested-by': body.requestedBy, 'regarding-identity': body.regardingIdentity, filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_account_activity': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/account-activities/${id(body.id)}`, + init: { method: 'GET' }, + }), + 'item' + ) + case 'sailpoint_list_campaigns': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/campaigns${qs({ detail: body.detail, filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_campaign': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/campaigns/${id(body.id)}${qs({ detail: body.detail })}`, + init: { method: 'GET' }, + }), + 'item' + ) + case 'sailpoint_list_certifications': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/certifications${qs({ 'reviewer-identity': body.reviewerIdentity, filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_list_certification_review_items': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/certifications/${id(body.id)}/access-review-items${qs({ filters: body.filters, sorters: body.sorters, entitlements: body.entitlements, 'access-profiles': body.accessProfiles, roles: body.roles, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_request_access': { + const requestBody = filterUndefined({ + requestedFor: body.requestedFor, + requestedItems: body.requestedItems, + requestType: body.requestType, + clientMetadata: body.clientMetadata, + }) + return execute( + creds, + body.operation, + (_t, h) => ({ url: `${h.apiBaseUrl}/access-requests`, init: jsonInit(requestBody) }), + 'write' + ) + } + case 'sailpoint_cancel_access_request': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/access-requests/cancel`, + init: jsonInit({ accountActivityId: body.accountActivityId, comment: body.comment }), + }), + 'write' + ) + case 'sailpoint_get_access_request_status': + return execute( + creds, + body.operation, + (_t, h) => ({ + url: `${h.apiBaseUrl}/access-request-status${qs({ 'requested-for': body.requestedFor, 'requested-by': body.requestedBy, 'regarding-identity': body.regardingIdentity, 'assigned-to': body.assignedTo, 'request-state': body.requestState, filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + } +} + +export const POST = withRouteHandler(async (request: NextRequest) => { + const requestId = generateRequestId() + + const authResult = await checkInternalAuth(request, { requireWorkflowId: false }) + if (!authResult.success) { + return NextResponse.json( + { success: false, error: authResult.error || 'Unauthorized' }, + { status: 401 } + ) + } + + try { + const parsed = await parseRequest( + sailpointQueryContract, + request, + {}, + { + validationErrorResponse: (error) => + NextResponse.json( + { + success: false, + error: getValidationErrorMessage(error, 'Invalid SailPoint request'), + details: error.issues, + }, + { status: 400 } + ), + } + ) + if (!parsed.success) return parsed.response + + const body = parsed.data.body + const creds: SailPointServerCredentials = { + clientId: body.clientId, + clientSecret: body.clientSecret, + tenant: body.tenant, + apiVersion: normalizeApiVersion(body.apiVersion), + } + + logger.info(`[${requestId}] SailPoint request`, { + operation: body.operation, + apiVersion: creds.apiVersion, + }) + + return await dispatch(creds, body) + } catch (error) { + const message = toError(error).message + logger.error(`[${requestId}] SailPoint request failed`, { error: message }) + return NextResponse.json({ success: false, error: message }, { status: 500 }) + } +}) diff --git a/apps/sim/blocks/blocks/sailpoint.ts b/apps/sim/blocks/blocks/sailpoint.ts new file mode 100644 index 00000000000..abe25f40e04 --- /dev/null +++ b/apps/sim/blocks/blocks/sailpoint.ts @@ -0,0 +1,885 @@ +import { SailPointIcon } from '@/components/icons' +import type { BlockConfig, BlockMeta } from '@/blocks/types' +import { AuthMode, IntegrationType } from '@/blocks/types' +import { + normalizeFileInput, + parseOptionalJsonInput, + parseOptionalNumberInput, +} from '@/blocks/utils' +import type { SailPointListResponse } from '@/tools/sailpoint/types' + +/** Single-entity operations that take a resource `id`. */ +const ID_OPERATIONS = [ + 'sailpoint_get_identity', + 'sailpoint_get_account', + 'sailpoint_get_account_entitlements', + 'sailpoint_get_entitlement', + 'sailpoint_get_role_entitlements', + 'sailpoint_get_access_profile_entitlements', + 'sailpoint_get_source', + 'sailpoint_get_account_activity', + 'sailpoint_get_campaign', + 'sailpoint_list_certification_review_items', +] + +const SEARCH_OPERATIONS = [ + 'sailpoint_search', + 'sailpoint_search_count', + 'sailpoint_search_aggregate', +] + +/** List operations that accept `filters` and `sorters`. */ +const FILTER_OPERATIONS = [ + 'sailpoint_list_identities', + 'sailpoint_list_accounts', + 'sailpoint_list_entitlements', + 'sailpoint_list_roles', + 'sailpoint_list_access_profiles', + 'sailpoint_get_role_entitlements', + 'sailpoint_get_access_profile_entitlements', + 'sailpoint_list_sources', + 'sailpoint_list_account_activities', + 'sailpoint_list_campaigns', + 'sailpoint_list_certifications', + 'sailpoint_list_certification_review_items', + 'sailpoint_get_access_request_status', +] + +/** Operations that accept `limit`/`offset` pagination. */ +const LIMIT_OPERATIONS = [ + ...FILTER_OPERATIONS, + 'sailpoint_search', + 'sailpoint_search_aggregate', + 'sailpoint_get_account_entitlements', +] + +/** Operations that scope by an identity (`requested-for` / `requested-by` / `regarding-identity`). */ +const IDENTITY_SCOPE_OPERATIONS = [ + 'sailpoint_list_account_activities', + 'sailpoint_get_access_request_status', +] + +export const SailPointBlock: BlockConfig = { + type: 'sailpoint', + name: 'SailPoint', + description: 'Govern identities and access in SailPoint Identity Security Cloud', + longDescription: + 'Read and act on identity governance data in SailPoint Identity Security Cloud (ISC): search identities, accounts, entitlements, roles, and access profiles; review account activities, campaigns, and certifications; and request, revoke, or cancel access. Authenticates with a Personal Access Token (PAT) using the OAuth2 client-credentials grant against your per-tenant host (https://{tenant}.api.identitynow.com). ' + + "IMPORTANT: generate the PAT from a dedicated ISC service *identity* (a real user with the required user level), NOT an API-Management client - identity, role, access-profile, and access-request endpoints are user-context only, and a client without user context returns empty result sets instead of an error. A PAT's effective rights are the intersection of its selected scopes AND the owner's ISC user level. Select these scopes when generating the PAT: sp:search:read (search), idn:identity:read (identities), idn:accounts:read (accounts), idn:entitlement:read (entitlements), idn:role-unchecked:read (roles), idn:access-profile:read (access profiles), idn:sources:read (sources), idn:access-request:manage or idn:access-request-self:manage (request/cancel access), idn:access-request-status:read (request status), idn:campaign:read (campaigns and certifications). Account activities are user-context gated and need no dedicated scope; sp:scopes:all covers everything for a pilot. Revoking access for anyone who is not a direct report requires ORG_ADMIN, and self-revoke is not permitted.", + docsLink: 'https://docs.sim.ai/integrations/sailpoint', + category: 'tools', + integrationType: IntegrationType.Security, + bgColor: '#0033A1', + icon: SailPointIcon, + authMode: AuthMode.ApiKey, + + subBlocks: [ + { + id: 'operation', + title: 'Operation', + type: 'dropdown', + options: [ + { label: 'Search', id: 'sailpoint_search' }, + { label: 'Search Count', id: 'sailpoint_search_count' }, + { label: 'Search Aggregate', id: 'sailpoint_search_aggregate' }, + { label: 'List Identities', id: 'sailpoint_list_identities' }, + { label: 'Get Identity', id: 'sailpoint_get_identity' }, + { label: 'List Accounts', id: 'sailpoint_list_accounts' }, + { label: 'Get Account', id: 'sailpoint_get_account' }, + { label: 'Get Account Entitlements', id: 'sailpoint_get_account_entitlements' }, + { label: 'List Entitlements', id: 'sailpoint_list_entitlements' }, + { label: 'Get Entitlement', id: 'sailpoint_get_entitlement' }, + { label: 'List Roles', id: 'sailpoint_list_roles' }, + { label: 'Get Role Entitlements', id: 'sailpoint_get_role_entitlements' }, + { label: 'List Access Profiles', id: 'sailpoint_list_access_profiles' }, + { + label: 'Get Access Profile Entitlements', + id: 'sailpoint_get_access_profile_entitlements', + }, + { label: 'List Sources', id: 'sailpoint_list_sources' }, + { label: 'Get Source', id: 'sailpoint_get_source' }, + { label: 'List Account Activities', id: 'sailpoint_list_account_activities' }, + { label: 'Get Account Activity', id: 'sailpoint_get_account_activity' }, + { label: 'List Campaigns', id: 'sailpoint_list_campaigns' }, + { label: 'Get Campaign', id: 'sailpoint_get_campaign' }, + { label: 'List Certifications', id: 'sailpoint_list_certifications' }, + { + label: 'List Certification Review Items', + id: 'sailpoint_list_certification_review_items', + }, + { label: 'Request Access', id: 'sailpoint_request_access' }, + { label: 'Cancel Access Request', id: 'sailpoint_cancel_access_request' }, + { label: 'Get Access Request Status', id: 'sailpoint_get_access_request_status' }, + { label: 'Load Accounts (CSV)', id: 'sailpoint_load_accounts' }, + { label: 'Load Entitlements (CSV)', id: 'sailpoint_load_entitlements' }, + ], + value: () => 'sailpoint_search', + required: true, + }, + { + id: 'tenant', + title: 'Tenant', + type: 'short-input', + placeholder: 'acme (subdomain of api.identitynow.com)', + required: true, + }, + { + id: 'clientId', + title: 'Client ID', + type: 'short-input', + placeholder: 'PAT client ID', + required: true, + }, + { + id: 'clientSecret', + title: 'Client Secret', + type: 'short-input', + password: true, + placeholder: 'PAT client secret', + required: true, + }, + { + id: 'apiVersion', + title: 'API Version', + type: 'dropdown', + options: [ + { label: 'v2025 (default)', id: 'v2025' }, + { label: 'v2024', id: 'v2024' }, + { label: 'v3', id: 'v3' }, + ], + value: () => 'v2025', + mode: 'advanced', + }, + { + id: 'id', + title: 'ID', + type: 'short-input', + placeholder: 'Resource ID', + condition: { field: 'operation', value: ID_OPERATIONS }, + required: { field: 'operation', value: ID_OPERATIONS }, + }, + { + id: 'indices', + title: 'Indices', + type: 'short-input', + placeholder: 'identities (comma-separated or JSON array)', + condition: { field: 'operation', value: SEARCH_OPERATIONS }, + }, + { + id: 'query', + title: 'Query', + type: 'short-input', + placeholder: 'attributes.department:Engineering', + condition: { field: 'operation', value: SEARCH_OPERATIONS }, + wandConfig: { + enabled: true, + prompt: + 'Generate a SailPoint Identity Security Cloud search query string using Elasticsearch query-string syntax (field:value, AND/OR, wildcards). Return ONLY the query string - no explanations.', + placeholder: + 'Describe what to search for, e.g. "active identities in the Finance department"...', + }, + }, + { + id: 'includeNested', + title: 'Include Nested Objects', + type: 'dropdown', + options: [ + { label: 'Yes (default)', id: 'true' }, + { label: 'No', id: 'false' }, + ], + value: () => 'true', + condition: { field: 'operation', value: 'sailpoint_search' }, + mode: 'advanced', + }, + { + id: 'sort', + title: 'Sort', + type: 'short-input', + placeholder: 'displayName,+id', + condition: { field: 'operation', value: 'sailpoint_search' }, + mode: 'advanced', + }, + { + id: 'filters', + title: 'Filters', + type: 'short-input', + placeholder: 'name sw "A" and cloudStatus eq "ACTIVE"', + condition: { field: 'operation', value: FILTER_OPERATIONS }, + mode: 'advanced', + wandConfig: { + enabled: true, + prompt: + 'Generate a SailPoint ISC V3 filter expression (e.g. name sw "A", cloudStatus eq "ACTIVE", and/or). Use documented filterable fields and operators. Return ONLY the filter string.', + placeholder: + 'Describe the records to filter, e.g. "identities whose email ends with @acme.com"...', + }, + }, + { + id: 'sorters', + title: 'Sorters', + type: 'short-input', + placeholder: 'name,-created', + condition: { field: 'operation', value: FILTER_OPERATIONS }, + mode: 'advanced', + }, + { + id: 'limit', + title: 'Limit', + type: 'short-input', + placeholder: '250', + condition: { field: 'operation', value: LIMIT_OPERATIONS }, + mode: 'advanced', + }, + { + id: 'offset', + title: 'Offset', + type: 'short-input', + placeholder: '0', + condition: { field: 'operation', value: LIMIT_OPERATIONS }, + mode: 'advanced', + }, + { + id: 'defaultFilter', + title: 'Default Filter', + type: 'dropdown', + options: [ + { label: 'Correlated only (default)', id: '' }, + { label: 'All identities', id: 'NONE' }, + ], + value: () => '', + condition: { field: 'operation', value: 'sailpoint_list_identities' }, + mode: 'advanced', + }, + { + id: 'detailLevel', + title: 'Detail Level', + type: 'dropdown', + options: [ + { label: 'Full (default)', id: '' }, + { label: 'Slim', id: 'SLIM' }, + ], + value: () => '', + condition: { field: 'operation', value: 'sailpoint_list_accounts' }, + mode: 'advanced', + }, + { + id: 'detail', + title: 'Detail', + type: 'dropdown', + options: [ + { label: 'Slim (default)', id: '' }, + { label: 'Full', id: 'FULL' }, + ], + value: () => '', + condition: { + field: 'operation', + value: ['sailpoint_list_campaigns', 'sailpoint_get_campaign'], + }, + mode: 'advanced', + }, + { + id: 'accountId', + title: 'Account ID', + type: 'short-input', + placeholder: 'Filter entitlements to a specific account', + condition: { field: 'operation', value: 'sailpoint_list_entitlements' }, + mode: 'advanced', + }, + { + id: 'segmentedForIdentity', + title: 'Segmented For Identity', + type: 'short-input', + placeholder: 'Identity ID to apply entitlement segmentation for', + condition: { field: 'operation', value: 'sailpoint_list_entitlements' }, + mode: 'advanced', + }, + { + id: 'forSubadmin', + title: 'For Subadmin', + type: 'short-input', + placeholder: 'Subadmin identity ID', + condition: { field: 'operation', value: 'sailpoint_list_sources' }, + mode: 'advanced', + }, + { + id: 'includeIDNSource', + title: 'Include IDN Source', + type: 'dropdown', + options: [ + { label: 'No (default)', id: 'false' }, + { label: 'Yes', id: 'true' }, + ], + value: () => 'false', + condition: { field: 'operation', value: 'sailpoint_list_sources' }, + mode: 'advanced', + }, + { + id: 'requestedForFilter', + title: 'Requested For', + type: 'short-input', + placeholder: 'Identity ID or "me"', + condition: { field: 'operation', value: IDENTITY_SCOPE_OPERATIONS }, + }, + { + id: 'requestedBy', + title: 'Requested By', + type: 'short-input', + placeholder: 'Identity ID or "me"', + condition: { field: 'operation', value: IDENTITY_SCOPE_OPERATIONS }, + mode: 'advanced', + }, + { + id: 'regardingIdentity', + title: 'Regarding Identity', + type: 'short-input', + placeholder: 'Identity ID (requester or target)', + condition: { field: 'operation', value: IDENTITY_SCOPE_OPERATIONS }, + mode: 'advanced', + }, + { + id: 'assignedTo', + title: 'Assigned To', + type: 'short-input', + placeholder: 'Work item owner identity ID', + condition: { field: 'operation', value: 'sailpoint_get_access_request_status' }, + mode: 'advanced', + }, + { + id: 'requestState', + title: 'Request State', + type: 'dropdown', + options: [ + { label: 'Any', id: '' }, + { label: 'Executing', id: 'EXECUTING' }, + ], + value: () => '', + condition: { field: 'operation', value: 'sailpoint_get_access_request_status' }, + mode: 'advanced', + }, + { + id: 'reviewerIdentity', + title: 'Reviewer Identity', + type: 'short-input', + placeholder: 'Reviewer identity ID or "me"', + condition: { field: 'operation', value: 'sailpoint_list_certifications' }, + }, + { + id: 'entitlements', + title: 'Entitlements Filter', + type: 'short-input', + placeholder: 'true / false', + condition: { field: 'operation', value: 'sailpoint_list_certification_review_items' }, + mode: 'advanced', + }, + { + id: 'accessProfiles', + title: 'Access Profiles Filter', + type: 'short-input', + placeholder: 'true / false', + condition: { field: 'operation', value: 'sailpoint_list_certification_review_items' }, + mode: 'advanced', + }, + { + id: 'roles', + title: 'Roles Filter', + type: 'short-input', + placeholder: 'true / false', + condition: { field: 'operation', value: 'sailpoint_list_certification_review_items' }, + mode: 'advanced', + }, + { + id: 'requestedIdentities', + title: 'Requested For (Identities)', + type: 'code', + language: 'json', + placeholder: '["2c9180857c1a...","2c9180857c1b..."]', + condition: { field: 'operation', value: 'sailpoint_request_access' }, + required: { field: 'operation', value: 'sailpoint_request_access' }, + }, + { + id: 'requestedItems', + title: 'Requested Items', + type: 'code', + language: 'json', + placeholder: '[{ "type": "ENTITLEMENT", "id": "2c918...", "comment": "New hire" }]', + condition: { field: 'operation', value: 'sailpoint_request_access' }, + required: { field: 'operation', value: 'sailpoint_request_access' }, + wandConfig: { + enabled: true, + prompt: + 'Generate a SailPoint access-request requestedItems JSON array. Each item is { type: ACCESS_PROFILE|ROLE|ENTITLEMENT, id, comment?, removeDate?, startDate?, assignmentId?, nativeIdentity?, clientMetadata? }. For REVOKE_ACCESS exactly one item with a comment is allowed. Return ONLY valid JSON.', + placeholder: 'Describe the access to request or revoke...', + generationType: 'json-object', + }, + }, + { + id: 'requestType', + title: 'Request Type', + type: 'dropdown', + options: [ + { label: 'Grant Access (default)', id: 'GRANT_ACCESS' }, + { label: 'Revoke Access', id: 'REVOKE_ACCESS' }, + { label: 'Modify Access', id: 'MODIFY_ACCESS' }, + ], + value: () => 'GRANT_ACCESS', + condition: { field: 'operation', value: 'sailpoint_request_access' }, + }, + { + id: 'clientMetadata', + title: 'Client Metadata', + type: 'code', + language: 'json', + placeholder: '{ "requestedByEmail": "manager@acme.com" }', + condition: { field: 'operation', value: 'sailpoint_request_access' }, + mode: 'advanced', + }, + { + id: 'accountActivityId', + title: 'Account Activity ID', + type: 'short-input', + placeholder: 'identityRequestId of the request to cancel', + condition: { field: 'operation', value: 'sailpoint_cancel_access_request' }, + required: { field: 'operation', value: 'sailpoint_cancel_access_request' }, + }, + { + id: 'comment', + title: 'Comment', + type: 'long-input', + placeholder: 'Reason for cancellation', + condition: { field: 'operation', value: 'sailpoint_cancel_access_request' }, + required: { field: 'operation', value: 'sailpoint_cancel_access_request' }, + }, + { + id: 'sourceId', + title: 'Source ID', + type: 'short-input', + placeholder: 'Source ID to aggregate', + condition: { + field: 'operation', + value: ['sailpoint_load_accounts', 'sailpoint_load_entitlements'], + }, + required: { + field: 'operation', + value: ['sailpoint_load_accounts', 'sailpoint_load_entitlements'], + }, + }, + { + id: 'accountsFileUpload', + title: 'Accounts CSV', + type: 'file-upload', + canonicalParamId: 'accountsCsv', + placeholder: 'Upload the accounts CSV to aggregate', + condition: { field: 'operation', value: 'sailpoint_load_accounts' }, + mode: 'basic', + multiple: false, + required: false, + }, + { + id: 'accountsFileRef', + title: 'Accounts CSV', + type: 'short-input', + canonicalParamId: 'accountsCsv', + placeholder: 'Reference a file from a previous block', + condition: { field: 'operation', value: 'sailpoint_load_accounts' }, + mode: 'advanced', + required: false, + }, + { + id: 'disableOptimization', + title: 'Disable Optimization', + type: 'dropdown', + options: [ + { label: 'No (default)', id: 'false' }, + { label: 'Yes - reprocess every account', id: 'true' }, + ], + value: () => 'false', + condition: { field: 'operation', value: 'sailpoint_load_accounts' }, + mode: 'advanced', + }, + { + id: 'entitlementsFileUpload', + title: 'Entitlements CSV', + type: 'file-upload', + canonicalParamId: 'entitlementsCsv', + placeholder: 'Upload the entitlements CSV to aggregate', + condition: { field: 'operation', value: 'sailpoint_load_entitlements' }, + mode: 'basic', + multiple: false, + required: false, + }, + { + id: 'entitlementsFileRef', + title: 'Entitlements CSV', + type: 'short-input', + canonicalParamId: 'entitlementsCsv', + placeholder: 'Reference a file from a previous block', + condition: { field: 'operation', value: 'sailpoint_load_entitlements' }, + mode: 'advanced', + required: false, + }, + ], + + tools: { + access: [ + 'sailpoint_cancel_access_request', + 'sailpoint_get_access_profile_entitlements', + 'sailpoint_get_access_request_status', + 'sailpoint_get_account', + 'sailpoint_get_account_activity', + 'sailpoint_get_account_entitlements', + 'sailpoint_get_campaign', + 'sailpoint_get_entitlement', + 'sailpoint_get_identity', + 'sailpoint_get_role_entitlements', + 'sailpoint_get_source', + 'sailpoint_list_access_profiles', + 'sailpoint_list_account_activities', + 'sailpoint_list_accounts', + 'sailpoint_list_campaigns', + 'sailpoint_list_certification_review_items', + 'sailpoint_list_certifications', + 'sailpoint_list_entitlements', + 'sailpoint_list_identities', + 'sailpoint_list_roles', + 'sailpoint_list_sources', + 'sailpoint_load_accounts', + 'sailpoint_load_entitlements', + 'sailpoint_request_access', + 'sailpoint_search', + 'sailpoint_search_aggregate', + 'sailpoint_search_count', + ], + config: { + tool: (params) => + typeof params.operation === 'string' ? params.operation : 'sailpoint_search', + params: (params) => { + const mapped: Record = { + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + } + if (params.apiVersion) mapped.apiVersion = params.apiVersion + + const setStr = (key: string, value: unknown) => { + if (typeof value === 'string') { + const trimmed = value.trim() + if (trimmed) mapped[key] = trimmed + } else if (value !== undefined && value !== null) { + mapped[key] = value + } + } + const setNum = (key: string, value: unknown) => { + const parsed = parseOptionalNumberInput(value, key, { integer: true, min: 0 }) + if (parsed != null) mapped[key] = parsed + } + const applyPagination = () => { + setNum('limit', params.limit) + setNum('offset', params.offset) + } + const applyFilters = () => { + setStr('filters', params.filters) + setStr('sorters', params.sorters) + } + + switch (params.operation) { + case 'sailpoint_search': + setStr('indices', params.indices) + setStr('query', params.query) + setStr('sort', params.sort) + if (params.includeNested === 'false' || params.includeNested === false) { + mapped.includeNested = false + } + applyPagination() + break + case 'sailpoint_search_count': + setStr('indices', params.indices) + setStr('query', params.query) + break + case 'sailpoint_search_aggregate': + setStr('indices', params.indices) + setStr('query', params.query) + applyPagination() + break + case 'sailpoint_list_identities': + applyFilters() + setStr('defaultFilter', params.defaultFilter) + applyPagination() + break + case 'sailpoint_list_accounts': + applyFilters() + setStr('detailLevel', params.detailLevel) + applyPagination() + break + case 'sailpoint_list_entitlements': + applyFilters() + setStr('accountId', params.accountId) + setStr('segmentedForIdentity', params.segmentedForIdentity) + applyPagination() + break + case 'sailpoint_list_roles': + case 'sailpoint_list_access_profiles': + applyFilters() + applyPagination() + break + case 'sailpoint_get_role_entitlements': + case 'sailpoint_get_access_profile_entitlements': + setStr('id', params.id) + applyFilters() + applyPagination() + break + case 'sailpoint_get_account_entitlements': + setStr('id', params.id) + applyPagination() + break + case 'sailpoint_list_sources': + applyFilters() + setStr('forSubadmin', params.forSubadmin) + if (params.includeIDNSource === 'true' || params.includeIDNSource === true) { + mapped.includeIDNSource = true + } + applyPagination() + break + case 'sailpoint_list_account_activities': + setStr('requestedFor', params.requestedForFilter) + setStr('requestedBy', params.requestedBy) + setStr('regardingIdentity', params.regardingIdentity) + applyFilters() + applyPagination() + break + case 'sailpoint_list_campaigns': + setStr('detail', params.detail) + applyFilters() + applyPagination() + break + case 'sailpoint_get_campaign': + setStr('id', params.id) + setStr('detail', params.detail) + break + case 'sailpoint_list_certifications': + setStr('reviewerIdentity', params.reviewerIdentity) + applyFilters() + applyPagination() + break + case 'sailpoint_list_certification_review_items': + setStr('id', params.id) + applyFilters() + setStr('entitlements', params.entitlements) + setStr('accessProfiles', params.accessProfiles) + setStr('roles', params.roles) + applyPagination() + break + case 'sailpoint_get_identity': + case 'sailpoint_get_account': + case 'sailpoint_get_entitlement': + case 'sailpoint_get_source': + case 'sailpoint_get_account_activity': + setStr('id', params.id) + break + case 'sailpoint_get_access_request_status': + setStr('requestedFor', params.requestedForFilter) + setStr('requestedBy', params.requestedBy) + setStr('regardingIdentity', params.regardingIdentity) + setStr('assignedTo', params.assignedTo) + setStr('requestState', params.requestState) + applyFilters() + applyPagination() + break + case 'sailpoint_request_access': { + const requestedFor = parseOptionalJsonInput(params.requestedIdentities, 'requestedFor') + if (requestedFor !== undefined) mapped.requestedFor = requestedFor + const requestedItems = parseOptionalJsonInput(params.requestedItems, 'requestedItems') + if (requestedItems !== undefined) mapped.requestedItems = requestedItems + setStr('requestType', params.requestType) + const clientMetadata = parseOptionalJsonInput(params.clientMetadata, 'clientMetadata') + if (clientMetadata !== undefined) mapped.clientMetadata = clientMetadata + break + } + case 'sailpoint_cancel_access_request': + setStr('accountActivityId', params.accountActivityId) + setStr('comment', params.comment) + break + case 'sailpoint_load_accounts': { + setStr('sourceId', params.sourceId) + const file = normalizeFileInput(params.accountsCsv, { single: true }) + if (file) mapped.file = file + if (params.disableOptimization === 'true' || params.disableOptimization === true) { + mapped.disableOptimization = true + } + break + } + case 'sailpoint_load_entitlements': { + setStr('sourceId', params.sourceId) + const file = normalizeFileInput(params.entitlementsCsv, { single: true }) + if (file) mapped.file = file + break + } + } + + return mapped + }, + }, + }, + + inputs: { + operation: { type: 'string', description: 'Selected SailPoint operation' }, + tenant: { type: 'string', description: 'SailPoint tenant subdomain' }, + clientId: { type: 'string', description: 'PAT client ID' }, + clientSecret: { type: 'string', description: 'PAT client secret' }, + apiVersion: { type: 'string', description: 'API version path segment (v2025, v2024, v3)' }, + id: { type: 'string', description: 'Resource ID for single-entity operations' }, + indices: { type: 'string', description: 'Search indices (comma-separated or JSON array)' }, + query: { type: 'string', description: 'Elasticsearch query string' }, + includeNested: { type: 'string', description: 'Include nested objects in search results' }, + sort: { type: 'string', description: 'Search sort fields' }, + filters: { type: 'string', description: 'V3 filter expression' }, + sorters: { type: 'string', description: 'Sort expression' }, + limit: { type: 'number', description: 'Maximum records to return' }, + offset: { type: 'number', description: 'Pagination offset' }, + defaultFilter: { + type: 'string', + description: 'Identity default filter (CORRELATED_ONLY or NONE)', + }, + detailLevel: { type: 'string', description: 'Account detail level (SLIM or FULL)' }, + detail: { type: 'string', description: 'Campaign detail level (SLIM or FULL)' }, + accountId: { type: 'string', description: 'Account ID to filter entitlements' }, + segmentedForIdentity: { + type: 'string', + description: 'Identity ID for entitlement segmentation', + }, + forSubadmin: { type: 'string', description: 'Subadmin identity ID for source scoping' }, + includeIDNSource: { type: 'string', description: 'Include the IdentityNow source in results' }, + requestedForFilter: { type: 'string', description: 'Identity to scope activities/status by' }, + requestedBy: { type: 'string', description: 'Requester identity to scope by' }, + regardingIdentity: { type: 'string', description: 'Requester or target identity to scope by' }, + assignedTo: { type: 'string', description: 'Work item owner identity ID' }, + requestState: { type: 'string', description: 'Access request state filter (EXECUTING)' }, + reviewerIdentity: { type: 'string', description: 'Reviewer identity for certifications' }, + entitlements: { type: 'string', description: 'Certification review item entitlements filter' }, + accessProfiles: { + type: 'string', + description: 'Certification review item access-profiles filter', + }, + roles: { type: 'string', description: 'Certification review item roles filter' }, + requestedIdentities: { type: 'json', description: 'Identity IDs the access is requested for' }, + requestedItems: { type: 'json', description: 'Access items to request or revoke' }, + requestType: { type: 'string', description: 'GRANT_ACCESS, REVOKE_ACCESS, or MODIFY_ACCESS' }, + clientMetadata: { type: 'json', description: 'Arbitrary key/value metadata for correlation' }, + accountActivityId: { type: 'string', description: 'identityRequestId to cancel' }, + comment: { type: 'string', description: 'Reason for cancellation' }, + sourceId: { type: 'string', description: 'Source ID for aggregation' }, + accountsCsv: { type: 'json', description: 'Accounts CSV file to aggregate' }, + entitlementsCsv: { type: 'json', description: 'Entitlements CSV file to aggregate' }, + disableOptimization: { + type: 'string', + description: 'Reprocess every account during aggregation', + }, + }, + + outputs: { + items: { type: 'json', description: 'Raw SailPoint documents for list operations' }, + results: { type: 'json', description: 'Raw SailPoint documents for search operations' }, + item: { type: 'json', description: 'Raw SailPoint document for get operations' }, + total: { type: 'number', description: 'Total matching documents (search count)' }, + task: { type: 'json', description: 'Aggregation task for load operations' }, + accepted: { type: 'boolean', description: 'Whether an access-request write was accepted' }, + status: { type: 'number', description: 'HTTP status returned by SailPoint for writes' }, + count: { type: 'number', description: 'Number of records returned in the page' }, + totalCount: { type: 'number', description: 'Total matching records when count is requested' }, + complete: { + type: 'boolean', + description: 'False when an empty result may indicate a permission gap', + }, + warnings: { type: 'json', description: 'Diagnostic warnings (e.g. empty-result guidance)' }, + }, +} + +export const SailPointBlockMeta = { + tags: ['identity', 'operations'], + url: 'https://www.sailpoint.com', + templates: [ + { + icon: SailPointIcon, + title: 'SailPoint joiner access review', + prompt: + 'Create a scheduled workflow that lists recent SailPoint account activities for joiners, summarizes their granted access and time-to-access, and posts a digest to Slack for the identity team.', + modules: ['scheduled', 'agent', 'workflows'], + category: 'operations', + tags: ['enterprise', 'reporting'], + alsoIntegrations: ['slack'], + }, + { + icon: SailPointIcon, + title: 'SailPoint access request bot', + prompt: + 'Build a workflow where a user describes the access they need in Chat, the agent searches SailPoint entitlements and access profiles, and submits a SailPoint access request on their behalf with a correlation note in client metadata.', + modules: ['agent', 'workflows'], + category: 'operations', + tags: ['automation', 'self-service'], + alsoIntegrations: ['slack'], + }, + { + icon: SailPointIcon, + title: 'SailPoint orphan account finder', + prompt: + 'Create a scheduled workflow that searches SailPoint accounts that are uncorrelated to any identity, writes the orphan list to a table, and opens a review task for the source owners.', + modules: ['scheduled', 'tables', 'agent', 'workflows'], + category: 'operations', + tags: ['enterprise', 'analysis'], + }, + { + icon: SailPointIcon, + title: 'SailPoint certification progress digest', + prompt: + 'Build a scheduled workflow that lists active SailPoint campaigns and certifications, computes completion percentages, and emails a progress digest to certification owners.', + modules: ['scheduled', 'agent', 'workflows'], + category: 'operations', + tags: ['enterprise', 'reporting'], + alsoIntegrations: ['gmail'], + }, + { + icon: SailPointIcon, + title: 'SailPoint leaver access revocation', + prompt: + 'Create a workflow that, given a departing employee, searches their SailPoint identity access, and submits revoke access requests for each directly-assigned entitlement with a comment referencing the offboarding ticket.', + modules: ['agent', 'workflows'], + category: 'operations', + tags: ['automation', 'security'], + alsoIntegrations: ['jira'], + }, + { + icon: SailPointIcon, + title: 'SailPoint entitlement catalog export', + prompt: + 'Build a scheduled workflow that lists SailPoint entitlements and their owning sources, and writes the catalog to a table for access-governance reporting.', + modules: ['scheduled', 'tables', 'agent', 'workflows'], + category: 'operations', + tags: ['enterprise', 'reporting'], + }, + { + icon: SailPointIcon, + title: 'SailPoint privileged access watch', + prompt: + 'Create a scheduled workflow that searches SailPoint identities holding privileged roles, cross-references recent account activities, and flags any new privileged grants to a security review channel.', + modules: ['scheduled', 'agent', 'workflows'], + category: 'operations', + tags: ['enterprise', 'security'], + alsoIntegrations: ['slack'], + }, + ], + skills: [ + { + name: 'review-identity-access', + description: + 'Search a SailPoint identity and summarize its entitlements, roles, and access profiles for an access review.', + content: + '# Review SailPoint Identity Access\n\nBuild a complete picture of what an identity can access.\n\n## Steps\n1. Search identities (with nested objects) to find the target identity and its access array.\n2. Expand roles and access profiles into their underlying entitlements.\n3. Note directly-assigned versus role- or birthright-granted access (only directly-assigned access can be revoked via access request).\n\n## Output\nA per-identity access summary highlighting privileged or unusual grants for reviewer attention.', + }, + { + name: 'request-and-track-access', + description: + 'Submit a SailPoint access request and track it to completion via account activities and request status.', + content: + '# Request and Track SailPoint Access\n\nDrive an access request from submission to fulfillment.\n\n## Steps\n1. Search entitlements, roles, or access profiles to resolve the exact item IDs.\n2. Submit an access request (GRANT_ACCESS) for the identities, adding a correlation note in client metadata.\n3. Poll access request status and account activities until the request completes, cancelling if needed.\n\n## Output\nA confirmation of the submitted request plus its current fulfillment status.', + }, + ], +} as const satisfies BlockMeta diff --git a/apps/sim/blocks/registry-maps.ts b/apps/sim/blocks/registry-maps.ts index 70f443bec70..edc68bc94c8 100644 --- a/apps/sim/blocks/registry-maps.ts +++ b/apps/sim/blocks/registry-maps.ts @@ -261,6 +261,7 @@ import { RootlyBlock, RootlyBlockMeta } from '@/blocks/blocks/rootly' import { RouterBlock, RouterV2Block } from '@/blocks/blocks/router' import { RssBlock, RssBlockMeta } from '@/blocks/blocks/rss' import { S3Block, S3BlockMeta } from '@/blocks/blocks/s3' +import { SailPointBlock, SailPointBlockMeta } from '@/blocks/blocks/sailpoint' import { SalesforceBlock, SalesforceBlockMeta } from '@/blocks/blocks/salesforce' import { SapConcurBlock, SapConcurBlockMeta } from '@/blocks/blocks/sap_concur' import { SapS4HanaBlock, SapS4HanaBlockMeta } from '@/blocks/blocks/sap_s4hana' @@ -577,6 +578,7 @@ export const BLOCK_REGISTRY: Record = { router_v2: RouterV2Block, rss: RssBlock, s3: S3Block, + sailpoint: SailPointBlock, salesforce: SalesforceBlock, sap_concur: SapConcurBlock, sap_s4hana: SapS4HanaBlock, @@ -865,6 +867,7 @@ export const BLOCK_META_REGISTRY: Record = { rootly: RootlyBlockMeta, rss: RssBlockMeta, s3: S3BlockMeta, + sailpoint: SailPointBlockMeta, salesforce: SalesforceBlockMeta, sap_concur: SapConcurBlockMeta, sap_s4hana: SapS4HanaBlockMeta, diff --git a/apps/sim/components/icons.tsx b/apps/sim/components/icons.tsx index efedba2000d..b541e3328d9 100644 --- a/apps/sim/components/icons.tsx +++ b/apps/sim/components/icons.tsx @@ -5166,6 +5166,18 @@ export function PipedriveIcon(props: SVGProps) { ) } +export function SailPointIcon(props: SVGProps) { + return ( + + + + + ) +} + export function SalesforceIcon(props: SVGProps) { return ( diff --git a/apps/sim/lib/api/contracts/tools/sailpoint.ts b/apps/sim/lib/api/contracts/tools/sailpoint.ts new file mode 100644 index 00000000000..0501c5ab84b --- /dev/null +++ b/apps/sim/lib/api/contracts/tools/sailpoint.ts @@ -0,0 +1,471 @@ +import { z } from 'zod' +import type { + ContractBody, + ContractBodyInput, + ContractJsonResponse, +} from '@/lib/api/contracts/types' +import { defineRouteContract } from '@/lib/api/contracts/types' +import { FileInputSchema } from '@/lib/uploads/utils/file-schemas' + +/** Credential + version fields shared by every SailPoint operation. */ +const sailpointBaseFields = { + clientId: z.string().min(1, 'Client ID is required'), + clientSecret: z.string().min(1, 'Client Secret is required'), + tenant: z.string().min(1, 'Tenant is required'), + apiVersion: z.enum(['v2025', 'v2024', 'v3']).optional(), +} + +const filtersField = z.string().optional() +const sortersField = z.string().optional() +const offsetField = z.coerce.number().int().min(0, 'Offset must be 0 or greater').optional() +const countField = z.boolean().optional() + +const limitField = (max: number) => + z.coerce + .number() + .int() + .min(0, 'Limit must be 0 or greater') + .max(max, `Limit must be at most ${max}`) + .optional() + +/** Standard limit/offset/count trio with a per-endpoint limit cap. */ +const pagination = (limitMax: number) => ({ + limit: limitField(limitMax), + offset: offsetField, + count: countField, +}) + +const idField = (label: string) => z.string().min(1, `${label} is required`) + +/** Accepts an array of strings or a single string (route normalizes). */ +const stringListField = z.union([z.array(z.string()), z.string()]).optional() + +/** Parses a JSON string into a value before applying the inner schema. */ +function parseJson(value: unknown): unknown { + if (typeof value === 'string') { + try { + return JSON.parse(value) + } catch { + return value + } + } + return value +} + +const requestedForSchema = z.preprocess(parseJson, z.array(z.string())) + +const requestedItemSchema = z.object({ + type: z.enum(['ACCESS_PROFILE', 'ROLE', 'ENTITLEMENT']), + id: z.string().min(1, 'requestedItems[].id is required'), + comment: z.string().optional(), + removeDate: z.string().optional(), + startDate: z.string().optional(), + assignmentId: z.string().optional(), + nativeIdentity: z.string().optional(), + clientMetadata: z.record(z.string(), z.string()).optional(), +}) + +const requestedItemsSchema = z.preprocess(parseJson, z.array(requestedItemSchema)) +const clientMetadataSchema = z.preprocess(parseJson, z.record(z.string(), z.string())).optional() + +const LIMIT_STANDARD = 250 +const LIMIT_SEARCH = 10000 +const LIMIT_ROLES = 50 + +const searchSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_search'), + indices: stringListField, + query: z.string().optional(), + sort: stringListField, + searchAfter: stringListField, + includeNested: z.boolean().optional(), + ...pagination(LIMIT_SEARCH), +}) + +const searchCountSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_search_count'), + indices: stringListField, + query: z.string().optional(), +}) + +const searchAggregateSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_search_aggregate'), + indices: stringListField, + query: z.string().optional(), + limit: limitField(LIMIT_STANDARD), + offset: offsetField, +}) + +const listIdentitiesSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_list_identities'), + filters: filtersField, + sorters: sortersField, + defaultFilter: z.enum(['CORRELATED_ONLY', 'NONE']).optional(), + ...pagination(LIMIT_STANDARD), +}) + +const getIdentitySchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_get_identity'), + id: idField('Identity ID'), +}) + +const listAccountsSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_list_accounts'), + filters: filtersField, + sorters: sortersField, + detailLevel: z.enum(['SLIM', 'FULL']).optional(), + ...pagination(LIMIT_STANDARD), +}) + +const getAccountSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_get_account'), + id: idField('Account ID'), +}) + +const getAccountEntitlementsSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_get_account_entitlements'), + id: idField('Account ID'), + ...pagination(LIMIT_STANDARD), +}) + +const listEntitlementsSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_list_entitlements'), + filters: filtersField, + sorters: sortersField, + accountId: z.string().optional(), + segmentedForIdentity: z.string().optional(), + ...pagination(LIMIT_STANDARD), +}) + +const getEntitlementSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_get_entitlement'), + id: idField('Entitlement ID'), +}) + +const listRolesSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_list_roles'), + filters: filtersField, + sorters: sortersField, + ...pagination(LIMIT_ROLES), +}) + +const getRoleEntitlementsSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_get_role_entitlements'), + id: idField('Role ID'), + filters: filtersField, + sorters: sortersField, + ...pagination(LIMIT_ROLES), +}) + +const listAccessProfilesSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_list_access_profiles'), + filters: filtersField, + sorters: sortersField, + ...pagination(LIMIT_STANDARD), +}) + +const getAccessProfileEntitlementsSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_get_access_profile_entitlements'), + id: idField('Access Profile ID'), + filters: filtersField, + sorters: sortersField, + ...pagination(LIMIT_STANDARD), +}) + +const listSourcesSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_list_sources'), + filters: filtersField, + sorters: sortersField, + forSubadmin: z.string().optional(), + includeIDNSource: z.boolean().optional(), + ...pagination(LIMIT_STANDARD), +}) + +const getSourceSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_get_source'), + id: idField('Source ID'), +}) + +const listAccountActivitiesSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_list_account_activities'), + requestedFor: z.string().optional(), + requestedBy: z.string().optional(), + regardingIdentity: z.string().optional(), + filters: filtersField, + sorters: sortersField, + ...pagination(LIMIT_STANDARD), +}) + +const getAccountActivitySchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_get_account_activity'), + id: idField('Account activity ID'), +}) + +const listCampaignsSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_list_campaigns'), + detail: z.enum(['SLIM', 'FULL']).optional(), + filters: filtersField, + sorters: sortersField, + ...pagination(LIMIT_STANDARD), +}) + +const getCampaignSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_get_campaign'), + id: idField('Campaign ID'), + detail: z.enum(['SLIM', 'FULL']).optional(), +}) + +const listCertificationsSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_list_certifications'), + reviewerIdentity: z.string().optional(), + filters: filtersField, + sorters: sortersField, + ...pagination(LIMIT_STANDARD), +}) + +const listCertificationReviewItemsSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_list_certification_review_items'), + id: idField('Certification ID'), + filters: filtersField, + sorters: sortersField, + entitlements: z.string().optional(), + accessProfiles: z.string().optional(), + roles: z.string().optional(), + ...pagination(LIMIT_STANDARD), +}) + +const requestAccessSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_request_access'), + requestedFor: requestedForSchema, + requestedItems: requestedItemsSchema, + requestType: z.enum(['GRANT_ACCESS', 'REVOKE_ACCESS', 'MODIFY_ACCESS']).optional(), + clientMetadata: clientMetadataSchema, +}) + +const cancelAccessRequestSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_cancel_access_request'), + accountActivityId: idField('accountActivityId'), + comment: z.string().min(1, 'comment is required to cancel an access request'), +}) + +const getAccessRequestStatusSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_get_access_request_status'), + requestedFor: z.string().optional(), + requestedBy: z.string().optional(), + regardingIdentity: z.string().optional(), + assignedTo: z.string().optional(), + requestState: z.enum(['EXECUTING']).optional(), + filters: filtersField, + sorters: sortersField, + ...pagination(LIMIT_STANDARD), +}) + +/** + * Discriminated union of every JSON operation handled by `/api/tools/sailpoint/query`. The + * `.superRefine` enforces SailPoint's documented access-request constraints (server-side 400s) + * before submission so callers get descriptive, field-anchored errors. + */ +export const sailpointQueryBodySchema = z + .discriminatedUnion('operation', [ + searchSchema, + searchCountSchema, + searchAggregateSchema, + listIdentitiesSchema, + getIdentitySchema, + listAccountsSchema, + getAccountSchema, + getAccountEntitlementsSchema, + listEntitlementsSchema, + getEntitlementSchema, + listRolesSchema, + getRoleEntitlementsSchema, + listAccessProfilesSchema, + getAccessProfileEntitlementsSchema, + listSourcesSchema, + getSourceSchema, + listAccountActivitiesSchema, + getAccountActivitySchema, + listCampaignsSchema, + getCampaignSchema, + listCertificationsSchema, + listCertificationReviewItemsSchema, + requestAccessSchema, + cancelAccessRequestSchema, + getAccessRequestStatusSchema, + ]) + .superRefine((val, ctx) => { + if (val.operation !== 'sailpoint_request_access') return + + const requestType = val.requestType ?? 'GRANT_ACCESS' + const requestedFor = val.requestedFor + const requestedItems = val.requestedItems + + if (requestedFor.length === 0) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedFor'], + message: 'requestedFor must contain at least one identity ID', + }) + } + if (requestedItems.length === 0) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedItems'], + message: 'requestedItems must contain at least one item', + }) + } + + if (requestType === 'REVOKE_ACCESS') { + if (requestedFor.length > 1) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedFor'], + message: 'REVOKE_ACCESS supports exactly one identity per request', + }) + } + if (requestedItems.length > 1) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedItems'], + message: + 'REVOKE_ACCESS supports exactly one item per request (there is no bulk-revoke endpoint)', + }) + } + requestedItems.forEach((item, index) => { + if (!item.comment) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedItems', index, 'comment'], + message: 'comment is required for REVOKE_ACCESS requests', + }) + } + if (item.startDate) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedItems', index, 'startDate'], + message: 'startDate is not allowed on REVOKE_ACCESS requests', + }) + } + }) + } + + if (requestType === 'GRANT_ACCESS') { + const hasEntitlement = requestedItems.some((item) => item.type === 'ENTITLEMENT') + if (hasEntitlement) { + if (requestedItems.length > 25) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedItems'], + message: 'A grant that includes entitlements may request at most 25 items', + }) + } + if (requestedFor.length > 10) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedFor'], + message: 'A grant that includes entitlements may request for at most 10 identities', + }) + } + } + } + }) + +const loadAccountsSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_load_accounts'), + sourceId: idField('Source ID'), + file: FileInputSchema.optional().nullable(), + disableOptimization: z.boolean().optional(), +}) + +const loadEntitlementsSchema = z.object({ + ...sailpointBaseFields, + operation: z.literal('sailpoint_load_entitlements'), + sourceId: idField('Source ID'), + file: FileInputSchema.optional().nullable(), +}) + +export const sailpointLoadBodySchema = z.discriminatedUnion('operation', [ + loadAccountsSchema, + loadEntitlementsSchema, +]) + +const listOutputSchema = z.object({ + items: z.array(z.unknown()), + count: z.number(), + totalCount: z.number().nullable(), + complete: z.boolean(), + warnings: z.array(z.string()), +}) + +const searchOutputSchema = z.object({ + results: z.array(z.unknown()), + count: z.number(), + totalCount: z.number().nullable(), + complete: z.boolean(), + warnings: z.array(z.string()), +}) + +const countOutputSchema = z.object({ total: z.number() }) +const itemOutputSchema = z.object({ item: z.unknown() }) +const writeOutputSchema = z.object({ accepted: z.boolean(), status: z.number() }) +const taskOutputSchema = z.object({ task: z.unknown() }) + +const okResponse = (output: T) => + z.object({ success: z.literal(true), output }) + +const sailpointQueryResponseSchema = z.union([ + okResponse(listOutputSchema), + okResponse(searchOutputSchema), + okResponse(countOutputSchema), + okResponse(itemOutputSchema), + okResponse(writeOutputSchema), +]) + +const sailpointLoadResponseSchema = okResponse(taskOutputSchema) + +export const sailpointQueryContract = defineRouteContract({ + method: 'POST', + path: '/api/tools/sailpoint/query', + body: sailpointQueryBodySchema, + response: { mode: 'json', schema: sailpointQueryResponseSchema }, +}) + +export const sailpointLoadContract = defineRouteContract({ + method: 'POST', + path: '/api/tools/sailpoint/load', + body: sailpointLoadBodySchema, + response: { mode: 'json', schema: sailpointLoadResponseSchema }, +}) + +export type SailpointQueryBody = ContractBody +export type SailpointQueryBodyInput = ContractBodyInput +export type SailpointQueryResponse = ContractJsonResponse +export type SailpointLoadBody = ContractBody +export type SailpointLoadBodyInput = ContractBodyInput +export type SailpointLoadResponse = ContractJsonResponse diff --git a/apps/sim/lib/integrations/icon-mapping.ts b/apps/sim/lib/integrations/icon-mapping.ts index ff7c8965ac8..5614633b0a9 100644 --- a/apps/sim/lib/integrations/icon-mapping.ts +++ b/apps/sim/lib/integrations/icon-mapping.ts @@ -189,6 +189,7 @@ import { RootlyIcon, RssIcon, S3Icon, + SailPointIcon, SalesforceIcon, SapConcurIcon, SapS4HanaIcon, @@ -453,6 +454,7 @@ export const blockTypeToIconMap: Record = { rootly: RootlyIcon, rss: RssIcon, s3: S3Icon, + sailpoint: SailPointIcon, salesforce: SalesforceIcon, sap_concur: SapConcurIcon, sap_s4hana: SapS4HanaIcon, diff --git a/apps/sim/lib/integrations/integrations.json b/apps/sim/lib/integrations/integrations.json index deadb0012bc..7b2f1ca82e5 100644 --- a/apps/sim/lib/integrations/integrations.json +++ b/apps/sim/lib/integrations/integrations.json @@ -16136,6 +16136,133 @@ "integrationType": "documents", "tags": ["cloud", "automation"] }, + { + "type": "sailpoint", + "slug": "sailpoint", + "name": "SailPoint", + "description": "Govern identities and access in SailPoint Identity Security Cloud", + "longDescription": "Read and act on identity governance data in SailPoint Identity Security Cloud (ISC): search identities, accounts, entitlements, roles, and access profiles; review account activities, campaigns, and certifications; and request, revoke, or cancel access. Authenticates with a Personal Access Token (PAT) using the OAuth2 client-credentials grant against your per-tenant host (https://{tenant}.api.identitynow.com). ", + "bgColor": "#0033A1", + "iconName": "SailPointIcon", + "docsUrl": "https://docs.sim.ai/integrations/sailpoint", + "operations": [ + { + "name": "Search", + "description": "Run a global search across SailPoint indices (identities, entitlements, roles, access profiles, account activities, events). Set includeNested to return nested access[] on identities." + }, + { + "name": "Search Count", + "description": "Return the total number of documents matching a SailPoint search query, without the documents themselves." + }, + { + "name": "Search Aggregate", + "description": "Return aggregation buckets for a SailPoint search query (e.g. counts grouped by a field)." + }, + { + "name": "List Identities", + "description": "List identities in SailPoint with optional Sailpoint filters, sorters, and pagination." + }, + { + "name": "Get Identity", + "description": "Get a single SailPoint identity by ID." + }, + { + "name": "List Accounts", + "description": "List accounts in SailPoint with optional filters, sorters, and pagination." + }, + { + "name": "Get Account", + "description": "Get a single SailPoint account by ID." + }, + { + "name": "Get Account Entitlements", + "description": "List the entitlements granted on a specific SailPoint account." + }, + { + "name": "List Entitlements", + "description": "List entitlements in SailPoint with optional filters, sorters, and pagination." + }, + { + "name": "Get Entitlement", + "description": "Get a single SailPoint entitlement by ID." + }, + { + "name": "List Roles", + "description": "List roles in SailPoint with optional filters, sorters, and pagination." + }, + { + "name": "Get Role Entitlements", + "description": "List the entitlements granted by a specific SailPoint role." + }, + { + "name": "List Access Profiles", + "description": "List access profiles in SailPoint with optional filters, sorters, and pagination." + }, + { + "name": "Get Access Profile Entitlements", + "description": "List the entitlements granted by a specific SailPoint access profile." + }, + { + "name": "List Sources", + "description": "List identity sources in SailPoint with optional filters, sorters, and pagination." + }, + { + "name": "Get Source", + "description": "Get a single SailPoint identity source by ID." + }, + { + "name": "List Account Activities", + "description": "List account activities (provisioning events) in SailPoint with optional filters and pagination." + }, + { + "name": "Get Account Activity", + "description": "Get a single SailPoint account activity by ID." + }, + { + "name": "List Campaigns", + "description": "List certification campaigns in SailPoint with optional filters, sorters, and pagination." + }, + { + "name": "Get Campaign", + "description": "Get a single SailPoint certification campaign by ID." + }, + { + "name": "List Certifications", + "description": "List certifications in SailPoint with optional reviewer filter, filters, sorters, and pagination." + }, + { + "name": "List Certification Review Items", + "description": "List the access review items within a specific SailPoint certification." + }, + { + "name": "Request Access", + "description": "Submit a SailPoint access request to grant, revoke, or modify access for one or more identities." + }, + { + "name": "Cancel Access Request", + "description": "Cancel a pending SailPoint access request by its identity request ID." + }, + { + "name": "Get Access Request Status", + "description": "List the status of SailPoint access requests with optional identity and state filters." + }, + { + "name": "Load Accounts (CSV)", + "description": "Trigger an account aggregation for a SailPoint source, optionally uploading a CSV of accounts." + }, + { + "name": "Load Entitlements (CSV)", + "description": "Trigger an entitlement aggregation for a SailPoint source, optionally uploading a CSV of entitlements." + } + ], + "operationCount": 27, + "triggers": [], + "triggerCount": 0, + "authType": "api-key", + "category": "tools", + "integrationType": "security", + "tags": ["identity", "operations"] + }, { "type": "salesforce", "slug": "salesforce", diff --git a/apps/sim/tools/registry.ts b/apps/sim/tools/registry.ts index 1e2facaa404..ad0a5ceb6ea 100644 --- a/apps/sim/tools/registry.ts +++ b/apps/sim/tools/registry.ts @@ -3334,6 +3334,35 @@ import { s3PresignedUrlTool, s3PutObjectTool, } from '@/tools/s3' +import { + sailpointCancelAccessRequestTool, + sailpointGetAccessProfileEntitlementsTool, + sailpointGetAccessRequestStatusTool, + sailpointGetAccountActivityTool, + sailpointGetAccountEntitlementsTool, + sailpointGetAccountTool, + sailpointGetCampaignTool, + sailpointGetEntitlementTool, + sailpointGetIdentityTool, + sailpointGetRoleEntitlementsTool, + sailpointGetSourceTool, + sailpointListAccessProfilesTool, + sailpointListAccountActivitiesTool, + sailpointListAccountsTool, + sailpointListCampaignsTool, + sailpointListCertificationReviewItemsTool, + sailpointListCertificationsTool, + sailpointListEntitlementsTool, + sailpointListIdentitiesTool, + sailpointListRolesTool, + sailpointListSourcesTool, + sailpointLoadAccountsTool, + sailpointLoadEntitlementsTool, + sailpointRequestAccessTool, + sailpointSearchAggregateTool, + sailpointSearchCountTool, + sailpointSearchTool, +} from '@/tools/sailpoint' import { salesforceCreateAccountTool, salesforceCreateCaseTool, @@ -8631,6 +8660,33 @@ export const tools: Record = { stripe_search_prices: stripeSearchPricesTool, stripe_retrieve_event: stripeRetrieveEventTool, stripe_list_events: stripeListEventsTool, + sailpoint_search: sailpointSearchTool, + sailpoint_search_count: sailpointSearchCountTool, + sailpoint_search_aggregate: sailpointSearchAggregateTool, + sailpoint_list_identities: sailpointListIdentitiesTool, + sailpoint_get_identity: sailpointGetIdentityTool, + sailpoint_list_accounts: sailpointListAccountsTool, + sailpoint_get_account: sailpointGetAccountTool, + sailpoint_get_account_entitlements: sailpointGetAccountEntitlementsTool, + sailpoint_list_entitlements: sailpointListEntitlementsTool, + sailpoint_get_entitlement: sailpointGetEntitlementTool, + sailpoint_list_roles: sailpointListRolesTool, + sailpoint_get_role_entitlements: sailpointGetRoleEntitlementsTool, + sailpoint_list_access_profiles: sailpointListAccessProfilesTool, + sailpoint_get_access_profile_entitlements: sailpointGetAccessProfileEntitlementsTool, + sailpoint_list_sources: sailpointListSourcesTool, + sailpoint_get_source: sailpointGetSourceTool, + sailpoint_list_account_activities: sailpointListAccountActivitiesTool, + sailpoint_get_account_activity: sailpointGetAccountActivityTool, + sailpoint_list_campaigns: sailpointListCampaignsTool, + sailpoint_get_campaign: sailpointGetCampaignTool, + sailpoint_list_certifications: sailpointListCertificationsTool, + sailpoint_list_certification_review_items: sailpointListCertificationReviewItemsTool, + sailpoint_request_access: sailpointRequestAccessTool, + sailpoint_cancel_access_request: sailpointCancelAccessRequestTool, + sailpoint_get_access_request_status: sailpointGetAccessRequestStatusTool, + sailpoint_load_accounts: sailpointLoadAccountsTool, + sailpoint_load_entitlements: sailpointLoadEntitlementsTool, salesforce_get_accounts: salesforceGetAccountsTool, salesforce_create_account: salesforceCreateAccountTool, salesforce_update_account: salesforceUpdateAccountTool, diff --git a/apps/sim/tools/sailpoint/cancel_access_request.ts b/apps/sim/tools/sailpoint/cancel_access_request.ts new file mode 100644 index 00000000000..cd30e244edf --- /dev/null +++ b/apps/sim/tools/sailpoint/cancel_access_request.ts @@ -0,0 +1,57 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointWriteOutputs, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointCancelAccessRequestParams, + SailPointWriteResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointCancelAccessRequestTool: ToolConfig< + SailPointCancelAccessRequestParams, + SailPointWriteResponse +> = { + id: 'sailpoint_cancel_access_request', + name: 'SailPoint Cancel Access Request', + description: 'Cancel a pending SailPoint access request by its identity request ID.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + accountActivityId: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'The identityRequestId of the access request to cancel', + }, + comment: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Reason for cancellation', + }, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_cancel_access_request', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + accountActivityId: params.accountActivityId, + comment: params.comment, + }), + }, + + transformResponse: (response) => + unwrapSailPointOutput<{ accepted: boolean; status: number }>(response), + + outputs: sailpointWriteOutputs, +} diff --git a/apps/sim/tools/sailpoint/common.ts b/apps/sim/tools/sailpoint/common.ts new file mode 100644 index 00000000000..505316c0be3 --- /dev/null +++ b/apps/sim/tools/sailpoint/common.ts @@ -0,0 +1,142 @@ +import type { ToolConfig } from '@/tools/types' + +/** + * Internal route that performs the SailPoint client-credentials token exchange (with + * caching + 429 backoff) and proxies all JSON read/write operations. Tools never call + * the SailPoint API directly - the per-tenant host, version prefix, and bearer token + * are all resolved server-side. + */ +export const SAILPOINT_QUERY_ROUTE = '/api/tools/sailpoint/query' + +/** Internal route for the multipart CSV aggregation writes (load-accounts / load-entitlements). */ +export const SAILPOINT_LOAD_ROUTE = '/api/tools/sailpoint/load' + +/** + * Credential params shared by every SailPoint tool. The credential is a Personal Access + * Token (PAT) owned by a dedicated ISC service identity - see the block longDescription + * for the required scopes and the service-identity caveat. + */ +export const sailpointCredentialParams = { + clientId: { + type: 'string', + required: true, + visibility: 'user-only', + description: 'SailPoint PAT client ID (from a service-identity Personal Access Token)', + }, + clientSecret: { + type: 'string', + required: true, + visibility: 'user-only', + description: 'SailPoint PAT client secret', + }, + tenant: { + type: 'string', + required: true, + visibility: 'user-only', + description: 'SailPoint tenant (subdomain of api.identitynow.com, e.g. "acme")', + }, + apiVersion: { + type: 'string', + required: false, + visibility: 'user-only', + description: 'API version path segment: v2025 (default), v2024, or v3', + }, +} as const satisfies ToolConfig['params'] + +/** Standard pagination params reused across list operations. */ +export const sailpointPaginationParams = { + limit: { + type: 'number', + required: false, + visibility: 'user-or-llm', + description: 'Maximum number of records to return', + }, + offset: { + type: 'number', + required: false, + visibility: 'user-or-llm', + description: 'Pagination offset (0-based)', + }, + count: { + type: 'boolean', + required: false, + visibility: 'user-or-llm', + description: 'When true, include the total record count (X-Total-Count) in the response', + }, +} as const satisfies ToolConfig['params'] + +/** Output shape for paginated list operations (raw documents + empty-result diagnostic). */ +export const sailpointListOutputs = { + items: { type: 'json', description: 'Array of raw SailPoint documents for this page' }, + count: { type: 'number', description: 'Number of records returned in this page' }, + totalCount: { + type: 'number', + description: 'Total matching records when count=true, otherwise null', + optional: true, + nullable: true, + }, + complete: { + type: 'boolean', + description: 'False when an empty result may indicate insufficient user level or segmentation', + }, + warnings: { type: 'json', description: 'Diagnostic warnings (e.g. empty-result guidance)' }, +} as const satisfies ToolConfig['outputs'] + +/** Output shape for POST /search (raw documents under `results`). */ +export const sailpointSearchOutputs = { + results: { type: 'json', description: 'Array of raw SailPoint search documents' }, + count: { type: 'number', description: 'Number of documents returned in this page' }, + totalCount: { + type: 'number', + description: 'Total matching documents when count=true, otherwise null', + optional: true, + nullable: true, + }, + complete: { + type: 'boolean', + description: 'False when an empty result may indicate insufficient user level or segmentation', + }, + warnings: { type: 'json', description: 'Diagnostic warnings (e.g. empty-result guidance)' }, +} as const satisfies ToolConfig['outputs'] + +/** Output shape for single-entity get operations. */ +export const sailpointItemOutputs = { + item: { type: 'json', description: 'Raw SailPoint document' }, +} as const satisfies ToolConfig['outputs'] + +/** Output shape for POST /search/count. */ +export const sailpointCountOutputs = { + total: { type: 'number', description: 'Total matching documents (X-Total-Count)' }, +} as const satisfies ToolConfig['outputs'] + +/** Output shape for access-request create/cancel (202, empty body). */ +export const sailpointWriteOutputs = { + accepted: { type: 'boolean', description: 'True when SailPoint accepted the request (HTTP 202)' }, + status: { type: 'number', description: 'HTTP status returned by SailPoint' }, +} as const satisfies ToolConfig['outputs'] + +/** Output shape for the CSV aggregation writes (task object). */ +export const sailpointTaskOutputs = { + task: { + type: 'json', + description: 'Aggregation task returned by SailPoint (LoadAccountsTask / LoadEntitlementTask)', + }, +} as const satisfies ToolConfig['outputs'] + +/** + * Unwraps the `{ success, output }` envelope returned by the internal SailPoint routes and + * throws a descriptive error when the route reports failure. Shared by every SailPoint tool's + * `transformResponse`. + */ +export async function unwrapSailPointOutput>( + response: Response, + fallbackError = 'SailPoint request failed' +): Promise<{ success: true; output: T }> { + const data = await response.json().catch(() => null) + + if (!response.ok || !data || data.success === false) { + throw new Error(data?.error || fallbackError) + } + + return { success: true, output: (data.output ?? {}) as T } +} diff --git a/apps/sim/tools/sailpoint/get_access_profile_entitlements.ts b/apps/sim/tools/sailpoint/get_access_profile_entitlements.ts new file mode 100644 index 00000000000..5ccf39012f1 --- /dev/null +++ b/apps/sim/tools/sailpoint/get_access_profile_entitlements.ts @@ -0,0 +1,69 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointGetChildEntitlementsParams, + SailPointListOutput, + SailPointListResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointGetAccessProfileEntitlementsTool: ToolConfig< + SailPointGetChildEntitlementsParams, + SailPointListResponse +> = { + id: 'sailpoint_get_access_profile_entitlements', + name: 'SailPoint Get Access Profile Entitlements', + description: 'List the entitlements granted by a specific SailPoint access profile.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + id: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Access Profile ID', + }, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_get_access_profile_entitlements', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + id: params.id, + filters: params.filters, + sorters: params.sorters, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/get_access_request_status.ts b/apps/sim/tools/sailpoint/get_access_request_status.ts new file mode 100644 index 00000000000..b2071c6dc12 --- /dev/null +++ b/apps/sim/tools/sailpoint/get_access_request_status.ts @@ -0,0 +1,98 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointAccessRequestStatusParams, + SailPointListOutput, + SailPointListResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointGetAccessRequestStatusTool: ToolConfig< + SailPointAccessRequestStatusParams, + SailPointListResponse +> = { + id: 'sailpoint_get_access_request_status', + name: 'SailPoint Get Access Request Status', + description: + 'List the status of SailPoint access requests with optional identity and state filters.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + requestedFor: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Identity ID the request was made for', + }, + requestedBy: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Identity ID that submitted the request', + }, + regardingIdentity: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Identity ID the request is about (requester or target)', + }, + assignedTo: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Identity ID a pending approval is assigned to', + }, + requestState: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'EXECUTING', + }, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_get_access_request_status', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + requestedFor: params.requestedFor, + requestedBy: params.requestedBy, + regardingIdentity: params.regardingIdentity, + assignedTo: params.assignedTo, + requestState: params.requestState, + filters: params.filters, + sorters: params.sorters, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/get_account.ts b/apps/sim/tools/sailpoint/get_account.ts new file mode 100644 index 00000000000..623c8f538ab --- /dev/null +++ b/apps/sim/tools/sailpoint/get_account.ts @@ -0,0 +1,43 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointItemOutputs, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { SailPointGetByIdParams, SailPointItemResponse } from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointGetAccountTool: ToolConfig = { + id: 'sailpoint_get_account', + name: 'SailPoint Get Account', + description: 'Get a single SailPoint account by ID.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + id: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Account ID', + }, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_get_account', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + id: params.id, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput<{ item: unknown }>(response), + + outputs: sailpointItemOutputs, +} diff --git a/apps/sim/tools/sailpoint/get_account_activity.ts b/apps/sim/tools/sailpoint/get_account_activity.ts new file mode 100644 index 00000000000..d0f207fb54e --- /dev/null +++ b/apps/sim/tools/sailpoint/get_account_activity.ts @@ -0,0 +1,46 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointItemOutputs, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { SailPointGetByIdParams, SailPointItemResponse } from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointGetAccountActivityTool: ToolConfig< + SailPointGetByIdParams, + SailPointItemResponse +> = { + id: 'sailpoint_get_account_activity', + name: 'SailPoint Get Account Activity', + description: 'Get a single SailPoint account activity by ID.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + id: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Account Activity ID', + }, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_get_account_activity', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + id: params.id, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput<{ item: unknown }>(response), + + outputs: sailpointItemOutputs, +} diff --git a/apps/sim/tools/sailpoint/get_account_entitlements.ts b/apps/sim/tools/sailpoint/get_account_entitlements.ts new file mode 100644 index 00000000000..1a39d67cfd0 --- /dev/null +++ b/apps/sim/tools/sailpoint/get_account_entitlements.ts @@ -0,0 +1,55 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointGetChildEntitlementsParams, + SailPointListOutput, + SailPointListResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointGetAccountEntitlementsTool: ToolConfig< + SailPointGetChildEntitlementsParams, + SailPointListResponse +> = { + id: 'sailpoint_get_account_entitlements', + name: 'SailPoint Get Account Entitlements', + description: 'List the entitlements granted on a specific SailPoint account.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + id: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Account ID', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_get_account_entitlements', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + id: params.id, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/get_campaign.ts b/apps/sim/tools/sailpoint/get_campaign.ts new file mode 100644 index 00000000000..19efb6afd9e --- /dev/null +++ b/apps/sim/tools/sailpoint/get_campaign.ts @@ -0,0 +1,53 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointItemOutputs, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { SailPointGetCampaignParams, SailPointItemResponse } from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointGetCampaignTool: ToolConfig< + SailPointGetCampaignParams, + SailPointItemResponse +> = { + id: 'sailpoint_get_campaign', + name: 'SailPoint Get Campaign', + description: 'Get a single SailPoint certification campaign by ID.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + id: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Campaign ID', + }, + detail: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SLIM or FULL', + }, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_get_campaign', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + id: params.id, + detail: params.detail, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput<{ item: unknown }>(response), + + outputs: sailpointItemOutputs, +} diff --git a/apps/sim/tools/sailpoint/get_entitlement.ts b/apps/sim/tools/sailpoint/get_entitlement.ts new file mode 100644 index 00000000000..7f9fdf184d4 --- /dev/null +++ b/apps/sim/tools/sailpoint/get_entitlement.ts @@ -0,0 +1,46 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointItemOutputs, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { SailPointGetByIdParams, SailPointItemResponse } from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointGetEntitlementTool: ToolConfig< + SailPointGetByIdParams, + SailPointItemResponse +> = { + id: 'sailpoint_get_entitlement', + name: 'SailPoint Get Entitlement', + description: 'Get a single SailPoint entitlement by ID.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + id: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Entitlement ID', + }, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_get_entitlement', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + id: params.id, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput<{ item: unknown }>(response), + + outputs: sailpointItemOutputs, +} diff --git a/apps/sim/tools/sailpoint/get_identity.ts b/apps/sim/tools/sailpoint/get_identity.ts new file mode 100644 index 00000000000..50c388ebfbb --- /dev/null +++ b/apps/sim/tools/sailpoint/get_identity.ts @@ -0,0 +1,43 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointItemOutputs, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { SailPointGetByIdParams, SailPointItemResponse } from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointGetIdentityTool: ToolConfig = { + id: 'sailpoint_get_identity', + name: 'SailPoint Get Identity', + description: 'Get a single SailPoint identity by ID.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + id: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Identity ID', + }, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_get_identity', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + id: params.id, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput<{ item: unknown }>(response), + + outputs: sailpointItemOutputs, +} diff --git a/apps/sim/tools/sailpoint/get_role_entitlements.ts b/apps/sim/tools/sailpoint/get_role_entitlements.ts new file mode 100644 index 00000000000..be1a2b26bc7 --- /dev/null +++ b/apps/sim/tools/sailpoint/get_role_entitlements.ts @@ -0,0 +1,69 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointGetChildEntitlementsParams, + SailPointListOutput, + SailPointListResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointGetRoleEntitlementsTool: ToolConfig< + SailPointGetChildEntitlementsParams, + SailPointListResponse +> = { + id: 'sailpoint_get_role_entitlements', + name: 'SailPoint Get Role Entitlements', + description: 'List the entitlements granted by a specific SailPoint role.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + id: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Role ID', + }, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_get_role_entitlements', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + id: params.id, + filters: params.filters, + sorters: params.sorters, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/get_source.ts b/apps/sim/tools/sailpoint/get_source.ts new file mode 100644 index 00000000000..f4e0cac73ba --- /dev/null +++ b/apps/sim/tools/sailpoint/get_source.ts @@ -0,0 +1,43 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointItemOutputs, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { SailPointGetByIdParams, SailPointItemResponse } from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointGetSourceTool: ToolConfig = { + id: 'sailpoint_get_source', + name: 'SailPoint Get Source', + description: 'Get a single SailPoint identity source by ID.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + id: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Source ID', + }, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_get_source', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + id: params.id, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput<{ item: unknown }>(response), + + outputs: sailpointItemOutputs, +} diff --git a/apps/sim/tools/sailpoint/index.ts b/apps/sim/tools/sailpoint/index.ts new file mode 100644 index 00000000000..d7cecb14f28 --- /dev/null +++ b/apps/sim/tools/sailpoint/index.ts @@ -0,0 +1,28 @@ +export { sailpointCancelAccessRequestTool } from '@/tools/sailpoint/cancel_access_request' +export { sailpointGetAccessProfileEntitlementsTool } from '@/tools/sailpoint/get_access_profile_entitlements' +export { sailpointGetAccessRequestStatusTool } from '@/tools/sailpoint/get_access_request_status' +export { sailpointGetAccountTool } from '@/tools/sailpoint/get_account' +export { sailpointGetAccountActivityTool } from '@/tools/sailpoint/get_account_activity' +export { sailpointGetAccountEntitlementsTool } from '@/tools/sailpoint/get_account_entitlements' +export { sailpointGetCampaignTool } from '@/tools/sailpoint/get_campaign' +export { sailpointGetEntitlementTool } from '@/tools/sailpoint/get_entitlement' +export { sailpointGetIdentityTool } from '@/tools/sailpoint/get_identity' +export { sailpointGetRoleEntitlementsTool } from '@/tools/sailpoint/get_role_entitlements' +export { sailpointGetSourceTool } from '@/tools/sailpoint/get_source' +export { sailpointListAccessProfilesTool } from '@/tools/sailpoint/list_access_profiles' +export { sailpointListAccountActivitiesTool } from '@/tools/sailpoint/list_account_activities' +export { sailpointListAccountsTool } from '@/tools/sailpoint/list_accounts' +export { sailpointListCampaignsTool } from '@/tools/sailpoint/list_campaigns' +export { sailpointListCertificationReviewItemsTool } from '@/tools/sailpoint/list_certification_review_items' +export { sailpointListCertificationsTool } from '@/tools/sailpoint/list_certifications' +export { sailpointListEntitlementsTool } from '@/tools/sailpoint/list_entitlements' +export { sailpointListIdentitiesTool } from '@/tools/sailpoint/list_identities' +export { sailpointListRolesTool } from '@/tools/sailpoint/list_roles' +export { sailpointListSourcesTool } from '@/tools/sailpoint/list_sources' +export { sailpointLoadAccountsTool } from '@/tools/sailpoint/load_accounts' +export { sailpointLoadEntitlementsTool } from '@/tools/sailpoint/load_entitlements' +export { sailpointRequestAccessTool } from '@/tools/sailpoint/request_access' +export { sailpointSearchTool } from '@/tools/sailpoint/search' +export { sailpointSearchAggregateTool } from '@/tools/sailpoint/search_aggregate' +export { sailpointSearchCountTool } from '@/tools/sailpoint/search_count' +export * from '@/tools/sailpoint/types' diff --git a/apps/sim/tools/sailpoint/list_access_profiles.ts b/apps/sim/tools/sailpoint/list_access_profiles.ts new file mode 100644 index 00000000000..3927146e7a4 --- /dev/null +++ b/apps/sim/tools/sailpoint/list_access_profiles.ts @@ -0,0 +1,62 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointListOutput, + SailPointListParams, + SailPointListResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointListAccessProfilesTool: ToolConfig< + SailPointListParams, + SailPointListResponse +> = { + id: 'sailpoint_list_access_profiles', + name: 'SailPoint List Access Profiles', + description: 'List access profiles in SailPoint with optional filters, sorters, and pagination.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_list_access_profiles', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + filters: params.filters, + sorters: params.sorters, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/list_account_activities.ts b/apps/sim/tools/sailpoint/list_account_activities.ts new file mode 100644 index 00000000000..c91d5ba381a --- /dev/null +++ b/apps/sim/tools/sailpoint/list_account_activities.ts @@ -0,0 +1,84 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointListAccountActivitiesParams, + SailPointListOutput, + SailPointListResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointListAccountActivitiesTool: ToolConfig< + SailPointListAccountActivitiesParams, + SailPointListResponse +> = { + id: 'sailpoint_list_account_activities', + name: 'SailPoint List Account Activities', + description: + 'List account activities (provisioning events) in SailPoint with optional filters and pagination.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + requestedFor: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Identity ID the activity was requested for', + }, + requestedBy: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Identity ID that requested the activity', + }, + regardingIdentity: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Identity ID the activity is about (requester or target)', + }, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_list_account_activities', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + requestedFor: params.requestedFor, + requestedBy: params.requestedBy, + regardingIdentity: params.regardingIdentity, + filters: params.filters, + sorters: params.sorters, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/list_accounts.ts b/apps/sim/tools/sailpoint/list_accounts.ts new file mode 100644 index 00000000000..7a1de07b297 --- /dev/null +++ b/apps/sim/tools/sailpoint/list_accounts.ts @@ -0,0 +1,69 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointListAccountsParams, + SailPointListOutput, + SailPointListResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointListAccountsTool: ToolConfig< + SailPointListAccountsParams, + SailPointListResponse +> = { + id: 'sailpoint_list_accounts', + name: 'SailPoint List Accounts', + description: 'List accounts in SailPoint with optional filters, sorters, and pagination.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + detailLevel: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SLIM or FULL (default)', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_list_accounts', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + filters: params.filters, + sorters: params.sorters, + detailLevel: params.detailLevel, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/list_campaigns.ts b/apps/sim/tools/sailpoint/list_campaigns.ts new file mode 100644 index 00000000000..62215408802 --- /dev/null +++ b/apps/sim/tools/sailpoint/list_campaigns.ts @@ -0,0 +1,70 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointListCampaignsParams, + SailPointListOutput, + SailPointListResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointListCampaignsTool: ToolConfig< + SailPointListCampaignsParams, + SailPointListResponse +> = { + id: 'sailpoint_list_campaigns', + name: 'SailPoint List Campaigns', + description: + 'List certification campaigns in SailPoint with optional filters, sorters, and pagination.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + detail: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SLIM (default) or FULL', + }, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_list_campaigns', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + detail: params.detail, + filters: params.filters, + sorters: params.sorters, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/list_certification_review_items.ts b/apps/sim/tools/sailpoint/list_certification_review_items.ts new file mode 100644 index 00000000000..96fd75b3228 --- /dev/null +++ b/apps/sim/tools/sailpoint/list_certification_review_items.ts @@ -0,0 +1,90 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointListOutput, + SailPointListResponse, + SailPointListReviewItemsParams, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointListCertificationReviewItemsTool: ToolConfig< + SailPointListReviewItemsParams, + SailPointListResponse +> = { + id: 'sailpoint_list_certification_review_items', + name: 'SailPoint List Certification Review Items', + description: 'List the access review items within a specific SailPoint certification.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + id: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Certification ID', + }, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + entitlements: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Filter review items to specific entitlement IDs', + }, + accessProfiles: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Filter review items to specific access profile IDs', + }, + roles: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Filter review items to specific role IDs', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_list_certification_review_items', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + id: params.id, + filters: params.filters, + sorters: params.sorters, + entitlements: params.entitlements, + accessProfiles: params.accessProfiles, + roles: params.roles, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/list_certifications.ts b/apps/sim/tools/sailpoint/list_certifications.ts new file mode 100644 index 00000000000..5567d0aaa84 --- /dev/null +++ b/apps/sim/tools/sailpoint/list_certifications.ts @@ -0,0 +1,70 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointListCertificationsParams, + SailPointListOutput, + SailPointListResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointListCertificationsTool: ToolConfig< + SailPointListCertificationsParams, + SailPointListResponse +> = { + id: 'sailpoint_list_certifications', + name: 'SailPoint List Certifications', + description: + 'List certifications in SailPoint with optional reviewer filter, filters, sorters, and pagination.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + reviewerIdentity: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: "Reviewer identity ID or 'me'", + }, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_list_certifications', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + reviewerIdentity: params.reviewerIdentity, + filters: params.filters, + sorters: params.sorters, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/list_entitlements.ts b/apps/sim/tools/sailpoint/list_entitlements.ts new file mode 100644 index 00000000000..0e36897b70e --- /dev/null +++ b/apps/sim/tools/sailpoint/list_entitlements.ts @@ -0,0 +1,76 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointListEntitlementsParams, + SailPointListOutput, + SailPointListResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointListEntitlementsTool: ToolConfig< + SailPointListEntitlementsParams, + SailPointListResponse +> = { + id: 'sailpoint_list_entitlements', + name: 'SailPoint List Entitlements', + description: 'List entitlements in SailPoint with optional filters, sorters, and pagination.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + accountId: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Filter to entitlements on a specific account ID', + }, + segmentedForIdentity: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Return only entitlements visible to the given identity via segmentation', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_list_entitlements', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + filters: params.filters, + sorters: params.sorters, + accountId: params.accountId, + segmentedForIdentity: params.segmentedForIdentity, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/list_identities.ts b/apps/sim/tools/sailpoint/list_identities.ts new file mode 100644 index 00000000000..3cacb3f982f --- /dev/null +++ b/apps/sim/tools/sailpoint/list_identities.ts @@ -0,0 +1,70 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointListIdentitiesParams, + SailPointListOutput, + SailPointListResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointListIdentitiesTool: ToolConfig< + SailPointListIdentitiesParams, + SailPointListResponse +> = { + id: 'sailpoint_list_identities', + name: 'SailPoint List Identities', + description: + 'List identities in SailPoint with optional Sailpoint filters, sorters, and pagination.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + defaultFilter: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'CORRELATED_ONLY (default) or NONE', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_list_identities', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + filters: params.filters, + sorters: params.sorters, + defaultFilter: params.defaultFilter, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/list_roles.ts b/apps/sim/tools/sailpoint/list_roles.ts new file mode 100644 index 00000000000..bfd40794b1e --- /dev/null +++ b/apps/sim/tools/sailpoint/list_roles.ts @@ -0,0 +1,59 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointListOutput, + SailPointListParams, + SailPointListResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointListRolesTool: ToolConfig = { + id: 'sailpoint_list_roles', + name: 'SailPoint List Roles', + description: 'List roles in SailPoint with optional filters, sorters, and pagination.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_list_roles', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + filters: params.filters, + sorters: params.sorters, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/list_sources.ts b/apps/sim/tools/sailpoint/list_sources.ts new file mode 100644 index 00000000000..5f385ed2433 --- /dev/null +++ b/apps/sim/tools/sailpoint/list_sources.ts @@ -0,0 +1,76 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointListOutputs, + sailpointPaginationParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointListOutput, + SailPointListResponse, + SailPointListSourcesParams, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointListSourcesTool: ToolConfig< + SailPointListSourcesParams, + SailPointListResponse +> = { + id: 'sailpoint_list_sources', + name: 'SailPoint List Sources', + description: 'List identity sources in SailPoint with optional filters, sorters, and pagination.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + filters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint filter expression to narrow results', + }, + sorters: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'SailPoint sorters expression', + }, + forSubadmin: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Return only sources the given source sub-admin identity can administer', + }, + includeIDNSource: { + type: 'boolean', + required: false, + visibility: 'user-or-llm', + description: 'Include the built-in IdentityNow source in results', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_list_sources', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + filters: params.filters, + sorters: params.sorters, + forSubadmin: params.forSubadmin, + includeIDNSource: params.includeIDNSource, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointListOutputs, +} diff --git a/apps/sim/tools/sailpoint/load_accounts.ts b/apps/sim/tools/sailpoint/load_accounts.ts new file mode 100644 index 00000000000..561ff85f66b --- /dev/null +++ b/apps/sim/tools/sailpoint/load_accounts.ts @@ -0,0 +1,61 @@ +import { + SAILPOINT_LOAD_ROUTE, + sailpointCredentialParams, + sailpointTaskOutputs, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { SailPointLoadAccountsParams, SailPointTaskResponse } from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointLoadAccountsTool: ToolConfig< + SailPointLoadAccountsParams, + SailPointTaskResponse +> = { + id: 'sailpoint_load_accounts', + name: 'SailPoint Load Accounts', + description: + 'Trigger an account aggregation for a SailPoint source, optionally uploading a CSV of accounts.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + sourceId: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Source ID to aggregate', + }, + file: { + type: 'file', + required: false, + visibility: 'user-or-llm', + description: 'CSV file of accounts to aggregate (delimited-file sources only)', + }, + disableOptimization: { + type: 'boolean', + required: false, + visibility: 'user-or-llm', + description: 'Reprocess every account regardless of change', + }, + }, + + request: { + url: SAILPOINT_LOAD_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_load_accounts', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + sourceId: params.sourceId, + file: params.file, + disableOptimization: params.disableOptimization, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput<{ task: unknown }>(response), + + outputs: sailpointTaskOutputs, +} diff --git a/apps/sim/tools/sailpoint/load_entitlements.ts b/apps/sim/tools/sailpoint/load_entitlements.ts new file mode 100644 index 00000000000..4402c491a8b --- /dev/null +++ b/apps/sim/tools/sailpoint/load_entitlements.ts @@ -0,0 +1,57 @@ +import { + SAILPOINT_LOAD_ROUTE, + sailpointCredentialParams, + sailpointTaskOutputs, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointLoadEntitlementsParams, + SailPointTaskResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointLoadEntitlementsTool: ToolConfig< + SailPointLoadEntitlementsParams, + SailPointTaskResponse +> = { + id: 'sailpoint_load_entitlements', + name: 'SailPoint Load Entitlements', + description: + 'Trigger an entitlement aggregation for a SailPoint source, optionally uploading a CSV of entitlements.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + sourceId: { + type: 'string', + required: true, + visibility: 'user-or-llm', + description: 'Source ID to aggregate', + }, + file: { + type: 'file', + required: false, + visibility: 'user-or-llm', + description: 'CSV file of entitlements to aggregate (delimited-file sources only)', + }, + }, + + request: { + url: SAILPOINT_LOAD_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_load_entitlements', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + sourceId: params.sourceId, + file: params.file, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput<{ task: unknown }>(response), + + outputs: sailpointTaskOutputs, +} diff --git a/apps/sim/tools/sailpoint/request_access.ts b/apps/sim/tools/sailpoint/request_access.ts new file mode 100644 index 00000000000..d2832404c04 --- /dev/null +++ b/apps/sim/tools/sailpoint/request_access.ts @@ -0,0 +1,75 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointWriteOutputs, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { SailPointRequestAccessParams, SailPointWriteResponse } from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +/** + * Submits an access request in SailPoint. REVOKE_ACCESS is limited to exactly one identity and + * one entitlement per request (with a mandatory comment) and cannot revoke role-membership or + * birthright access - those must be removed at their source. + */ +export const sailpointRequestAccessTool: ToolConfig< + SailPointRequestAccessParams, + SailPointWriteResponse +> = { + id: 'sailpoint_request_access', + name: 'SailPoint Request Access', + description: + 'Submit a SailPoint access request to grant, revoke, or modify access for one or more identities.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + requestedFor: { + type: 'json', + required: true, + visibility: 'user-or-llm', + description: 'Array of identity IDs. For REVOKE_ACCESS exactly one identity.', + }, + requestedItems: { + type: 'json', + required: true, + visibility: 'user-or-llm', + description: + 'Array of { type: ACCESS_PROFILE|ROLE|ENTITLEMENT, id, comment?, removeDate?, startDate?, assignmentId?, nativeIdentity?, clientMetadata? }. REVOKE requires exactly one item with a comment.', + }, + requestType: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'GRANT_ACCESS (default), REVOKE_ACCESS, or MODIFY_ACCESS', + }, + clientMetadata: { + type: 'json', + required: false, + visibility: 'user-or-llm', + description: 'Optional key/value map, e.g. to record the human requester for correlation', + }, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_request_access', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + requestedFor: params.requestedFor, + requestedItems: params.requestedItems, + requestType: params.requestType, + clientMetadata: params.clientMetadata, + }), + }, + + transformResponse: (response) => + unwrapSailPointOutput<{ accepted: boolean; status: number }>(response), + + outputs: sailpointWriteOutputs, +} diff --git a/apps/sim/tools/sailpoint/search.ts b/apps/sim/tools/sailpoint/search.ts new file mode 100644 index 00000000000..5f939e204b4 --- /dev/null +++ b/apps/sim/tools/sailpoint/search.ts @@ -0,0 +1,82 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointPaginationParams, + sailpointSearchOutputs, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointSearchOutput, + SailPointSearchParams, + SailPointSearchResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointSearchTool: ToolConfig = { + id: 'sailpoint_search', + name: 'SailPoint Search', + description: + 'Run a global search across SailPoint indices (identities, entitlements, roles, access profiles, account activities, events). Set includeNested to return nested access[] on identities.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + indices: { + type: 'json', + required: false, + visibility: 'user-or-llm', + description: + 'Indices to search: identities, accessprofiles, accountactivities, entitlements, events, roles, or * (defaults to ["identities"])', + }, + query: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Elasticsearch query string (e.g. "attributes.department:Engineering")', + }, + sort: { + type: 'json', + required: false, + visibility: 'user-or-llm', + description: 'Sort fields, e.g. ["displayName","+id"]', + }, + searchAfter: { + type: 'json', + required: false, + visibility: 'user-or-llm', + description: 'searchAfter cursor for deep pagination beyond 10,000 records', + }, + includeNested: { + type: 'boolean', + required: false, + visibility: 'user-or-llm', + description: 'Include nested objects (e.g. identity access[]) in results. Defaults to true.', + }, + ...sailpointPaginationParams, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_search', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + indices: params.indices, + query: params.query, + sort: params.sort, + searchAfter: params.searchAfter, + includeNested: params.includeNested, + limit: params.limit, + offset: params.offset, + count: params.count, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointSearchOutputs, +} diff --git a/apps/sim/tools/sailpoint/search_aggregate.ts b/apps/sim/tools/sailpoint/search_aggregate.ts new file mode 100644 index 00000000000..0c241e20631 --- /dev/null +++ b/apps/sim/tools/sailpoint/search_aggregate.ts @@ -0,0 +1,72 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCredentialParams, + sailpointSearchOutputs, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { + SailPointSearchAggregateParams, + SailPointSearchOutput, + SailPointSearchResponse, +} from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointSearchAggregateTool: ToolConfig< + SailPointSearchAggregateParams, + SailPointSearchResponse +> = { + id: 'sailpoint_search_aggregate', + name: 'SailPoint Search Aggregate', + description: + 'Return aggregation buckets for a SailPoint search query (e.g. counts grouped by a field).', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + indices: { + type: 'json', + required: false, + visibility: 'user-or-llm', + description: 'Indices to aggregate over (defaults to ["identities"])', + }, + query: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Elasticsearch query string', + }, + limit: { + type: 'number', + required: false, + visibility: 'user-or-llm', + description: 'Maximum number of aggregation results (max 250)', + }, + offset: { + type: 'number', + required: false, + visibility: 'user-or-llm', + description: 'Pagination offset (0-based)', + }, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_search_aggregate', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + indices: params.indices, + query: params.query, + limit: params.limit, + offset: params.offset, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput(response), + + outputs: sailpointSearchOutputs, +} diff --git a/apps/sim/tools/sailpoint/search_count.ts b/apps/sim/tools/sailpoint/search_count.ts new file mode 100644 index 00000000000..8961bfc034f --- /dev/null +++ b/apps/sim/tools/sailpoint/search_count.ts @@ -0,0 +1,54 @@ +import { + SAILPOINT_QUERY_ROUTE, + sailpointCountOutputs, + sailpointCredentialParams, + unwrapSailPointOutput, +} from '@/tools/sailpoint/common' +import type { SailPointCountResponse, SailPointSearchCountParams } from '@/tools/sailpoint/types' +import type { ToolConfig } from '@/tools/types' + +export const sailpointSearchCountTool: ToolConfig< + SailPointSearchCountParams, + SailPointCountResponse +> = { + id: 'sailpoint_search_count', + name: 'SailPoint Search Count', + description: + 'Return the total number of documents matching a SailPoint search query, without the documents themselves.', + version: '1.0.0', + + params: { + ...sailpointCredentialParams, + indices: { + type: 'json', + required: false, + visibility: 'user-or-llm', + description: 'Indices to search (defaults to ["identities"])', + }, + query: { + type: 'string', + required: false, + visibility: 'user-or-llm', + description: 'Elasticsearch query string', + }, + }, + + request: { + url: SAILPOINT_QUERY_ROUTE, + method: 'POST', + headers: () => ({ 'Content-Type': 'application/json' }), + body: (params) => ({ + operation: 'sailpoint_search_count', + clientId: params.clientId, + clientSecret: params.clientSecret, + tenant: params.tenant, + apiVersion: params.apiVersion, + indices: params.indices, + query: params.query, + }), + }, + + transformResponse: (response) => unwrapSailPointOutput<{ total: number }>(response), + + outputs: sailpointCountOutputs, +} diff --git a/apps/sim/tools/sailpoint/types.ts b/apps/sim/tools/sailpoint/types.ts new file mode 100644 index 00000000000..496ffd11c59 --- /dev/null +++ b/apps/sim/tools/sailpoint/types.ts @@ -0,0 +1,185 @@ +import type { ToolResponse } from '@/tools/types' + +export type SailPointApiVersion = 'v2025' | 'v2024' | 'v3' + +/** Credentials shared by every SailPoint tool (a service-identity PAT + tenant + version). */ +export interface SailPointCredentials { + clientId: string + clientSecret: string + tenant: string + apiVersion?: SailPointApiVersion +} + +/** Envelope wrapping a paginated list of raw SailPoint documents plus the empty-result diagnostic. */ +export interface SailPointListOutput { + items: unknown[] + count: number + totalCount: number | null + complete: boolean + warnings: string[] +} + +export interface SailPointListResponse extends ToolResponse { + output: SailPointListOutput +} + +/** Search returns raw documents under `results` (index-dependent shape). */ +export interface SailPointSearchOutput { + results: unknown[] + count: number + totalCount: number | null + complete: boolean + warnings: string[] +} + +export interface SailPointSearchResponse extends ToolResponse { + output: SailPointSearchOutput +} + +export interface SailPointCountResponse extends ToolResponse { + output: { total: number } +} + +export interface SailPointItemResponse extends ToolResponse { + output: { item: unknown } +} + +/** Access-request create/cancel return 202 with an empty body. */ +export interface SailPointWriteResponse extends ToolResponse { + output: { accepted: boolean; status: number } +} + +/** load-accounts / load-entitlements return a task object (LoadAccountsTask / LoadEntitlementTask). */ +export interface SailPointTaskResponse extends ToolResponse { + output: { task: unknown } +} + +export interface SailPointSearchParams extends SailPointCredentials { + indices?: string[] | string + query?: string + sort?: string[] | string + searchAfter?: string[] | string + includeNested?: boolean + limit?: number + offset?: number + count?: boolean +} + +export interface SailPointSearchCountParams extends SailPointCredentials { + indices?: string[] | string + query?: string +} + +export interface SailPointSearchAggregateParams extends SailPointCredentials { + indices?: string[] | string + query?: string + limit?: number + offset?: number +} + +export interface SailPointListParams extends SailPointCredentials { + filters?: string + sorters?: string + limit?: number + offset?: number + count?: boolean +} + +export interface SailPointGetByIdParams extends SailPointCredentials { + id: string +} + +export interface SailPointListIdentitiesParams extends SailPointListParams { + defaultFilter?: 'CORRELATED_ONLY' | 'NONE' +} + +export interface SailPointListAccountsParams extends SailPointListParams { + detailLevel?: 'SLIM' | 'FULL' +} + +export interface SailPointListEntitlementsParams extends SailPointListParams { + accountId?: string + segmentedForIdentity?: string +} + +export interface SailPointGetChildEntitlementsParams extends SailPointListParams { + id: string +} + +export interface SailPointListSourcesParams extends SailPointListParams { + forSubadmin?: string + includeIDNSource?: boolean +} + +export interface SailPointListAccountActivitiesParams extends SailPointListParams { + requestedFor?: string + requestedBy?: string + regardingIdentity?: string +} + +export interface SailPointListCampaignsParams extends SailPointListParams { + detail?: 'SLIM' | 'FULL' +} + +export interface SailPointGetCampaignParams extends SailPointCredentials { + id: string + detail?: 'SLIM' | 'FULL' +} + +export interface SailPointListCertificationsParams extends SailPointListParams { + reviewerIdentity?: string +} + +export interface SailPointListReviewItemsParams extends SailPointListParams { + id: string + entitlements?: string + accessProfiles?: string + roles?: string +} + +export interface SailPointRequestedItem { + type: 'ACCESS_PROFILE' | 'ROLE' | 'ENTITLEMENT' + id: string + comment?: string + removeDate?: string + startDate?: string + assignmentId?: string + nativeIdentity?: string + clientMetadata?: Record +} + +export interface SailPointRequestAccessParams extends SailPointCredentials { + requestedFor: string[] | string + requestedItems: SailPointRequestedItem[] | string + requestType?: 'GRANT_ACCESS' | 'REVOKE_ACCESS' | 'MODIFY_ACCESS' + clientMetadata?: Record | string +} + +export interface SailPointCancelAccessRequestParams extends SailPointCredentials { + accountActivityId: string + comment: string +} + +export interface SailPointAccessRequestStatusParams extends SailPointCredentials { + requestedFor?: string + requestedBy?: string + regardingIdentity?: string + assignedTo?: string + requestState?: 'EXECUTING' + filters?: string + sorters?: string + limit?: number + offset?: number + count?: boolean +} + +export interface SailPointLoadAccountsParams extends SailPointCredentials { + sourceId: string + file?: unknown + disableOptimization?: boolean +} + +export interface SailPointLoadEntitlementsParams extends SailPointCredentials { + sourceId: string + file?: unknown +} diff --git a/scripts/check-api-validation-contracts.ts b/scripts/check-api-validation-contracts.ts index 4e7f5f6ca23..b508c48c80f 100644 --- a/scripts/check-api-validation-contracts.ts +++ b/scripts/check-api-validation-contracts.ts @@ -9,8 +9,8 @@ const QUERY_HOOKS_DIR = path.join(ROOT, 'apps/sim/hooks/queries') const SELECTOR_HOOKS_DIR = path.join(ROOT, 'apps/sim/hooks/selectors') const BASELINE = { - totalRoutes: 994, - zodRoutes: 994, + totalRoutes: 996, + zodRoutes: 996, nonZodRoutes: 0, } as const From 6712f356bc71961e8862dc493e64b62ce6eba286 Mon Sep 17 00:00:00 2001 From: Marcus Chandra Date: Thu, 30 Jul 2026 00:11:31 -0700 Subject: [PATCH 02/10] fix(sailpoint): address review - SSRF host allowlist, working aggregate, retry/count fixes - Restrict tenant host resolution to *.api.identitynow.com / *.api.identitynowgov.com (or a bare tenant subdomain) so the client-credentials request can never post the PAT secret to an attacker-controlled or internal host. Throws on any other host. - Make search_aggregate functional: add an aggregationsDsl input (tool/contract/route/block) and preserve the AggregationResult object instead of dropping it through the list handler. - Retry the token exchange on 429 with Retry-After backoff, matching sailpointFetch. - Rebuild the multipart FormData per attempt so 401/429 retries never reuse a consumed body. - Expose an "Include Total Count" toggle so totalCount is reachable from the block UI. - Regenerate docs. Add route tests for the SSRF guard and aggregate object preservation. --- .../docs/en/integrations/sailpoint.mdx | 5 +- apps/sim/app/api/tools/sailpoint/client.ts | 87 ++++++++++++++----- .../sim/app/api/tools/sailpoint/load/route.ts | 38 +++++--- .../api/tools/sailpoint/query/route.test.ts | 60 +++++++++++++ .../app/api/tools/sailpoint/query/route.ts | 8 +- apps/sim/blocks/blocks/sailpoint.ts | 47 +++++++++- apps/sim/lib/api/contracts/tools/sailpoint.ts | 1 + apps/sim/lib/integrations/integrations.json | 4 +- apps/sim/tools/sailpoint/search_aggregate.ts | 26 +++--- apps/sim/tools/sailpoint/types.ts | 1 + 10 files changed, 223 insertions(+), 54 deletions(-) diff --git a/apps/docs/content/docs/en/integrations/sailpoint.mdx b/apps/docs/content/docs/en/integrations/sailpoint.mdx index cbe1c6ebfff..25652050a8f 100644 --- a/apps/docs/content/docs/en/integrations/sailpoint.mdx +++ b/apps/docs/content/docs/en/integrations/sailpoint.mdx @@ -717,14 +717,15 @@ Run a global search across SailPoint indices (identities, entitlements, roles, a ### `sailpoint_search_aggregate` -Return aggregation buckets for a SailPoint search query (e.g. counts grouped by a field). +Return the aggregation result (buckets under `aggregations`, plus `hits`) for a SailPoint search query. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | | `indices` | json | No | Indices to aggregate over \(defaults to \["identities"\]\) | -| `query` | string | No | Elasticsearch query string | +| `query` | string | No | Elasticsearch query string to scope the documents before aggregating | +| `aggregationsDsl` | json | No | Elasticsearch aggregations DSL object defining the buckets/metrics to compute, e.g. \{ "department": \{ "terms": \{ "field": "attributes.department" \} \} \} | | `limit` | number | No | Maximum number of aggregation results \(max 250\) | | `offset` | number | No | Pagination offset \(0-based\) | diff --git a/apps/sim/app/api/tools/sailpoint/client.ts b/apps/sim/app/api/tools/sailpoint/client.ts index 4ce9663fc3d..c92617f5450 100644 --- a/apps/sim/app/api/tools/sailpoint/client.ts +++ b/apps/sim/app/api/tools/sailpoint/client.ts @@ -46,19 +46,48 @@ export function normalizeApiVersion(value: string | undefined | null): SailPoint } /** - * Resolves the API + token hosts for a tenant. Accepts either a bare tenant subdomain (`acme`) or a - * full host/URL (`https://acme.api.identitynow.com`, `acme.api.identitynow.com`), stripping any - * protocol, path, or version segment the caller may have included. + * Allowed SailPoint API host suffixes. A user-supplied full host must end with one of these; this + * prevents SSRF and PAT-secret disclosure by ensuring the client-credentials request (which carries + * `client_secret`) can only ever be sent to a SailPoint tenant host, never an arbitrary destination. + */ +const ALLOWED_HOST_SUFFIXES = ['.api.identitynow.com', '.api.identitynowgov.com'] as const + +/** + * Resolves the API + token hosts for a tenant. Accepts either a bare tenant subdomain (`acme` → + * `acme.api.identitynow.com`) or a full SailPoint host/URL (`https://acme.api.identitynow.com`), + * stripping any protocol, path, or version segment. Throws when the resolved host is not a SailPoint + * identitynow.com host - the credentials must never be posted to an attacker-controlled or internal + * host. */ export function resolveSailPointHosts( tenant: string, apiVersion: SailPointApiVersion ): SailPointHosts { let host = tenant.trim().replace(/^https?:\/\//i, '') - host = host.replace(/[/?#].*$/, '').replace(/\.+$/, '') - if (!host.includes('.')) { + host = host + .replace(/[/?#].*$/, '') + .replace(/\.+$/, '') + .toLowerCase() + + if (!host) { + throw new Error('SailPoint tenant is required') + } + + if (host.includes('.')) { + const isAllowed = + /^[a-z0-9.-]+$/.test(host) && ALLOWED_HOST_SUFFIXES.some((suffix) => host.endsWith(suffix)) + if (!isAllowed) { + throw new Error( + `SailPoint host "${host}" is not an allowed identitynow.com host. Enter your tenant name (e.g. "acme") or a full *.api.identitynow.com host.` + ) + } + } else { + if (!/^[a-z0-9][a-z0-9-]*$/.test(host)) { + throw new Error(`Invalid SailPoint tenant "${tenant}"`) + } host = `${host}.api.identitynow.com` } + return { host, apiBaseUrl: `https://${host}/${apiVersion}`, @@ -92,10 +121,12 @@ interface CachedToken { } const TOKEN_EXPIRY_BUFFER_MS = 60_000 +const MAX_FETCH_RETRIES = 4 const tokenCache = new Map() function cacheKey(creds: SailPointServerCredentials): string { - return `${creds.tenant}:${creds.clientId}:${creds.apiVersion}` + const { host } = resolveSailPointHosts(creds.tenant, creds.apiVersion) + return `${host}:${creds.clientId}:${creds.apiVersion}` } /** Drops any cached token for these credentials so the next call re-exchanges. */ @@ -112,19 +143,32 @@ export async function getSailPointAccessToken(creds: SailPointServerCredentials) } const { tokenUrl } = resolveSailPointHosts(creds.tenant, creds.apiVersion) - const response = await fetch(tokenUrl, { - method: 'POST', - headers: { - Accept: 'application/json', - 'Content-Type': 'application/x-www-form-urlencoded', - }, - body: new URLSearchParams({ - grant_type: 'client_credentials', - client_id: creds.clientId, - client_secret: creds.clientSecret, - }).toString(), - cache: 'no-store', - }) + + let attempt = 0 + let response: Response + while (true) { + response = await fetch(tokenUrl, { + method: 'POST', + headers: { + Accept: 'application/json', + 'Content-Type': 'application/x-www-form-urlencoded', + }, + body: new URLSearchParams({ + grant_type: 'client_credentials', + client_id: creds.clientId, + client_secret: creds.clientSecret, + }).toString(), + cache: 'no-store', + }) + // The token endpoint shares SailPoint's per-client_id rate limit, so back off on a 429 too. + if (response.status === 429 && attempt < MAX_FETCH_RETRIES) { + const retryAfterMs = parseRetryAfter(response.headers.get('retry-after')) + attempt += 1 + await sleep(backoffWithJitter(attempt, retryAfterMs)) + continue + } + break + } const data: unknown = await response.json().catch(() => null) if (!response.ok) { @@ -134,7 +178,8 @@ export async function getSailPointAccessToken(creds: SailPointServerCredentials) throw new Error('SailPoint authentication did not return an access token') } - const expiresInSec = typeof data.expires_in === 'number' ? data.expires_in : 3600 + const parsedExpiry = Number(data.expires_in) + const expiresInSec = Number.isFinite(parsedExpiry) && parsedExpiry > 0 ? parsedExpiry : 3600 tokenCache.set(key, { token: data.access_token, expiresAt: Date.now() + Math.max(expiresInSec * 1000 - TOKEN_EXPIRY_BUFFER_MS, 0), @@ -163,7 +208,7 @@ export async function sailpointFetch( buildRequest: (token: string, hosts: SailPointHosts) => { url: string; init: RequestInit }, options: { maxRetries?: number } = {} ): Promise { - const maxRetries = options.maxRetries ?? 4 + const maxRetries = options.maxRetries ?? MAX_FETCH_RETRIES const hosts = resolveSailPointHosts(creds.tenant, creds.apiVersion) let attempt = 0 let refreshedOn401 = false diff --git a/apps/sim/app/api/tools/sailpoint/load/route.ts b/apps/sim/app/api/tools/sailpoint/load/route.ts index f8b8807f600..e96966a30bf 100644 --- a/apps/sim/app/api/tools/sailpoint/load/route.ts +++ b/apps/sim/app/api/tools/sailpoint/load/route.ts @@ -61,7 +61,9 @@ export const POST = withRouteHandler(async (request: NextRequest) => { apiVersion: normalizeApiVersion(body.apiVersion), } - const formData = new FormData() + let fileBuffer: Buffer | null = null + let fileName = 'aggregation.csv' + let fileType = 'text/csv' if (body.file && typeof body.file === 'object') { const userFiles = processFilesToUserFiles([body.file as RawFileInput], requestId, logger) @@ -75,11 +77,9 @@ export const POST = withRouteHandler(async (request: NextRequest) => { try { const { buffer } = await downloadServableFileFromStorage(userFile, requestId, logger) - formData.append( - 'file', - new Blob([new Uint8Array(buffer)], { type: userFile.type || 'text/csv' }), - userFile.name || 'aggregation.csv' - ) + fileBuffer = buffer + fileName = userFile.name || 'aggregation.csv' + fileType = userFile.type || 'text/csv' } catch (error) { const notReady = docNotReadyResponse(error) if (notReady) return notReady @@ -90,22 +90,36 @@ export const POST = withRouteHandler(async (request: NextRequest) => { } } - if (body.operation === 'sailpoint_load_accounts' && body.disableOptimization) { - formData.append('disableOptimization', 'true') - } - + const includeDisableOptimization = + body.operation === 'sailpoint_load_accounts' && body.disableOptimization === true const loadPath = LOAD_PATHS[body.operation] + /** + * Builds a fresh multipart body for every attempt. A single FormData instance can be a consumed + * (non-replayable) stream, so reusing it across the client's 401/429 retries could send the + * aggregation without the CSV - rebuild it per request instead. + */ + const buildFormData = (): FormData => { + const formData = new FormData() + if (fileBuffer) { + formData.append('file', new Blob([new Uint8Array(fileBuffer)], { type: fileType }), fileName) + } + if (includeDisableOptimization) { + formData.append('disableOptimization', 'true') + } + return formData + } + try { logger.info(`[${requestId}] SailPoint aggregation`, { operation: body.operation, apiVersion: creds.apiVersion, - hasFile: formData.has('file'), + hasFile: fileBuffer != null, }) const result = await sailpointFetch(creds, (_token, hosts) => ({ url: `${hosts.apiBaseUrl}/sources/${encodeURIComponent(body.sourceId)}/${loadPath}`, - init: { method: 'POST', body: formData }, + init: { method: 'POST', body: buildFormData() }, })) if (!result.ok) { diff --git a/apps/sim/app/api/tools/sailpoint/query/route.test.ts b/apps/sim/app/api/tools/sailpoint/query/route.test.ts index f1c549f479e..d3e42f2ea40 100644 --- a/apps/sim/app/api/tools/sailpoint/query/route.test.ts +++ b/apps/sim/app/api/tools/sailpoint/query/route.test.ts @@ -124,6 +124,34 @@ describe('SailPoint query route', () => { expect(data.output.results).toEqual([{ _type: 'identity', id: 'i1' }]) }) + it('preserves the aggregation object returned by /search/aggregate', async () => { + const aggregationResult = { + aggregations: { department: { buckets: [{ key: 'Finance', count: 12 }] } }, + hits: [], + } + fetchMock + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(jsonResponse(aggregationResult)) + + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'acme-aggregate', + operation: 'sailpoint_search_aggregate', + indices: 'identities', + query: 'attributes.department:*', + }) + + const response = await POST(request) + const data = await response.json() + + expect(response.status).toBe(200) + expect(fetchMock.mock.calls[1]?.[0]).toBe( + 'https://acme-aggregate.api.identitynow.com/v2025/search/aggregate' + ) + // The full AggregationResult object is preserved under `item`, not dropped as an empty list. + expect(data.output).toEqual({ item: aggregationResult }) + }) + it('caches the token across calls with the same credentials', async () => { fetchMock .mockResolvedValueOnce(tokenResponse()) @@ -204,6 +232,38 @@ describe('SailPoint query route', () => { expect(fetchMock).not.toHaveBeenCalled() }) + it('rejects a non-SailPoint tenant host without sending credentials (SSRF guard)', async () => { + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'evil.example.com', + operation: 'sailpoint_list_identities', + }) + + const response = await POST(request) + const data = await response.json() + + expect(response.status).toBe(500) + expect(fetchMock).not.toHaveBeenCalled() + expect(data.error).toContain('not an allowed') + }) + + it('accepts a full *.api.identitynow.com host', async () => { + fetchMock + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(jsonResponse([{ id: 'i1' }])) + + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'https://acme.api.identitynow.com', + operation: 'sailpoint_list_identities', + }) + + const response = await POST(request) + + expect(response.status).toBe(200) + expect(fetchMock.mock.calls[1]?.[0]).toBe('https://acme.api.identitynow.com/v2025/identities') + }) + it('propagates a SailPoint error body', async () => { fetchMock .mockResolvedValueOnce(tokenResponse()) diff --git a/apps/sim/app/api/tools/sailpoint/query/route.ts b/apps/sim/app/api/tools/sailpoint/query/route.ts index 87a02a0edc7..dfd022db7b1 100644 --- a/apps/sim/app/api/tools/sailpoint/query/route.ts +++ b/apps/sim/app/api/tools/sailpoint/query/route.ts @@ -167,7 +167,8 @@ function dispatch( query: body.query ? { query: body.query } : undefined, sort: toStringList(body.sort), searchAfter: toStringList(body.searchAfter), - includeNested: body.includeNested, + // Only send includeNested when explicitly false; the API already defaults it to true. + includeNested: body.includeNested === false ? false : undefined, }) return execute( creds, @@ -195,6 +196,7 @@ function dispatch( const searchBody = filterUndefined({ indices: toStringList(body.indices) ?? ['identities'], query: body.query ? { query: body.query } : undefined, + aggregationsDsl: body.aggregationsDsl, }) return execute( creds, @@ -203,7 +205,9 @@ function dispatch( url: `${h.apiBaseUrl}/search/aggregate${qs({ limit: body.limit, offset: body.offset })}`, init: jsonInit(searchBody), }), - 'search' + // /search/aggregate returns an AggregationResult object (aggregations + hits), not an + // array - route it as an item so the buckets are preserved rather than dropped. + 'item' ) } case 'sailpoint_list_identities': diff --git a/apps/sim/blocks/blocks/sailpoint.ts b/apps/sim/blocks/blocks/sailpoint.ts index abe25f40e04..f9ccac275eb 100644 --- a/apps/sim/blocks/blocks/sailpoint.ts +++ b/apps/sim/blocks/blocks/sailpoint.ts @@ -199,6 +199,22 @@ export const SailPointBlock: BlockConfig = { condition: { field: 'operation', value: 'sailpoint_search' }, mode: 'advanced', }, + { + id: 'aggregationsDsl', + title: 'Aggregations', + type: 'code', + language: 'json', + placeholder: '{ "department": { "terms": { "field": "attributes.department" } } }', + condition: { field: 'operation', value: 'sailpoint_search_aggregate' }, + required: { field: 'operation', value: 'sailpoint_search_aggregate' }, + wandConfig: { + enabled: true, + prompt: + 'Generate a SailPoint search aggregations DSL object (Elasticsearch aggregations syntax) defining the buckets or metrics to compute over the matched documents. Return ONLY valid JSON.', + placeholder: 'Describe the aggregation, e.g. "count identities grouped by department"...', + generationType: 'json-object', + }, + }, { id: 'filters', title: 'Filters', @@ -238,6 +254,18 @@ export const SailPointBlock: BlockConfig = { condition: { field: 'operation', value: LIMIT_OPERATIONS }, mode: 'advanced', }, + { + id: 'count', + title: 'Include Total Count', + type: 'dropdown', + options: [ + { label: 'No (default)', id: '' }, + { label: 'Yes', id: 'true' }, + ], + value: () => '', + condition: { field: 'operation', value: LIMIT_OPERATIONS }, + mode: 'advanced', + }, { id: 'defaultFilter', title: 'Default Filter', @@ -575,6 +603,9 @@ export const SailPointBlock: BlockConfig = { const applyPagination = () => { setNum('limit', params.limit) setNum('offset', params.offset) + if (params.count === 'true' || params.count === true) { + mapped.count = true + } } const applyFilters = () => { setStr('filters', params.filters) @@ -595,11 +626,14 @@ export const SailPointBlock: BlockConfig = { setStr('indices', params.indices) setStr('query', params.query) break - case 'sailpoint_search_aggregate': + case 'sailpoint_search_aggregate': { setStr('indices', params.indices) setStr('query', params.query) + const aggregationsDsl = parseOptionalJsonInput(params.aggregationsDsl, 'aggregations') + if (aggregationsDsl !== undefined) mapped.aggregationsDsl = aggregationsDsl applyPagination() break + } case 'sailpoint_list_identities': applyFilters() setStr('defaultFilter', params.defaultFilter) @@ -731,10 +765,15 @@ export const SailPointBlock: BlockConfig = { query: { type: 'string', description: 'Elasticsearch query string' }, includeNested: { type: 'string', description: 'Include nested objects in search results' }, sort: { type: 'string', description: 'Search sort fields' }, + aggregationsDsl: { + type: 'json', + description: 'Elasticsearch aggregations DSL for search aggregate', + }, filters: { type: 'string', description: 'V3 filter expression' }, sorters: { type: 'string', description: 'Sort expression' }, limit: { type: 'number', description: 'Maximum records to return' }, offset: { type: 'number', description: 'Pagination offset' }, + count: { type: 'string', description: 'Include the total matching record count' }, defaultFilter: { type: 'string', description: 'Identity default filter (CORRELATED_ONLY or NONE)', @@ -794,7 +833,7 @@ export const SailPointBlock: BlockConfig = { } export const SailPointBlockMeta = { - tags: ['identity', 'operations'], + tags: ['identity', 'automation'], url: 'https://www.sailpoint.com', templates: [ { @@ -811,7 +850,7 @@ export const SailPointBlockMeta = { icon: SailPointIcon, title: 'SailPoint access request bot', prompt: - 'Build a workflow where a user describes the access they need in Chat, the agent searches SailPoint entitlements and access profiles, and submits a SailPoint access request on their behalf with a correlation note in client metadata.', + 'Build a Slack bot where a user describes the access they need, the agent searches SailPoint entitlements and access profiles, and submits a SailPoint access request on their behalf with a correlation note in client metadata.', modules: ['agent', 'workflows'], category: 'operations', tags: ['automation', 'self-service'], @@ -840,7 +879,7 @@ export const SailPointBlockMeta = { icon: SailPointIcon, title: 'SailPoint leaver access revocation', prompt: - 'Create a workflow that, given a departing employee, searches their SailPoint identity access, and submits revoke access requests for each directly-assigned entitlement with a comment referencing the offboarding ticket.', + 'Create a workflow that, given a departing employee, searches their SailPoint identity access, and submits revoke access requests for each directly-assigned entitlement with a comment referencing the offboarding ticket in Jira.', modules: ['agent', 'workflows'], category: 'operations', tags: ['automation', 'security'], diff --git a/apps/sim/lib/api/contracts/tools/sailpoint.ts b/apps/sim/lib/api/contracts/tools/sailpoint.ts index 0501c5ab84b..3286bca930e 100644 --- a/apps/sim/lib/api/contracts/tools/sailpoint.ts +++ b/apps/sim/lib/api/contracts/tools/sailpoint.ts @@ -95,6 +95,7 @@ const searchAggregateSchema = z.object({ operation: z.literal('sailpoint_search_aggregate'), indices: stringListField, query: z.string().optional(), + aggregationsDsl: z.preprocess(parseJson, z.record(z.string(), z.unknown())).optional(), limit: limitField(LIMIT_STANDARD), offset: offsetField, }) diff --git a/apps/sim/lib/integrations/integrations.json b/apps/sim/lib/integrations/integrations.json index 7b2f1ca82e5..6a3f02d31aa 100644 --- a/apps/sim/lib/integrations/integrations.json +++ b/apps/sim/lib/integrations/integrations.json @@ -16156,7 +16156,7 @@ }, { "name": "Search Aggregate", - "description": "Return aggregation buckets for a SailPoint search query (e.g. counts grouped by a field)." + "description": "Return the aggregation result (buckets under `aggregations`, plus `hits`) for a SailPoint search query." }, { "name": "List Identities", @@ -16261,7 +16261,7 @@ "authType": "api-key", "category": "tools", "integrationType": "security", - "tags": ["identity", "operations"] + "tags": ["identity", "automation"] }, { "type": "salesforce", diff --git a/apps/sim/tools/sailpoint/search_aggregate.ts b/apps/sim/tools/sailpoint/search_aggregate.ts index 0c241e20631..4fa577887a2 100644 --- a/apps/sim/tools/sailpoint/search_aggregate.ts +++ b/apps/sim/tools/sailpoint/search_aggregate.ts @@ -1,24 +1,20 @@ import { SAILPOINT_QUERY_ROUTE, sailpointCredentialParams, - sailpointSearchOutputs, + sailpointItemOutputs, unwrapSailPointOutput, } from '@/tools/sailpoint/common' -import type { - SailPointSearchAggregateParams, - SailPointSearchOutput, - SailPointSearchResponse, -} from '@/tools/sailpoint/types' +import type { SailPointItemResponse, SailPointSearchAggregateParams } from '@/tools/sailpoint/types' import type { ToolConfig } from '@/tools/types' export const sailpointSearchAggregateTool: ToolConfig< SailPointSearchAggregateParams, - SailPointSearchResponse + SailPointItemResponse > = { id: 'sailpoint_search_aggregate', name: 'SailPoint Search Aggregate', description: - 'Return aggregation buckets for a SailPoint search query (e.g. counts grouped by a field).', + 'Return the aggregation result (buckets under `aggregations`, plus `hits`) for a SailPoint search query.', version: '1.0.0', params: { @@ -33,7 +29,14 @@ export const sailpointSearchAggregateTool: ToolConfig< type: 'string', required: false, visibility: 'user-or-llm', - description: 'Elasticsearch query string', + description: 'Elasticsearch query string to scope the documents before aggregating', + }, + aggregationsDsl: { + type: 'json', + required: false, + visibility: 'user-or-llm', + description: + 'Elasticsearch aggregations DSL object defining the buckets/metrics to compute, e.g. { "department": { "terms": { "field": "attributes.department" } } }', }, limit: { type: 'number', @@ -61,12 +64,13 @@ export const sailpointSearchAggregateTool: ToolConfig< apiVersion: params.apiVersion, indices: params.indices, query: params.query, + aggregationsDsl: params.aggregationsDsl, limit: params.limit, offset: params.offset, }), }, - transformResponse: (response) => unwrapSailPointOutput(response), + transformResponse: (response) => unwrapSailPointOutput<{ item: unknown }>(response), - outputs: sailpointSearchOutputs, + outputs: sailpointItemOutputs, } diff --git a/apps/sim/tools/sailpoint/types.ts b/apps/sim/tools/sailpoint/types.ts index 496ffd11c59..ff0efbeabe4 100644 --- a/apps/sim/tools/sailpoint/types.ts +++ b/apps/sim/tools/sailpoint/types.ts @@ -73,6 +73,7 @@ export interface SailPointSearchCountParams extends SailPointCredentials { export interface SailPointSearchAggregateParams extends SailPointCredentials { indices?: string[] | string query?: string + aggregationsDsl?: Record | string limit?: number offset?: number } From 52d537210747f9162ab0d35cc425fb9ea3c6872b Mon Sep 17 00:00:00 2001 From: Marcus Chandra Date: Thu, 30 Jul 2026 00:40:32 -0700 Subject: [PATCH 03/10] fix(sailpoint): require aggregations for aggregate, expose searchAfter, fix review-item filters - Require aggregationsDsl on search_aggregate (contract + tool) and send aggregationType: DSL so /search/aggregate always receives a valid aggregations definition. - Coerce searchAfter cursor elements to strings instead of dropping non-string values, and expose a searchAfter input on the block so deep pagination past 10k is reachable from the UI. - Correct the certification review-item filter fields (entitlements / access profiles / roles) to comma-separated ID filters instead of true/false placeholders. --- .../docs/en/integrations/sailpoint.mdx | 2 +- .../api/tools/sailpoint/query/route.test.ts | 22 +++++++++++++++++++ .../app/api/tools/sailpoint/query/route.ts | 20 ++++++++++++++--- apps/sim/blocks/blocks/sailpoint.ts | 22 ++++++++++++++----- apps/sim/lib/api/contracts/tools/sailpoint.ts | 7 +++++- apps/sim/tools/sailpoint/search_aggregate.ts | 2 +- 6 files changed, 63 insertions(+), 12 deletions(-) diff --git a/apps/docs/content/docs/en/integrations/sailpoint.mdx b/apps/docs/content/docs/en/integrations/sailpoint.mdx index 25652050a8f..5dc2db03069 100644 --- a/apps/docs/content/docs/en/integrations/sailpoint.mdx +++ b/apps/docs/content/docs/en/integrations/sailpoint.mdx @@ -725,7 +725,7 @@ Return the aggregation result (buckets under `aggregations`, plus `hits`) for a | --------- | ---- | -------- | ----------- | | `indices` | json | No | Indices to aggregate over \(defaults to \["identities"\]\) | | `query` | string | No | Elasticsearch query string to scope the documents before aggregating | -| `aggregationsDsl` | json | No | Elasticsearch aggregations DSL object defining the buckets/metrics to compute, e.g. \{ "department": \{ "terms": \{ "field": "attributes.department" \} \} \} | +| `aggregationsDsl` | json | Yes | Elasticsearch aggregations DSL object defining the buckets/metrics to compute, e.g. \{ "department": \{ "terms": \{ "field": "attributes.department" \} \} \} | | `limit` | number | No | Maximum number of aggregation results \(max 250\) | | `offset` | number | No | Pagination offset \(0-based\) | diff --git a/apps/sim/app/api/tools/sailpoint/query/route.test.ts b/apps/sim/app/api/tools/sailpoint/query/route.test.ts index d3e42f2ea40..130a6b8532c 100644 --- a/apps/sim/app/api/tools/sailpoint/query/route.test.ts +++ b/apps/sim/app/api/tools/sailpoint/query/route.test.ts @@ -139,6 +139,7 @@ describe('SailPoint query route', () => { operation: 'sailpoint_search_aggregate', indices: 'identities', query: 'attributes.department:*', + aggregationsDsl: { department: { terms: { field: 'attributes.department' } } }, }) const response = await POST(request) @@ -148,10 +149,31 @@ describe('SailPoint query route', () => { expect(fetchMock.mock.calls[1]?.[0]).toBe( 'https://acme-aggregate.api.identitynow.com/v2025/search/aggregate' ) + const aggInit = fetchMock.mock.calls[1]?.[1] as RequestInit + expect(JSON.parse(aggInit.body as string)).toEqual({ + indices: ['identities'], + query: { query: 'attributes.department:*' }, + aggregationType: 'DSL', + aggregationsDsl: { department: { terms: { field: 'attributes.department' } } }, + }) // The full AggregationResult object is preserved under `item`, not dropped as an empty list. expect(data.output).toEqual({ item: aggregationResult }) }) + it('rejects a search aggregate without an aggregations definition', async () => { + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'acme-agg-missing', + operation: 'sailpoint_search_aggregate', + indices: 'identities', + }) + + const response = await POST(request) + + expect(response.status).toBe(400) + expect(fetchMock).not.toHaveBeenCalled() + }) + it('caches the token across calls with the same credentials', async () => { fetchMock .mockResolvedValueOnce(tokenResponse()) diff --git a/apps/sim/app/api/tools/sailpoint/query/route.ts b/apps/sim/app/api/tools/sailpoint/query/route.ts index dfd022db7b1..e2e098a3728 100644 --- a/apps/sim/app/api/tools/sailpoint/query/route.ts +++ b/apps/sim/app/api/tools/sailpoint/query/route.ts @@ -57,11 +57,22 @@ function qs(params: Record): string { return serialized ? `?${serialized}` : '' } -/** Normalizes an array/JSON-string/comma-list into a string[] (or undefined when empty). */ +/** Coerces a primitive (string/number/boolean) to a non-empty string token, else null. */ +function coerceToken(value: unknown): string | null { + if (typeof value === 'string') return value.length ? value : null + if (typeof value === 'number' || typeof value === 'boolean') return String(value) + return null +} + +/** + * Normalizes an array/JSON-string/comma-list into a string[] (or undefined when empty). Numeric or + * boolean array elements are coerced to strings rather than dropped - SailPoint's `searchAfter` + * cursor mirrors sort values, which may include numbers, and must be sent as strings. + */ function toStringList(value: unknown): string[] | undefined { if (value == null) return undefined if (Array.isArray(value)) { - const arr = value.filter((v): v is string => typeof v === 'string' && v.length > 0) + const arr = value.map(coerceToken).filter((v): v is string => v !== null) return arr.length ? arr : undefined } if (typeof value === 'string') { @@ -71,7 +82,7 @@ function toStringList(value: unknown): string[] | undefined { try { const parsed: unknown = JSON.parse(trimmed) if (Array.isArray(parsed)) { - const arr = parsed.filter((v): v is string => typeof v === 'string') + const arr = parsed.map(coerceToken).filter((v): v is string => v !== null) return arr.length ? arr : undefined } } catch { @@ -196,6 +207,9 @@ function dispatch( const searchBody = filterUndefined({ indices: toStringList(body.indices) ?? ['identities'], query: body.query ? { query: body.query } : undefined, + // Interpret aggregationsDsl as Elasticsearch DSL (also SailPoint's default) rather than + // the typed SAILPOINT aggregation mode. + aggregationType: 'DSL', aggregationsDsl: body.aggregationsDsl, }) return execute( diff --git a/apps/sim/blocks/blocks/sailpoint.ts b/apps/sim/blocks/blocks/sailpoint.ts index f9ccac275eb..32b65a43a89 100644 --- a/apps/sim/blocks/blocks/sailpoint.ts +++ b/apps/sim/blocks/blocks/sailpoint.ts @@ -199,6 +199,14 @@ export const SailPointBlock: BlockConfig = { condition: { field: 'operation', value: 'sailpoint_search' }, mode: 'advanced', }, + { + id: 'searchAfter', + title: 'Search After', + type: 'short-input', + placeholder: '["John Doe","2c9180...id"] (cursor from the last result to page past 10k)', + condition: { field: 'operation', value: 'sailpoint_search' }, + mode: 'advanced', + }, { id: 'aggregationsDsl', title: 'Aggregations', @@ -393,25 +401,25 @@ export const SailPointBlock: BlockConfig = { }, { id: 'entitlements', - title: 'Entitlements Filter', + title: 'Entitlement IDs', type: 'short-input', - placeholder: 'true / false', + placeholder: 'Comma-separated entitlement IDs to filter by', condition: { field: 'operation', value: 'sailpoint_list_certification_review_items' }, mode: 'advanced', }, { id: 'accessProfiles', - title: 'Access Profiles Filter', + title: 'Access Profile IDs', type: 'short-input', - placeholder: 'true / false', + placeholder: 'Comma-separated access profile IDs to filter by', condition: { field: 'operation', value: 'sailpoint_list_certification_review_items' }, mode: 'advanced', }, { id: 'roles', - title: 'Roles Filter', + title: 'Role IDs', type: 'short-input', - placeholder: 'true / false', + placeholder: 'Comma-separated role IDs to filter by', condition: { field: 'operation', value: 'sailpoint_list_certification_review_items' }, mode: 'advanced', }, @@ -617,6 +625,7 @@ export const SailPointBlock: BlockConfig = { setStr('indices', params.indices) setStr('query', params.query) setStr('sort', params.sort) + setStr('searchAfter', params.searchAfter) if (params.includeNested === 'false' || params.includeNested === false) { mapped.includeNested = false } @@ -765,6 +774,7 @@ export const SailPointBlock: BlockConfig = { query: { type: 'string', description: 'Elasticsearch query string' }, includeNested: { type: 'string', description: 'Include nested objects in search results' }, sort: { type: 'string', description: 'Search sort fields' }, + searchAfter: { type: 'string', description: 'searchAfter cursor for deep search pagination' }, aggregationsDsl: { type: 'json', description: 'Elasticsearch aggregations DSL for search aggregate', diff --git a/apps/sim/lib/api/contracts/tools/sailpoint.ts b/apps/sim/lib/api/contracts/tools/sailpoint.ts index 3286bca930e..080196840e8 100644 --- a/apps/sim/lib/api/contracts/tools/sailpoint.ts +++ b/apps/sim/lib/api/contracts/tools/sailpoint.ts @@ -95,7 +95,12 @@ const searchAggregateSchema = z.object({ operation: z.literal('sailpoint_search_aggregate'), indices: stringListField, query: z.string().optional(), - aggregationsDsl: z.preprocess(parseJson, z.record(z.string(), z.unknown())).optional(), + aggregationsDsl: z.preprocess( + parseJson, + z.record(z.string(), z.unknown()).refine((value) => Object.keys(value).length > 0, { + message: 'aggregationsDsl is required and must define at least one aggregation', + }) + ), limit: limitField(LIMIT_STANDARD), offset: offsetField, }) diff --git a/apps/sim/tools/sailpoint/search_aggregate.ts b/apps/sim/tools/sailpoint/search_aggregate.ts index 4fa577887a2..9ef1a8bf47f 100644 --- a/apps/sim/tools/sailpoint/search_aggregate.ts +++ b/apps/sim/tools/sailpoint/search_aggregate.ts @@ -33,7 +33,7 @@ export const sailpointSearchAggregateTool: ToolConfig< }, aggregationsDsl: { type: 'json', - required: false, + required: true, visibility: 'user-or-llm', description: 'Elasticsearch aggregations DSL object defining the buckets/metrics to compute, e.g. { "department": { "terms": { "field": "attributes.department" } } }', From e1b8784367bb30beb39d80fccec8e1e029a97cf5 Mon Sep 17 00:00:00 2001 From: Marcus Chandra Date: Thu, 30 Jul 2026 01:01:08 -0700 Subject: [PATCH 04/10] fix(sailpoint): bind the token cache to the client secret Include a hash of client_secret in the token cache key so a caller with a matching tenant/clientId but the wrong secret cannot reuse another principal's cached bearer token - a mismatched secret now misses the cache and fails the token exchange. Regression test added. --- apps/sim/app/api/tools/sailpoint/client.ts | 7 +++++- .../api/tools/sailpoint/query/route.test.ts | 24 +++++++++++++++++++ 2 files changed, 30 insertions(+), 1 deletion(-) diff --git a/apps/sim/app/api/tools/sailpoint/client.ts b/apps/sim/app/api/tools/sailpoint/client.ts index c92617f5450..0c28ab0531f 100644 --- a/apps/sim/app/api/tools/sailpoint/client.ts +++ b/apps/sim/app/api/tools/sailpoint/client.ts @@ -1,3 +1,4 @@ +import { createHash } from 'node:crypto' import { sleep } from '@sim/utils/helpers' import { isRecordLike } from '@sim/utils/object' import { backoffWithJitter, parseRetryAfter } from '@sim/utils/retry' @@ -126,7 +127,11 @@ const tokenCache = new Map() function cacheKey(creds: SailPointServerCredentials): string { const { host } = resolveSailPointHosts(creds.tenant, creds.apiVersion) - return `${host}:${creds.clientId}:${creds.apiVersion}` + // Bind the cache entry to the exact client_secret (hashed) so a caller with a matching + // tenant/clientId but the wrong secret can never reuse another principal's cached token - a + // mismatched secret produces a different key, misses the cache, and fails the token exchange. + const secretHash = createHash('sha256').update(creds.clientSecret).digest('hex').slice(0, 16) + return `${host}:${creds.clientId}:${creds.apiVersion}:${secretHash}` } /** Drops any cached token for these credentials so the next call re-exchanges. */ diff --git a/apps/sim/app/api/tools/sailpoint/query/route.test.ts b/apps/sim/app/api/tools/sailpoint/query/route.test.ts index 130a6b8532c..3876105a0e7 100644 --- a/apps/sim/app/api/tools/sailpoint/query/route.test.ts +++ b/apps/sim/app/api/tools/sailpoint/query/route.test.ts @@ -197,6 +197,30 @@ describe('SailPoint query route', () => { expect(fetchMock.mock.calls[2]?.[0]).toContain('/v2025/accounts') }) + it('does not share a cached token across different client secrets', async () => { + fetchMock + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(jsonResponse([{ id: 'a1' }])) + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(jsonResponse([{ id: 'a2' }])) + + const makeRequest = (secret: string) => + createMockRequest('POST', { + clientId: 'shared-client', + clientSecret: secret, + tenant: 'acme-secret', + operation: 'sailpoint_list_accounts', + }) + + await POST(makeRequest('secret-A')) + await POST(makeRequest('secret-B')) + + // A different secret must not reuse the first principal's token: 2 exchanges + 2 API calls. + expect(fetchMock).toHaveBeenCalledTimes(4) + expect(fetchMock.mock.calls[0]?.[0]).toContain('/oauth/token') + expect(fetchMock.mock.calls[2]?.[0]).toContain('/oauth/token') + }) + it('backs off and retries on a 429 response', async () => { fetchMock .mockResolvedValueOnce(tokenResponse()) From 531ae54116fd2d0c3149f331993b85c88c9e15e1 Mon Sep 17 00:00:00 2001 From: Marcus Chandra Date: Thu, 30 Jul 2026 01:11:19 -0700 Subject: [PATCH 05/10] fix(sailpoint): adaptive token TTL buffer and honest search-count on missing header - Cap the token cache expiry buffer at the smaller of 60s and 10% of the lifetime so a short-lived token still caches instead of expiring immediately. - Return an error for search_count when SailPoint provides no X-Total-Count (and no numeric body) instead of reporting a misleading total of 0. Tests added for both count paths. --- apps/sim/app/api/tools/sailpoint/client.ts | 5 ++- .../api/tools/sailpoint/query/route.test.ts | 40 +++++++++++++++++++ .../app/api/tools/sailpoint/query/route.ts | 18 +++++++-- 3 files changed, 58 insertions(+), 5 deletions(-) diff --git a/apps/sim/app/api/tools/sailpoint/client.ts b/apps/sim/app/api/tools/sailpoint/client.ts index 0c28ab0531f..f0964980096 100644 --- a/apps/sim/app/api/tools/sailpoint/client.ts +++ b/apps/sim/app/api/tools/sailpoint/client.ts @@ -185,9 +185,12 @@ export async function getSailPointAccessToken(creds: SailPointServerCredentials) const parsedExpiry = Number(data.expires_in) const expiresInSec = Number.isFinite(parsedExpiry) && parsedExpiry > 0 ? parsedExpiry : 3600 + // Use the smaller of the 60s buffer and 10% of the lifetime so a short-lived token (expires_in + // under ~60s) still gets cached for most of its life instead of expiring immediately. + const bufferMs = Math.min(TOKEN_EXPIRY_BUFFER_MS, expiresInSec * 100) tokenCache.set(key, { token: data.access_token, - expiresAt: Date.now() + Math.max(expiresInSec * 1000 - TOKEN_EXPIRY_BUFFER_MS, 0), + expiresAt: Date.now() + Math.max(expiresInSec * 1000 - bufferMs, 0), }) return data.access_token } diff --git a/apps/sim/app/api/tools/sailpoint/query/route.test.ts b/apps/sim/app/api/tools/sailpoint/query/route.test.ts index 3876105a0e7..1da4e00ec3b 100644 --- a/apps/sim/app/api/tools/sailpoint/query/route.test.ts +++ b/apps/sim/app/api/tools/sailpoint/query/route.test.ts @@ -124,6 +124,46 @@ describe('SailPoint query route', () => { expect(data.output.results).toEqual([{ _type: 'identity', id: 'i1' }]) }) + it('returns the total from search count', async () => { + fetchMock + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce( + new Response(null, { status: 204, headers: { 'X-Total-Count': '42' } }) + ) + + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'acme-count', + operation: 'sailpoint_search_count', + indices: 'identities', + }) + + const response = await POST(request) + const data = await response.json() + + expect(response.status).toBe(200) + expect(data.output).toEqual({ total: 42 }) + }) + + it('errors instead of reporting zero when search count has no total header', async () => { + fetchMock + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(new Response(null, { status: 204 })) + + const request = createMockRequest('POST', { + ...baseCreds, + tenant: 'acme-count-none', + operation: 'sailpoint_search_count', + indices: 'identities', + }) + + const response = await POST(request) + const data = await response.json() + + expect(response.status).toBe(502) + expect(data.success).toBe(false) + }) + it('preserves the aggregation object returned by /search/aggregate', async () => { const aggregationResult = { aggregations: { department: { buckets: [{ key: 'Finance', count: 12 }] } }, diff --git a/apps/sim/app/api/tools/sailpoint/query/route.ts b/apps/sim/app/api/tools/sailpoint/query/route.ts index e2e098a3728..a8de28500e1 100644 --- a/apps/sim/app/api/tools/sailpoint/query/route.ts +++ b/apps/sim/app/api/tools/sailpoint/query/route.ts @@ -145,12 +145,22 @@ async function execute( case 'item': output = { item: result.data ?? null } break - case 'count': - output = { - total: - readTotalCount(result.headers) ?? (typeof result.data === 'number' ? result.data : 0), + case 'count': { + const total = + readTotalCount(result.headers) ?? (typeof result.data === 'number' ? result.data : null) + // Do not report an unknown count as 0 - that reads as "no matches". Surface it as an error. + if (total === null) { + return NextResponse.json( + { + success: false, + error: 'SailPoint did not return a total count (X-Total-Count missing)', + }, + { status: 502 } + ) } + output = { total } break + } case 'write': output = { accepted: result.ok, status: result.status } break From ec8e88d8433608797c7ed2c36ceeb18ca41e39e6 Mon Sep 17 00:00:00 2001 From: Waleed Latif Date: Mon, 31 Aug 2026 19:07:48 -0700 Subject: [PATCH 06/10] fix(sailpoint): align integration with current api --- .../content/docs/integrations/sailpoint.mdx | 956 +++++----- apps/sim/app/api/tools/sailpoint/client.ts | 257 --- .../api/tools/sailpoint/load/route.test.ts | 75 - .../sim/app/api/tools/sailpoint/load/route.ts | 141 -- .../api/tools/sailpoint/query/route.test.ts | 377 ---- .../app/api/tools/sailpoint/query/route.ts | 504 ------ apps/sim/blocks/blocks/sailpoint.ts | 1130 ++++++++++-- apps/sim/lib/api/contracts/tools/sailpoint.ts | 477 ----- .../sim/lib/internal/sailpoint/client.test.ts | 109 ++ apps/sim/lib/internal/sailpoint/client.ts | 294 ++++ .../internal/sailpoint/execute-tool.test.ts | 641 +++++++ .../lib/internal/sailpoint/execute-tool.ts | 70 + apps/sim/lib/internal/sailpoint/operations.ts | 677 ++++++++ apps/sim/lib/internal/sailpoint/schema.ts | 567 ++++++ .../tool-operations/registry.server.ts | 43 + apps/sim/tools/generated/tool-ids.ts | 2 +- apps/sim/tools/generated/tool-metadata.ts | 2 +- apps/sim/tools/generated/tool-outputs.ts | 2 +- apps/sim/tools/registry.ts | 54 +- .../tools/sailpoint/cancel_access_request.ts | 57 - apps/sim/tools/sailpoint/common.ts | 257 ++- apps/sim/tools/sailpoint/definitions.ts | 1530 +++++++++++++++++ .../get_access_profile_entitlements.ts | 69 - .../sailpoint/get_access_request_status.ts | 98 -- apps/sim/tools/sailpoint/get_account.ts | 43 - .../tools/sailpoint/get_account_activity.ts | 46 - .../sailpoint/get_account_entitlements.ts | 55 - apps/sim/tools/sailpoint/get_campaign.ts | 53 - apps/sim/tools/sailpoint/get_entitlement.ts | 46 - apps/sim/tools/sailpoint/get_identity.ts | 43 - .../tools/sailpoint/get_role_entitlements.ts | 69 - apps/sim/tools/sailpoint/get_source.ts | 43 - apps/sim/tools/sailpoint/index.ts | 66 +- .../tools/sailpoint/list_access_profiles.ts | 62 - .../sailpoint/list_account_activities.ts | 84 - apps/sim/tools/sailpoint/list_accounts.ts | 69 - apps/sim/tools/sailpoint/list_campaigns.ts | 70 - .../list_certification_review_items.ts | 90 - .../tools/sailpoint/list_certifications.ts | 70 - apps/sim/tools/sailpoint/list_entitlements.ts | 76 - apps/sim/tools/sailpoint/list_identities.ts | 70 - apps/sim/tools/sailpoint/list_roles.ts | 59 - apps/sim/tools/sailpoint/list_sources.ts | 76 - apps/sim/tools/sailpoint/load_accounts.ts | 61 - apps/sim/tools/sailpoint/load_entitlements.ts | 57 - apps/sim/tools/sailpoint/outputs.ts | 349 ++++ apps/sim/tools/sailpoint/request_access.ts | 75 - apps/sim/tools/sailpoint/search.ts | 82 - apps/sim/tools/sailpoint/search_aggregate.ts | 76 - apps/sim/tools/sailpoint/search_count.ts | 54 - apps/sim/tools/sailpoint/types.ts | 319 +++- .../deployment-config/src/integrations.json | 100 +- scripts/generate-docs.test.ts | 19 + scripts/generate-docs.ts | 10 +- 54 files changed, 6409 insertions(+), 4372 deletions(-) delete mode 100644 apps/sim/app/api/tools/sailpoint/client.ts delete mode 100644 apps/sim/app/api/tools/sailpoint/load/route.test.ts delete mode 100644 apps/sim/app/api/tools/sailpoint/load/route.ts delete mode 100644 apps/sim/app/api/tools/sailpoint/query/route.test.ts delete mode 100644 apps/sim/app/api/tools/sailpoint/query/route.ts delete mode 100644 apps/sim/lib/api/contracts/tools/sailpoint.ts create mode 100644 apps/sim/lib/internal/sailpoint/client.test.ts create mode 100644 apps/sim/lib/internal/sailpoint/client.ts create mode 100644 apps/sim/lib/internal/sailpoint/execute-tool.test.ts create mode 100644 apps/sim/lib/internal/sailpoint/execute-tool.ts create mode 100644 apps/sim/lib/internal/sailpoint/operations.ts create mode 100644 apps/sim/lib/internal/sailpoint/schema.ts delete mode 100644 apps/sim/tools/sailpoint/cancel_access_request.ts create mode 100644 apps/sim/tools/sailpoint/definitions.ts delete mode 100644 apps/sim/tools/sailpoint/get_access_profile_entitlements.ts delete mode 100644 apps/sim/tools/sailpoint/get_access_request_status.ts delete mode 100644 apps/sim/tools/sailpoint/get_account.ts delete mode 100644 apps/sim/tools/sailpoint/get_account_activity.ts delete mode 100644 apps/sim/tools/sailpoint/get_account_entitlements.ts delete mode 100644 apps/sim/tools/sailpoint/get_campaign.ts delete mode 100644 apps/sim/tools/sailpoint/get_entitlement.ts delete mode 100644 apps/sim/tools/sailpoint/get_identity.ts delete mode 100644 apps/sim/tools/sailpoint/get_role_entitlements.ts delete mode 100644 apps/sim/tools/sailpoint/get_source.ts delete mode 100644 apps/sim/tools/sailpoint/list_access_profiles.ts delete mode 100644 apps/sim/tools/sailpoint/list_account_activities.ts delete mode 100644 apps/sim/tools/sailpoint/list_accounts.ts delete mode 100644 apps/sim/tools/sailpoint/list_campaigns.ts delete mode 100644 apps/sim/tools/sailpoint/list_certification_review_items.ts delete mode 100644 apps/sim/tools/sailpoint/list_certifications.ts delete mode 100644 apps/sim/tools/sailpoint/list_entitlements.ts delete mode 100644 apps/sim/tools/sailpoint/list_identities.ts delete mode 100644 apps/sim/tools/sailpoint/list_roles.ts delete mode 100644 apps/sim/tools/sailpoint/list_sources.ts delete mode 100644 apps/sim/tools/sailpoint/load_accounts.ts delete mode 100644 apps/sim/tools/sailpoint/load_entitlements.ts create mode 100644 apps/sim/tools/sailpoint/outputs.ts delete mode 100644 apps/sim/tools/sailpoint/request_access.ts delete mode 100644 apps/sim/tools/sailpoint/search.ts delete mode 100644 apps/sim/tools/sailpoint/search_aggregate.ts delete mode 100644 apps/sim/tools/sailpoint/search_count.ts diff --git a/apps/docs/content/docs/integrations/sailpoint.mdx b/apps/docs/content/docs/integrations/sailpoint.mdx index 5dc2db03069..5e6600470b3 100644 --- a/apps/docs/content/docs/integrations/sailpoint.mdx +++ b/apps/docs/content/docs/integrations/sailpoint.mdx @@ -10,187 +10,233 @@ import { BlockInfoCard } from "@/components/ui/block-info-card" color="#0033A1" /> +{/* MANUAL-CONTENT-START:intro */} +## MANUAL DESCRIPTION + +The SailPoint integration connects Sim workflows to SailPoint Identity Security Cloud (ISC) with a Personal Access Token (PAT). Enter the tenant name from your ISC URL—or the full `*.api.identitynow.com` / `*.api.identitynowgov.com` host—plus the PAT client ID and client secret. Sim exchanges those credentials at the tenant's `/oauth/token` endpoint and calls SailPoint's current service-versioned endpoints, such as `/identities/v1`, `/access-requests/v1`, and `/certifications/v1`. There is no global API-version setting. + +Create the PAT with the least-privileged scopes required by the actions in your workflow. Common read scopes include `sp:search:read`, `idn:identity:read`, `idn:accounts:read`, `idn:entitlement:read`, `idn:role-unchecked:read` or `idn:role-checked:read`, `idn:access-profile:read`, `idn:sources:read`, `idn:campaign:read`, `idn:access-request-status:read`, `idn:task-management:read`, and `idn:access-request-approvals:read`. Write actions require their corresponding management scopes: `idn:access-request:manage` or `idn:access-request-self:manage` to submit access requests, `idn:access-request:manage` to cancel them, `idn:campaign:manage` to make certification decisions or sign off, `idn:access-request-approvals:manage` to approve or reject requests, `idn:sources:manage` to import accounts, and `idn:entitlement:manage` to import entitlements. Some identity-governance endpoints require a user-context PAT and an appropriate SailPoint user authority in addition to an OAuth scope. + +List actions return one bounded page. Standard collections accept up to 250 records per call; role collections accept up to 50; Search accepts up to 10,000. Use `offset`, `sorters`, or Search's `searchAfter` cursor to continue. Enable `count` only when you need the provider's `X-Total-Count` header. Omitting Search `indices` searches every index allowed by SailPoint; complex Search request fields are available as structured JSON inputs. + +Access requests are asynchronous. A successful submission returns SailPoint's `newRequests` and `existingRequests` tracking records, including the access-request IDs needed by the status tools. The standard request form applies the same requested items to every identity; use `requestedForWithRequestedItems` when identities need different items, dates, forms, or account selections. An entitlement revoke is limited to one entitlement per request, while entitlement grants are limited to 25 entitlements. + +Account and entitlement imports upload a CSV to a source and return a task that can be followed with **Get Task Status**. Sim caps each uploaded CSV at 25 MiB and does not automatically poll the task. The file must be available to the workflow owner, and the source must support the corresponding import operation. + +The actions cover five connected workflows: search and entity lookup; account, entitlement, role, access-profile, and source inventory; access request submission, cancellation, approval, rejection, and status; campaign and certification review, decision, and sign-off; and CSV import plus task monitoring. Provider-defined objects such as account attributes and Search documents remain JSON because their fields depend on the tenant, source, index, and field projection. +{/* MANUAL-CONTENT-END */} + + ## Usage Instructions -Read and act on identity governance data in SailPoint Identity Security Cloud (ISC): search identities, accounts, entitlements, roles, and access profiles; review account activities, campaigns, and certifications; and request, revoke, or cancel access. Authenticates with a Personal Access Token (PAT) using the OAuth2 client-credentials grant against your per-tenant host (https://{tenant}.api.identitynow.com). +Read and act on identity-governance data in SailPoint Identity Security Cloud (ISC) with a Personal Access Token (PAT) exchanged through OAuth2 client credentials at https://{tenant}.api.identitynow.com/oauth/token. SailPoint versions each service independently, so the integration uses the current service paths such as /search/v1, /identities/v1, and /access-requests/v1; there is no shared annual API-version setting. Use a PAT whose owner has the ISC user level required by each endpoint because many identity, role, access-profile, certification, approval, and access-request operations require user context in addition to scopes. Common read scopes are sp:search:read, idn:identity:read, idn:accounts:read, idn:entitlement:read, idn:role-unchecked:read or idn:role-checked:read, idn:access-profile:read, idn:sources:read, idn:campaign:read, idn:access-request-status:read, idn:task-management:read, and idn:access-request-approvals:read. Mutations additionally require idn:sources:manage for account aggregation, idn:entitlement:manage for entitlement aggregation, idn:campaign:manage for certification decisions and sign-off, idn:access-request:manage or idn:access-request-self:manage for access requests as permitted, and idn:access-request-approvals:manage for approval actions. A scope alone does not grant authority beyond the PAT owner's ISC permissions, and authorization failures may be returned as provider errors or filtered visibility depending on the endpoint and tenant policy. ## Actions -### `sailpoint_cancel_access_request` +### SailPoint Approve Access Request + +Approve one pending access-request approval. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `approvalId` | string | Yes | Approval ID | +| `comment` | string | No | Optional reviewer comment | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `total` | number | Number of matching documents | + +### SailPoint Cancel Access Request -Cancel a pending SailPoint access request by its identity request ID. +Cancel an access request that has not passed approval. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `accountActivityId` | string | Yes | The identityRequestId of the access request to cancel | -| `comment` | string | Yes | Reason for cancellation | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `accountActivityId` | string | Yes | Account activity / identity request ID | +| `comment` | string | Yes | Cancellation reason | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_get_access_profile_entitlements` +### SailPoint Decide Certification Review Items -List the entitlements granted by a specific SailPoint access profile. +Approve or revoke 1-250 review items in an identity certification. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `id` | string | Yes | Access Profile ID | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `id` | string | Yes | Certification ID | +| `decisions` | json | Yes | Array of \{id, decision: APPROVE\|REVOKE, bulk, proposedEndDate?, recommendation?, comments?\} | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_get_access_request_status` +### SailPoint Get Access Profile -List the status of SailPoint access requests with optional identity and state filters. +Get an access profile by ID. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `requestedFor` | string | No | Identity ID the request was made for | -| `requestedBy` | string | No | Identity ID that submitted the request | -| `regardingIdentity` | string | No | Identity ID the request is about \(requester or target\) | -| `assignedTo` | string | No | Identity ID a pending approval is assigned to | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `id` | string | Yes | Access profile ID | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `total` | number | Number of matching documents | + +### SailPoint Get Access Profile Entitlements + +List entitlements in one access profile. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `id` | string | Yes | Access profile ID | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `total` | number | Number of matching documents | + +### SailPoint Get Access Request Status + +List requested-item status records for access requests. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `requestedFor` | string | No | No description | +| `requestedBy` | string | No | No description | +| `regardingIdentity` | string | No | No description | +| `assignedTo` | string | No | No description | | `requestState` | string | No | EXECUTING | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_get_account` +### SailPoint Get Account -Get a single SailPoint account by ID. +Get an account from the current /accounts/v1 service by ID. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | | `id` | string | Yes | Account ID | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_get_account_activity` +### SailPoint Get Account Activity -Get a single SailPoint account activity by ID. +Get an account activity by ID. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `id` | string | Yes | Account Activity ID | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `id` | string | Yes | Account activity ID | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_get_account_entitlements` +### SailPoint Get Account Entitlements -List the entitlements granted on a specific SailPoint account. +List entitlements granted to one account. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | | `id` | string | Yes | Account ID | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_get_campaign` +### SailPoint Get Campaign -Get a single SailPoint certification campaign by ID. +Get a certification campaign by ID. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | | `id` | string | Yes | Campaign ID | | `detail` | string | No | SLIM or FULL | @@ -198,578 +244,654 @@ Get a single SailPoint certification campaign by ID. | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_get_entitlement` +### SailPoint Get Certification -Get a single SailPoint entitlement by ID. +Get an identity certification by ID. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `id` | string | Yes | Certification ID | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `total` | number | Number of matching documents | + +### SailPoint Get Entitlement + +Get an entitlement by ID. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | | `id` | string | Yes | Entitlement ID | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_get_identity` +### SailPoint Get Identity -Get a single SailPoint identity by ID. +Get an identity from the current /identities/v1 service by ID. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | | `id` | string | Yes | Identity ID | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_get_role_entitlements` +### SailPoint Get Role -List the entitlements granted by a specific SailPoint role. +Get a role by ID. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | | `id` | string | Yes | Role ID | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_get_source` +### SailPoint Get Role Entitlements -Get a single SailPoint identity source by ID. +List entitlements in one role using the current non-experimental roles service. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `id` | string | Yes | Role ID | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `limit` | number | No | Maximum roles for this page \(0-50; default 50\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `total` | number | Number of matching documents | + +### SailPoint Get Source + +Get an identity source by ID. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | | `id` | string | Yes | Source ID | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_list_access_profiles` +### SailPoint Get Task Status -List access profiles in SailPoint with optional filters, sorters, and pagination. +Get the current status of a SailPoint background task by ID. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `id` | string | Yes | Task ID | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_list_account_activities` +### SailPoint List Access Profiles -List account activities (provisioning events) in SailPoint with optional filters and pagination. +List access profiles with current visibility and segmentation controls. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `requestedFor` | string | No | Identity ID the activity was requested for | -| `requestedBy` | string | No | Identity ID that requested the activity | -| `regardingIdentity` | string | No | Identity ID the activity is about \(requester or target\) | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `forSubadmin` | string | No | Subadmin identity ID or 'me' whose visible resources should be returned | +| `forSegmentIds` | string | No | Comma-separated segment IDs used to restrict the returned resources | +| `includeUnsegmented` | boolean | No | Include resources not assigned to a segment \(default true\) | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_list_accounts` +### SailPoint List Account Activities -List accounts in SailPoint with optional filters, sorters, and pagination. +List provisioning activities with identity, filter, sort, and page controls. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | -| `detailLevel` | string | No | SLIM or FULL \(default\) | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `requestedFor` | string | No | Target identity ID or 'me'; mutually exclusive with regardingIdentity | +| `requestedBy` | string | No | Requester identity ID or 'me'; mutually exclusive with regardingIdentity | +| `regardingIdentity` | string | No | Requester-or-target identity ID or 'me'; excludes requestedFor/requestedBy | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_list_campaigns` +### SailPoint List Accounts -List certification campaigns in SailPoint with optional filters, sorters, and pagination. +List accounts with documented filtering, sorting, detail, and pagination. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `detailLevel` | string | No | SLIM or FULL \(default FULL\) | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `total` | number | Number of matching documents | + +### SailPoint List Campaigns + +List certification campaigns with detail, filtering, sorting, and pagination. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | | `detail` | string | No | SLIM \(default\) or FULL | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_list_certification_review_items` +### SailPoint List Certification Review Items -List the access review items within a specific SailPoint certification. +List access-review items in one identity certification. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | | `id` | string | Yes | Certification ID | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | -| `entitlements` | string | No | Filter review items to specific entitlement IDs | -| `accessProfiles` | string | No | Filter review items to specific access profile IDs | -| `roles` | string | No | Filter review items to specific role IDs | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `entitlements` | string | No | Comma-separated entitlement IDs | +| `accessProfiles` | string | No | Comma-separated access profile IDs | +| `roles` | string | No | Comma-separated role IDs | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_list_certifications` +### SailPoint List Certifications -List certifications in SailPoint with optional reviewer filter, filters, sorters, and pagination. +List identity certifications assigned to a reviewer. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | | `reviewerIdentity` | string | No | Reviewer identity ID or 'me' | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_list_entitlements` +### SailPoint List Entitlements -List entitlements in SailPoint with optional filters, sorters, and pagination. +List entitlements with current segmentation, cursor, filter, and page controls. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | -| `accountId` | string | No | Filter to entitlements on a specific account ID | -| `segmentedForIdentity` | string | No | Return only entitlements visible to the given identity via segmentation | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `segmentedForIdentity` | string | No | Identity ID whose visible segments restrict the results | +| `forSegmentIds` | string | No | Comma-separated segment IDs used to restrict the returned resources | +| `includeUnsegmented` | boolean | No | Include resources not assigned to a segment \(default true\) | +| `searchAfter` | string | No | Opaque search-after cursor from the previous entitlement page | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_list_identities` +### SailPoint List Identities -List identities in SailPoint with optional Sailpoint filters, sorters, and pagination. +List identities with documented filtering, sorting, and pagination. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | | `defaultFilter` | string | No | CORRELATED_ONLY \(default\) or NONE | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `total` | number | Number of matching documents | + +### SailPoint List Identity Entitlements + +List tagged entitlement references held by one identity. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `id` | string | Yes | Identity ID | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `total` | number | Number of matching documents | + +### SailPoint List Pending Access Request Approvals + +List pending access-request approvals visible to the caller. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `ownerId` | string | No | Approval owner identity ID or 'me'; admins may omit it for all approvals | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_list_roles` +### SailPoint List Roles -List roles in SailPoint with optional filters, sorters, and pagination. +List roles with current visibility, segmentation, filtering, and pagination controls. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `forSubadmin` | string | No | Subadmin identity ID or 'me' whose visible resources should be returned | +| `forSegmentIds` | string | No | Comma-separated segment IDs used to restrict the returned resources | +| `includeUnsegmented` | boolean | No | Include resources not assigned to a segment \(default true\) | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `limit` | number | No | Maximum roles for this page \(0-50; default 50\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_list_sources` +### SailPoint List Sources -List identity sources in SailPoint with optional filters, sorters, and pagination. +List identity sources with visibility, filtering, sorting, and pagination controls. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `filters` | string | No | SailPoint filter expression to narrow results | -| `sorters` | string | No | SailPoint sorters expression | -| `forSubadmin` | string | No | Return only sources the given source sub-admin identity can administer | -| `includeIDNSource` | boolean | No | Include the built-in IdentityNow source in results | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `filters` | string | No | SailPoint standard collection filter expression for this operation | +| `sorters` | string | No | Comma-separated supported sort fields, prefixed with - for descending order | +| `forSubadmin` | string | No | Subadmin identity ID or 'me' whose visible resources should be returned | +| `includeIDNSource` | boolean | No | Include the built-in IdentityNow source \(default false\) | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_load_accounts` +### SailPoint Load Accounts -Trigger an account aggregation for a SailPoint source, optionally uploading a CSV of accounts. +Start account aggregation for a source, optionally using a CSV file. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `sourceId` | string | Yes | Source ID to aggregate | -| `file` | file | No | CSV file of accounts to aggregate \(delimited-file sources only\) | -| `disableOptimization` | boolean | No | Reprocess every account regardless of change | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `sourceId` | string | Yes | Source ID | +| `file` | file | No | Delimited-file source account CSV | +| `disableOptimization` | boolean | No | Reprocess every account instead of using optimized aggregation | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_load_entitlements` +### SailPoint Load Entitlements -Trigger an entitlement aggregation for a SailPoint source, optionally uploading a CSV of entitlements. +Start entitlement aggregation for a source, optionally using a CSV file. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `sourceId` | string | Yes | Source ID to aggregate | -| `file` | file | No | CSV file of entitlements to aggregate \(delimited-file sources only\) | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `sourceId` | string | Yes | Source ID | +| `file` | file | No | Delimited-file source entitlement CSV | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_request_access` +### SailPoint Reject Access Request -Submit a SailPoint access request to grant, revoke, or modify access for one or more identities. +Reject one pending access-request approval with a reviewer comment. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `requestedFor` | json | Yes | Array of identity IDs. For REVOKE_ACCESS exactly one identity. | -| `requestedItems` | json | Yes | Array of \{ type: ACCESS_PROFILE\|ROLE\|ENTITLEMENT, id, comment?, removeDate?, startDate?, assignmentId?, nativeIdentity?, clientMetadata? \}. REVOKE requires exactly one item with a comment. | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `approvalId` | string | Yes | Approval ID | +| `comment` | string | Yes | Reviewer rejection comment | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `total` | number | Number of matching documents | + +### SailPoint Request Access + +Submit a current human or machine identity access request. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | | `requestType` | string | No | GRANT_ACCESS \(default\), REVOKE_ACCESS, or MODIFY_ACCESS | -| `clientMetadata` | json | No | Optional key/value map, e.g. to record the human requester for correlation | +| `requestedFor` | json | No | Human identity IDs for the flat request shape | +| `requestedItems` | json | No | Flat human request items | +| `requestedForWithRequestedItems` | json | No | Per-identity request items for account selection and all machine identity requests | +| `clientMetadata` | json | No | Arbitrary string-to-string metadata returned by related APIs | + +#### Output + +| Parameter | Type | Description | +| --------- | ---- | ----------- | +| `total` | number | Number of matching documents | + +### SailPoint Search + +Search current SailPoint indices with every documented search query mode. + +#### Input + +| Parameter | Type | Required | Description | +| --------- | ---- | -------- | ----------- | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `indices` | json | No | Indices to search: accessprofiles, accountactivities, entitlements, events, identities, roles, or *. Omit to search all. | +| `queryType` | string | No | SAILPOINT \(default\), DSL, TEXT, or TYPEAHEAD | +| `queryVersion` | string | No | Elasticsearch query language version \(default 5.2\) | +| `query` | json | No | SAILPOINT query object: \{query?, fields?, timeZone?, innerHit?\} | +| `queryDsl` | json | No | Elasticsearch Query DSL object used with queryType=DSL | +| `textQuery` | json | No | TEXT query object with required terms\[\] and fields\[\] | +| `typeAheadQuery` | json | No | TYPEAHEAD query with query, field, optional nestedType, maxExpansions \(1-1000\), size, sort, and sortByValue | +| `includeNested` | boolean | No | Include nested objects in search results \(default true\) | +| `queryResultFilter` | json | No | Result projection object with includes\[\] and/or excludes\[\] | +| `aggregationType` | string | No | Aggregation query language: DSL \(default\) or SAILPOINT | +| `aggregationsVersion` | string | No | Elasticsearch aggregation language version \(default 5.2\) | +| `aggregationsDsl` | json | No | Dynamic Elasticsearch aggregations DSL object | +| `aggregations` | json | No | Typed SailPoint aggregation specification | +| `sort` | json | No | Ordered search fields; prefix + or - for direction | +| `searchAfter` | json | No | String values from the final sorted record of the previous search page | +| `filters` | json | No | Map of result field names to filter objects | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_search` +### SailPoint Search Aggregate -Run a global search across SailPoint indices (identities, entitlements, roles, access profiles, account activities, events). Set includeNested to return nested access[] on identities. +Run an Elasticsearch DSL or SailPoint aggregation over current search indices. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `indices` | json | No | Indices to search: identities, accessprofiles, accountactivities, entitlements, events, roles, or * \(defaults to \["identities"\]\) | -| `query` | string | No | Elasticsearch query string \(e.g. "attributes.department:Engineering"\) | -| `sort` | json | No | Sort fields, e.g. \["displayName","+id"\] | -| `searchAfter` | json | No | searchAfter cursor for deep pagination beyond 10,000 records | -| `includeNested` | boolean | No | Include nested objects \(e.g. identity access\[\]\) in results. Defaults to true. | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `indices` | json | No | Indices to search: accessprofiles, accountactivities, entitlements, events, identities, roles, or *. Omit to search all. | +| `queryType` | string | No | SAILPOINT \(default\), DSL, TEXT, or TYPEAHEAD | +| `queryVersion` | string | No | Elasticsearch query language version \(default 5.2\) | +| `query` | json | No | SAILPOINT query object: \{query?, fields?, timeZone?, innerHit?\} | +| `queryDsl` | json | No | Elasticsearch Query DSL object used with queryType=DSL | +| `textQuery` | json | No | TEXT query object with required terms\[\] and fields\[\] | +| `typeAheadQuery` | json | No | TYPEAHEAD query with query, field, optional nestedType, maxExpansions \(1-1000\), size, sort, and sortByValue | +| `includeNested` | boolean | No | Include nested objects in search results \(default true\) | +| `queryResultFilter` | json | No | Result projection object with includes\[\] and/or excludes\[\] | +| `aggregationType` | string | No | Aggregation query language: DSL \(default\) or SAILPOINT | +| `aggregationsVersion` | string | No | Elasticsearch aggregation language version \(default 5.2\) | +| `aggregationsDsl` | json | No | Dynamic Elasticsearch aggregations DSL object | +| `aggregations` | json | No | Typed SailPoint aggregation specification | +| `sort` | json | No | Ordered search fields; prefix + or - for direction | +| `searchAfter` | json | No | String values from the final sorted record of the previous search page | +| `filters` | json | No | Map of result field names to filter objects | +| `limit` | number | No | Maximum records for this page \(0-250; default 250\) | +| `offset` | number | No | Zero-based record offset \(default 0\) | +| `count` | boolean | No | Return the total matching count in X-Total-Count \(default false\) | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_search_aggregate` +### SailPoint Search Count -Return the aggregation result (buckets under `aggregations`, plus `hits`) for a SailPoint search query. +Count documents matching a complete SailPoint search body. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `indices` | json | No | Indices to aggregate over \(defaults to \["identities"\]\) | -| `query` | string | No | Elasticsearch query string to scope the documents before aggregating | -| `aggregationsDsl` | json | Yes | Elasticsearch aggregations DSL object defining the buckets/metrics to compute, e.g. \{ "department": \{ "terms": \{ "field": "attributes.department" \} \} \} | -| `limit` | number | No | Maximum number of aggregation results \(max 250\) | -| `offset` | number | No | Pagination offset \(0-based\) | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `indices` | json | No | Indices to search: accessprofiles, accountactivities, entitlements, events, identities, roles, or *. Omit to search all. | +| `queryType` | string | No | SAILPOINT \(default\), DSL, TEXT, or TYPEAHEAD | +| `queryVersion` | string | No | Elasticsearch query language version \(default 5.2\) | +| `query` | json | No | SAILPOINT query object: \{query?, fields?, timeZone?, innerHit?\} | +| `queryDsl` | json | No | Elasticsearch Query DSL object used with queryType=DSL | +| `textQuery` | json | No | TEXT query object with required terms\[\] and fields\[\] | +| `typeAheadQuery` | json | No | TYPEAHEAD query with query, field, optional nestedType, maxExpansions \(1-1000\), size, sort, and sortByValue | +| `includeNested` | boolean | No | Include nested objects in search results \(default true\) | +| `queryResultFilter` | json | No | Result projection object with includes\[\] and/or excludes\[\] | +| `aggregationType` | string | No | Aggregation query language: DSL \(default\) or SAILPOINT | +| `aggregationsVersion` | string | No | Elasticsearch aggregation language version \(default 5.2\) | +| `aggregationsDsl` | json | No | Dynamic Elasticsearch aggregations DSL object | +| `aggregations` | json | No | Typed SailPoint aggregation specification | +| `sort` | json | No | Ordered search fields; prefix + or - for direction | +| `searchAfter` | json | No | String values from the final sorted record of the previous search page | +| `filters` | json | No | Map of result field names to filter objects | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | -### `sailpoint_search_count` +### SailPoint Sign Off Certification -Return the total number of documents matching a SailPoint search query, without the documents themselves. +Sign off a completed identity certification. #### Input | Parameter | Type | Required | Description | | --------- | ---- | -------- | ----------- | -| `indices` | json | No | Indices to search \(defaults to \["identities"\]\) | -| `query` | string | No | Elasticsearch query string | +| `clientId` | string | Yes | SailPoint Personal Access Token client ID | +| `clientSecret` | string | Yes | SailPoint Personal Access Token client secret | +| `tenant` | string | Yes | SailPoint tenant name or full *.api.identitynow.com / *.api.identitynowgov.com host | +| `id` | string | Yes | Certification ID | #### Output | Parameter | Type | Description | | --------- | ---- | ----------- | -| `items` | json | Raw SailPoint documents for list operations | -| `results` | json | Raw SailPoint documents for search operations | -| `item` | json | Raw SailPoint document for get operations | -| `total` | number | Total matching documents \(search count\) | -| `task` | json | Aggregation task for load operations | -| `accepted` | boolean | Whether an access-request write was accepted | -| `status` | number | HTTP status returned by SailPoint for writes | -| `count` | number | Number of records returned in the page | -| `totalCount` | number | Total matching records when count is requested | -| `complete` | boolean | False when an empty result may indicate a permission gap | -| `warnings` | json | Diagnostic warnings \(e.g. empty-result guidance\) | +| `total` | number | Number of matching documents | diff --git a/apps/sim/app/api/tools/sailpoint/client.ts b/apps/sim/app/api/tools/sailpoint/client.ts deleted file mode 100644 index f0964980096..00000000000 --- a/apps/sim/app/api/tools/sailpoint/client.ts +++ /dev/null @@ -1,257 +0,0 @@ -import { createHash } from 'node:crypto' -import { sleep } from '@sim/utils/helpers' -import { isRecordLike } from '@sim/utils/object' -import { backoffWithJitter, parseRetryAfter } from '@sim/utils/retry' - -/** - * Shared server-side SailPoint client used by the SailPoint tool routes. Handles per-tenant host - * resolution, the client-credentials token exchange (cached in-process), and a fetch wrapper that - * refreshes the token on a 401 and backs off on a 429 honoring `Retry-After`. - * - * SailPoint enforces 100 requests per client_id per API version per 10 seconds, so a stateless - * per-call token exchange would double every operation against that budget - the cache avoids it. - */ - -export type SailPointApiVersion = 'v2025' | 'v2024' | 'v3' - -const SUPPORTED_VERSIONS: readonly SailPointApiVersion[] = ['v2025', 'v2024', 'v3'] - -export interface SailPointServerCredentials { - clientId: string - clientSecret: string - tenant: string - apiVersion: SailPointApiVersion -} - -export interface SailPointHosts { - /** `https://{host}/{apiVersion}` */ - apiBaseUrl: string - /** `https://{host}/oauth/token` */ - tokenUrl: string - host: string -} - -export interface SailPointFetchResult { - ok: boolean - status: number - data: unknown - headers: Headers -} - -/** Normalizes an incoming version string to a supported value, defaulting to v2025. */ -export function normalizeApiVersion(value: string | undefined | null): SailPointApiVersion { - if (value && SUPPORTED_VERSIONS.includes(value as SailPointApiVersion)) { - return value as SailPointApiVersion - } - return 'v2025' -} - -/** - * Allowed SailPoint API host suffixes. A user-supplied full host must end with one of these; this - * prevents SSRF and PAT-secret disclosure by ensuring the client-credentials request (which carries - * `client_secret`) can only ever be sent to a SailPoint tenant host, never an arbitrary destination. - */ -const ALLOWED_HOST_SUFFIXES = ['.api.identitynow.com', '.api.identitynowgov.com'] as const - -/** - * Resolves the API + token hosts for a tenant. Accepts either a bare tenant subdomain (`acme` → - * `acme.api.identitynow.com`) or a full SailPoint host/URL (`https://acme.api.identitynow.com`), - * stripping any protocol, path, or version segment. Throws when the resolved host is not a SailPoint - * identitynow.com host - the credentials must never be posted to an attacker-controlled or internal - * host. - */ -export function resolveSailPointHosts( - tenant: string, - apiVersion: SailPointApiVersion -): SailPointHosts { - let host = tenant.trim().replace(/^https?:\/\//i, '') - host = host - .replace(/[/?#].*$/, '') - .replace(/\.+$/, '') - .toLowerCase() - - if (!host) { - throw new Error('SailPoint tenant is required') - } - - if (host.includes('.')) { - const isAllowed = - /^[a-z0-9.-]+$/.test(host) && ALLOWED_HOST_SUFFIXES.some((suffix) => host.endsWith(suffix)) - if (!isAllowed) { - throw new Error( - `SailPoint host "${host}" is not an allowed identitynow.com host. Enter your tenant name (e.g. "acme") or a full *.api.identitynow.com host.` - ) - } - } else { - if (!/^[a-z0-9][a-z0-9-]*$/.test(host)) { - throw new Error(`Invalid SailPoint tenant "${tenant}"`) - } - host = `${host}.api.identitynow.com` - } - - return { - host, - apiBaseUrl: `https://${host}/${apiVersion}`, - tokenUrl: `https://${host}/oauth/token`, - } -} - -/** Extracts a human-readable message from a SailPoint error body (ISC `messages[]` or OAuth `error`). */ -export function getSailPointErrorMessage(data: unknown, fallback: string): string { - if (typeof data === 'string') return data || fallback - if (!isRecordLike(data)) return fallback - - if (Array.isArray(data.messages) && data.messages.length > 0) { - const first = data.messages[0] - if (isRecordLike(first) && typeof first.text === 'string' && first.text) { - const trackingId = typeof data.trackingId === 'string' ? data.trackingId : null - return trackingId ? `${first.text} (trackingId: ${trackingId})` : first.text - } - } - - if (typeof data.error_description === 'string' && data.error_description) - return data.error_description - if (typeof data.message === 'string' && data.message) return data.message - if (typeof data.error === 'string' && data.error) return data.error - return fallback -} - -interface CachedToken { - token: string - expiresAt: number -} - -const TOKEN_EXPIRY_BUFFER_MS = 60_000 -const MAX_FETCH_RETRIES = 4 -const tokenCache = new Map() - -function cacheKey(creds: SailPointServerCredentials): string { - const { host } = resolveSailPointHosts(creds.tenant, creds.apiVersion) - // Bind the cache entry to the exact client_secret (hashed) so a caller with a matching - // tenant/clientId but the wrong secret can never reuse another principal's cached token - a - // mismatched secret produces a different key, misses the cache, and fails the token exchange. - const secretHash = createHash('sha256').update(creds.clientSecret).digest('hex').slice(0, 16) - return `${host}:${creds.clientId}:${creds.apiVersion}:${secretHash}` -} - -/** Drops any cached token for these credentials so the next call re-exchanges. */ -export function invalidateSailPointToken(creds: SailPointServerCredentials): void { - tokenCache.delete(cacheKey(creds)) -} - -/** Returns a cached bearer token or performs a client-credentials exchange and caches it. */ -export async function getSailPointAccessToken(creds: SailPointServerCredentials): Promise { - const key = cacheKey(creds) - const cached = tokenCache.get(key) - if (cached && cached.expiresAt > Date.now()) { - return cached.token - } - - const { tokenUrl } = resolveSailPointHosts(creds.tenant, creds.apiVersion) - - let attempt = 0 - let response: Response - while (true) { - response = await fetch(tokenUrl, { - method: 'POST', - headers: { - Accept: 'application/json', - 'Content-Type': 'application/x-www-form-urlencoded', - }, - body: new URLSearchParams({ - grant_type: 'client_credentials', - client_id: creds.clientId, - client_secret: creds.clientSecret, - }).toString(), - cache: 'no-store', - }) - // The token endpoint shares SailPoint's per-client_id rate limit, so back off on a 429 too. - if (response.status === 429 && attempt < MAX_FETCH_RETRIES) { - const retryAfterMs = parseRetryAfter(response.headers.get('retry-after')) - attempt += 1 - await sleep(backoffWithJitter(attempt, retryAfterMs)) - continue - } - break - } - - const data: unknown = await response.json().catch(() => null) - if (!response.ok) { - throw new Error(getSailPointErrorMessage(data, 'Failed to authenticate with SailPoint')) - } - if (!isRecordLike(data) || typeof data.access_token !== 'string') { - throw new Error('SailPoint authentication did not return an access token') - } - - const parsedExpiry = Number(data.expires_in) - const expiresInSec = Number.isFinite(parsedExpiry) && parsedExpiry > 0 ? parsedExpiry : 3600 - // Use the smaller of the 60s buffer and 10% of the lifetime so a short-lived token (expires_in - // under ~60s) still gets cached for most of its life instead of expiring immediately. - const bufferMs = Math.min(TOKEN_EXPIRY_BUFFER_MS, expiresInSec * 100) - tokenCache.set(key, { - token: data.access_token, - expiresAt: Date.now() + Math.max(expiresInSec * 1000 - bufferMs, 0), - }) - return data.access_token -} - -async function parseResponseBody(response: Response): Promise { - if (response.status === 204) return null - const text = await response.text() - if (!text) return null - try { - return JSON.parse(text) - } catch { - return text - } -} - -/** - * Performs an authenticated SailPoint request, refreshing the token once on a 401 and backing off on - * a 429 (honoring `Retry-After`). `buildRequest` receives the current token + resolved hosts so it can - * compose the URL/body; the bearer header is applied automatically. - */ -export async function sailpointFetch( - creds: SailPointServerCredentials, - buildRequest: (token: string, hosts: SailPointHosts) => { url: string; init: RequestInit }, - options: { maxRetries?: number } = {} -): Promise { - const maxRetries = options.maxRetries ?? MAX_FETCH_RETRIES - const hosts = resolveSailPointHosts(creds.tenant, creds.apiVersion) - let attempt = 0 - let refreshedOn401 = false - - while (true) { - const token = await getSailPointAccessToken(creds) - const { url, init } = buildRequest(token, hosts) - const headers = new Headers(init.headers) - headers.set('Authorization', `Bearer ${token}`) - if (!headers.has('Accept')) headers.set('Accept', 'application/json') - - const response = await fetch(url, { ...init, headers, cache: 'no-store' }) - - if (response.status === 401 && !refreshedOn401) { - invalidateSailPointToken(creds) - refreshedOn401 = true - continue - } - - if (response.status === 429 && attempt < maxRetries) { - const retryAfterMs = parseRetryAfter(response.headers.get('retry-after')) - attempt += 1 - await sleep(backoffWithJitter(attempt, retryAfterMs)) - continue - } - - const data = await parseResponseBody(response) - return { ok: response.ok, status: response.status, data, headers: response.headers } - } -} - -/** Reads the `X-Total-Count` header as a number, or null when absent/unparseable. */ -export function readTotalCount(headers: Headers): number | null { - const raw = headers.get('x-total-count') - if (!raw) return null - const parsed = Number(raw) - return Number.isFinite(parsed) ? parsed : null -} diff --git a/apps/sim/app/api/tools/sailpoint/load/route.test.ts b/apps/sim/app/api/tools/sailpoint/load/route.test.ts deleted file mode 100644 index 4cce2bce8bd..00000000000 --- a/apps/sim/app/api/tools/sailpoint/load/route.test.ts +++ /dev/null @@ -1,75 +0,0 @@ -/** - * @vitest-environment node - */ -import { createMockRequest, hybridAuthMockFns } from '@sim/testing' -import { beforeEach, describe, expect, it, vi } from 'vitest' - -const { fetchMock } = vi.hoisted(() => ({ - fetchMock: vi.fn(), -})) - -import { POST } from '@/app/api/tools/sailpoint/load/route' - -function jsonResponse(body: unknown, status = 200): Response { - return new Response(JSON.stringify(body), { - status, - headers: { 'Content-Type': 'application/json' }, - }) -} - -function tokenResponse(): Response { - return jsonResponse({ access_token: 'token-123', token_type: 'Bearer', expires_in: 3600 }) -} - -describe('SailPoint load route', () => { - beforeEach(() => { - vi.clearAllMocks() - vi.stubGlobal('fetch', fetchMock) - hybridAuthMockFns.mockCheckInternalAuth.mockResolvedValue({ - success: true, - userId: 'user-123', - authType: 'internal_jwt', - }) - }) - - it('triggers a source aggregation without a file and returns the task', async () => { - fetchMock - .mockResolvedValueOnce(tokenResponse()) - .mockResolvedValueOnce(jsonResponse({ id: 'task-1', type: 'ACCOUNT_AGGREGATION' }, 202)) - - const request = createMockRequest('POST', { - clientId: 'client-id', - clientSecret: 'client-secret', - tenant: 'acme-load', - operation: 'sailpoint_load_accounts', - sourceId: 'src-1', - }) - - const response = await POST(request) - const data = await response.json() - - expect(response.status).toBe(200) - expect(fetchMock).toHaveBeenCalledTimes(2) - expect(fetchMock.mock.calls[1]?.[0]).toBe( - 'https://acme-load.api.identitynow.com/v2025/sources/src-1/load-accounts' - ) - const init = fetchMock.mock.calls[1]?.[1] as RequestInit - expect(init.method).toBe('POST') - expect(init.body).toBeInstanceOf(FormData) - expect(data.output).toEqual({ task: { id: 'task-1', type: 'ACCOUNT_AGGREGATION' } }) - }) - - it('rejects a load request that is missing a source ID', async () => { - const request = createMockRequest('POST', { - clientId: 'client-id', - clientSecret: 'client-secret', - tenant: 'acme-load', - operation: 'sailpoint_load_entitlements', - }) - - const response = await POST(request) - - expect(response.status).toBe(400) - expect(fetchMock).not.toHaveBeenCalled() - }) -}) diff --git a/apps/sim/app/api/tools/sailpoint/load/route.ts b/apps/sim/app/api/tools/sailpoint/load/route.ts deleted file mode 100644 index e96966a30bf..00000000000 --- a/apps/sim/app/api/tools/sailpoint/load/route.ts +++ /dev/null @@ -1,141 +0,0 @@ -import { createLogger } from '@sim/logger' -import { getErrorMessage } from '@sim/utils/errors' -import { type NextRequest, NextResponse } from 'next/server' -import { sailpointLoadContract } from '@/lib/api/contracts/tools/sailpoint' -import { getValidationErrorMessage, parseRequest } from '@/lib/api/server' -import { checkInternalAuth } from '@/lib/auth/hybrid' -import { generateRequestId } from '@/lib/core/utils/request' -import { withRouteHandler } from '@/lib/core/utils/with-route-handler' -import { processFilesToUserFiles, type RawFileInput } from '@/lib/uploads/utils/file-utils' -import { downloadServableFileFromStorage } from '@/lib/uploads/utils/file-utils.server' -import { docNotReadyResponse } from '@/lib/uploads/utils/servable-file-response' -import { assertToolFileAccess } from '@/app/api/files/authorization' -import { - getSailPointErrorMessage, - normalizeApiVersion, - type SailPointServerCredentials, - sailpointFetch, -} from '@/app/api/tools/sailpoint/client' - -const logger = createLogger('SailPointLoadAPI') - -const LOAD_PATHS: Record = { - sailpoint_load_accounts: 'load-accounts', - sailpoint_load_entitlements: 'load-entitlements', -} - -export const POST = withRouteHandler(async (request: NextRequest) => { - const requestId = generateRequestId() - - const authResult = await checkInternalAuth(request, { requireWorkflowId: false }) - if (!authResult.success || !authResult.userId) { - return NextResponse.json( - { success: false, error: authResult.error || 'Unauthorized' }, - { status: 401 } - ) - } - - const parsed = await parseRequest( - sailpointLoadContract, - request, - {}, - { - validationErrorResponse: (error) => - NextResponse.json( - { - success: false, - error: getValidationErrorMessage(error, 'Invalid SailPoint load request'), - details: error.issues, - }, - { status: 400 } - ), - } - ) - if (!parsed.success) return parsed.response - - const body = parsed.data.body - const creds: SailPointServerCredentials = { - clientId: body.clientId, - clientSecret: body.clientSecret, - tenant: body.tenant, - apiVersion: normalizeApiVersion(body.apiVersion), - } - - let fileBuffer: Buffer | null = null - let fileName = 'aggregation.csv' - let fileType = 'text/csv' - - if (body.file && typeof body.file === 'object') { - const userFiles = processFilesToUserFiles([body.file as RawFileInput], requestId, logger) - if (userFiles.length === 0) { - return NextResponse.json({ success: false, error: 'Invalid file input' }, { status: 400 }) - } - const userFile = userFiles[0] - - const denied = await assertToolFileAccess(userFile.key, authResult.userId, requestId, logger) - if (denied) return denied - - try { - const { buffer } = await downloadServableFileFromStorage(userFile, requestId, logger) - fileBuffer = buffer - fileName = userFile.name || 'aggregation.csv' - fileType = userFile.type || 'text/csv' - } catch (error) { - const notReady = docNotReadyResponse(error) - if (notReady) return notReady - return NextResponse.json( - { success: false, error: getErrorMessage(error, 'Failed to download file') }, - { status: 500 } - ) - } - } - - const includeDisableOptimization = - body.operation === 'sailpoint_load_accounts' && body.disableOptimization === true - const loadPath = LOAD_PATHS[body.operation] - - /** - * Builds a fresh multipart body for every attempt. A single FormData instance can be a consumed - * (non-replayable) stream, so reusing it across the client's 401/429 retries could send the - * aggregation without the CSV - rebuild it per request instead. - */ - const buildFormData = (): FormData => { - const formData = new FormData() - if (fileBuffer) { - formData.append('file', new Blob([new Uint8Array(fileBuffer)], { type: fileType }), fileName) - } - if (includeDisableOptimization) { - formData.append('disableOptimization', 'true') - } - return formData - } - - try { - logger.info(`[${requestId}] SailPoint aggregation`, { - operation: body.operation, - apiVersion: creds.apiVersion, - hasFile: fileBuffer != null, - }) - - const result = await sailpointFetch(creds, (_token, hosts) => ({ - url: `${hosts.apiBaseUrl}/sources/${encodeURIComponent(body.sourceId)}/${loadPath}`, - init: { method: 'POST', body: buildFormData() }, - })) - - if (!result.ok) { - return NextResponse.json( - { - success: false, - error: getSailPointErrorMessage(result.data, 'SailPoint aggregation failed'), - }, - { status: result.status || 502 } - ) - } - - return NextResponse.json({ success: true, output: { task: result.data ?? null } }) - } catch (error) { - const message = getErrorMessage(error, 'SailPoint aggregation failed') - logger.error(`[${requestId}] SailPoint aggregation failed`, { error: message }) - return NextResponse.json({ success: false, error: message }, { status: 500 }) - } -}) diff --git a/apps/sim/app/api/tools/sailpoint/query/route.test.ts b/apps/sim/app/api/tools/sailpoint/query/route.test.ts deleted file mode 100644 index 1da4e00ec3b..00000000000 --- a/apps/sim/app/api/tools/sailpoint/query/route.test.ts +++ /dev/null @@ -1,377 +0,0 @@ -/** - * @vitest-environment node - */ -import { createMockRequest, hybridAuthMockFns } from '@sim/testing' -import { beforeEach, describe, expect, it, vi } from 'vitest' - -const { fetchMock } = vi.hoisted(() => ({ - fetchMock: vi.fn(), -})) - -import { POST } from '@/app/api/tools/sailpoint/query/route' - -function jsonResponse(body: unknown, status = 200, headers: Record = {}): Response { - return new Response(JSON.stringify(body), { - status, - headers: { 'Content-Type': 'application/json', ...headers }, - }) -} - -function emptyResponse(status: number): Response { - return new Response(null, { status }) -} - -function tokenResponse(): Response { - return jsonResponse({ access_token: 'token-123', token_type: 'Bearer', expires_in: 3600 }) -} - -const baseCreds = { - clientId: 'client-id', - clientSecret: 'client-secret', -} - -describe('SailPoint query route', () => { - beforeEach(() => { - vi.clearAllMocks() - vi.stubGlobal('fetch', fetchMock) - hybridAuthMockFns.mockCheckInternalAuth.mockResolvedValue({ - success: true, - userId: 'user-123', - authType: 'internal_jwt', - }) - }) - - it('lists identities, exchanging a token then calling the v2025 endpoint', async () => { - fetchMock - .mockResolvedValueOnce(tokenResponse()) - .mockResolvedValueOnce( - jsonResponse([{ id: 'i1', name: 'Alice' }], 200, { 'X-Total-Count': '1' }) - ) - - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'acme-identities', - operation: 'sailpoint_list_identities', - filters: 'name sw "A"', - limit: 50, - }) - - const response = await POST(request) - const data = await response.json() - - expect(response.status).toBe(200) - expect(fetchMock).toHaveBeenCalledTimes(2) - expect(fetchMock.mock.calls[0]?.[0]).toBe( - 'https://acme-identities.api.identitynow.com/oauth/token' - ) - expect(fetchMock.mock.calls[1]?.[0]).toBe( - 'https://acme-identities.api.identitynow.com/v2025/identities?filters=name+sw+%22A%22&limit=50' - ) - expect(data.output).toEqual({ - items: [{ id: 'i1', name: 'Alice' }], - count: 1, - totalCount: 1, - complete: true, - warnings: [], - }) - }) - - it('flags an empty identity result with a diagnostic warning', async () => { - fetchMock.mockResolvedValueOnce(tokenResponse()).mockResolvedValueOnce(jsonResponse([])) - - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'acme-empty', - operation: 'sailpoint_list_identities', - }) - - const response = await POST(request) - const data = await response.json() - - expect(response.status).toBe(200) - expect(data.output.count).toBe(0) - expect(data.output.complete).toBe(false) - expect(data.output.warnings).toHaveLength(1) - expect(data.output.warnings[0]).toContain('user level') - }) - - it('posts a search body with the query object and returns results', async () => { - fetchMock - .mockResolvedValueOnce(tokenResponse()) - .mockResolvedValueOnce(jsonResponse([{ _type: 'identity', id: 'i1' }])) - - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'acme-search', - operation: 'sailpoint_search', - indices: 'identities', - query: 'name:A*', - }) - - const response = await POST(request) - const data = await response.json() - - expect(response.status).toBe(200) - expect(fetchMock.mock.calls[1]?.[0]).toBe( - 'https://acme-search.api.identitynow.com/v2025/search' - ) - const searchInit = fetchMock.mock.calls[1]?.[1] as RequestInit - expect(searchInit.method).toBe('POST') - expect(JSON.parse(searchInit.body as string)).toEqual({ - indices: ['identities'], - query: { query: 'name:A*' }, - }) - expect(data.output.results).toEqual([{ _type: 'identity', id: 'i1' }]) - }) - - it('returns the total from search count', async () => { - fetchMock - .mockResolvedValueOnce(tokenResponse()) - .mockResolvedValueOnce( - new Response(null, { status: 204, headers: { 'X-Total-Count': '42' } }) - ) - - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'acme-count', - operation: 'sailpoint_search_count', - indices: 'identities', - }) - - const response = await POST(request) - const data = await response.json() - - expect(response.status).toBe(200) - expect(data.output).toEqual({ total: 42 }) - }) - - it('errors instead of reporting zero when search count has no total header', async () => { - fetchMock - .mockResolvedValueOnce(tokenResponse()) - .mockResolvedValueOnce(new Response(null, { status: 204 })) - - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'acme-count-none', - operation: 'sailpoint_search_count', - indices: 'identities', - }) - - const response = await POST(request) - const data = await response.json() - - expect(response.status).toBe(502) - expect(data.success).toBe(false) - }) - - it('preserves the aggregation object returned by /search/aggregate', async () => { - const aggregationResult = { - aggregations: { department: { buckets: [{ key: 'Finance', count: 12 }] } }, - hits: [], - } - fetchMock - .mockResolvedValueOnce(tokenResponse()) - .mockResolvedValueOnce(jsonResponse(aggregationResult)) - - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'acme-aggregate', - operation: 'sailpoint_search_aggregate', - indices: 'identities', - query: 'attributes.department:*', - aggregationsDsl: { department: { terms: { field: 'attributes.department' } } }, - }) - - const response = await POST(request) - const data = await response.json() - - expect(response.status).toBe(200) - expect(fetchMock.mock.calls[1]?.[0]).toBe( - 'https://acme-aggregate.api.identitynow.com/v2025/search/aggregate' - ) - const aggInit = fetchMock.mock.calls[1]?.[1] as RequestInit - expect(JSON.parse(aggInit.body as string)).toEqual({ - indices: ['identities'], - query: { query: 'attributes.department:*' }, - aggregationType: 'DSL', - aggregationsDsl: { department: { terms: { field: 'attributes.department' } } }, - }) - // The full AggregationResult object is preserved under `item`, not dropped as an empty list. - expect(data.output).toEqual({ item: aggregationResult }) - }) - - it('rejects a search aggregate without an aggregations definition', async () => { - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'acme-agg-missing', - operation: 'sailpoint_search_aggregate', - indices: 'identities', - }) - - const response = await POST(request) - - expect(response.status).toBe(400) - expect(fetchMock).not.toHaveBeenCalled() - }) - - it('caches the token across calls with the same credentials', async () => { - fetchMock - .mockResolvedValueOnce(tokenResponse()) - .mockResolvedValueOnce(jsonResponse([{ id: 'a1' }])) - .mockResolvedValueOnce(jsonResponse([{ id: 'a2' }])) - - const makeRequest = () => - createMockRequest('POST', { - ...baseCreds, - tenant: 'acme-cache', - operation: 'sailpoint_list_accounts', - }) - - await POST(makeRequest()) - await POST(makeRequest()) - - // 1 token exchange + 2 API calls (not 4) - the token is reused - expect(fetchMock).toHaveBeenCalledTimes(3) - expect(fetchMock.mock.calls[0]?.[0]).toBe('https://acme-cache.api.identitynow.com/oauth/token') - expect(fetchMock.mock.calls[1]?.[0]).toContain('/v2025/accounts') - expect(fetchMock.mock.calls[2]?.[0]).toContain('/v2025/accounts') - }) - - it('does not share a cached token across different client secrets', async () => { - fetchMock - .mockResolvedValueOnce(tokenResponse()) - .mockResolvedValueOnce(jsonResponse([{ id: 'a1' }])) - .mockResolvedValueOnce(tokenResponse()) - .mockResolvedValueOnce(jsonResponse([{ id: 'a2' }])) - - const makeRequest = (secret: string) => - createMockRequest('POST', { - clientId: 'shared-client', - clientSecret: secret, - tenant: 'acme-secret', - operation: 'sailpoint_list_accounts', - }) - - await POST(makeRequest('secret-A')) - await POST(makeRequest('secret-B')) - - // A different secret must not reuse the first principal's token: 2 exchanges + 2 API calls. - expect(fetchMock).toHaveBeenCalledTimes(4) - expect(fetchMock.mock.calls[0]?.[0]).toContain('/oauth/token') - expect(fetchMock.mock.calls[2]?.[0]).toContain('/oauth/token') - }) - - it('backs off and retries on a 429 response', async () => { - fetchMock - .mockResolvedValueOnce(tokenResponse()) - .mockResolvedValueOnce(emptyResponse(429)) - .mockResolvedValueOnce(jsonResponse([{ id: 'r1' }])) - - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'acme-429', - operation: 'sailpoint_list_roles', - }) - - const response = await POST(request) - const data = await response.json() - - expect(response.status).toBe(200) - expect(fetchMock).toHaveBeenCalledTimes(3) - expect(data.output.items).toEqual([{ id: 'r1' }]) - }) - - it('accepts an access-request write (202) as accepted', async () => { - fetchMock.mockResolvedValueOnce(tokenResponse()).mockResolvedValueOnce(emptyResponse(202)) - - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'acme-grant', - operation: 'sailpoint_request_access', - requestedFor: ['identity-1'], - requestedItems: [{ type: 'ENTITLEMENT', id: 'ent-1' }], - }) - - const response = await POST(request) - const data = await response.json() - - expect(response.status).toBe(200) - expect(fetchMock.mock.calls[1]?.[0]).toBe( - 'https://acme-grant.api.identitynow.com/v2025/access-requests' - ) - expect(data.output).toEqual({ accepted: true, status: 202 }) - }) - - it('rejects a revoke that targets more than one identity before calling SailPoint', async () => { - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'acme-revoke', - operation: 'sailpoint_request_access', - requestType: 'REVOKE_ACCESS', - requestedFor: ['identity-1', 'identity-2'], - requestedItems: [{ type: 'ENTITLEMENT', id: 'ent-1', comment: 'offboarding' }], - }) - - const response = await POST(request) - - expect(response.status).toBe(400) - expect(fetchMock).not.toHaveBeenCalled() - }) - - it('rejects a non-SailPoint tenant host without sending credentials (SSRF guard)', async () => { - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'evil.example.com', - operation: 'sailpoint_list_identities', - }) - - const response = await POST(request) - const data = await response.json() - - expect(response.status).toBe(500) - expect(fetchMock).not.toHaveBeenCalled() - expect(data.error).toContain('not an allowed') - }) - - it('accepts a full *.api.identitynow.com host', async () => { - fetchMock - .mockResolvedValueOnce(tokenResponse()) - .mockResolvedValueOnce(jsonResponse([{ id: 'i1' }])) - - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'https://acme.api.identitynow.com', - operation: 'sailpoint_list_identities', - }) - - const response = await POST(request) - - expect(response.status).toBe(200) - expect(fetchMock.mock.calls[1]?.[0]).toBe('https://acme.api.identitynow.com/v2025/identities') - }) - - it('propagates a SailPoint error body', async () => { - fetchMock - .mockResolvedValueOnce(tokenResponse()) - .mockResolvedValueOnce( - jsonResponse( - { messages: [{ locale: 'en', text: 'Insufficient access' }], trackingId: 'trk-1' }, - 403 - ) - ) - - const request = createMockRequest('POST', { - ...baseCreds, - tenant: 'acme-error', - operation: 'sailpoint_get_identity', - id: 'identity-1', - }) - - const response = await POST(request) - const data = await response.json() - - expect(response.status).toBe(403) - expect(data.success).toBe(false) - expect(data.error).toContain('Insufficient access') - }) -}) diff --git a/apps/sim/app/api/tools/sailpoint/query/route.ts b/apps/sim/app/api/tools/sailpoint/query/route.ts deleted file mode 100644 index a8de28500e1..00000000000 --- a/apps/sim/app/api/tools/sailpoint/query/route.ts +++ /dev/null @@ -1,504 +0,0 @@ -import { createLogger } from '@sim/logger' -import { toError } from '@sim/utils/errors' -import { filterUndefined } from '@sim/utils/object' -import { type NextRequest, NextResponse } from 'next/server' -import { - type SailpointQueryBody, - sailpointQueryContract, -} from '@/lib/api/contracts/tools/sailpoint' -import { getValidationErrorMessage, parseRequest } from '@/lib/api/server' -import { checkInternalAuth } from '@/lib/auth/hybrid' -import { generateRequestId } from '@/lib/core/utils/request' -import { withRouteHandler } from '@/lib/core/utils/with-route-handler' -import { - getSailPointErrorMessage, - normalizeApiVersion, - readTotalCount, - type SailPointFetchResult, - type SailPointHosts, - type SailPointServerCredentials, - sailpointFetch, -} from '@/app/api/tools/sailpoint/client' - -const logger = createLogger('SailPointQueryAPI') - -/** - * Operations for which an empty result set warrants a diagnostic. These read endpoints are userAuth - * gated, so an empty 200 commonly means the PAT lacks the required user level (e.g. an API-Management - * client with no user context) or that segmentation restricts visibility. - */ -const EMPTY_DIAGNOSTIC_OPERATIONS = new Set([ - 'sailpoint_search', - 'sailpoint_list_identities', - 'sailpoint_list_entitlements', - 'sailpoint_list_roles', -]) - -const EMPTY_RESULT_WARNING = - 'Zero rows returned - this can indicate the PAT lacks sufficient ISC user level (e.g. an API-Management client with no user context), or that Data Segmentation / Access Request Segments restrict visibility. Confirm the PAT is owned by a service identity with the required user level and scopes.' - -type ResultKind = 'list' | 'search' | 'item' | 'count' | 'write' - -function diagnose(operation: string, count: number): { complete: boolean; warnings: string[] } { - if (count === 0 && EMPTY_DIAGNOSTIC_OPERATIONS.has(operation)) { - return { complete: false, warnings: [EMPTY_RESULT_WARNING] } - } - return { complete: true, warnings: [] } -} - -/** Builds a `?a=b&c=d` query string, dropping undefined/null/empty values. */ -function qs(params: Record): string { - const usp = new URLSearchParams() - for (const [key, value] of Object.entries(params)) { - if (value === undefined || value === null || value === '') continue - usp.set(key, String(value)) - } - const serialized = usp.toString() - return serialized ? `?${serialized}` : '' -} - -/** Coerces a primitive (string/number/boolean) to a non-empty string token, else null. */ -function coerceToken(value: unknown): string | null { - if (typeof value === 'string') return value.length ? value : null - if (typeof value === 'number' || typeof value === 'boolean') return String(value) - return null -} - -/** - * Normalizes an array/JSON-string/comma-list into a string[] (or undefined when empty). Numeric or - * boolean array elements are coerced to strings rather than dropped - SailPoint's `searchAfter` - * cursor mirrors sort values, which may include numbers, and must be sent as strings. - */ -function toStringList(value: unknown): string[] | undefined { - if (value == null) return undefined - if (Array.isArray(value)) { - const arr = value.map(coerceToken).filter((v): v is string => v !== null) - return arr.length ? arr : undefined - } - if (typeof value === 'string') { - const trimmed = value.trim() - if (!trimmed) return undefined - if (trimmed.startsWith('[')) { - try { - const parsed: unknown = JSON.parse(trimmed) - if (Array.isArray(parsed)) { - const arr = parsed.map(coerceToken).filter((v): v is string => v !== null) - return arr.length ? arr : undefined - } - } catch { - // fall through to comma splitting - } - } - const parts = trimmed - .split(',') - .map((part) => part.trim()) - .filter(Boolean) - return parts.length ? parts : undefined - } - return undefined -} - -function id(value: string): string { - return encodeURIComponent(value) -} - -function errorResponse(result: SailPointFetchResult): NextResponse { - return NextResponse.json( - { success: false, error: getSailPointErrorMessage(result.data, 'SailPoint request failed') }, - { status: result.status || 502 } - ) -} - -function buildListOutput( - result: SailPointFetchResult, - operation: string, - key: 'items' | 'results' -) { - const items = Array.isArray(result.data) ? result.data : [] - const { complete, warnings } = diagnose(operation, items.length) - const base = { - count: items.length, - totalCount: readTotalCount(result.headers), - complete, - warnings, - } - return key === 'results' ? { results: items, ...base } : { items, ...base } -} - -async function execute( - creds: SailPointServerCredentials, - operation: string, - buildRequest: (token: string, hosts: SailPointHosts) => { url: string; init: RequestInit }, - kind: ResultKind -): Promise { - const result = await sailpointFetch(creds, buildRequest) - if (!result.ok) return errorResponse(result) - - let output: Record - switch (kind) { - case 'list': - output = buildListOutput(result, operation, 'items') - break - case 'search': - output = buildListOutput(result, operation, 'results') - break - case 'item': - output = { item: result.data ?? null } - break - case 'count': { - const total = - readTotalCount(result.headers) ?? (typeof result.data === 'number' ? result.data : null) - // Do not report an unknown count as 0 - that reads as "no matches". Surface it as an error. - if (total === null) { - return NextResponse.json( - { - success: false, - error: 'SailPoint did not return a total count (X-Total-Count missing)', - }, - { status: 502 } - ) - } - output = { total } - break - } - case 'write': - output = { accepted: result.ok, status: result.status } - break - } - - return NextResponse.json({ success: true, output }) -} - -function jsonInit(body: unknown): RequestInit { - return { - method: 'POST', - headers: { 'Content-Type': 'application/json' }, - body: JSON.stringify(body), - } -} - -function dispatch( - creds: SailPointServerCredentials, - body: SailpointQueryBody -): Promise { - switch (body.operation) { - case 'sailpoint_search': { - const searchBody = filterUndefined({ - indices: toStringList(body.indices) ?? ['identities'], - query: body.query ? { query: body.query } : undefined, - sort: toStringList(body.sort), - searchAfter: toStringList(body.searchAfter), - // Only send includeNested when explicitly false; the API already defaults it to true. - includeNested: body.includeNested === false ? false : undefined, - }) - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/search${qs({ limit: body.limit, offset: body.offset, count: body.count })}`, - init: jsonInit(searchBody), - }), - 'search' - ) - } - case 'sailpoint_search_count': { - const searchBody = filterUndefined({ - indices: toStringList(body.indices) ?? ['identities'], - query: body.query ? { query: body.query } : undefined, - }) - return execute( - creds, - body.operation, - (_t, h) => ({ url: `${h.apiBaseUrl}/search/count`, init: jsonInit(searchBody) }), - 'count' - ) - } - case 'sailpoint_search_aggregate': { - const searchBody = filterUndefined({ - indices: toStringList(body.indices) ?? ['identities'], - query: body.query ? { query: body.query } : undefined, - // Interpret aggregationsDsl as Elasticsearch DSL (also SailPoint's default) rather than - // the typed SAILPOINT aggregation mode. - aggregationType: 'DSL', - aggregationsDsl: body.aggregationsDsl, - }) - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/search/aggregate${qs({ limit: body.limit, offset: body.offset })}`, - init: jsonInit(searchBody), - }), - // /search/aggregate returns an AggregationResult object (aggregations + hits), not an - // array - route it as an item so the buckets are preserved rather than dropped. - 'item' - ) - } - case 'sailpoint_list_identities': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/identities${qs({ filters: body.filters, sorters: body.sorters, defaultFilter: body.defaultFilter, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_get_identity': - return execute( - creds, - body.operation, - (_t, h) => ({ url: `${h.apiBaseUrl}/identities/${id(body.id)}`, init: { method: 'GET' } }), - 'item' - ) - case 'sailpoint_list_accounts': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/accounts${qs({ filters: body.filters, sorters: body.sorters, detailLevel: body.detailLevel, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_get_account': - return execute( - creds, - body.operation, - (_t, h) => ({ url: `${h.apiBaseUrl}/accounts/${id(body.id)}`, init: { method: 'GET' } }), - 'item' - ) - case 'sailpoint_get_account_entitlements': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/accounts/${id(body.id)}/entitlements${qs({ limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_list_entitlements': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/entitlements${qs({ filters: body.filters, sorters: body.sorters, 'account-id': body.accountId, 'segmented-for-identity': body.segmentedForIdentity, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_get_entitlement': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/entitlements/${id(body.id)}`, - init: { method: 'GET' }, - }), - 'item' - ) - case 'sailpoint_list_roles': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/roles${qs({ filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_get_role_entitlements': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/roles/${id(body.id)}/entitlements${qs({ filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_list_access_profiles': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/access-profiles${qs({ filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_get_access_profile_entitlements': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/access-profiles/${id(body.id)}/entitlements${qs({ filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_list_sources': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/sources${qs({ filters: body.filters, sorters: body.sorters, 'for-subadmin': body.forSubadmin, includeIDNSource: body.includeIDNSource, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_get_source': - return execute( - creds, - body.operation, - (_t, h) => ({ url: `${h.apiBaseUrl}/sources/${id(body.id)}`, init: { method: 'GET' } }), - 'item' - ) - case 'sailpoint_list_account_activities': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/account-activities${qs({ 'requested-for': body.requestedFor, 'requested-by': body.requestedBy, 'regarding-identity': body.regardingIdentity, filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_get_account_activity': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/account-activities/${id(body.id)}`, - init: { method: 'GET' }, - }), - 'item' - ) - case 'sailpoint_list_campaigns': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/campaigns${qs({ detail: body.detail, filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_get_campaign': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/campaigns/${id(body.id)}${qs({ detail: body.detail })}`, - init: { method: 'GET' }, - }), - 'item' - ) - case 'sailpoint_list_certifications': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/certifications${qs({ 'reviewer-identity': body.reviewerIdentity, filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_list_certification_review_items': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/certifications/${id(body.id)}/access-review-items${qs({ filters: body.filters, sorters: body.sorters, entitlements: body.entitlements, 'access-profiles': body.accessProfiles, roles: body.roles, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - case 'sailpoint_request_access': { - const requestBody = filterUndefined({ - requestedFor: body.requestedFor, - requestedItems: body.requestedItems, - requestType: body.requestType, - clientMetadata: body.clientMetadata, - }) - return execute( - creds, - body.operation, - (_t, h) => ({ url: `${h.apiBaseUrl}/access-requests`, init: jsonInit(requestBody) }), - 'write' - ) - } - case 'sailpoint_cancel_access_request': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/access-requests/cancel`, - init: jsonInit({ accountActivityId: body.accountActivityId, comment: body.comment }), - }), - 'write' - ) - case 'sailpoint_get_access_request_status': - return execute( - creds, - body.operation, - (_t, h) => ({ - url: `${h.apiBaseUrl}/access-request-status${qs({ 'requested-for': body.requestedFor, 'requested-by': body.requestedBy, 'regarding-identity': body.regardingIdentity, 'assigned-to': body.assignedTo, 'request-state': body.requestState, filters: body.filters, sorters: body.sorters, limit: body.limit, offset: body.offset, count: body.count })}`, - init: { method: 'GET' }, - }), - 'list' - ) - } -} - -export const POST = withRouteHandler(async (request: NextRequest) => { - const requestId = generateRequestId() - - const authResult = await checkInternalAuth(request, { requireWorkflowId: false }) - if (!authResult.success) { - return NextResponse.json( - { success: false, error: authResult.error || 'Unauthorized' }, - { status: 401 } - ) - } - - try { - const parsed = await parseRequest( - sailpointQueryContract, - request, - {}, - { - validationErrorResponse: (error) => - NextResponse.json( - { - success: false, - error: getValidationErrorMessage(error, 'Invalid SailPoint request'), - details: error.issues, - }, - { status: 400 } - ), - } - ) - if (!parsed.success) return parsed.response - - const body = parsed.data.body - const creds: SailPointServerCredentials = { - clientId: body.clientId, - clientSecret: body.clientSecret, - tenant: body.tenant, - apiVersion: normalizeApiVersion(body.apiVersion), - } - - logger.info(`[${requestId}] SailPoint request`, { - operation: body.operation, - apiVersion: creds.apiVersion, - }) - - return await dispatch(creds, body) - } catch (error) { - const message = toError(error).message - logger.error(`[${requestId}] SailPoint request failed`, { error: message }) - return NextResponse.json({ success: false, error: message }, { status: 500 }) - } -}) diff --git a/apps/sim/blocks/blocks/sailpoint.ts b/apps/sim/blocks/blocks/sailpoint.ts index 32b65a43a89..88ede6dc931 100644 --- a/apps/sim/blocks/blocks/sailpoint.ts +++ b/apps/sim/blocks/blocks/sailpoint.ts @@ -6,20 +6,69 @@ import { parseOptionalJsonInput, parseOptionalNumberInput, } from '@/blocks/utils' -import type { SailPointListResponse } from '@/tools/sailpoint/types' -/** Single-entity operations that take a resource `id`. */ +const SAILPOINT_OPERATIONS = [ + 'sailpoint_approve_access_request', + 'sailpoint_cancel_access_request', + 'sailpoint_decide_certification_review_items', + 'sailpoint_get_access_profile', + 'sailpoint_get_access_profile_entitlements', + 'sailpoint_get_access_request_status', + 'sailpoint_get_account', + 'sailpoint_get_account_activity', + 'sailpoint_get_account_entitlements', + 'sailpoint_get_campaign', + 'sailpoint_get_certification', + 'sailpoint_get_entitlement', + 'sailpoint_get_identity', + 'sailpoint_get_role', + 'sailpoint_get_role_entitlements', + 'sailpoint_get_source', + 'sailpoint_get_task_status', + 'sailpoint_list_access_profiles', + 'sailpoint_list_account_activities', + 'sailpoint_list_accounts', + 'sailpoint_list_campaigns', + 'sailpoint_list_certification_review_items', + 'sailpoint_list_certifications', + 'sailpoint_list_entitlements', + 'sailpoint_list_identities', + 'sailpoint_list_identity_entitlements', + 'sailpoint_list_pending_access_request_approvals', + 'sailpoint_list_roles', + 'sailpoint_list_sources', + 'sailpoint_load_accounts', + 'sailpoint_load_entitlements', + 'sailpoint_reject_access_request', + 'sailpoint_request_access', + 'sailpoint_search', + 'sailpoint_search_aggregate', + 'sailpoint_search_count', + 'sailpoint_sign_off_certification', +] as const + +type SailPointOperation = (typeof SAILPOINT_OPERATIONS)[number] + +const SAILPOINT_OPERATION_SET: ReadonlySet = new Set(SAILPOINT_OPERATIONS) + const ID_OPERATIONS = [ 'sailpoint_get_identity', 'sailpoint_get_account', 'sailpoint_get_account_entitlements', 'sailpoint_get_entitlement', + 'sailpoint_list_identity_entitlements', + 'sailpoint_get_role', 'sailpoint_get_role_entitlements', + 'sailpoint_get_access_profile', 'sailpoint_get_access_profile_entitlements', 'sailpoint_get_source', 'sailpoint_get_account_activity', 'sailpoint_get_campaign', + 'sailpoint_get_certification', 'sailpoint_list_certification_review_items', + 'sailpoint_decide_certification_review_items', + 'sailpoint_sign_off_certification', + 'sailpoint_get_task_status', ] const SEARCH_OPERATIONS = [ @@ -43,6 +92,7 @@ const FILTER_OPERATIONS = [ 'sailpoint_list_certifications', 'sailpoint_list_certification_review_items', 'sailpoint_get_access_request_status', + 'sailpoint_list_pending_access_request_approvals', ] /** Operations that accept `limit`/`offset` pagination. */ @@ -51,6 +101,8 @@ const LIMIT_OPERATIONS = [ 'sailpoint_search', 'sailpoint_search_aggregate', 'sailpoint_get_account_entitlements', + 'sailpoint_list_identity_entitlements', + 'sailpoint_list_pending_access_request_approvals', ] /** Operations that scope by an identity (`requested-for` / `requested-by` / `regarding-identity`). */ @@ -59,19 +111,77 @@ const IDENTITY_SCOPE_OPERATIONS = [ 'sailpoint_get_access_request_status', ] -export const SailPointBlock: BlockConfig = { +const LIST_OUTPUT_OPERATIONS = [ + ...FILTER_OPERATIONS, + 'sailpoint_get_account_entitlements', + 'sailpoint_list_identity_entitlements', +] + +const ACCEPTED_OUTPUT_OPERATIONS = [ + 'sailpoint_request_access', + 'sailpoint_cancel_access_request', + 'sailpoint_approve_access_request', + 'sailpoint_reject_access_request', +] + +export const SailPointBlock: BlockConfig = { type: 'sailpoint', name: 'SailPoint', description: 'Govern identities and access in SailPoint Identity Security Cloud', longDescription: - 'Read and act on identity governance data in SailPoint Identity Security Cloud (ISC): search identities, accounts, entitlements, roles, and access profiles; review account activities, campaigns, and certifications; and request, revoke, or cancel access. Authenticates with a Personal Access Token (PAT) using the OAuth2 client-credentials grant against your per-tenant host (https://{tenant}.api.identitynow.com). ' + - "IMPORTANT: generate the PAT from a dedicated ISC service *identity* (a real user with the required user level), NOT an API-Management client - identity, role, access-profile, and access-request endpoints are user-context only, and a client without user context returns empty result sets instead of an error. A PAT's effective rights are the intersection of its selected scopes AND the owner's ISC user level. Select these scopes when generating the PAT: sp:search:read (search), idn:identity:read (identities), idn:accounts:read (accounts), idn:entitlement:read (entitlements), idn:role-unchecked:read (roles), idn:access-profile:read (access profiles), idn:sources:read (sources), idn:access-request:manage or idn:access-request-self:manage (request/cancel access), idn:access-request-status:read (request status), idn:campaign:read (campaigns and certifications). Account activities are user-context gated and need no dedicated scope; sp:scopes:all covers everything for a pilot. Revoking access for anyone who is not a direct report requires ORG_ADMIN, and self-revoke is not permitted.", + "Read and act on identity-governance data in SailPoint Identity Security Cloud (ISC) with a Personal Access Token (PAT) exchanged through OAuth2 client credentials at https://{tenant}.api.identitynow.com/oauth/token. SailPoint versions each service independently, so the integration uses the current service paths such as /search/v1, /identities/v1, and /access-requests/v1; there is no shared annual API-version setting. Use a PAT whose owner has the ISC user level required by each endpoint because many identity, role, access-profile, certification, approval, and access-request operations require user context in addition to scopes. Common read scopes are sp:search:read, idn:identity:read, idn:accounts:read, idn:entitlement:read, idn:role-unchecked:read or idn:role-checked:read, idn:access-profile:read, idn:sources:read, idn:campaign:read, idn:access-request-status:read, idn:task-management:read, and idn:access-request-approvals:read. Mutations additionally require idn:sources:manage for account aggregation, idn:entitlement:manage for entitlement aggregation, idn:campaign:manage for certification decisions and sign-off, idn:access-request:manage or idn:access-request-self:manage for access requests as permitted, and idn:access-request-approvals:manage for approval actions. A scope alone does not grant authority beyond the PAT owner's ISC permissions, and authorization failures may be returned as provider errors or filtered visibility depending on the endpoint and tenant policy.", docsLink: 'https://docs.sim.ai/integrations/sailpoint', category: 'tools', integrationType: IntegrationType.Security, bgColor: '#0033A1', icon: SailPointIcon, authMode: AuthMode.ApiKey, + canvasPresentation: { + defaultTitle: 'SailPoint', + sentences: { + byOperation: { + sailpoint_search: ['Search SailPoint documents'], + sailpoint_search_count: ['Count matching SailPoint documents'], + sailpoint_search_aggregate: ['Aggregate SailPoint search results'], + sailpoint_list_identities: ['List SailPoint identities'], + sailpoint_get_identity: ['Read a SailPoint identity'], + sailpoint_list_accounts: ['List SailPoint accounts'], + sailpoint_get_account: ['Read a SailPoint account'], + sailpoint_get_account_entitlements: ['List entitlements on a SailPoint account'], + sailpoint_list_entitlements: ['List SailPoint entitlements'], + sailpoint_get_entitlement: ['Read a SailPoint entitlement'], + sailpoint_list_identity_entitlements: ['List entitlements held by an identity'], + sailpoint_list_roles: ['List SailPoint roles'], + sailpoint_get_role: ['Read a SailPoint role'], + sailpoint_get_role_entitlements: ['List entitlements granted by a role'], + sailpoint_list_access_profiles: ['List SailPoint access profiles'], + sailpoint_get_access_profile: ['Read a SailPoint access profile'], + sailpoint_get_access_profile_entitlements: [ + 'List entitlements granted by an access profile', + ], + sailpoint_list_sources: ['List SailPoint sources'], + sailpoint_get_source: ['Read a SailPoint source'], + sailpoint_list_account_activities: ['List SailPoint account activities'], + sailpoint_get_account_activity: ['Read a SailPoint account activity'], + sailpoint_list_campaigns: ['List SailPoint campaigns'], + sailpoint_get_campaign: ['Read a SailPoint campaign'], + sailpoint_list_certifications: ['List SailPoint certifications'], + sailpoint_get_certification: ['Read a SailPoint certification'], + sailpoint_list_certification_review_items: ['List certification review items'], + sailpoint_decide_certification_review_items: ['Decide certification review items'], + sailpoint_sign_off_certification: ['Sign off a SailPoint certification'], + sailpoint_request_access: ['Submit a SailPoint access request'], + sailpoint_cancel_access_request: ['Cancel a SailPoint access request'], + sailpoint_get_access_request_status: ['List SailPoint access-request status records'], + sailpoint_list_pending_access_request_approvals: ['List pending access-request approvals'], + sailpoint_approve_access_request: ['Approve a SailPoint access request'], + sailpoint_reject_access_request: ['Reject a SailPoint access request'], + sailpoint_load_accounts: ['Start a SailPoint account aggregation'], + sailpoint_load_entitlements: ['Start a SailPoint entitlement aggregation'], + sailpoint_get_task_status: ['Read a SailPoint task status'], + }, + }, + }, subBlocks: [ { @@ -89,9 +199,12 @@ export const SailPointBlock: BlockConfig = { { label: 'Get Account Entitlements', id: 'sailpoint_get_account_entitlements' }, { label: 'List Entitlements', id: 'sailpoint_list_entitlements' }, { label: 'Get Entitlement', id: 'sailpoint_get_entitlement' }, + { label: 'List Identity Entitlements', id: 'sailpoint_list_identity_entitlements' }, { label: 'List Roles', id: 'sailpoint_list_roles' }, + { label: 'Get Role', id: 'sailpoint_get_role' }, { label: 'Get Role Entitlements', id: 'sailpoint_get_role_entitlements' }, { label: 'List Access Profiles', id: 'sailpoint_list_access_profiles' }, + { label: 'Get Access Profile', id: 'sailpoint_get_access_profile' }, { label: 'Get Access Profile Entitlements', id: 'sailpoint_get_access_profile_entitlements', @@ -103,15 +216,28 @@ export const SailPointBlock: BlockConfig = { { label: 'List Campaigns', id: 'sailpoint_list_campaigns' }, { label: 'Get Campaign', id: 'sailpoint_get_campaign' }, { label: 'List Certifications', id: 'sailpoint_list_certifications' }, + { label: 'Get Certification', id: 'sailpoint_get_certification' }, { label: 'List Certification Review Items', id: 'sailpoint_list_certification_review_items', }, + { + label: 'Decide Certification Review Items', + id: 'sailpoint_decide_certification_review_items', + }, + { label: 'Sign Off Certification', id: 'sailpoint_sign_off_certification' }, { label: 'Request Access', id: 'sailpoint_request_access' }, { label: 'Cancel Access Request', id: 'sailpoint_cancel_access_request' }, { label: 'Get Access Request Status', id: 'sailpoint_get_access_request_status' }, + { + label: 'List Pending Access Request Approvals', + id: 'sailpoint_list_pending_access_request_approvals', + }, + { label: 'Approve Access Request', id: 'sailpoint_approve_access_request' }, + { label: 'Reject Access Request', id: 'sailpoint_reject_access_request' }, { label: 'Load Accounts (CSV)', id: 'sailpoint_load_accounts' }, { label: 'Load Entitlements (CSV)', id: 'sailpoint_load_entitlements' }, + { label: 'Get Task Status', id: 'sailpoint_get_task_status' }, ], value: () => 'sailpoint_search', required: true, @@ -140,14 +266,9 @@ export const SailPointBlock: BlockConfig = { }, { id: 'apiVersion', - title: 'API Version', - type: 'dropdown', - options: [ - { label: 'v2025 (default)', id: 'v2025' }, - { label: 'v2024', id: 'v2024' }, - { label: 'v3', id: 'v3' }, - ], - value: () => 'v2025', + title: 'Legacy API Version', + type: 'short-input', + condition: { field: 'operation', value: '__removed_api_version__' }, mode: 'advanced', }, { @@ -161,68 +282,263 @@ export const SailPointBlock: BlockConfig = { { id: 'indices', title: 'Indices', - type: 'short-input', - placeholder: 'identities (comma-separated or JSON array)', + type: 'code', + language: 'json', + placeholder: '["identities", "roles"]', + condition: { field: 'operation', value: SEARCH_OPERATIONS }, + mode: 'advanced', + wandConfig: { + enabled: true, + prompt: + 'Generate a JSON array containing only SailPoint search indices: accessprofiles, accountactivities, entitlements, events, identities, roles, or *. Omit the field to search all indices. Return ONLY the JSON array - no explanations, no extra text.', + placeholder: 'Describe which SailPoint indices to search...', + }, + }, + { + id: 'queryType', + title: 'Query Type', + type: 'dropdown', + options: [ + { label: 'No query (Search Aggregate only)', id: '' }, + { label: 'SailPoint query', id: 'SAILPOINT' }, + { label: 'Elasticsearch DSL', id: 'DSL' }, + { label: 'Text query', id: 'TEXT' }, + { label: 'Type-ahead query', id: 'TYPEAHEAD' }, + ], + value: (params) => (params.operation === 'sailpoint_search_aggregate' ? '' : 'SAILPOINT'), condition: { field: 'operation', value: SEARCH_OPERATIONS }, + required: { + field: 'operation', + value: ['sailpoint_search', 'sailpoint_search_count'], + }, }, { id: 'query', title: 'Query', - type: 'short-input', - placeholder: 'attributes.department:Engineering', - condition: { field: 'operation', value: SEARCH_OPERATIONS }, + type: 'code', + language: 'json', + placeholder: + '{ "query": "attributes.department:Engineering", "fields": "name,email", "timeZone": "America/Los_Angeles" }', + condition: { + field: 'operation', + value: SEARCH_OPERATIONS, + and: { field: 'queryType', value: 'SAILPOINT' }, + }, + required: { field: 'queryType', value: 'SAILPOINT' }, wandConfig: { enabled: true, prompt: - 'Generate a SailPoint Identity Security Cloud search query string using Elasticsearch query-string syntax (field:value, AND/OR, wildcards). Return ONLY the query string - no explanations.', + 'Generate a SailPoint search query object with query and optional fields, timeZone, and innerHit. The query value uses SailPoint Elasticsearch query-string syntax. Return ONLY the JSON object - no explanations, no extra text.', placeholder: 'Describe what to search for, e.g. "active identities in the Finance department"...', + generationType: 'json-object', + }, + }, + { + id: 'queryDsl', + title: 'Query DSL', + type: 'code', + language: 'json', + placeholder: '{ "match": { "name": "john.doe" } }', + condition: { + field: 'operation', + value: SEARCH_OPERATIONS, + and: { field: 'queryType', value: 'DSL' }, + }, + required: { field: 'queryType', value: 'DSL' }, + wandConfig: { + enabled: true, + prompt: + 'Generate an Elasticsearch Query DSL object supported by SailPoint Search. Return ONLY the JSON object - no explanations, no extra text.', + placeholder: 'Describe the Elasticsearch DSL query...', + generationType: 'json-object', + }, + }, + { + id: 'textQuery', + title: 'Text Query', + type: 'code', + language: 'json', + placeholder: + '{ "terms": ["privileged access"], "fields": ["name", "description"], "matchAny": true, "contains": true }', + condition: { + field: 'operation', + value: SEARCH_OPERATIONS, + and: { field: 'queryType', value: 'TEXT' }, + }, + required: { field: 'queryType', value: 'TEXT' }, + wandConfig: { + enabled: true, + prompt: + 'Generate a SailPoint textQuery object with required string arrays terms and fields and optional booleans matchAny and contains. Return ONLY the JSON object - no explanations, no extra text.', + placeholder: 'Describe the terms and fields for the text query...', + generationType: 'json-object', + }, + }, + { + id: 'typeAheadQuery', + title: 'Type-Ahead Query', + type: 'code', + language: 'json', + placeholder: + '{ "query": "Work", "field": "source.name", "nestedType": "access", "maxExpansions": 10, "size": 100 }', + condition: { + field: 'operation', + value: SEARCH_OPERATIONS, + and: { field: 'queryType', value: 'TYPEAHEAD' }, + }, + required: { field: 'queryType', value: 'TYPEAHEAD' }, + wandConfig: { + enabled: true, + prompt: + 'Generate a SailPoint typeAheadQuery object with required query and field and optional nestedType, maxExpansions, size, sort, and sortByValue. Return ONLY the JSON object - no explanations, no extra text.', + placeholder: 'Describe the prefix and field to search...', + generationType: 'json-object', }, }, + { + id: 'queryVersion', + title: 'Query Version', + type: 'short-input', + placeholder: '5.2 (omit to use the service default)', + condition: { field: 'operation', value: SEARCH_OPERATIONS }, + mode: 'advanced', + }, { id: 'includeNested', title: 'Include Nested Objects', type: 'dropdown', options: [ - { label: 'Yes (default)', id: 'true' }, + { label: 'Provider default (true)', id: '' }, + { label: 'Yes', id: 'true' }, { label: 'No', id: 'false' }, ], - value: () => 'true', - condition: { field: 'operation', value: 'sailpoint_search' }, + value: () => '', + condition: { field: 'operation', value: SEARCH_OPERATIONS }, + mode: 'advanced', + }, + { + id: 'queryResultFilter', + title: 'Result Field Filter', + type: 'code', + language: 'json', + placeholder: '{ "includes": ["id", "name"], "excludes": ["stacktrace"] }', + condition: { field: 'operation', value: SEARCH_OPERATIONS }, + mode: 'advanced', + wandConfig: { + enabled: true, + prompt: + 'Generate a SailPoint queryResultFilter object with optional includes and excludes string arrays. Return ONLY the JSON object - no explanations, no extra text.', + placeholder: 'Describe which fields to include or exclude...', + generationType: 'json-object', + }, + }, + { + id: 'searchFilters', + title: 'Structured Search Filters', + type: 'code', + language: 'json', + placeholder: '{ "attributes.department": { "type": "TERMS", "terms": ["Finance"] } }', + condition: { field: 'operation', value: SEARCH_OPERATIONS }, mode: 'advanced', + wandConfig: { + enabled: true, + prompt: + 'Generate the SailPoint Search filters object keyed by searchable field, with each value using a documented filter structure. Return ONLY the JSON object - no explanations, no extra text.', + placeholder: 'Describe the structured filters...', + generationType: 'json-object', + }, }, { id: 'sort', title: 'Sort', - type: 'short-input', - placeholder: 'displayName,+id', - condition: { field: 'operation', value: 'sailpoint_search' }, + type: 'code', + language: 'json', + placeholder: '["displayName", "+id"]', + condition: { field: 'operation', value: SEARCH_OPERATIONS }, mode: 'advanced', + wandConfig: { + enabled: true, + prompt: + 'Generate a JSON array of SailPoint Search sort fields. Prefix a field with + for ascending or - for descending. Return ONLY the JSON array - no explanations, no extra text.', + placeholder: 'Describe the desired sort order...', + }, }, { id: 'searchAfter', title: 'Search After', + type: 'code', + language: 'json', + placeholder: '["John Doe", "2c9180...id"]', + condition: { field: 'operation', value: SEARCH_OPERATIONS }, + mode: 'advanced', + wandConfig: { + enabled: true, + prompt: + 'Generate the JSON string array of last sort values used as a SailPoint Search searchAfter cursor. Return ONLY the JSON array - no explanations, no extra text.', + placeholder: 'Provide the last values from the previous sorted result...', + }, + }, + { + id: 'aggregationType', + title: 'Aggregation Type', + type: 'dropdown', + options: [ + { label: 'Elasticsearch DSL (default)', id: 'DSL' }, + { label: 'SailPoint aggregation', id: 'SAILPOINT' }, + ], + value: () => 'DSL', + condition: { field: 'operation', value: SEARCH_OPERATIONS }, + mode: 'advanced', + }, + { + id: 'aggregationsVersion', + title: 'Aggregations Version', type: 'short-input', - placeholder: '["John Doe","2c9180...id"] (cursor from the last result to page past 10k)', - condition: { field: 'operation', value: 'sailpoint_search' }, + placeholder: '5.2 (omit to use the service default)', + condition: { field: 'operation', value: SEARCH_OPERATIONS }, mode: 'advanced', }, { id: 'aggregationsDsl', - title: 'Aggregations', + title: 'Aggregations DSL', type: 'code', language: 'json', placeholder: '{ "department": { "terms": { "field": "attributes.department" } } }', - condition: { field: 'operation', value: 'sailpoint_search_aggregate' }, - required: { field: 'operation', value: 'sailpoint_search_aggregate' }, + condition: { + field: 'operation', + value: SEARCH_OPERATIONS, + and: { field: 'aggregationType', value: 'DSL' }, + }, + mode: 'advanced', wandConfig: { enabled: true, prompt: - 'Generate a SailPoint search aggregations DSL object (Elasticsearch aggregations syntax) defining the buckets or metrics to compute over the matched documents. Return ONLY valid JSON.', + 'Generate an Elasticsearch aggregations DSL object supported by SailPoint Search. Return ONLY the JSON object - no explanations, no extra text.', placeholder: 'Describe the aggregation, e.g. "count identities grouped by department"...', generationType: 'json-object', }, }, + { + id: 'aggregations', + title: 'SailPoint Aggregation', + type: 'code', + language: 'json', + placeholder: '{ "name": "department", "type": "TERMS", "field": "attributes.department" }', + condition: { + field: 'operation', + value: SEARCH_OPERATIONS, + and: { field: 'aggregationType', value: 'SAILPOINT' }, + }, + mode: 'advanced', + wandConfig: { + enabled: true, + prompt: + 'Generate a SailPoint search aggregation specification object, including any supported subAggregation. Return ONLY the JSON object - no explanations, no extra text.', + placeholder: 'Describe the SailPoint aggregation grouping or calculation...', + generationType: 'json-object', + }, + }, { id: 'filters', title: 'Filters', @@ -233,7 +549,7 @@ export const SailPointBlock: BlockConfig = { wandConfig: { enabled: true, prompt: - 'Generate a SailPoint ISC V3 filter expression (e.g. name sw "A", cloudStatus eq "ACTIVE", and/or). Use documented filterable fields and operators. Return ONLY the filter string.', + 'Generate a SailPoint collection filter expression (e.g. name sw "A", cloudStatus eq "ACTIVE", and/or). Use only fields and operators supported by the selected operation. Return ONLY the filter string - no explanations, no extra text.', placeholder: 'Describe the records to filter, e.g. "identities whose email ends with @acme.com"...', }, @@ -315,9 +631,21 @@ export const SailPointBlock: BlockConfig = { }, { id: 'accountId', - title: 'Account ID', + title: 'Legacy Account ID', type: 'short-input', - placeholder: 'Filter entitlements to a specific account', + condition: { field: 'operation', value: '__removed_account_filter__' }, + mode: 'advanced', + }, + { + id: 'entitlementSegmentationMode', + title: 'Entitlement Segmentation', + type: 'dropdown', + options: [ + { label: 'No segmentation filter', id: '' }, + { label: 'Visible to an identity', id: 'identity' }, + { label: 'Assigned to segment IDs', id: 'segments' }, + ], + value: () => '', condition: { field: 'operation', value: 'sailpoint_list_entitlements' }, mode: 'advanced', }, @@ -326,6 +654,91 @@ export const SailPointBlock: BlockConfig = { title: 'Segmented For Identity', type: 'short-input', placeholder: 'Identity ID to apply entitlement segmentation for', + condition: { + field: 'operation', + value: 'sailpoint_list_entitlements', + and: { field: 'entitlementSegmentationMode', value: 'identity' }, + }, + mode: 'advanced', + }, + { + id: 'entitlementForSegmentIds', + title: 'For Segment IDs', + type: 'short-input', + placeholder: 'Comma-separated segment IDs', + condition: { + field: 'operation', + value: 'sailpoint_list_entitlements', + and: { field: 'entitlementSegmentationMode', value: 'segments' }, + }, + mode: 'advanced', + }, + { + id: 'entitlementIncludeUnsegmented', + title: 'Include Unsegmented', + type: 'dropdown', + options: [ + { label: 'Provider default (true)', id: '' }, + { label: 'Yes', id: 'true' }, + { label: 'No', id: 'false' }, + ], + value: () => '', + condition: { + field: 'operation', + value: 'sailpoint_list_entitlements', + and: { field: 'entitlementSegmentationMode', value: ['identity', 'segments'] }, + }, + mode: 'advanced', + }, + { + id: 'accessModelSegmentationMode', + title: 'Access Model Segmentation', + type: 'dropdown', + options: [ + { label: 'No segmentation filter', id: '' }, + { label: 'Assigned to segment IDs', id: 'segments' }, + ], + value: () => '', + condition: { + field: 'operation', + value: ['sailpoint_list_roles', 'sailpoint_list_access_profiles'], + }, + mode: 'advanced', + }, + { + id: 'forSegmentIds', + title: 'For Segment IDs', + type: 'short-input', + placeholder: 'Comma-separated segment IDs', + condition: { + field: 'operation', + value: ['sailpoint_list_roles', 'sailpoint_list_access_profiles'], + and: { field: 'accessModelSegmentationMode', value: 'segments' }, + }, + mode: 'advanced', + }, + { + id: 'includeUnsegmented', + title: 'Include Unsegmented', + type: 'dropdown', + options: [ + { label: 'Provider default (true)', id: '' }, + { label: 'Yes', id: 'true' }, + { label: 'No', id: 'false' }, + ], + value: () => '', + condition: { + field: 'operation', + value: ['sailpoint_list_roles', 'sailpoint_list_access_profiles'], + and: { field: 'accessModelSegmentationMode', value: 'segments' }, + }, + mode: 'advanced', + }, + { + id: 'entitlementSearchAfter', + title: 'Search After', + type: 'short-input', + placeholder: 'Account Payable,2c918083... (must match sorters)', condition: { field: 'operation', value: 'sailpoint_list_entitlements' }, mode: 'advanced', }, @@ -333,8 +746,11 @@ export const SailPointBlock: BlockConfig = { id: 'forSubadmin', title: 'For Subadmin', type: 'short-input', - placeholder: 'Subadmin identity ID', - condition: { field: 'operation', value: 'sailpoint_list_sources' }, + placeholder: 'Subadmin identity ID or me', + condition: { + field: 'operation', + value: ['sailpoint_list_sources', 'sailpoint_list_roles', 'sailpoint_list_access_profiles'], + }, mode: 'advanced', }, { @@ -349,19 +765,42 @@ export const SailPointBlock: BlockConfig = { condition: { field: 'operation', value: 'sailpoint_list_sources' }, mode: 'advanced', }, + { + id: 'identityScopeType', + title: 'Identity Scope', + type: 'dropdown', + options: [ + { label: 'No identity scope', id: '' }, + { label: 'Requested for', id: 'requestedFor' }, + { label: 'Requested by', id: 'requestedBy' }, + { label: 'Requester or target', id: 'regardingIdentity' }, + ], + value: () => '', + condition: { field: 'operation', value: IDENTITY_SCOPE_OPERATIONS }, + mode: 'advanced', + }, { id: 'requestedForFilter', title: 'Requested For', type: 'short-input', placeholder: 'Identity ID or "me"', - condition: { field: 'operation', value: IDENTITY_SCOPE_OPERATIONS }, + condition: { + field: 'operation', + value: IDENTITY_SCOPE_OPERATIONS, + and: { field: 'identityScopeType', value: 'requestedFor' }, + }, + mode: 'advanced', }, { id: 'requestedBy', title: 'Requested By', type: 'short-input', placeholder: 'Identity ID or "me"', - condition: { field: 'operation', value: IDENTITY_SCOPE_OPERATIONS }, + condition: { + field: 'operation', + value: IDENTITY_SCOPE_OPERATIONS, + and: { field: 'identityScopeType', value: 'requestedBy' }, + }, mode: 'advanced', }, { @@ -369,7 +808,11 @@ export const SailPointBlock: BlockConfig = { title: 'Regarding Identity', type: 'short-input', placeholder: 'Identity ID (requester or target)', - condition: { field: 'operation', value: IDENTITY_SCOPE_OPERATIONS }, + condition: { + field: 'operation', + value: IDENTITY_SCOPE_OPERATIONS, + and: { field: 'identityScopeType', value: 'regardingIdentity' }, + }, mode: 'advanced', }, { @@ -399,12 +842,30 @@ export const SailPointBlock: BlockConfig = { placeholder: 'Reviewer identity ID or "me"', condition: { field: 'operation', value: 'sailpoint_list_certifications' }, }, + { + id: 'reviewItemFilterType', + title: 'Review Item Type Filter', + type: 'dropdown', + options: [ + { label: 'All review items', id: '' }, + { label: 'Entitlements', id: 'entitlements' }, + { label: 'Access profiles', id: 'accessProfiles' }, + { label: 'Roles', id: 'roles' }, + ], + value: () => '', + condition: { field: 'operation', value: 'sailpoint_list_certification_review_items' }, + mode: 'advanced', + }, { id: 'entitlements', title: 'Entitlement IDs', type: 'short-input', placeholder: 'Comma-separated entitlement IDs to filter by', - condition: { field: 'operation', value: 'sailpoint_list_certification_review_items' }, + condition: { + field: 'operation', + value: 'sailpoint_list_certification_review_items', + and: { field: 'reviewItemFilterType', value: 'entitlements' }, + }, mode: 'advanced', }, { @@ -412,7 +873,11 @@ export const SailPointBlock: BlockConfig = { title: 'Access Profile IDs', type: 'short-input', placeholder: 'Comma-separated access profile IDs to filter by', - condition: { field: 'operation', value: 'sailpoint_list_certification_review_items' }, + condition: { + field: 'operation', + value: 'sailpoint_list_certification_review_items', + and: { field: 'reviewItemFilterType', value: 'accessProfiles' }, + }, mode: 'advanced', }, { @@ -420,17 +885,68 @@ export const SailPointBlock: BlockConfig = { title: 'Role IDs', type: 'short-input', placeholder: 'Comma-separated role IDs to filter by', - condition: { field: 'operation', value: 'sailpoint_list_certification_review_items' }, + condition: { + field: 'operation', + value: 'sailpoint_list_certification_review_items', + and: { field: 'reviewItemFilterType', value: 'roles' }, + }, mode: 'advanced', }, + { + id: 'decisions', + title: 'Review Decisions', + type: 'code', + language: 'json', + placeholder: + '[{ "id": "review-item-id", "decision": "APPROVE", "bulk": false, "comments": "Access is still required" }]', + condition: { + field: 'operation', + value: 'sailpoint_decide_certification_review_items', + }, + required: { + field: 'operation', + value: 'sailpoint_decide_certification_review_items', + }, + wandConfig: { + enabled: true, + prompt: + 'Generate a JSON array of 1 to 250 SailPoint certification review decisions. Each decision requires id, decision (APPROVE or REVOKE), and bulk; optional fields are proposedEndDate, recommendation, and comments. Return ONLY the JSON array - no explanations, no extra text.', + placeholder: 'Describe the review-item decisions to record...', + }, + }, + { + id: 'requestPayloadShape', + title: 'Recipient and Item Shape', + type: 'dropdown', + options: [ + { label: 'Human identities (flat)', id: 'flat' }, + { label: 'Per-identity items or machine identities', id: 'structured' }, + ], + value: () => 'flat', + condition: { field: 'operation', value: 'sailpoint_request_access' }, + }, { id: 'requestedIdentities', title: 'Requested For (Identities)', type: 'code', language: 'json', placeholder: '["2c9180857c1a...","2c9180857c1b..."]', - condition: { field: 'operation', value: 'sailpoint_request_access' }, - required: { field: 'operation', value: 'sailpoint_request_access' }, + condition: { + field: 'operation', + value: 'sailpoint_request_access', + and: { field: 'requestPayloadShape', value: 'flat' }, + }, + required: { + field: 'operation', + value: 'sailpoint_request_access', + and: { field: 'requestPayloadShape', value: 'flat' }, + }, + wandConfig: { + enabled: true, + prompt: + 'Generate a JSON array of SailPoint human identity IDs. REVOKE_ACCESS permits exactly one human identity. Return ONLY the JSON array - no explanations, no extra text.', + placeholder: 'Describe or provide the human identity IDs...', + }, }, { id: 'requestedItems', @@ -438,14 +954,45 @@ export const SailPointBlock: BlockConfig = { type: 'code', language: 'json', placeholder: '[{ "type": "ENTITLEMENT", "id": "2c918...", "comment": "New hire" }]', - condition: { field: 'operation', value: 'sailpoint_request_access' }, - required: { field: 'operation', value: 'sailpoint_request_access' }, + condition: { + field: 'operation', + value: 'sailpoint_request_access', + and: { field: 'requestPayloadShape', value: 'flat' }, + }, + required: { + field: 'operation', + value: 'sailpoint_request_access', + and: { field: 'requestPayloadShape', value: 'flat' }, + }, wandConfig: { enabled: true, prompt: - 'Generate a SailPoint access-request requestedItems JSON array. Each item is { type: ACCESS_PROFILE|ROLE|ENTITLEMENT, id, comment?, removeDate?, startDate?, assignmentId?, nativeIdentity?, clientMetadata? }. For REVOKE_ACCESS exactly one item with a comment is allowed. Return ONLY valid JSON.', + 'Generate a JSON array of SailPoint human access-request items. Each item requires type (ACCESS_PROFILE, ROLE, or ENTITLEMENT) and id; optional fields are comment, startDate, removeDate, assignmentId, nativeIdentity, formInstanceId, and clientMetadata. REVOKE_ACCESS requires a comment, forbids startDate, and permits only one item when revoking an entitlement; role and access-profile revocations are not subject to that entitlement-only limit. Return ONLY the JSON array - no explanations, no extra text.', placeholder: 'Describe the access to request or revoke...', - generationType: 'json-object', + }, + }, + { + id: 'requestedForWithRequestedItems', + title: 'Recipients With Requested Items', + type: 'code', + language: 'json', + placeholder: + '[{ "identityId": "2c918...", "identityType": "HUMAN", "requestedItems": [{ "type": "ENTITLEMENT", "id": "2c918...", "accountSelection": [] }] }]', + condition: { + field: 'operation', + value: 'sailpoint_request_access', + and: { field: 'requestPayloadShape', value: 'structured' }, + }, + required: { + field: 'operation', + value: 'sailpoint_request_access', + and: { field: 'requestPayloadShape', value: 'structured' }, + }, + wandConfig: { + enabled: true, + prompt: + 'Generate the requestedForWithRequestedItems JSON array for SailPoint. Each entry requires identityId and requestedItems and may set identityType HUMAN or MACHINE. Machine requests must use MACHINE for every entry, support ENTITLEMENT items only, require accountSelection for grants or modifications, and use nativeIdentity without accountSelection for revokes. Human revoke requests must use the flat payload instead. Items may include comment, startDate, removeDate, accountSelection, nativeIdentity, formInstanceId, and clientMetadata where supported. Return ONLY the JSON array - no explanations, no extra text.', + placeholder: 'Describe recipients, items, and account selections...', }, }, { @@ -468,6 +1015,13 @@ export const SailPointBlock: BlockConfig = { placeholder: '{ "requestedByEmail": "manager@acme.com" }', condition: { field: 'operation', value: 'sailpoint_request_access' }, mode: 'advanced', + wandConfig: { + enabled: true, + prompt: + 'Generate a JSON object whose values are strings for correlating a SailPoint access request with external context. Return ONLY the JSON object - no explanations, no extra text.', + placeholder: 'Describe the correlation metadata to attach...', + generationType: 'json-object', + }, }, { id: 'accountActivityId', @@ -485,6 +1039,41 @@ export const SailPointBlock: BlockConfig = { condition: { field: 'operation', value: 'sailpoint_cancel_access_request' }, required: { field: 'operation', value: 'sailpoint_cancel_access_request' }, }, + { + id: 'ownerId', + title: 'Approval Owner', + type: 'short-input', + placeholder: 'Approver identity ID or me; omit for all visible approvals', + condition: { + field: 'operation', + value: 'sailpoint_list_pending_access_request_approvals', + }, + }, + { + id: 'approvalId', + title: 'Approval ID', + type: 'short-input', + placeholder: 'Pending access-request approval ID', + condition: { + field: 'operation', + value: ['sailpoint_approve_access_request', 'sailpoint_reject_access_request'], + }, + required: { + field: 'operation', + value: ['sailpoint_approve_access_request', 'sailpoint_reject_access_request'], + }, + }, + { + id: 'approvalComment', + title: 'Approval Comment', + type: 'long-input', + placeholder: 'Reason for the approval decision', + condition: { + field: 'operation', + value: ['sailpoint_approve_access_request', 'sailpoint_reject_access_request'], + }, + required: { field: 'operation', value: 'sailpoint_reject_access_request' }, + }, { id: 'sourceId', title: 'Source ID', @@ -557,17 +1146,23 @@ export const SailPointBlock: BlockConfig = { tools: { access: [ + 'sailpoint_approve_access_request', 'sailpoint_cancel_access_request', + 'sailpoint_decide_certification_review_items', + 'sailpoint_get_access_profile', 'sailpoint_get_access_profile_entitlements', 'sailpoint_get_access_request_status', 'sailpoint_get_account', 'sailpoint_get_account_activity', 'sailpoint_get_account_entitlements', 'sailpoint_get_campaign', + 'sailpoint_get_certification', 'sailpoint_get_entitlement', 'sailpoint_get_identity', + 'sailpoint_get_role', 'sailpoint_get_role_entitlements', 'sailpoint_get_source', + 'sailpoint_get_task_status', 'sailpoint_list_access_profiles', 'sailpoint_list_account_activities', 'sailpoint_list_accounts', @@ -576,25 +1171,32 @@ export const SailPointBlock: BlockConfig = { 'sailpoint_list_certifications', 'sailpoint_list_entitlements', 'sailpoint_list_identities', + 'sailpoint_list_identity_entitlements', + 'sailpoint_list_pending_access_request_approvals', 'sailpoint_list_roles', 'sailpoint_list_sources', 'sailpoint_load_accounts', 'sailpoint_load_entitlements', + 'sailpoint_reject_access_request', 'sailpoint_request_access', 'sailpoint_search', 'sailpoint_search_aggregate', 'sailpoint_search_count', + 'sailpoint_sign_off_certification', ], config: { - tool: (params) => - typeof params.operation === 'string' ? params.operation : 'sailpoint_search', + tool: (params) => { + const operation = typeof params.operation === 'string' ? params.operation : '' + return SAILPOINT_OPERATION_SET.has(operation) + ? (operation as SailPointOperation) + : 'sailpoint_search' + }, params: (params) => { const mapped: Record = { clientId: params.clientId, clientSecret: params.clientSecret, tenant: params.tenant, } - if (params.apiVersion) mapped.apiVersion = params.apiVersion const setStr = (key: string, value: unknown) => { if (typeof value === 'string') { @@ -608,41 +1210,67 @@ export const SailPointBlock: BlockConfig = { const parsed = parseOptionalNumberInput(value, key, { integer: true, min: 0 }) if (parsed != null) mapped[key] = parsed } + const setBoolean = (key: string, value: unknown) => { + if (value === 'true' || value === true) mapped[key] = true + if (value === 'false' || value === false) mapped[key] = false + } + const setJson = (key: string, value: unknown, label = key) => { + const parsed = parseOptionalJsonInput(value, label) + if (parsed !== undefined) mapped[key] = parsed + } const applyPagination = () => { setNum('limit', params.limit) setNum('offset', params.offset) - if (params.count === 'true' || params.count === true) { - mapped.count = true - } + setBoolean('count', params.count) } const applyFilters = () => { setStr('filters', params.filters) setStr('sorters', params.sorters) } + const applyIdentityScope = () => { + switch (params.identityScopeType) { + case 'requestedFor': + setStr('requestedFor', params.requestedForFilter) + break + case 'requestedBy': + setStr('requestedBy', params.requestedBy) + break + case 'regardingIdentity': + setStr('regardingIdentity', params.regardingIdentity) + break + } + } + const applySearchBody = () => { + setJson('indices', params.indices) + setStr('queryType', params.queryType) + setStr('queryVersion', params.queryVersion) + setJson('query', params.query) + setJson('queryDsl', params.queryDsl) + setJson('textQuery', params.textQuery) + setJson('typeAheadQuery', params.typeAheadQuery) + setBoolean('includeNested', params.includeNested) + setJson('queryResultFilter', params.queryResultFilter) + setStr('aggregationType', params.aggregationType) + setStr('aggregationsVersion', params.aggregationsVersion) + setJson('aggregationsDsl', params.aggregationsDsl) + setJson('aggregations', params.aggregations) + setJson('sort', params.sort) + setJson('searchAfter', params.searchAfter) + setJson('filters', params.searchFilters, 'searchFilters') + } switch (params.operation) { case 'sailpoint_search': - setStr('indices', params.indices) - setStr('query', params.query) - setStr('sort', params.sort) - setStr('searchAfter', params.searchAfter) - if (params.includeNested === 'false' || params.includeNested === false) { - mapped.includeNested = false - } + applySearchBody() applyPagination() break case 'sailpoint_search_count': - setStr('indices', params.indices) - setStr('query', params.query) + applySearchBody() break - case 'sailpoint_search_aggregate': { - setStr('indices', params.indices) - setStr('query', params.query) - const aggregationsDsl = parseOptionalJsonInput(params.aggregationsDsl, 'aggregations') - if (aggregationsDsl !== undefined) mapped.aggregationsDsl = aggregationsDsl + case 'sailpoint_search_aggregate': + applySearchBody() applyPagination() break - } case 'sailpoint_list_identities': applyFilters() setStr('defaultFilter', params.defaultFilter) @@ -655,13 +1283,29 @@ export const SailPointBlock: BlockConfig = { break case 'sailpoint_list_entitlements': applyFilters() - setStr('accountId', params.accountId) - setStr('segmentedForIdentity', params.segmentedForIdentity) + if (params.entitlementSegmentationMode === 'identity') { + setStr('segmentedForIdentity', params.segmentedForIdentity) + } + if (params.entitlementSegmentationMode === 'segments') { + setStr('forSegmentIds', params.entitlementForSegmentIds) + } + if ( + params.entitlementSegmentationMode === 'identity' || + params.entitlementSegmentationMode === 'segments' + ) { + setBoolean('includeUnsegmented', params.entitlementIncludeUnsegmented) + } + setStr('searchAfter', params.entitlementSearchAfter) applyPagination() break case 'sailpoint_list_roles': case 'sailpoint_list_access_profiles': applyFilters() + setStr('forSubadmin', params.forSubadmin) + if (params.accessModelSegmentationMode === 'segments') { + setStr('forSegmentIds', params.forSegmentIds) + setBoolean('includeUnsegmented', params.includeUnsegmented) + } applyPagination() break case 'sailpoint_get_role_entitlements': @@ -671,21 +1315,18 @@ export const SailPointBlock: BlockConfig = { applyPagination() break case 'sailpoint_get_account_entitlements': + case 'sailpoint_list_identity_entitlements': setStr('id', params.id) applyPagination() break case 'sailpoint_list_sources': applyFilters() setStr('forSubadmin', params.forSubadmin) - if (params.includeIDNSource === 'true' || params.includeIDNSource === true) { - mapped.includeIDNSource = true - } + setBoolean('includeIDNSource', params.includeIDNSource) applyPagination() break case 'sailpoint_list_account_activities': - setStr('requestedFor', params.requestedForFilter) - setStr('requestedBy', params.requestedBy) - setStr('regardingIdentity', params.regardingIdentity) + applyIdentityScope() applyFilters() applyPagination() break @@ -706,48 +1347,72 @@ export const SailPointBlock: BlockConfig = { case 'sailpoint_list_certification_review_items': setStr('id', params.id) applyFilters() - setStr('entitlements', params.entitlements) - setStr('accessProfiles', params.accessProfiles) - setStr('roles', params.roles) + if (params.reviewItemFilterType === 'entitlements') { + setStr('entitlements', params.entitlements) + } + if (params.reviewItemFilterType === 'accessProfiles') { + setStr('accessProfiles', params.accessProfiles) + } + if (params.reviewItemFilterType === 'roles') setStr('roles', params.roles) applyPagination() break case 'sailpoint_get_identity': case 'sailpoint_get_account': case 'sailpoint_get_entitlement': + case 'sailpoint_get_role': + case 'sailpoint_get_access_profile': case 'sailpoint_get_source': case 'sailpoint_get_account_activity': + case 'sailpoint_get_certification': + case 'sailpoint_sign_off_certification': + case 'sailpoint_get_task_status': + setStr('id', params.id) + break + case 'sailpoint_decide_certification_review_items': setStr('id', params.id) + setJson('decisions', params.decisions) break case 'sailpoint_get_access_request_status': - setStr('requestedFor', params.requestedForFilter) - setStr('requestedBy', params.requestedBy) - setStr('regardingIdentity', params.regardingIdentity) + applyIdentityScope() setStr('assignedTo', params.assignedTo) setStr('requestState', params.requestState) applyFilters() applyPagination() break case 'sailpoint_request_access': { - const requestedFor = parseOptionalJsonInput(params.requestedIdentities, 'requestedFor') - if (requestedFor !== undefined) mapped.requestedFor = requestedFor - const requestedItems = parseOptionalJsonInput(params.requestedItems, 'requestedItems') - if (requestedItems !== undefined) mapped.requestedItems = requestedItems + if (params.requestPayloadShape === 'structured') { + setJson( + 'requestedForWithRequestedItems', + params.requestedForWithRequestedItems, + 'requestedForWithRequestedItems' + ) + } else { + setJson('requestedFor', params.requestedIdentities, 'requestedFor') + setJson('requestedItems', params.requestedItems, 'requestedItems') + } setStr('requestType', params.requestType) - const clientMetadata = parseOptionalJsonInput(params.clientMetadata, 'clientMetadata') - if (clientMetadata !== undefined) mapped.clientMetadata = clientMetadata + setJson('clientMetadata', params.clientMetadata) break } case 'sailpoint_cancel_access_request': setStr('accountActivityId', params.accountActivityId) setStr('comment', params.comment) break + case 'sailpoint_list_pending_access_request_approvals': + setStr('ownerId', params.ownerId) + applyFilters() + applyPagination() + break + case 'sailpoint_approve_access_request': + case 'sailpoint_reject_access_request': + setStr('approvalId', params.approvalId) + setStr('comment', params.approvalComment) + break case 'sailpoint_load_accounts': { setStr('sourceId', params.sourceId) const file = normalizeFileInput(params.accountsCsv, { single: true }) if (file) mapped.file = file - if (params.disableOptimization === 'true' || params.disableOptimization === true) { - mapped.disableOptimization = true - } + setBoolean('disableOptimization', params.disableOptimization) break } case 'sailpoint_load_entitlements': { @@ -768,35 +1433,94 @@ export const SailPointBlock: BlockConfig = { tenant: { type: 'string', description: 'SailPoint tenant subdomain' }, clientId: { type: 'string', description: 'PAT client ID' }, clientSecret: { type: 'string', description: 'PAT client secret' }, - apiVersion: { type: 'string', description: 'API version path segment (v2025, v2024, v3)' }, id: { type: 'string', description: 'Resource ID for single-entity operations' }, - indices: { type: 'string', description: 'Search indices (comma-separated or JSON array)' }, - query: { type: 'string', description: 'Elasticsearch query string' }, - includeNested: { type: 'string', description: 'Include nested objects in search results' }, - sort: { type: 'string', description: 'Search sort fields' }, - searchAfter: { type: 'string', description: 'searchAfter cursor for deep search pagination' }, + indices: { type: 'json', description: 'Search index names; omission searches all indices' }, + queryType: { type: 'string', description: 'SAILPOINT, DSL, TEXT, or TYPEAHEAD' }, + queryVersion: { type: 'string', description: 'Elasticsearch version for the query body' }, + query: { + type: 'json', + description: 'SailPoint query object (query, fields, timeZone, innerHit)', + }, + queryDsl: { type: 'json', description: 'Elasticsearch Query DSL object' }, + textQuery: { + type: 'json', + description: 'Text query object (terms, fields, matchAny, contains)', + }, + typeAheadQuery: { + type: 'json', + description: + 'Type-ahead query object (query, field, nestedType, maxExpansions, size, sort, sortByValue)', + }, + includeNested: { type: 'boolean', description: 'Include nested objects in search results' }, + queryResultFilter: { + type: 'json', + description: 'Search result field includes and excludes', + }, + searchFilters: { type: 'json', description: 'Structured Search filters keyed by field' }, + sort: { type: 'json', description: 'Search sort field array' }, + searchAfter: { type: 'json', description: 'Search-after cursor value array' }, + aggregationType: { type: 'string', description: 'DSL or SAILPOINT aggregation syntax' }, + aggregationsVersion: { + type: 'string', + description: 'Elasticsearch version for the aggregation body', + }, aggregationsDsl: { type: 'json', - description: 'Elasticsearch aggregations DSL for search aggregate', + description: 'Elasticsearch aggregations DSL object', }, - filters: { type: 'string', description: 'V3 filter expression' }, + aggregations: { type: 'json', description: 'SailPoint aggregation specification' }, + filters: { type: 'string', description: 'Service collection filter expression' }, sorters: { type: 'string', description: 'Sort expression' }, limit: { type: 'number', description: 'Maximum records to return' }, offset: { type: 'number', description: 'Pagination offset' }, - count: { type: 'string', description: 'Include the total matching record count' }, + count: { type: 'boolean', description: 'Include the total matching record count' }, defaultFilter: { type: 'string', description: 'Identity default filter (CORRELATED_ONLY or NONE)', }, detailLevel: { type: 'string', description: 'Account detail level (SLIM or FULL)' }, detail: { type: 'string', description: 'Campaign detail level (SLIM or FULL)' }, - accountId: { type: 'string', description: 'Account ID to filter entitlements' }, + entitlementSegmentationMode: { + type: 'string', + description: 'Entitlement segmentation by identity or explicit segment IDs', + }, segmentedForIdentity: { type: 'string', description: 'Identity ID for entitlement segmentation', }, - forSubadmin: { type: 'string', description: 'Subadmin identity ID for source scoping' }, - includeIDNSource: { type: 'string', description: 'Include the IdentityNow source in results' }, + entitlementForSegmentIds: { + type: 'string', + description: 'Comma-separated segment IDs for entitlement filtering', + }, + entitlementIncludeUnsegmented: { + type: 'boolean', + description: 'Whether segmented entitlement results include unsegmented entitlements', + }, + accessModelSegmentationMode: { + type: 'string', + description: 'Role/access-profile segmentation mode', + }, + forSegmentIds: { type: 'string', description: 'Comma-separated segment IDs' }, + includeUnsegmented: { + type: 'boolean', + description: 'Whether segmented list results include unsegmented access objects', + }, + entitlementSearchAfter: { + type: 'string', + description: 'Comma-separated entitlement list search-after values matching sorters', + }, + forSubadmin: { + type: 'string', + description: 'Subadmin identity ID or me for sources, roles, and access profiles', + }, + includeIDNSource: { + type: 'boolean', + description: 'Include the IdentityNow source in results', + }, + identityScopeType: { + type: 'string', + description: 'Identity scoping mode for activity and request-status lists', + }, requestedForFilter: { type: 'string', description: 'Identity to scope activities/status by' }, requestedBy: { type: 'string', description: 'Requester identity to scope by' }, regardingIdentity: { type: 'string', description: 'Requester or target identity to scope by' }, @@ -809,36 +1533,176 @@ export const SailPointBlock: BlockConfig = { description: 'Certification review item access-profiles filter', }, roles: { type: 'string', description: 'Certification review item roles filter' }, + decisions: { + type: 'json', + description: 'Certification review decisions (id, decision, bulk, and optional details)', + }, + requestPayloadShape: { + type: 'string', + description: 'Flat human request or structured per-identity request shape', + }, requestedIdentities: { type: 'json', description: 'Identity IDs the access is requested for' }, requestedItems: { type: 'json', description: 'Access items to request or revoke' }, + requestedForWithRequestedItems: { + type: 'json', + description: 'Per-identity access items and optional human or machine identity type', + }, requestType: { type: 'string', description: 'GRANT_ACCESS, REVOKE_ACCESS, or MODIFY_ACCESS' }, clientMetadata: { type: 'json', description: 'Arbitrary key/value metadata for correlation' }, accountActivityId: { type: 'string', description: 'identityRequestId to cancel' }, comment: { type: 'string', description: 'Reason for cancellation' }, + ownerId: { type: 'string', description: 'Pending-approval owner identity ID or me' }, + approvalId: { type: 'string', description: 'Pending access-request approval ID' }, + approvalComment: { type: 'string', description: 'Approval or rejection comment' }, sourceId: { type: 'string', description: 'Source ID for aggregation' }, accountsCsv: { type: 'json', description: 'Accounts CSV file to aggregate' }, entitlementsCsv: { type: 'json', description: 'Entitlements CSV file to aggregate' }, disableOptimization: { - type: 'string', + type: 'boolean', description: 'Reprocess every account during aggregation', }, }, outputs: { - items: { type: 'json', description: 'Raw SailPoint documents for list operations' }, - results: { type: 'json', description: 'Raw SailPoint documents for search operations' }, - item: { type: 'json', description: 'Raw SailPoint document for get operations' }, - total: { type: 'number', description: 'Total matching documents (search count)' }, - task: { type: 'json', description: 'Aggregation task for load operations' }, - accepted: { type: 'boolean', description: 'Whether an access-request write was accepted' }, - status: { type: 'number', description: 'HTTP status returned by SailPoint for writes' }, - count: { type: 'number', description: 'Number of records returned in the page' }, - totalCount: { type: 'number', description: 'Total matching records when count is requested' }, - complete: { + items: { + type: 'json', + description: 'Operation-specific array of SailPoint resources for the returned page', + condition: { field: 'operation', value: LIST_OUTPUT_OPERATIONS }, + }, + results: { + type: 'json', + description: 'Search documents from the requested SailPoint indices', + condition: { field: 'operation', value: 'sailpoint_search' }, + }, + identity: { + type: 'json', + description: + 'Identity resource (id, name, alias, email, attributes, manager, access, accounts)', + condition: { field: 'operation', value: 'sailpoint_get_identity' }, + }, + account: { + type: 'json', + description: + 'Account resource (id, name, nativeIdentity, sourceId, identityId, attributes, entitlements)', + condition: { field: 'operation', value: 'sailpoint_get_account' }, + }, + entitlement: { + type: 'json', + description: + 'Entitlement resource (id, name, attribute, value, source, owner, requestable, privilegeLevel)', + condition: { field: 'operation', value: 'sailpoint_get_entitlement' }, + }, + role: { + type: 'json', + description: + 'Role resource (id, name, description, owner, requestable, accessProfiles, membership)', + condition: { field: 'operation', value: 'sailpoint_get_role' }, + }, + accessProfile: { + type: 'json', + description: + 'Access profile resource (id, name, description, owner, source, entitlements, requestConfig)', + condition: { field: 'operation', value: 'sailpoint_get_access_profile' }, + }, + source: { + type: 'json', + description: + 'Source resource (id, name, description, owner, connector, status, authoritative, healthy)', + condition: { field: 'operation', value: 'sailpoint_get_source' }, + }, + accountActivity: { + type: 'json', + description: + 'Account activity resource (id, name, type, created, modified, requester, target, stages)', + condition: { field: 'operation', value: 'sailpoint_get_account_activity' }, + }, + campaign: { + type: 'json', + description: + 'Campaign resource (id, name, description, status, type, dates, owner, completion statistics)', + condition: { field: 'operation', value: 'sailpoint_get_campaign' }, + }, + certification: { + type: 'json', + description: + 'Identity certification (id, name, status, reviewer, decisions, completed review items)', + condition: { + field: 'operation', + value: [ + 'sailpoint_get_certification', + 'sailpoint_decide_certification_review_items', + 'sailpoint_sign_off_certification', + ], + }, + }, + total: { + type: 'number', + description: 'Total documents matching the search body', + condition: { field: 'operation', value: 'sailpoint_search_count' }, + }, + aggregations: { + type: 'json', + description: 'Aggregation buckets and metrics returned by SailPoint Search', + condition: { field: 'operation', value: 'sailpoint_search_aggregate' }, + }, + hits: { + type: 'json', + description: 'Search hits included with the aggregation response', + condition: { field: 'operation', value: 'sailpoint_search_aggregate' }, + }, + task: { + type: 'json', + description: + 'Task status (id, type, uniqueName, description, created, launched, completionStatus, progress, percentComplete, messages, returns)', + condition: { + field: 'operation', + value: [ + 'sailpoint_load_accounts', + 'sailpoint_load_entitlements', + 'sailpoint_get_task_status', + ], + }, + }, + success: { type: 'boolean', - description: 'False when an empty result may indicate a permission gap', + description: 'Whether the account aggregation request succeeded', + condition: { field: 'operation', value: 'sailpoint_load_accounts' }, + }, + accepted: { + type: 'boolean', + description: 'Whether SailPoint accepted the asynchronous write', + condition: { field: 'operation', value: ACCEPTED_OUTPUT_OPERATIONS }, + }, + status: { + type: 'number', + description: 'HTTP status returned by SailPoint for the write', + condition: { field: 'operation', value: ACCEPTED_OUTPUT_OPERATIONS }, + }, + newRequests: { + type: 'json', + description: + 'New access requests (requestedFor, requestedItemsDetails, attributesHash, accessRequestIds)', + condition: { field: 'operation', value: 'sailpoint_request_access' }, + }, + existingRequests: { + type: 'json', + description: + 'Existing matching access requests (requestedFor, requestedItemsDetails, attributesHash, accessRequestIds)', + condition: { field: 'operation', value: 'sailpoint_request_access' }, + }, + count: { + type: 'number', + description: 'Number of resources returned in this page', + condition: { field: 'operation', value: [...LIST_OUTPUT_OPERATIONS, 'sailpoint_search'] }, + }, + totalCount: { + type: 'number', + description: 'Total matching resources when count=true; otherwise null', + condition: { + field: 'operation', + value: [...LIST_OUTPUT_OPERATIONS, 'sailpoint_search', 'sailpoint_search_aggregate'], + }, }, - warnings: { type: 'json', description: 'Diagnostic warnings (e.g. empty-result guidance)' }, }, } @@ -870,7 +1734,7 @@ export const SailPointBlockMeta = { icon: SailPointIcon, title: 'SailPoint orphan account finder', prompt: - 'Create a scheduled workflow that searches SailPoint accounts that are uncorrelated to any identity, writes the orphan list to a table, and opens a review task for the source owners.', + 'Create a scheduled workflow that lists SailPoint accounts using the uncorrelated filter, groups the orphaned accounts by source, and writes the review-ready inventory to a table.', modules: ['scheduled', 'tables', 'agent', 'workflows'], category: 'operations', tags: ['enterprise', 'analysis'], @@ -928,7 +1792,35 @@ export const SailPointBlockMeta = { description: 'Submit a SailPoint access request and track it to completion via account activities and request status.', content: - '# Request and Track SailPoint Access\n\nDrive an access request from submission to fulfillment.\n\n## Steps\n1. Search entitlements, roles, or access profiles to resolve the exact item IDs.\n2. Submit an access request (GRANT_ACCESS) for the identities, adding a correlation note in client metadata.\n3. Poll access request status and account activities until the request completes, cancelling if needed.\n\n## Output\nA confirmation of the submitted request plus its current fulfillment status.', + '# Request and Track SailPoint Access\n\nDrive an access request from submission to fulfillment.\n\n## Steps\n1. Search entitlements, roles, or access profiles to resolve the exact item IDs and confirm the identity does not already hold the access.\n2. Submit a GRANT_ACCESS request using the flat human shape or the structured per-identity shape when account selection or a machine identity is required.\n3. Record accessRequestIds from newRequests and use access-request status plus account activities to follow fulfillment, cancelling only when authorized and necessary.\n\n## Output\nThe new or existing request IDs, requested items, and current fulfillment status.', + }, + { + name: 'review-pending-access-requests', + description: + 'Review pending SailPoint access-request approvals and approve or reject each item with an auditable comment.', + content: + '# Review Pending SailPoint Access Requests\n\nProcess the approval queue with the context needed for a defensible decision.\n\n## Steps\n1. List pending access-request approvals for the current approver or an authorized owner.\n2. Inspect the requester, target identity, requested object, dates, account selections, prior reviewer comments, and any separation-of-duties context.\n3. Approve justified requests; reject requests that should not proceed and include the required reason.\n\n## Output\nA decision log containing each approval ID, requested access, decision, comment, and provider acceptance status.', + }, + { + name: 'complete-certification-review', + description: + 'Review SailPoint certification items, record approve or revoke decisions, and sign off the completed certification.', + content: + '# Complete a SailPoint Certification Review\n\nWork through an assigned identity certification without losing review context.\n\n## Steps\n1. List certifications for the reviewer and open the target certification.\n2. Page through its access-review items, filtering by entitlement, access profile, or role when needed.\n3. Submit decisions in batches of no more than 250 review items, including comments and proposed end dates for revoke decisions where appropriate.\n4. Re-read the certification and sign it off only after every required item is complete.\n\n## Output\nThe certification status, decision summary, unresolved items, and final sign-off result.', + }, + { + name: 'monitor-aggregation-task', + description: + 'Start a SailPoint source aggregation and monitor its task status through completion.', + content: + '# Monitor a SailPoint Aggregation Task\n\nRun a source import and surface its terminal result.\n\n## Steps\n1. Start an account or entitlement aggregation for the intended source, attaching a CSV only for a compatible delimited-file source.\n2. Capture the returned task ID.\n3. Poll task status until completionStatus is populated, retaining progress, percentComplete, messages, and return values.\n4. Report warnings or errors without treating task submission as successful completion.\n\n## Output\nThe source and task IDs, progress history, completion status, messages, and returned task details.', + }, + { + name: 'audit-orphan-accounts', + description: + 'Find uncorrelated SailPoint accounts and prepare a source-grouped orphan-account inventory.', + content: + '# Audit SailPoint Orphan Accounts\n\nIdentify accounts that are not correlated to an identity.\n\n## Steps\n1. List accounts with the documented uncorrelated filter and request full detail when the audit needs source and attribute context.\n2. Page through all results using limit, offset, and totalCount when requested.\n3. Group accounts by source and preserve account ID, native identity, account name, source, creation and modification timestamps, and entitlement context.\n4. Write the normalized inventory to a table for governance follow-up.\n\n## Output\nA source-grouped orphan-account inventory with stable account identifiers and the evidence needed for review.', }, ], } as const satisfies BlockMeta diff --git a/apps/sim/lib/api/contracts/tools/sailpoint.ts b/apps/sim/lib/api/contracts/tools/sailpoint.ts deleted file mode 100644 index 080196840e8..00000000000 --- a/apps/sim/lib/api/contracts/tools/sailpoint.ts +++ /dev/null @@ -1,477 +0,0 @@ -import { z } from 'zod' -import type { - ContractBody, - ContractBodyInput, - ContractJsonResponse, -} from '@/lib/api/contracts/types' -import { defineRouteContract } from '@/lib/api/contracts/types' -import { FileInputSchema } from '@/lib/uploads/utils/file-schemas' - -/** Credential + version fields shared by every SailPoint operation. */ -const sailpointBaseFields = { - clientId: z.string().min(1, 'Client ID is required'), - clientSecret: z.string().min(1, 'Client Secret is required'), - tenant: z.string().min(1, 'Tenant is required'), - apiVersion: z.enum(['v2025', 'v2024', 'v3']).optional(), -} - -const filtersField = z.string().optional() -const sortersField = z.string().optional() -const offsetField = z.coerce.number().int().min(0, 'Offset must be 0 or greater').optional() -const countField = z.boolean().optional() - -const limitField = (max: number) => - z.coerce - .number() - .int() - .min(0, 'Limit must be 0 or greater') - .max(max, `Limit must be at most ${max}`) - .optional() - -/** Standard limit/offset/count trio with a per-endpoint limit cap. */ -const pagination = (limitMax: number) => ({ - limit: limitField(limitMax), - offset: offsetField, - count: countField, -}) - -const idField = (label: string) => z.string().min(1, `${label} is required`) - -/** Accepts an array of strings or a single string (route normalizes). */ -const stringListField = z.union([z.array(z.string()), z.string()]).optional() - -/** Parses a JSON string into a value before applying the inner schema. */ -function parseJson(value: unknown): unknown { - if (typeof value === 'string') { - try { - return JSON.parse(value) - } catch { - return value - } - } - return value -} - -const requestedForSchema = z.preprocess(parseJson, z.array(z.string())) - -const requestedItemSchema = z.object({ - type: z.enum(['ACCESS_PROFILE', 'ROLE', 'ENTITLEMENT']), - id: z.string().min(1, 'requestedItems[].id is required'), - comment: z.string().optional(), - removeDate: z.string().optional(), - startDate: z.string().optional(), - assignmentId: z.string().optional(), - nativeIdentity: z.string().optional(), - clientMetadata: z.record(z.string(), z.string()).optional(), -}) - -const requestedItemsSchema = z.preprocess(parseJson, z.array(requestedItemSchema)) -const clientMetadataSchema = z.preprocess(parseJson, z.record(z.string(), z.string())).optional() - -const LIMIT_STANDARD = 250 -const LIMIT_SEARCH = 10000 -const LIMIT_ROLES = 50 - -const searchSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_search'), - indices: stringListField, - query: z.string().optional(), - sort: stringListField, - searchAfter: stringListField, - includeNested: z.boolean().optional(), - ...pagination(LIMIT_SEARCH), -}) - -const searchCountSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_search_count'), - indices: stringListField, - query: z.string().optional(), -}) - -const searchAggregateSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_search_aggregate'), - indices: stringListField, - query: z.string().optional(), - aggregationsDsl: z.preprocess( - parseJson, - z.record(z.string(), z.unknown()).refine((value) => Object.keys(value).length > 0, { - message: 'aggregationsDsl is required and must define at least one aggregation', - }) - ), - limit: limitField(LIMIT_STANDARD), - offset: offsetField, -}) - -const listIdentitiesSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_list_identities'), - filters: filtersField, - sorters: sortersField, - defaultFilter: z.enum(['CORRELATED_ONLY', 'NONE']).optional(), - ...pagination(LIMIT_STANDARD), -}) - -const getIdentitySchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_get_identity'), - id: idField('Identity ID'), -}) - -const listAccountsSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_list_accounts'), - filters: filtersField, - sorters: sortersField, - detailLevel: z.enum(['SLIM', 'FULL']).optional(), - ...pagination(LIMIT_STANDARD), -}) - -const getAccountSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_get_account'), - id: idField('Account ID'), -}) - -const getAccountEntitlementsSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_get_account_entitlements'), - id: idField('Account ID'), - ...pagination(LIMIT_STANDARD), -}) - -const listEntitlementsSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_list_entitlements'), - filters: filtersField, - sorters: sortersField, - accountId: z.string().optional(), - segmentedForIdentity: z.string().optional(), - ...pagination(LIMIT_STANDARD), -}) - -const getEntitlementSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_get_entitlement'), - id: idField('Entitlement ID'), -}) - -const listRolesSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_list_roles'), - filters: filtersField, - sorters: sortersField, - ...pagination(LIMIT_ROLES), -}) - -const getRoleEntitlementsSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_get_role_entitlements'), - id: idField('Role ID'), - filters: filtersField, - sorters: sortersField, - ...pagination(LIMIT_ROLES), -}) - -const listAccessProfilesSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_list_access_profiles'), - filters: filtersField, - sorters: sortersField, - ...pagination(LIMIT_STANDARD), -}) - -const getAccessProfileEntitlementsSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_get_access_profile_entitlements'), - id: idField('Access Profile ID'), - filters: filtersField, - sorters: sortersField, - ...pagination(LIMIT_STANDARD), -}) - -const listSourcesSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_list_sources'), - filters: filtersField, - sorters: sortersField, - forSubadmin: z.string().optional(), - includeIDNSource: z.boolean().optional(), - ...pagination(LIMIT_STANDARD), -}) - -const getSourceSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_get_source'), - id: idField('Source ID'), -}) - -const listAccountActivitiesSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_list_account_activities'), - requestedFor: z.string().optional(), - requestedBy: z.string().optional(), - regardingIdentity: z.string().optional(), - filters: filtersField, - sorters: sortersField, - ...pagination(LIMIT_STANDARD), -}) - -const getAccountActivitySchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_get_account_activity'), - id: idField('Account activity ID'), -}) - -const listCampaignsSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_list_campaigns'), - detail: z.enum(['SLIM', 'FULL']).optional(), - filters: filtersField, - sorters: sortersField, - ...pagination(LIMIT_STANDARD), -}) - -const getCampaignSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_get_campaign'), - id: idField('Campaign ID'), - detail: z.enum(['SLIM', 'FULL']).optional(), -}) - -const listCertificationsSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_list_certifications'), - reviewerIdentity: z.string().optional(), - filters: filtersField, - sorters: sortersField, - ...pagination(LIMIT_STANDARD), -}) - -const listCertificationReviewItemsSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_list_certification_review_items'), - id: idField('Certification ID'), - filters: filtersField, - sorters: sortersField, - entitlements: z.string().optional(), - accessProfiles: z.string().optional(), - roles: z.string().optional(), - ...pagination(LIMIT_STANDARD), -}) - -const requestAccessSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_request_access'), - requestedFor: requestedForSchema, - requestedItems: requestedItemsSchema, - requestType: z.enum(['GRANT_ACCESS', 'REVOKE_ACCESS', 'MODIFY_ACCESS']).optional(), - clientMetadata: clientMetadataSchema, -}) - -const cancelAccessRequestSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_cancel_access_request'), - accountActivityId: idField('accountActivityId'), - comment: z.string().min(1, 'comment is required to cancel an access request'), -}) - -const getAccessRequestStatusSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_get_access_request_status'), - requestedFor: z.string().optional(), - requestedBy: z.string().optional(), - regardingIdentity: z.string().optional(), - assignedTo: z.string().optional(), - requestState: z.enum(['EXECUTING']).optional(), - filters: filtersField, - sorters: sortersField, - ...pagination(LIMIT_STANDARD), -}) - -/** - * Discriminated union of every JSON operation handled by `/api/tools/sailpoint/query`. The - * `.superRefine` enforces SailPoint's documented access-request constraints (server-side 400s) - * before submission so callers get descriptive, field-anchored errors. - */ -export const sailpointQueryBodySchema = z - .discriminatedUnion('operation', [ - searchSchema, - searchCountSchema, - searchAggregateSchema, - listIdentitiesSchema, - getIdentitySchema, - listAccountsSchema, - getAccountSchema, - getAccountEntitlementsSchema, - listEntitlementsSchema, - getEntitlementSchema, - listRolesSchema, - getRoleEntitlementsSchema, - listAccessProfilesSchema, - getAccessProfileEntitlementsSchema, - listSourcesSchema, - getSourceSchema, - listAccountActivitiesSchema, - getAccountActivitySchema, - listCampaignsSchema, - getCampaignSchema, - listCertificationsSchema, - listCertificationReviewItemsSchema, - requestAccessSchema, - cancelAccessRequestSchema, - getAccessRequestStatusSchema, - ]) - .superRefine((val, ctx) => { - if (val.operation !== 'sailpoint_request_access') return - - const requestType = val.requestType ?? 'GRANT_ACCESS' - const requestedFor = val.requestedFor - const requestedItems = val.requestedItems - - if (requestedFor.length === 0) { - ctx.addIssue({ - code: z.ZodIssueCode.custom, - path: ['requestedFor'], - message: 'requestedFor must contain at least one identity ID', - }) - } - if (requestedItems.length === 0) { - ctx.addIssue({ - code: z.ZodIssueCode.custom, - path: ['requestedItems'], - message: 'requestedItems must contain at least one item', - }) - } - - if (requestType === 'REVOKE_ACCESS') { - if (requestedFor.length > 1) { - ctx.addIssue({ - code: z.ZodIssueCode.custom, - path: ['requestedFor'], - message: 'REVOKE_ACCESS supports exactly one identity per request', - }) - } - if (requestedItems.length > 1) { - ctx.addIssue({ - code: z.ZodIssueCode.custom, - path: ['requestedItems'], - message: - 'REVOKE_ACCESS supports exactly one item per request (there is no bulk-revoke endpoint)', - }) - } - requestedItems.forEach((item, index) => { - if (!item.comment) { - ctx.addIssue({ - code: z.ZodIssueCode.custom, - path: ['requestedItems', index, 'comment'], - message: 'comment is required for REVOKE_ACCESS requests', - }) - } - if (item.startDate) { - ctx.addIssue({ - code: z.ZodIssueCode.custom, - path: ['requestedItems', index, 'startDate'], - message: 'startDate is not allowed on REVOKE_ACCESS requests', - }) - } - }) - } - - if (requestType === 'GRANT_ACCESS') { - const hasEntitlement = requestedItems.some((item) => item.type === 'ENTITLEMENT') - if (hasEntitlement) { - if (requestedItems.length > 25) { - ctx.addIssue({ - code: z.ZodIssueCode.custom, - path: ['requestedItems'], - message: 'A grant that includes entitlements may request at most 25 items', - }) - } - if (requestedFor.length > 10) { - ctx.addIssue({ - code: z.ZodIssueCode.custom, - path: ['requestedFor'], - message: 'A grant that includes entitlements may request for at most 10 identities', - }) - } - } - } - }) - -const loadAccountsSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_load_accounts'), - sourceId: idField('Source ID'), - file: FileInputSchema.optional().nullable(), - disableOptimization: z.boolean().optional(), -}) - -const loadEntitlementsSchema = z.object({ - ...sailpointBaseFields, - operation: z.literal('sailpoint_load_entitlements'), - sourceId: idField('Source ID'), - file: FileInputSchema.optional().nullable(), -}) - -export const sailpointLoadBodySchema = z.discriminatedUnion('operation', [ - loadAccountsSchema, - loadEntitlementsSchema, -]) - -const listOutputSchema = z.object({ - items: z.array(z.unknown()), - count: z.number(), - totalCount: z.number().nullable(), - complete: z.boolean(), - warnings: z.array(z.string()), -}) - -const searchOutputSchema = z.object({ - results: z.array(z.unknown()), - count: z.number(), - totalCount: z.number().nullable(), - complete: z.boolean(), - warnings: z.array(z.string()), -}) - -const countOutputSchema = z.object({ total: z.number() }) -const itemOutputSchema = z.object({ item: z.unknown() }) -const writeOutputSchema = z.object({ accepted: z.boolean(), status: z.number() }) -const taskOutputSchema = z.object({ task: z.unknown() }) - -const okResponse = (output: T) => - z.object({ success: z.literal(true), output }) - -const sailpointQueryResponseSchema = z.union([ - okResponse(listOutputSchema), - okResponse(searchOutputSchema), - okResponse(countOutputSchema), - okResponse(itemOutputSchema), - okResponse(writeOutputSchema), -]) - -const sailpointLoadResponseSchema = okResponse(taskOutputSchema) - -export const sailpointQueryContract = defineRouteContract({ - method: 'POST', - path: '/api/tools/sailpoint/query', - body: sailpointQueryBodySchema, - response: { mode: 'json', schema: sailpointQueryResponseSchema }, -}) - -export const sailpointLoadContract = defineRouteContract({ - method: 'POST', - path: '/api/tools/sailpoint/load', - body: sailpointLoadBodySchema, - response: { mode: 'json', schema: sailpointLoadResponseSchema }, -}) - -export type SailpointQueryBody = ContractBody -export type SailpointQueryBodyInput = ContractBodyInput -export type SailpointQueryResponse = ContractJsonResponse -export type SailpointLoadBody = ContractBody -export type SailpointLoadBodyInput = ContractBodyInput -export type SailpointLoadResponse = ContractJsonResponse diff --git a/apps/sim/lib/internal/sailpoint/client.test.ts b/apps/sim/lib/internal/sailpoint/client.test.ts new file mode 100644 index 00000000000..dadc85b9756 --- /dev/null +++ b/apps/sim/lib/internal/sailpoint/client.test.ts @@ -0,0 +1,109 @@ +/** + * @vitest-environment node + */ +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest' +import { + clearSailPointTokenStateForTests, + getSailPointAccessToken, + getSailPointTokenStateForTests, + resolveSailPointHosts, + sailpointFetch, +} from '@/lib/internal/sailpoint/client' + +const mockFetch = vi.fn() + +function tokenResponse(token: string, expiresIn = 3600): Response { + return Response.json({ access_token: token, expires_in: expiresIn }) +} + +describe('SailPoint client', () => { + beforeEach(() => { + clearSailPointTokenStateForTests() + mockFetch.mockReset() + vi.stubGlobal('fetch', mockFetch) + }) + + afterEach(() => { + vi.useRealTimers() + vi.unstubAllGlobals() + }) + + it('accepts only commercial and government tenant hosts', () => { + expect(resolveSailPointHosts('acme').host).toBe('acme.api.identitynow.com') + expect(resolveSailPointHosts('https://agency.api.identitynowgov.com').host).toBe( + 'agency.api.identitynowgov.com' + ) + expect(() => resolveSailPointHosts('acme.api.identitynow.com.evil.test')).toThrow( + 'not an allowed' + ) + }) + + it('isolates cache entries by the exact credential secret', async () => { + mockFetch + .mockResolvedValueOnce(tokenResponse('first')) + .mockResolvedValueOnce(tokenResponse('second')) + + const common = { tenant: 'acme', clientId: 'client' } + expect(await getSailPointAccessToken({ ...common, clientSecret: 'one' })).toBe('first') + expect(await getSailPointAccessToken({ ...common, clientSecret: 'two' })).toBe('second') + expect(mockFetch).toHaveBeenCalledTimes(2) + }) + + it('single-flights concurrent exchanges for the same credentials', async () => { + let release: ((response: Response) => void) | undefined + mockFetch.mockImplementationOnce( + () => + new Promise((resolve) => { + release = resolve + }) + ) + const credentials = { tenant: 'acme', clientId: 'client', clientSecret: 'secret' } + const first = getSailPointAccessToken(credentials) + const second = getSailPointAccessToken(credentials) + expect(mockFetch).toHaveBeenCalledTimes(1) + release?.(tokenResponse('shared')) + await expect(Promise.all([first, second])).resolves.toEqual(['shared', 'shared']) + }) + + it('expires cached tokens before their provider expiry', async () => { + vi.useFakeTimers() + vi.setSystemTime(new Date('2026-01-01T00:00:00.000Z')) + mockFetch + .mockResolvedValueOnce(tokenResponse('old', 100)) + .mockResolvedValueOnce(tokenResponse('new', 100)) + const credentials = { tenant: 'acme', clientId: 'client', clientSecret: 'secret' } + + expect(await getSailPointAccessToken(credentials)).toBe('old') + vi.setSystemTime(new Date('2026-01-01T00:01:31.000Z')) + expect(await getSailPointAccessToken(credentials)).toBe('new') + }) + + it('evicts the oldest token when the bounded cache is full', async () => { + mockFetch.mockImplementation(async () => tokenResponse('token')) + for (let index = 0; index < 101; index += 1) { + await getSailPointAccessToken({ + tenant: 'acme', + clientId: `client-${index}`, + clientSecret: 'secret', + }) + } + expect(getSailPointTokenStateForTests()).toEqual({ cacheSize: 100, exchangeSize: 0 }) + }) + + it('rejects provider responses larger than the shared JSON cap', async () => { + mockFetch.mockResolvedValueOnce(tokenResponse('token')).mockResolvedValueOnce( + new Response('{}', { + status: 200, + headers: { 'content-length': String(10 * 1024 * 1024 + 1) }, + }) + ) + const credentials = { tenant: 'acme', clientId: 'client', clientSecret: 'secret' } + + await expect( + sailpointFetch(credentials, (hosts) => ({ + url: `${hosts.apiBaseUrl}/identities/v1`, + init: { method: 'GET' }, + })) + ).rejects.toThrow(/maximum|limit|exceeds/i) + }) +}) diff --git a/apps/sim/lib/internal/sailpoint/client.ts b/apps/sim/lib/internal/sailpoint/client.ts new file mode 100644 index 00000000000..e1a1a70c8d0 --- /dev/null +++ b/apps/sim/lib/internal/sailpoint/client.ts @@ -0,0 +1,294 @@ +import { createHash } from 'node:crypto' +import { sleep } from '@sim/utils/helpers' +import { isRecordLike } from '@sim/utils/object' +import { backoffWithJitter, parseRetryAfter } from '@sim/utils/retry' +import { MAX_JSON_API_RESPONSE_BYTES } from '@/lib/core/security/input-validation.server' +import { + consumeOrCancelBody, + DEFAULT_MAX_ERROR_BODY_BYTES, + readResponseTextWithLimit, +} from '@/lib/core/utils/stream-limits' + +export interface SailPointCredentials { + clientId: string + clientSecret: string + tenant: string +} + +export interface SailPointHosts { + apiBaseUrl: string + host: string + tokenUrl: string +} + +export interface SailPointFetchResult { + data: unknown + headers: Headers + ok: boolean + status: number +} + +interface CachedToken { + expiresAt: number + token: string +} + +const MAX_FETCH_RETRIES = 4 +const MAX_TOKEN_CACHE_ENTRIES = 100 +const MAX_TOKEN_EXCHANGES = 100 +const MAX_TOKEN_RESPONSE_BYTES = 1024 * 1024 +const TOKEN_EXPIRY_BUFFER_MS = 60_000 +const tokenCache = new Map() +const tokenExchanges = new Map>() + +export function resolveSailPointHosts(tenant: string): SailPointHosts { + let host = tenant.trim().replace(/^https?:\/\//i, '') + host = host + .replace(/[/?#].*$/, '') + .replace(/\.+$/, '') + .toLowerCase() + + if (!host) throw new Error('SailPoint tenant is required') + if (!host.includes('.')) { + if (!/^[a-z0-9][a-z0-9-]*$/.test(host)) { + throw new Error(`Invalid SailPoint tenant "${tenant}"`) + } + host = `${host}.api.identitynow.com` + } + + const suffix = ['.api.identitynow.com', '.api.identitynowgov.com'].find((candidate) => + host.endsWith(candidate) + ) + const tenantPrefix = suffix ? host.slice(0, -suffix.length) : '' + if (!suffix || !tenantPrefix || !/^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?$/.test(tenantPrefix)) { + throw new Error( + `SailPoint host "${host}" is not an allowed Identity Security Cloud tenant host` + ) + } + + return { + apiBaseUrl: `https://${host}`, + host, + tokenUrl: `https://${host}/oauth/token`, + } +} + +export function getSailPointErrorMessage(data: unknown, fallback: string): string { + if (typeof data === 'string') return data || fallback + if (!isRecordLike(data)) return fallback + + if (Array.isArray(data.messages) && data.messages.length > 0) { + const first = data.messages[0] + if (isRecordLike(first) && typeof first.text === 'string' && first.text) { + const trackingId = typeof data.trackingId === 'string' ? data.trackingId : null + return trackingId ? `${first.text} (trackingId: ${trackingId})` : first.text + } + } + if (typeof data.error_description === 'string' && data.error_description) { + return data.error_description + } + if (typeof data.message === 'string' && data.message) return data.message + if (typeof data.error === 'string' && data.error) return data.error + return fallback +} + +function credentialsCacheKey(credentials: SailPointCredentials): string { + const { host } = resolveSailPointHosts(credentials.tenant) + const secretHash = createHash('sha256').update(credentials.clientSecret).digest('hex') + return `${host}:${credentials.clientId}:${secretHash}` +} + +function pruneTokenCache(now: number): void { + for (const [key, value] of tokenCache) { + if (value.expiresAt <= now) tokenCache.delete(key) + } + while (tokenCache.size >= MAX_TOKEN_CACHE_ENTRIES) { + const oldest = tokenCache.keys().next().value + if (typeof oldest !== 'string') break + tokenCache.delete(oldest) + } +} + +function cacheToken(key: string, token: CachedToken): void { + pruneTokenCache(Date.now()) + tokenCache.delete(key) + tokenCache.set(key, token) +} + +async function readBoundedBody( + response: Response, + maxBytes: number, + signal?: AbortSignal +): Promise { + if (response.status === 204) return null + const text = await readResponseTextWithLimit(response, { + maxBytes, + label: 'SailPoint response body', + signal, + }) + if (!text) return null + try { + return JSON.parse(text) as unknown + } catch { + return text + } +} + +async function exchangeAccessToken( + credentials: SailPointCredentials, + signal?: AbortSignal +): Promise { + const { tokenUrl } = resolveSailPointHosts(credentials.tenant) + let attempt = 0 + + while (true) { + signal?.throwIfAborted() + const response = await fetch(tokenUrl, { + method: 'POST', + headers: { + Accept: 'application/json', + 'Content-Type': 'application/x-www-form-urlencoded', + }, + body: new URLSearchParams({ + grant_type: 'client_credentials', + client_id: credentials.clientId, + client_secret: credentials.clientSecret, + }).toString(), + cache: 'no-store', + signal, + }) + + if (response.status === 429 && attempt < MAX_FETCH_RETRIES) { + const retryAfterMs = parseRetryAfter(response.headers.get('retry-after')) + await consumeOrCancelBody(response, DEFAULT_MAX_ERROR_BODY_BYTES) + attempt += 1 + await sleep(backoffWithJitter(attempt, retryAfterMs)) + continue + } + + const data = await readBoundedBody( + response, + response.ok ? MAX_TOKEN_RESPONSE_BYTES : DEFAULT_MAX_ERROR_BODY_BYTES, + signal + ) + if (!response.ok) { + throw new Error(getSailPointErrorMessage(data, 'Failed to authenticate with SailPoint')) + } + if (!isRecordLike(data) || typeof data.access_token !== 'string' || !data.access_token) { + throw new Error('SailPoint authentication did not return an access token') + } + + const parsedExpiry = Number(data.expires_in) + const expiresInSeconds = Number.isFinite(parsedExpiry) && parsedExpiry > 0 ? parsedExpiry : 3600 + const bufferMs = Math.min(TOKEN_EXPIRY_BUFFER_MS, expiresInSeconds * 100) + const key = credentialsCacheKey(credentials) + cacheToken(key, { + token: data.access_token, + expiresAt: Date.now() + Math.max(expiresInSeconds * 1000 - bufferMs, 0), + }) + return data.access_token + } +} + +export function invalidateSailPointToken(credentials: SailPointCredentials): void { + tokenCache.delete(credentialsCacheKey(credentials)) +} + +export async function getSailPointAccessToken( + credentials: SailPointCredentials, + signal?: AbortSignal +): Promise { + signal?.throwIfAborted() + const key = credentialsCacheKey(credentials) + const now = Date.now() + const cached = tokenCache.get(key) + if (cached && cached.expiresAt > now) { + tokenCache.delete(key) + tokenCache.set(key, cached) + return cached.token + } + if (cached) tokenCache.delete(key) + + const existing = tokenExchanges.get(key) + if (existing) return existing + if (tokenExchanges.size >= MAX_TOKEN_EXCHANGES) { + throw new Error('Too many concurrent SailPoint token exchanges') + } + + const exchange = exchangeAccessToken(credentials, signal).finally(() => { + tokenExchanges.delete(key) + }) + tokenExchanges.set(key, exchange) + return exchange +} + +export async function sailpointFetch( + credentials: SailPointCredentials, + buildRequest: (hosts: SailPointHosts) => { init: RequestInit; url: string }, + options: { maxRetries?: number; signal?: AbortSignal } = {} +): Promise { + const maxRetries = Math.min(Math.max(options.maxRetries ?? MAX_FETCH_RETRIES, 0), 10) + const hosts = resolveSailPointHosts(credentials.tenant) + let attempt = 0 + let refreshedOn401 = false + + while (true) { + options.signal?.throwIfAborted() + const token = await getSailPointAccessToken(credentials, options.signal) + const { init, url } = buildRequest(hosts) + const headers = new Headers(init.headers) + headers.set('Authorization', `Bearer ${token}`) + if (!headers.has('Accept')) headers.set('Accept', 'application/json') + + const response = await fetch(url, { + ...init, + cache: 'no-store', + headers, + signal: options.signal, + }) + + if (response.status === 401 && !refreshedOn401) { + await consumeOrCancelBody(response, DEFAULT_MAX_ERROR_BODY_BYTES) + invalidateSailPointToken(credentials) + refreshedOn401 = true + continue + } + if (response.status === 429 && attempt < maxRetries) { + const retryAfterMs = parseRetryAfter(response.headers.get('retry-after')) + await consumeOrCancelBody(response, DEFAULT_MAX_ERROR_BODY_BYTES) + attempt += 1 + await sleep(backoffWithJitter(attempt, retryAfterMs)) + continue + } + + const data = await readBoundedBody( + response, + response.ok ? MAX_JSON_API_RESPONSE_BYTES : DEFAULT_MAX_ERROR_BODY_BYTES, + options.signal + ) + return { + data, + headers: response.headers, + ok: response.ok, + status: response.status, + } + } +} + +export function readTotalCount(headers: Headers): number | null { + const raw = headers.get('x-total-count') + if (!raw) return null + const parsed = Number(raw) + return Number.isFinite(parsed) && parsed >= 0 ? parsed : null +} + +/** Clears process-local authentication state for deterministic tests. */ +export function clearSailPointTokenStateForTests(): void { + tokenCache.clear() + tokenExchanges.clear() +} + +/** Returns cache sizes for deterministic boundary tests. */ +export function getSailPointTokenStateForTests(): { cacheSize: number; exchangeSize: number } { + return { cacheSize: tokenCache.size, exchangeSize: tokenExchanges.size } +} diff --git a/apps/sim/lib/internal/sailpoint/execute-tool.test.ts b/apps/sim/lib/internal/sailpoint/execute-tool.test.ts new file mode 100644 index 00000000000..fc7a6619688 --- /dev/null +++ b/apps/sim/lib/internal/sailpoint/execute-tool.test.ts @@ -0,0 +1,641 @@ +/** + * @vitest-environment node + */ +import { beforeEach, describe, expect, it, vi } from 'vitest' +import { PayloadSizeLimitError } from '@/lib/core/utils/stream-limits' + +const fileMocks = vi.hoisted(() => ({ + assertToolFileAccess: vi.fn(), + downloadServableFileFromStorage: vi.fn(), + processFilesToUserFiles: vi.fn(), +})) + +vi.mock('@/app/api/files/authorization', () => ({ + assertToolFileAccess: fileMocks.assertToolFileAccess, +})) +vi.mock('@/lib/uploads/utils/file-utils', () => ({ + processFilesToUserFiles: fileMocks.processFilesToUserFiles, +})) +vi.mock('@/lib/uploads/utils/file-utils.server', () => ({ + downloadServableFileFromStorage: fileMocks.downloadServableFileFromStorage, +})) + +import { clearSailPointTokenStateForTests } from '@/lib/internal/sailpoint/client' +import { executeSailPointTool } from '@/lib/internal/sailpoint/execute-tool' +import { MAX_SAILPOINT_CSV_BYTES } from '@/lib/internal/sailpoint/operations' + +const mockFetch = vi.fn() +const credentials = { clientId: 'client', clientSecret: 'secret', tenant: 'acme' } + +function tokenResponse(): Response { + return Response.json({ access_token: 'token', expires_in: 3600 }) +} + +function request(operation: string, input: Record, userId?: string) { + return executeSailPointTool({ + toolId: operation, + input: { ...credentials, operation, ...input }, + headers: new Headers(), + context: { workflowId: 'workflow', userId }, + requestId: 'request-id', + }) +} + +interface OperationCase { + body?: unknown + input: Record + method: 'GET' | 'POST' + operation: string + path: string + providerBody?: unknown + providerStatus?: number + total?: number +} + +const OPERATION_CASES: OperationCase[] = [ + { + operation: 'sailpoint_search', + method: 'POST', + path: '/search/v1', + input: { indices: ['identities'], query: { query: 'name:a*' } }, + body: { indices: ['identities'], query: { query: 'name:a*' } }, + providerBody: [], + }, + { + operation: 'sailpoint_search_count', + method: 'POST', + path: '/search/v1/count', + input: { queryType: 'DSL', queryDsl: { match_all: {} } }, + body: { queryType: 'DSL', queryDsl: { match_all: {} } }, + providerStatus: 204, + total: 7, + }, + { + operation: 'sailpoint_search_aggregate', + method: 'POST', + path: '/search/v1/aggregate?count=true', + input: { aggregationsDsl: { names: { terms: { field: 'name' } } }, count: true }, + body: { + aggregationType: 'DSL', + aggregationsDsl: { names: { terms: { field: 'name' } } }, + }, + providerBody: { aggregations: { names: { buckets: [] } }, hits: [] }, + total: 3, + }, + { + operation: 'sailpoint_list_identities', + method: 'GET', + path: '/identities/v1', + input: {}, + providerBody: [], + }, + { + operation: 'sailpoint_get_identity', + method: 'GET', + path: '/identities/v1/id', + input: { id: 'id' }, + }, + { + operation: 'sailpoint_list_identity_entitlements', + method: 'GET', + path: '/entitlements/v1/identities/id/entitlements', + input: { id: 'id' }, + providerBody: [], + }, + { + operation: 'sailpoint_list_accounts', + method: 'GET', + path: '/accounts/v1', + input: {}, + providerBody: [], + }, + { + operation: 'sailpoint_get_account', + method: 'GET', + path: '/accounts/v1/id', + input: { id: 'id' }, + }, + { + operation: 'sailpoint_get_account_entitlements', + method: 'GET', + path: '/accounts/v1/id/entitlements', + input: { id: 'id' }, + providerBody: [], + }, + { + operation: 'sailpoint_list_entitlements', + method: 'GET', + path: '/entitlements/v1', + input: {}, + providerBody: [], + }, + { + operation: 'sailpoint_get_entitlement', + method: 'GET', + path: '/entitlements/v1/id', + input: { id: 'id' }, + }, + { + operation: 'sailpoint_list_roles', + method: 'GET', + path: '/roles/v1', + input: {}, + providerBody: [], + }, + { operation: 'sailpoint_get_role', method: 'GET', path: '/roles/v1/id', input: { id: 'id' } }, + { + operation: 'sailpoint_get_role_entitlements', + method: 'GET', + path: '/roles/v1/id/entitlements', + input: { id: 'id' }, + providerBody: [], + }, + { + operation: 'sailpoint_list_access_profiles', + method: 'GET', + path: '/access-profiles/v1', + input: {}, + providerBody: [], + }, + { + operation: 'sailpoint_get_access_profile', + method: 'GET', + path: '/access-profiles/v1/id', + input: { id: 'id' }, + }, + { + operation: 'sailpoint_get_access_profile_entitlements', + method: 'GET', + path: '/access-profiles/v1/id/entitlements', + input: { id: 'id' }, + providerBody: [], + }, + { + operation: 'sailpoint_list_sources', + method: 'GET', + path: '/sources/v1', + input: {}, + providerBody: [], + }, + { operation: 'sailpoint_get_source', method: 'GET', path: '/sources/v1/id', input: { id: 'id' } }, + { + operation: 'sailpoint_list_account_activities', + method: 'GET', + path: '/account-activities/v1', + input: {}, + providerBody: [], + }, + { + operation: 'sailpoint_get_account_activity', + method: 'GET', + path: '/account-activities/v1/id', + input: { id: 'id' }, + }, + { + operation: 'sailpoint_list_campaigns', + method: 'GET', + path: '/campaigns/v1', + input: {}, + providerBody: [], + }, + { + operation: 'sailpoint_get_campaign', + method: 'GET', + path: '/campaigns/v1/id', + input: { id: 'id' }, + }, + { + operation: 'sailpoint_list_certifications', + method: 'GET', + path: '/certifications/v1', + input: {}, + providerBody: [], + }, + { + operation: 'sailpoint_get_certification', + method: 'GET', + path: '/certifications/v1/id', + input: { id: 'id' }, + }, + { + operation: 'sailpoint_list_certification_review_items', + method: 'GET', + path: '/certifications/v1/id/access-review-items', + input: { id: 'id' }, + providerBody: [], + }, + { + operation: 'sailpoint_decide_certification_review_items', + method: 'POST', + path: '/certifications/v1/id/decide', + input: { id: 'id', decisions: [{ id: 'review', decision: 'APPROVE', bulk: true }] }, + body: [{ id: 'review', decision: 'APPROVE', bulk: true }], + }, + { + operation: 'sailpoint_sign_off_certification', + method: 'POST', + path: '/certifications/v1/id/sign-off', + input: { id: 'id' }, + }, + { + operation: 'sailpoint_request_access', + method: 'POST', + path: '/access-requests/v1', + input: { requestedFor: ['identity'], requestedItems: [{ type: 'ROLE', id: 'role' }] }, + body: { requestedFor: ['identity'], requestedItems: [{ type: 'ROLE', id: 'role' }] }, + providerStatus: 202, + providerBody: { newRequests: [], existingRequests: [] }, + }, + { + operation: 'sailpoint_cancel_access_request', + method: 'POST', + path: '/access-requests/v1/cancel', + input: { accountActivityId: 'activity', comment: 'cancel' }, + body: { accountActivityId: 'activity', comment: 'cancel' }, + providerStatus: 202, + }, + { + operation: 'sailpoint_get_access_request_status', + method: 'GET', + path: '/access-request-status/v1', + input: {}, + providerBody: [], + }, + { + operation: 'sailpoint_list_pending_access_request_approvals', + method: 'GET', + path: '/access-request-approvals/v1/pending', + input: {}, + providerBody: [], + }, + { + operation: 'sailpoint_approve_access_request', + method: 'POST', + path: '/access-request-approvals/v1/approval/approve', + input: { approvalId: 'approval' }, + providerStatus: 202, + }, + { + operation: 'sailpoint_reject_access_request', + method: 'POST', + path: '/access-request-approvals/v1/approval/reject', + input: { approvalId: 'approval', comment: 'reject' }, + body: { comment: 'reject' }, + providerStatus: 202, + }, + { + operation: 'sailpoint_get_task_status', + method: 'GET', + path: '/task-status/v1/id', + input: { id: 'id' }, + }, +] + +describe('SailPoint internal tool handler', () => { + beforeEach(() => { + clearSailPointTokenStateForTests() + mockFetch.mockReset() + vi.stubGlobal('fetch', mockFetch) + fileMocks.assertToolFileAccess.mockReset().mockResolvedValue(null) + fileMocks.processFilesToUserFiles.mockReset() + fileMocks.downloadServableFileFromStorage.mockReset() + }) + + it.each(OPERATION_CASES)( + 'uses the documented path and method for $operation', + async (testCase) => { + const headers = + testCase.total === undefined ? undefined : { 'x-total-count': String(testCase.total) } + const status = testCase.providerStatus ?? 200 + const providerResponse = + status === 204 + ? new Response(null, { status, headers }) + : Response.json(testCase.providerBody ?? { id: 'resource' }, { status, headers }) + mockFetch.mockResolvedValueOnce(tokenResponse()).mockResolvedValueOnce(providerResponse) + + const response = await request(testCase.operation, testCase.input) + expect(response.status).toBe(200) + const providerCall = mockFetch.mock.calls[1] + expect( + new URL(String(providerCall[0])).pathname + new URL(String(providerCall[0])).search + ).toBe(testCase.path) + const init = providerCall[1] + expect(init?.method).toBe(testCase.method) + if (testCase.body !== undefined) { + expect(JSON.parse(String(init?.body))).toEqual(testCase.body) + } + } + ) + + it('preserves access-request tracking and accepted status', async () => { + const tracking = { + newRequests: [{ requestedFor: 'identity', accessRequestIds: ['new'] }], + existingRequests: [{ requestedFor: 'identity', accessRequestIds: ['existing'] }], + } + mockFetch + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(Response.json(tracking, { status: 202 })) + const response = await request('sailpoint_request_access', { + requestedFor: ['identity'], + requestedItems: [{ type: 'ROLE', id: 'role' }], + }) + const body = await response.json() + expect(body.output).toEqual({ accepted: true, status: 202, ...tracking }) + }) + + it('forwards every advanced Search body field without inventing default indices', async () => { + const input = { + queryType: 'DSL', + queryVersion: '7.10', + query: { query: 'name:a*', fields: 'name', timeZone: 'UTC', innerHit: { type: 'access' } }, + queryDsl: { match_all: {} }, + textQuery: { terms: ['alice'], fields: ['name'], matchAny: true, contains: false }, + typeAheadQuery: { + query: 'Ali', + field: 'name', + nestedType: 'access', + maxExpansions: 20, + size: 5, + sort: 'asc', + sortByValue: true, + }, + includeNested: false, + queryResultFilter: { includes: ['name'], excludes: ['stacktrace'] }, + aggregationType: 'DSL', + aggregationsVersion: '7.10', + aggregationsDsl: { names: { terms: { field: 'name' } } }, + sort: ['name', '+id'], + searchAfter: ['Alice', 'id'], + filters: { status: { terms: ['ACTIVE'], exclude: false } }, + limit: 25, + offset: 5, + count: true, + } + mockFetch + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(Response.json([], { headers: { 'x-total-count': '1' } })) + const response = await request('sailpoint_search', input) + expect(response.status).toBe(200) + const [url, init] = mockFetch.mock.calls[1] + expect(String(url)).toMatch(/\/search\/v1\?limit=25&offset=5&count=true$/) + expect(JSON.parse(String(init?.body))).toEqual({ + queryType: input.queryType, + queryVersion: input.queryVersion, + query: input.query, + queryDsl: input.queryDsl, + textQuery: input.textQuery, + typeAheadQuery: input.typeAheadQuery, + includeNested: input.includeNested, + queryResultFilter: input.queryResultFilter, + aggregationType: input.aggregationType, + aggregationsVersion: input.aggregationsVersion, + aggregationsDsl: input.aggregationsDsl, + sort: input.sort, + searchAfter: input.searchAfter, + filters: input.filters, + }) + expect(JSON.parse(String(init?.body))).not.toHaveProperty('indices') + }) + + it.each(['sailpoint_search', 'sailpoint_search_count'])( + 'requires a query for the default SAILPOINT mode in %s', + async (operation) => { + const response = await request(operation, {}) + expect(response.status).toBe(400) + expect(mockFetch).not.toHaveBeenCalled() + } + ) + + it('requires queryType=DSL when queryDsl is used', async () => { + const response = await request('sailpoint_search', { queryDsl: { match_all: {} } }) + expect(response.status).toBe(400) + expect(mockFetch).not.toHaveBeenCalled() + }) + + it.each([ + [ + 'sailpoint_list_entitlements', + { + segmentedForIdentity: 'identity', + forSegmentIds: 'segment-a,segment-b', + includeUnsegmented: false, + searchAfter: 'cursor', + filters: 'name sw "A"', + sorters: 'name', + limit: 10, + offset: 2, + count: true, + }, + '/entitlements/v1?filters=name+sw+%22A%22&sorters=name&segmented-for-identity=identity&for-segment-ids=segment-a%2Csegment-b&include-unsegmented=false&searchAfter=cursor&limit=10&offset=2&count=true', + ], + [ + 'sailpoint_list_roles', + { forSubadmin: 'me', forSegmentIds: 'segment', includeUnsegmented: false }, + '/roles/v1?for-subadmin=me&for-segment-ids=segment&include-unsegmented=false', + ], + [ + 'sailpoint_list_access_profiles', + { forSubadmin: 'me', forSegmentIds: 'segment', includeUnsegmented: false }, + '/access-profiles/v1?for-subadmin=me&for-segment-ids=segment&include-unsegmented=false', + ], + ])('forwards current collection parameters for %s', async (operation, input, path) => { + mockFetch.mockResolvedValueOnce(tokenResponse()).mockResolvedValueOnce(Response.json([])) + const response = await request(operation, input) + expect(response.status).toBe(200) + expect( + new URL(String(mockFetch.mock.calls[1][0])).pathname + + new URL(String(mockFetch.mock.calls[1][0])).search + ).toBe(path) + }) + + it('rejects pairwise certification review selectors', async () => { + const response = await request('sailpoint_list_certification_review_items', { + id: 'certification', + entitlements: 'entitlement', + roles: 'role', + }) + expect(response.status).toBe(400) + expect(mockFetch).not.toHaveBeenCalled() + }) + + it.each(['sailpoint_list_account_activities', 'sailpoint_get_access_request_status'])( + 'rejects conflicting requested/regarding identity scopes for %s', + async (operation) => { + const response = await request(operation, { + requestedFor: 'identity', + regardingIdentity: 'identity', + }) + expect(response.status).toBe(400) + expect(mockFetch).not.toHaveBeenCalled() + } + ) + + it('forwards the nested requestedForWithRequestedItems shape', async () => { + const nested = [ + { + identityId: 'identity', + identityType: 'HUMAN', + requestedItems: [ + { + type: 'ENTITLEMENT', + id: 'entitlement', + accountSelection: [{ sourceId: 'source', accounts: [{ nativeIdentity: 'native-id' }] }], + }, + ], + }, + ] + mockFetch + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce( + Response.json({ newRequests: [], existingRequests: [] }, { status: 202 }) + ) + const response = await request('sailpoint_request_access', { + requestedForWithRequestedItems: nested, + }) + expect(response.status).toBe(200) + expect(JSON.parse(String(mockFetch.mock.calls[1][1]?.body))).toEqual({ + requestedForWithRequestedItems: nested, + }) + }) + + it('accepts multiple role revokes but rejects multiple entitlement revokes', async () => { + mockFetch + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce( + Response.json({ newRequests: [], existingRequests: [] }, { status: 202 }) + ) + const accepted = await request('sailpoint_request_access', { + requestType: 'REVOKE_ACCESS', + requestedFor: ['identity'], + requestedItems: [ + { type: 'ROLE', id: 'one', comment: 'remove' }, + { type: 'ROLE', id: 'two', comment: 'remove' }, + ], + }) + expect(accepted.status).toBe(200) + + clearSailPointTokenStateForTests() + mockFetch.mockReset() + const rejected = await request('sailpoint_request_access', { + requestType: 'REVOKE_ACCESS', + requestedFor: ['identity'], + requestedItems: [ + { type: 'ENTITLEMENT', id: 'one', comment: 'remove' }, + { type: 'ENTITLEMENT', id: 'two', comment: 'remove' }, + ], + }) + expect(rejected.status).toBe(400) + expect(mockFetch).not.toHaveBeenCalled() + }) + + it('maps resource reads to their resource-named output', async () => { + mockFetch + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(Response.json({ id: 'identity' })) + const response = await request('sailpoint_get_identity', { id: 'identity' }) + await expect(response.json()).resolves.toEqual({ + success: true, + output: { identity: { id: 'identity' } }, + }) + }) + + it('rejects mismatched tool and input operation before making a provider call', async () => { + const response = await executeSailPointTool({ + toolId: 'sailpoint_get_identity', + input: { ...credentials, operation: 'sailpoint_get_account', id: 'id' }, + headers: new Headers(), + context: { workflowId: 'workflow' }, + requestId: 'request-id', + }) + expect(response.status).toBe(400) + expect(mockFetch).not.toHaveBeenCalled() + }) + + it.each([ + ['sailpoint_load_accounts', '/sources/v1/source/load-accounts'], + ['sailpoint_load_entitlements', '/sources/v1/source/load-entitlements'], + ])('authorizes and bounds the CSV for %s', async (operation, path) => { + fileMocks.processFilesToUserFiles.mockReturnValue([ + { key: 'workspace/file.csv', name: 'file.csv', type: 'text/csv' }, + ]) + fileMocks.downloadServableFileFromStorage.mockResolvedValue({ + buffer: Buffer.from('id,name'), + contentType: 'text/csv', + }) + const providerBody = + operation === 'sailpoint_load_accounts' + ? { success: true, task: { id: 'task' } } + : { id: 'task', uniqueName: 'aggregation' } + mockFetch + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(Response.json(providerBody, { status: 202 })) + + const response = await request( + operation, + { sourceId: 'source', file: { key: 'file', name: 'file.csv', size: 7 } }, + 'user' + ) + expect(response.status).toBe(200) + const envelope = await response.clone().json() + if (operation === 'sailpoint_load_accounts') { + expect(envelope.output).toEqual({ success: true, task: { id: 'task' } }) + } else { + expect(envelope.output).toEqual({ task: providerBody }) + } + expect(fileMocks.assertToolFileAccess).toHaveBeenCalledWith( + 'workspace/file.csv', + 'user', + 'request-id', + expect.anything() + ) + expect(fileMocks.downloadServableFileFromStorage).toHaveBeenCalledWith( + expect.objectContaining({ key: 'workspace/file.csv' }), + 'request-id', + expect.anything(), + { maxBytes: MAX_SAILPOINT_CSV_BYTES, signal: undefined } + ) + expect(new URL(String(mockFetch.mock.calls[1][0])).pathname).toBe(path) + }) + + it('maps an oversized stored CSV to a bounded validation error', async () => { + fileMocks.processFilesToUserFiles.mockReturnValue([ + { key: 'workspace/file.csv', name: 'file.csv', type: 'text/csv' }, + ]) + fileMocks.downloadServableFileFromStorage.mockRejectedValue( + new PayloadSizeLimitError({ + label: 'SailPoint CSV', + maxBytes: MAX_SAILPOINT_CSV_BYTES, + observedBytes: MAX_SAILPOINT_CSV_BYTES + 1, + }) + ) + const response = await request( + 'sailpoint_load_accounts', + { sourceId: 'source', file: { key: 'file', name: 'file.csv', size: 7 } }, + 'user' + ) + expect(response.status).toBe(400) + await expect(response.json()).resolves.toMatchObject({ + success: false, + error: 'SailPoint CSV file exceeds the 25 MiB limit', + }) + expect(mockFetch).not.toHaveBeenCalled() + }) + + it('allows actorless provider calls but rejects stored-file loads without an actor', async () => { + mockFetch + .mockResolvedValueOnce(tokenResponse()) + .mockResolvedValueOnce(Response.json({ id: 'identity' })) + const providerResponse = await request('sailpoint_get_identity', { id: 'identity' }) + expect(providerResponse.status).toBe(200) + + clearSailPointTokenStateForTests() + mockFetch.mockReset() + const fileResponse = await request('sailpoint_load_accounts', { + sourceId: 'source', + file: { key: 'file', name: 'file.csv', size: 7 }, + }) + expect(fileResponse.status).toBe(401) + expect(fileMocks.processFilesToUserFiles).not.toHaveBeenCalled() + expect(mockFetch).not.toHaveBeenCalled() + }) +}) diff --git a/apps/sim/lib/internal/sailpoint/execute-tool.ts b/apps/sim/lib/internal/sailpoint/execute-tool.ts new file mode 100644 index 00000000000..1bd9ad3e0da --- /dev/null +++ b/apps/sim/lib/internal/sailpoint/execute-tool.ts @@ -0,0 +1,70 @@ +import { getErrorMessage } from '@sim/utils/errors' +import { isRecordLike } from '@sim/utils/object' +import { getValidationErrorMessage } from '@/lib/api/server' +import { DEFAULT_MAX_JSON_BODY_BYTES } from '@/lib/api/server/validation' +import { isPayloadSizeLimitError } from '@/lib/core/utils/stream-limits' +import { executeSailPointOperation } from '@/lib/internal/sailpoint/operations' +import { parseSailPointInput } from '@/lib/internal/sailpoint/schema' +import type { InternalToolOperationHandler } from '@/lib/internal/tool-operations/types' + +export const executeSailPointTool: InternalToolOperationHandler = async (request) => { + request.signal?.throwIfAborted() + let serializedInput: string + try { + serializedInput = JSON.stringify(request.input) ?? '' + } catch { + return Response.json({ success: false, error: 'Invalid request data' }, { status: 400 }) + } + if (Buffer.byteLength(serializedInput, 'utf8') > DEFAULT_MAX_JSON_BODY_BYTES) { + return Response.json( + { + success: false, + error: `Request body exceeds the maximum allowed size of ${DEFAULT_MAX_JSON_BODY_BYTES} bytes`, + }, + { status: 413 } + ) + } + + if (!isRecordLike(request.input) || request.input.operation !== request.toolId) { + return Response.json( + { success: false, error: 'SailPoint input operation must match the executing tool ID' }, + { status: 400 } + ) + } + + const parsed = parseSailPointInput(request.toolId, request.input) + if (!parsed) { + return Response.json( + { success: false, error: `Unsupported SailPoint tool: ${request.toolId}` }, + { status: 500 } + ) + } + if (!parsed.success) { + return Response.json( + { + success: false, + error: getValidationErrorMessage(parsed.error, 'Invalid SailPoint request'), + }, + { status: 400 } + ) + } + + try { + const response = await executeSailPointOperation(parsed.data, { + requestId: request.requestId, + signal: request.signal, + userId: request.context.userId, + }) + request.signal?.throwIfAborted() + return response + } catch (error) { + request.signal?.throwIfAborted() + return Response.json( + { + success: false, + error: getErrorMessage(error, 'SailPoint request failed'), + }, + { status: isPayloadSizeLimitError(error) ? 502 : 500 } + ) + } +} diff --git a/apps/sim/lib/internal/sailpoint/operations.ts b/apps/sim/lib/internal/sailpoint/operations.ts new file mode 100644 index 00000000000..1a3815f1f36 --- /dev/null +++ b/apps/sim/lib/internal/sailpoint/operations.ts @@ -0,0 +1,677 @@ +import { createLogger } from '@sim/logger' +import { getErrorMessage } from '@sim/utils/errors' +import { filterUndefined, isRecordLike } from '@sim/utils/object' +import { isPayloadSizeLimitError } from '@/lib/core/utils/stream-limits' +import { + getSailPointErrorMessage, + readTotalCount, + type SailPointCredentials, + type SailPointFetchResult, + type SailPointHosts, + sailpointFetch, +} from '@/lib/internal/sailpoint/client' +import type { SailPointInput } from '@/lib/internal/sailpoint/schema' +import { processFilesToUserFiles, type RawFileInput } from '@/lib/uploads/utils/file-utils' +import { downloadServableFileFromStorage } from '@/lib/uploads/utils/file-utils.server' +import { docNotReadyResponse } from '@/lib/uploads/utils/servable-file-response' +import { assertToolFileAccess } from '@/app/api/files/authorization' + +const logger = createLogger('SailPointOperations') + +export const MAX_SAILPOINT_CSV_BYTES = 25 * 1024 * 1024 + +export interface SailPointOperationContext { + requestId: string + signal?: AbortSignal + userId?: string +} + +type InputRecord = SailPointInput & Record +type ResourceKey = + | 'accessProfile' + | 'account' + | 'accountActivity' + | 'campaign' + | 'certification' + | 'entitlement' + | 'identity' + | 'role' + | 'source' + | 'task' +type ResultKind = + | 'aggregate' + | 'count' + | 'list' + | 'request-access' + | 'search' + | 'write' + | ResourceKey + +const RESOURCE_KEYS = new Set([ + 'accessProfile', + 'account', + 'accountActivity', + 'campaign', + 'certification', + 'entitlement', + 'identity', + 'role', + 'source', + 'task', +]) + +function queryString(params: Record): string { + const query = new URLSearchParams() + for (const [key, value] of Object.entries(params)) { + if (value === undefined || value === null || value === '') continue + query.set(key, String(value)) + } + const serialized = query.toString() + return serialized ? `?${serialized}` : '' +} + +function encodeId(value: unknown): string { + return encodeURIComponent(String(value)) +} + +function toStringList(value: unknown): string[] | undefined { + if (value == null) return undefined + const normalize = (entry: unknown): string | null => { + if (typeof entry === 'string') return entry.trim() || null + if (typeof entry === 'number' || typeof entry === 'boolean') return String(entry) + return null + } + if (Array.isArray(value)) { + const values = value.map(normalize).filter((entry): entry is string => entry !== null) + return values.length ? values : undefined + } + if (typeof value === 'string') { + const values = value + .split(',') + .map((entry) => entry.trim()) + .filter(Boolean) + return values.length ? values : undefined + } + return undefined +} + +function jsonRequest(body: unknown): RequestInit { + return { + method: 'POST', + headers: { 'Content-Type': 'application/json' }, + body: JSON.stringify(body), + } +} + +function searchBody(input: InputRecord): Record { + return filterUndefined({ + indices: toStringList(input.indices), + queryType: input.queryType, + queryVersion: input.queryVersion, + query: typeof input.query === 'string' ? { query: input.query } : input.query, + queryDsl: input.queryDsl, + textQuery: input.textQuery, + typeAheadQuery: input.typeAheadQuery, + includeNested: input.includeNested, + queryResultFilter: input.queryResultFilter, + aggregationType: + input.aggregationType ?? (input.aggregationsDsl !== undefined ? 'DSL' : undefined), + aggregationsVersion: input.aggregationsVersion, + aggregationsDsl: input.aggregationsDsl, + aggregations: input.aggregations, + sort: toStringList(input.sort), + searchAfter: toStringList(input.searchAfter), + filters: input.filters, + }) +} + +function failureResponse(error: string, status: number): Response { + return Response.json({ success: false, error }, { status }) +} + +function providerFailure(result: SailPointFetchResult): Response { + return failureResponse( + getSailPointErrorMessage(result.data, 'SailPoint request failed'), + result.status || 502 + ) +} + +function requireArray(result: SailPointFetchResult): unknown[] | Response { + if (Array.isArray(result.data)) return result.data + return failureResponse('SailPoint returned an invalid list response', 502) +} + +function outputForResult(result: SailPointFetchResult, kind: ResultKind): Response { + if (!result.ok) return providerFailure(result) + + if (kind === 'list' || kind === 'search') { + const items = requireArray(result) + if (items instanceof Response) return items + const output = { + count: items.length, + totalCount: readTotalCount(result.headers), + ...(kind === 'search' ? { results: items } : { items }), + } + return Response.json({ success: true, output }) + } + + if (kind === 'count') { + const total = + readTotalCount(result.headers) ?? (typeof result.data === 'number' ? result.data : null) + if (total === null) { + return failureResponse('SailPoint did not return X-Total-Count', 502) + } + return Response.json({ success: true, output: { total } }) + } + + if (kind === 'aggregate') { + const aggregate = isRecordLike(result.data) ? result.data : {} + return Response.json({ + success: true, + output: { + aggregations: aggregate.aggregations ?? null, + hits: Array.isArray(aggregate.hits) ? aggregate.hits : [], + totalCount: readTotalCount(result.headers), + }, + }) + } + + if (RESOURCE_KEYS.has(kind)) { + return Response.json({ success: true, output: { [kind]: result.data ?? null } }) + } + + if (kind === 'request-access') { + const response = isRecordLike(result.data) ? result.data : null + return Response.json({ + success: true, + output: { + accepted: true, + status: result.status, + newRequests: response && Array.isArray(response.newRequests) ? response.newRequests : [], + existingRequests: + response && Array.isArray(response.existingRequests) ? response.existingRequests : [], + }, + }) + } + + return Response.json({ + success: true, + output: { accepted: true, status: result.status }, + }) +} + +async function executeRequest( + credentials: SailPointCredentials, + context: SailPointOperationContext, + buildRequest: (hosts: SailPointHosts) => { init: RequestInit; url: string }, + kind: ResultKind +): Promise { + const result = await sailpointFetch(credentials, buildRequest, { signal: context.signal }) + return outputForResult(result, kind) +} + +async function executeLoad( + input: InputRecord, + credentials: SailPointCredentials, + context: SailPointOperationContext +): Promise { + context.signal?.throwIfAborted() + let fileBuffer: Buffer | null = null + let fileName = 'aggregation.csv' + let fileType = 'text/csv' + + if (input.file && typeof input.file === 'object') { + if (!context.userId) return failureResponse('Authentication required for stored files', 401) + const userFiles = processFilesToUserFiles( + [input.file as RawFileInput], + context.requestId, + logger + ) + const userFile = userFiles[0] + if (!userFile) return failureResponse('Invalid file input', 400) + + const denied = await assertToolFileAccess( + userFile.key, + context.userId, + context.requestId, + logger + ) + context.signal?.throwIfAborted() + if (denied) return denied + + try { + const downloaded = await downloadServableFileFromStorage( + userFile, + context.requestId, + logger, + { maxBytes: MAX_SAILPOINT_CSV_BYTES, signal: context.signal } + ) + fileBuffer = downloaded.buffer + fileName = userFile.name || fileName + fileType = userFile.type || fileType + } catch (error) { + context.signal?.throwIfAborted() + const notReady = docNotReadyResponse(error) + if (notReady) return notReady + if (isPayloadSizeLimitError(error)) { + return failureResponse('SailPoint CSV file exceeds the 25 MiB limit', 400) + } + logger.error('Failed to download SailPoint CSV file', { + error: getErrorMessage(error), + requestId: context.requestId, + }) + return failureResponse(getErrorMessage(error, 'Failed to download file'), 500) + } + } + + const isAccountLoad = input.operation === 'sailpoint_load_accounts' + const path = isAccountLoad + ? `/sources/v1/${encodeId(input.sourceId)}/load-accounts` + : `/sources/v1/${encodeId(input.sourceId)}/load-entitlements` + + const result = await sailpointFetch( + credentials, + (hosts) => { + const form = new FormData() + if (fileBuffer) { + form.append('file', new Blob([new Uint8Array(fileBuffer)], { type: fileType }), fileName) + } + if (isAccountLoad && input.disableOptimization === true) { + form.append('disableOptimization', 'true') + } + return { url: `${hosts.apiBaseUrl}${path}`, init: { method: 'POST', body: form } } + }, + { signal: context.signal } + ) + if (!result.ok) return providerFailure(result) + if (isAccountLoad) { + const body = isRecordLike(result.data) ? result.data : null + if (!body || !('task' in body)) { + return failureResponse('SailPoint returned an invalid account-load task response', 502) + } + return Response.json({ + success: true, + output: { success: body.success === true, task: body.task ?? null }, + }) + } + if (!isRecordLike(result.data)) { + return failureResponse('SailPoint returned an invalid entitlement-load task response', 502) + } + return Response.json({ success: true, output: { task: result.data } }) +} + +export async function executeSailPointOperation( + parsedInput: SailPointInput, + context: SailPointOperationContext +): Promise { + const input = parsedInput as InputRecord + const credentials: SailPointCredentials = { + clientId: String(input.clientId), + clientSecret: String(input.clientSecret), + tenant: String(input.tenant), + } + + switch (input.operation) { + case 'sailpoint_search': { + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/search/v1${queryString({ limit: input.limit, offset: input.offset, count: input.count })}`, + init: jsonRequest(searchBody(input)), + }), + 'search' + ) + } + case 'sailpoint_search_count': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/search/v1/count`, + init: jsonRequest(searchBody(input)), + }), + 'count' + ) + case 'sailpoint_search_aggregate': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/search/v1/aggregate${queryString({ limit: input.limit, offset: input.offset, count: input.count })}`, + init: jsonRequest(searchBody(input)), + }), + 'aggregate' + ) + case 'sailpoint_list_identities': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/identities/v1${queryString({ filters: input.filters, sorters: input.sorters, defaultFilter: input.defaultFilter, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_identity': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/identities/v1/${encodeId(input.id)}`, + init: { method: 'GET' }, + }), + 'identity' + ) + case 'sailpoint_list_identity_entitlements': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/entitlements/v1/identities/${encodeId(input.id)}/entitlements${queryString({ limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_list_accounts': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/accounts/v1${queryString({ filters: input.filters, sorters: input.sorters, detailLevel: input.detailLevel, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_account': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/accounts/v1/${encodeId(input.id)}`, + init: { method: 'GET' }, + }), + 'account' + ) + case 'sailpoint_get_account_entitlements': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/accounts/v1/${encodeId(input.id)}/entitlements${queryString({ limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_list_entitlements': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/entitlements/v1${queryString({ filters: input.filters, sorters: input.sorters, 'segmented-for-identity': input.segmentedForIdentity, 'for-segment-ids': input.forSegmentIds, 'include-unsegmented': input.includeUnsegmented, searchAfter: input.searchAfter, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_entitlement': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/entitlements/v1/${encodeId(input.id)}`, + init: { method: 'GET' }, + }), + 'entitlement' + ) + case 'sailpoint_list_roles': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/roles/v1${queryString({ filters: input.filters, sorters: input.sorters, 'for-subadmin': input.forSubadmin, 'for-segment-ids': input.forSegmentIds, 'include-unsegmented': input.includeUnsegmented, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_role': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/roles/v1/${encodeId(input.id)}`, + init: { method: 'GET' }, + }), + 'role' + ) + case 'sailpoint_get_role_entitlements': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/roles/v1/${encodeId(input.id)}/entitlements${queryString({ filters: input.filters, sorters: input.sorters, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_list_access_profiles': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/access-profiles/v1${queryString({ filters: input.filters, sorters: input.sorters, 'for-subadmin': input.forSubadmin, 'for-segment-ids': input.forSegmentIds, 'include-unsegmented': input.includeUnsegmented, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_access_profile': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/access-profiles/v1/${encodeId(input.id)}`, + init: { method: 'GET' }, + }), + 'accessProfile' + ) + case 'sailpoint_get_access_profile_entitlements': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/access-profiles/v1/${encodeId(input.id)}/entitlements${queryString({ filters: input.filters, sorters: input.sorters, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_list_sources': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/sources/v1${queryString({ filters: input.filters, sorters: input.sorters, 'for-subadmin': input.forSubadmin, includeIDNSource: input.includeIDNSource, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_source': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/sources/v1/${encodeId(input.id)}`, + init: { method: 'GET' }, + }), + 'source' + ) + case 'sailpoint_list_account_activities': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/account-activities/v1${queryString({ 'requested-for': input.requestedFor, 'requested-by': input.requestedBy, 'regarding-identity': input.regardingIdentity, filters: input.filters, sorters: input.sorters, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_account_activity': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/account-activities/v1/${encodeId(input.id)}`, + init: { method: 'GET' }, + }), + 'accountActivity' + ) + case 'sailpoint_list_campaigns': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/campaigns/v1${queryString({ detail: input.detail, filters: input.filters, sorters: input.sorters, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_campaign': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/campaigns/v1/${encodeId(input.id)}${queryString({ detail: input.detail })}`, + init: { method: 'GET' }, + }), + 'campaign' + ) + case 'sailpoint_list_certifications': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/certifications/v1${queryString({ 'reviewer-identity': input.reviewerIdentity, filters: input.filters, sorters: input.sorters, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_get_certification': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/certifications/v1/${encodeId(input.id)}`, + init: { method: 'GET' }, + }), + 'certification' + ) + case 'sailpoint_list_certification_review_items': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/certifications/v1/${encodeId(input.id)}/access-review-items${queryString({ filters: input.filters, sorters: input.sorters, entitlements: input.entitlements, 'access-profiles': input.accessProfiles, roles: input.roles, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_decide_certification_review_items': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/certifications/v1/${encodeId(input.id)}/decide`, + init: jsonRequest(input.decisions), + }), + 'certification' + ) + case 'sailpoint_sign_off_certification': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/certifications/v1/${encodeId(input.id)}/sign-off`, + init: { method: 'POST' }, + }), + 'certification' + ) + case 'sailpoint_request_access': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/access-requests/v1`, + init: jsonRequest( + filterUndefined({ + requestedFor: input.requestedFor, + requestedItems: input.requestedItems, + requestedForWithRequestedItems: input.requestedForWithRequestedItems, + requestType: input.requestType, + clientMetadata: input.clientMetadata, + }) + ), + }), + 'request-access' + ) + case 'sailpoint_cancel_access_request': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/access-requests/v1/cancel`, + init: jsonRequest({ + accountActivityId: input.accountActivityId, + comment: input.comment, + }), + }), + 'write' + ) + case 'sailpoint_get_access_request_status': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/access-request-status/v1${queryString({ 'requested-for': input.requestedFor, 'requested-by': input.requestedBy, 'regarding-identity': input.regardingIdentity, 'assigned-to': input.assignedTo, 'request-state': input.requestState, filters: input.filters, sorters: input.sorters, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_list_pending_access_request_approvals': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/access-request-approvals/v1/pending${queryString({ 'owner-id': input.ownerId, filters: input.filters, sorters: input.sorters, limit: input.limit, offset: input.offset, count: input.count })}`, + init: { method: 'GET' }, + }), + 'list' + ) + case 'sailpoint_approve_access_request': + case 'sailpoint_reject_access_request': { + const action = input.operation === 'sailpoint_approve_access_request' ? 'approve' : 'reject' + const init = input.comment + ? jsonRequest({ comment: input.comment }) + : { method: 'POST' as const } + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/access-request-approvals/v1/${encodeId(input.approvalId)}/${action}`, + init, + }), + 'write' + ) + } + case 'sailpoint_get_task_status': + return executeRequest( + credentials, + context, + (hosts) => ({ + url: `${hosts.apiBaseUrl}/task-status/v1/${encodeId(input.id)}`, + init: { method: 'GET' }, + }), + 'task' + ) + case 'sailpoint_load_accounts': + case 'sailpoint_load_entitlements': + return executeLoad(input, credentials, context) + } +} diff --git a/apps/sim/lib/internal/sailpoint/schema.ts b/apps/sim/lib/internal/sailpoint/schema.ts new file mode 100644 index 00000000000..663660990c8 --- /dev/null +++ b/apps/sim/lib/internal/sailpoint/schema.ts @@ -0,0 +1,567 @@ +import { z } from 'zod' +import { FileInputSchema } from '@/lib/uploads/utils/file-schemas' + +const MAX_ID_LENGTH = 1024 +const MAX_FILTER_LENGTH = 20_000 +const MAX_QUERY_LENGTH = 100_000 +const MAX_METADATA_ENTRIES = 100 +const STANDARD_LIMIT_MAX = 250 +const SEARCH_LIMIT_MAX = 10_000 +const ROLE_LIMIT_MAX = 50 + +function parseJson(value: unknown): unknown { + if (typeof value !== 'string') return value + try { + return JSON.parse(value) + } catch { + return value + } +} + +const requiredString = (label: string, max = MAX_ID_LENGTH) => + z.string().trim().min(1, `${label} is required`).max(max, `${label} is too long`) + +const optionalString = (max = MAX_FILTER_LENGTH) => z.string().max(max).optional() + +const baseFields = { + clientId: requiredString('Client ID'), + clientSecret: requiredString('Client Secret', 8192), + tenant: requiredString('Tenant', 253), +} + +const offsetField = z.coerce.number().int().min(0).optional() +const countField = z.boolean().optional() +const limitField = (max: number) => z.coerce.number().int().min(0).max(max).optional() +const pagination = (max = STANDARD_LIMIT_MAX) => ({ + limit: limitField(max), + offset: offsetField, + count: countField, +}) +const listFields = (max = STANDARD_LIMIT_MAX) => ({ + filters: optionalString(), + sorters: optionalString(), + ...pagination(max), +}) + +const stringListField = z.preprocess( + parseJson, + z.union([z.array(z.string().max(MAX_FILTER_LENGTH)).max(100), z.string()]).optional() +) + +const jsonObjectField = z.preprocess(parseJson, z.record(z.string(), z.unknown())).optional() +const searchQuerySchema = z.object({ + query: z.string().max(MAX_QUERY_LENGTH).optional(), + fields: z.string().max(MAX_FILTER_LENGTH).optional(), + timeZone: z.string().max(255).optional(), + innerHit: z.record(z.string(), z.unknown()).optional(), +}) +const textQuerySchema = z.object({ + terms: z.array(z.string().max(MAX_QUERY_LENGTH)).min(1).max(100), + fields: z.array(z.string().max(MAX_FILTER_LENGTH)).min(1).max(100), + matchAny: z.boolean().optional(), + contains: z.boolean().optional(), +}) +const typeAheadQuerySchema = z.object({ + query: z.string().max(MAX_QUERY_LENGTH), + field: z.string().max(MAX_FILTER_LENGTH), + nestedType: z.string().max(MAX_FILTER_LENGTH).optional(), + maxExpansions: z.coerce.number().int().min(1).max(1000).optional(), + size: z.coerce.number().int().min(1).optional(), + sort: z.string().max(255).optional(), + sortByValue: z.boolean().optional(), +}) +const queryResultFilterSchema = z.object({ + includes: z.array(z.string().max(MAX_FILTER_LENGTH)).max(1000).optional(), + excludes: z.array(z.string().max(MAX_FILTER_LENGTH)).max(1000).optional(), +}) +const searchFields = { + indices: stringListField, + queryType: z.enum(['DSL', 'SAILPOINT', 'TEXT', 'TYPEAHEAD']).optional(), + queryVersion: z.string().max(64).optional(), + query: z + .preprocess(parseJson, z.union([z.string().max(MAX_QUERY_LENGTH), searchQuerySchema])) + .optional(), + queryDsl: jsonObjectField, + textQuery: z.preprocess(parseJson, textQuerySchema).optional(), + typeAheadQuery: z.preprocess(parseJson, typeAheadQuerySchema).optional(), + includeNested: z.boolean().optional(), + queryResultFilter: z.preprocess(parseJson, queryResultFilterSchema).optional(), + aggregationType: z.enum(['DSL', 'SAILPOINT']).optional(), + aggregationsVersion: z.string().max(64).optional(), + aggregationsDsl: jsonObjectField, + aggregations: jsonObjectField, + sort: stringListField, + searchAfter: stringListField, + filters: jsonObjectField, +} + +function validateSearchQuerySelection( + value: Record, + ctx: z.RefinementCtx, + queryRequired: boolean +): void { + const hasQueryInput = + value.query !== undefined || + value.queryDsl !== undefined || + value.textQuery !== undefined || + value.typeAheadQuery !== undefined + if (!queryRequired && value.queryType === undefined && !hasQueryInput) return + + const queryType = value.queryType ?? 'SAILPOINT' + const requiredField = { + DSL: 'queryDsl', + SAILPOINT: 'query', + TEXT: 'textQuery', + TYPEAHEAD: 'typeAheadQuery', + }[queryType as 'DSL' | 'SAILPOINT' | 'TEXT' | 'TYPEAHEAD'] + if (value[requiredField] === undefined) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: [requiredField], + message: `${requiredField} is required when queryType is ${queryType}`, + }) + } +} + +const metadataSchema = z + .record(z.string().max(1024), z.string().max(10_000)) + .refine((value) => Object.keys(value).length <= MAX_METADATA_ENTRIES, { + message: `Metadata may contain at most ${MAX_METADATA_ENTRIES} entries`, + }) + +const requestedItemSchema = z.object({ + type: z.enum(['ACCESS_PROFILE', 'ROLE', 'ENTITLEMENT']), + id: requiredString('Requested item ID'), + comment: optionalString(10_000), + removeDate: z.string().datetime({ offset: true }).optional(), + startDate: z.string().datetime({ offset: true }).optional(), + assignmentId: optionalString(MAX_ID_LENGTH), + nativeIdentity: optionalString(10_000), + formInstanceId: optionalString(MAX_ID_LENGTH), + clientMetadata: metadataSchema.optional(), +}) + +const sourceItemRefSchema = z.object({ + sourceId: z.string().max(MAX_ID_LENGTH).nullable().optional(), + accounts: z + .array( + z.object({ + accountUuid: z.string().max(MAX_ID_LENGTH).nullable().optional(), + nativeIdentity: z.string().max(10_000).optional(), + }) + ) + .max(100) + .nullable() + .optional(), +}) + +const nestedRequestedItemSchema = requestedItemSchema.extend({ + accountSelection: z.array(sourceItemRefSchema).max(100).nullable().optional(), +}) + +const requestedForWithItemsSchema = z.object({ + identityId: requiredString('Identity ID'), + identityType: z.enum(['HUMAN', 'MACHINE']).optional(), + requestedItems: z.array(nestedRequestedItemSchema).min(1).max(250), +}) + +const reviewDecisionSchema = z.object({ + id: requiredString('Review item ID'), + decision: z.enum(['APPROVE', 'REVOKE']), + proposedEndDate: z.string().datetime({ offset: true }).optional(), + bulk: z.boolean(), + recommendation: z + .object({ + recommendation: z.string().nullable().optional(), + reasons: z.array(z.string().max(10_000)).max(100).optional(), + timestamp: z.string().datetime({ offset: true }).optional(), + }) + .nullable() + .optional(), + comments: optionalString(10_000), +}) + +function operationSchema(operation: T, fields: S) { + return z.object({ ...baseFields, operation: z.literal(operation), ...fields }) +} + +const schemas = { + sailpoint_search: operationSchema('sailpoint_search', { + ...searchFields, + ...pagination(SEARCH_LIMIT_MAX), + }).superRefine((value, ctx) => validateSearchQuerySelection(value, ctx, true)), + sailpoint_search_count: operationSchema('sailpoint_search_count', { + ...searchFields, + }).superRefine((value, ctx) => validateSearchQuerySelection(value, ctx, true)), + sailpoint_search_aggregate: operationSchema('sailpoint_search_aggregate', { + ...searchFields, + ...pagination(), + }).superRefine((value, ctx) => { + validateSearchQuerySelection(value, ctx, false) + if (!value.aggregationsDsl && !value.aggregations) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['aggregationsDsl'], + message: 'aggregationsDsl or aggregations is required', + }) + } + }), + sailpoint_list_identities: operationSchema('sailpoint_list_identities', { + ...listFields(), + defaultFilter: z.enum(['CORRELATED_ONLY', 'NONE']).optional(), + }), + sailpoint_get_identity: operationSchema('sailpoint_get_identity', { + id: requiredString('Identity ID'), + }), + sailpoint_list_identity_entitlements: operationSchema('sailpoint_list_identity_entitlements', { + id: requiredString('Identity ID'), + ...pagination(), + }), + sailpoint_list_accounts: operationSchema('sailpoint_list_accounts', { + ...listFields(), + detailLevel: z.enum(['SLIM', 'FULL']).optional(), + }), + sailpoint_get_account: operationSchema('sailpoint_get_account', { + id: requiredString('Account ID'), + }), + sailpoint_get_account_entitlements: operationSchema('sailpoint_get_account_entitlements', { + id: requiredString('Account ID'), + ...pagination(), + }), + sailpoint_list_entitlements: operationSchema('sailpoint_list_entitlements', { + ...listFields(), + segmentedForIdentity: optionalString(MAX_ID_LENGTH), + forSegmentIds: optionalString(MAX_FILTER_LENGTH), + includeUnsegmented: z.boolean().optional(), + searchAfter: optionalString(MAX_FILTER_LENGTH), + }).superRefine((value, ctx) => { + if (value.includeUnsegmented === false && !value.forSegmentIds && !value.segmentedForIdentity) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['includeUnsegmented'], + message: 'includeUnsegmented=false requires forSegmentIds or segmentedForIdentity', + }) + } + }), + sailpoint_get_entitlement: operationSchema('sailpoint_get_entitlement', { + id: requiredString('Entitlement ID'), + }), + sailpoint_list_roles: operationSchema('sailpoint_list_roles', { + ...listFields(ROLE_LIMIT_MAX), + forSubadmin: optionalString(MAX_ID_LENGTH), + forSegmentIds: optionalString(MAX_FILTER_LENGTH), + includeUnsegmented: z.boolean().optional(), + }).superRefine((value, ctx) => { + if (value.includeUnsegmented === false && !value.forSegmentIds) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['includeUnsegmented'], + message: 'includeUnsegmented=false requires forSegmentIds', + }) + } + }), + sailpoint_get_role: operationSchema('sailpoint_get_role', { id: requiredString('Role ID') }), + sailpoint_get_role_entitlements: operationSchema('sailpoint_get_role_entitlements', { + id: requiredString('Role ID'), + ...listFields(ROLE_LIMIT_MAX), + }), + sailpoint_list_access_profiles: operationSchema('sailpoint_list_access_profiles', { + ...listFields(), + forSubadmin: optionalString(MAX_ID_LENGTH), + forSegmentIds: optionalString(MAX_FILTER_LENGTH), + includeUnsegmented: z.boolean().optional(), + }).superRefine((value, ctx) => { + if (value.includeUnsegmented === false && !value.forSegmentIds) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['includeUnsegmented'], + message: 'includeUnsegmented=false requires forSegmentIds', + }) + } + }), + sailpoint_get_access_profile: operationSchema('sailpoint_get_access_profile', { + id: requiredString('Access Profile ID'), + }), + sailpoint_get_access_profile_entitlements: operationSchema( + 'sailpoint_get_access_profile_entitlements', + { id: requiredString('Access Profile ID'), ...listFields() } + ), + sailpoint_list_sources: operationSchema('sailpoint_list_sources', { + ...listFields(), + forSubadmin: optionalString(MAX_ID_LENGTH), + includeIDNSource: z.boolean().optional(), + }), + sailpoint_get_source: operationSchema('sailpoint_get_source', { + id: requiredString('Source ID'), + }), + sailpoint_list_account_activities: operationSchema('sailpoint_list_account_activities', { + ...listFields(), + requestedFor: optionalString(MAX_ID_LENGTH), + requestedBy: optionalString(MAX_ID_LENGTH), + regardingIdentity: optionalString(MAX_ID_LENGTH), + }).superRefine((value, ctx) => { + if (value.regardingIdentity && (value.requestedFor || value.requestedBy)) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['regardingIdentity'], + message: 'regardingIdentity cannot be combined with requestedFor or requestedBy', + }) + } + }), + sailpoint_get_account_activity: operationSchema('sailpoint_get_account_activity', { + id: requiredString('Account activity ID'), + }), + sailpoint_list_campaigns: operationSchema('sailpoint_list_campaigns', { + ...listFields(), + detail: z.enum(['SLIM', 'FULL']).optional(), + }), + sailpoint_get_campaign: operationSchema('sailpoint_get_campaign', { + id: requiredString('Campaign ID'), + detail: z.enum(['SLIM', 'FULL']).optional(), + }), + sailpoint_list_certifications: operationSchema('sailpoint_list_certifications', { + ...listFields(), + reviewerIdentity: optionalString(MAX_ID_LENGTH), + }), + sailpoint_get_certification: operationSchema('sailpoint_get_certification', { + id: requiredString('Certification ID'), + }), + sailpoint_list_certification_review_items: operationSchema( + 'sailpoint_list_certification_review_items', + { + id: requiredString('Certification ID'), + ...listFields(), + entitlements: optionalString(MAX_FILTER_LENGTH), + accessProfiles: optionalString(MAX_FILTER_LENGTH), + roles: optionalString(MAX_FILTER_LENGTH), + } + ).superRefine((value, ctx) => { + const specialized = [value.entitlements, value.accessProfiles, value.roles].filter(Boolean) + if (specialized.length > 1) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['entitlements'], + message: 'Only one of entitlements, accessProfiles, or roles may be provided', + }) + } + }), + sailpoint_decide_certification_review_items: operationSchema( + 'sailpoint_decide_certification_review_items', + { + id: requiredString('Certification ID'), + decisions: z.preprocess(parseJson, z.array(reviewDecisionSchema).min(1).max(250)), + } + ), + sailpoint_sign_off_certification: operationSchema('sailpoint_sign_off_certification', { + id: requiredString('Certification ID'), + }), + sailpoint_request_access: operationSchema('sailpoint_request_access', { + requestedFor: z + .preprocess(parseJson, z.array(requiredString('Identity ID')).max(250)) + .optional(), + requestedItems: z + .preprocess(parseJson, z.array(requestedItemSchema).min(1).max(250)) + .optional(), + requestedForWithRequestedItems: z + .preprocess(parseJson, z.array(requestedForWithItemsSchema).min(1).max(10)) + .optional(), + requestType: z.enum(['GRANT_ACCESS', 'REVOKE_ACCESS', 'MODIFY_ACCESS']).optional(), + clientMetadata: z.preprocess(parseJson, metadataSchema).optional(), + }).superRefine((value, ctx) => { + const usesFlat = value.requestedFor !== undefined || value.requestedItems !== undefined + const usesNested = value.requestedForWithRequestedItems !== undefined + if (usesFlat === usesNested) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedFor'], + message: + 'Provide requestedFor with requestedItems, or requestedForWithRequestedItems, but not both', + }) + return + } + if (usesFlat && (!value.requestedFor?.length || !value.requestedItems?.length)) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedItems'], + message: 'requestedFor and requestedItems must both be non-empty', + }) + } + if ((value.requestType ?? 'GRANT_ACCESS') === 'REVOKE_ACCESS' && value.requestedFor) { + if (value.requestedFor.length !== 1) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedFor'], + message: 'REVOKE_ACCESS supports exactly one identity', + }) + } + value.requestedItems?.forEach((item, index) => { + if (!item.comment) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedItems', index, 'comment'], + message: 'comment is required for REVOKE_ACCESS', + }) + } + if (item.startDate) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedItems', index, 'startDate'], + message: 'startDate is not allowed for REVOKE_ACCESS', + }) + } + }) + const entitlementCount = + value.requestedItems?.filter((item) => item.type === 'ENTITLEMENT').length ?? 0 + if (entitlementCount > 1) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedItems'], + message: 'REVOKE_ACCESS supports at most one entitlement item', + }) + } + } + if ((value.requestType ?? 'GRANT_ACCESS') === 'GRANT_ACCESS' && value.requestedItems) { + const entitlementCount = value.requestedItems.filter( + (item) => item.type === 'ENTITLEMENT' + ).length + if (entitlementCount > 25) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedItems'], + message: 'GRANT_ACCESS supports at most 25 entitlement items', + }) + } + if (entitlementCount > 0 && (value.requestedFor?.length ?? 0) > 10) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedFor'], + message: 'A grant with entitlements supports at most 10 identities', + }) + } + } + if (value.requestedForWithRequestedItems) { + const identityTypes = new Set( + value.requestedForWithRequestedItems.map((entry) => entry.identityType ?? 'HUMAN') + ) + if (identityTypes.size > 1) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedForWithRequestedItems'], + message: 'Human and machine identities cannot be mixed in one request', + }) + } + if (identityTypes.has('MACHINE')) { + const requestType = value.requestType ?? 'GRANT_ACCESS' + value.requestedForWithRequestedItems.forEach((entry, entryIndex) => { + entry.requestedItems.forEach((item, itemIndex) => { + const path = ['requestedForWithRequestedItems', entryIndex, 'requestedItems', itemIndex] + if (item.type !== 'ENTITLEMENT') { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: [...path, 'type'], + message: 'Machine identity requests support entitlement items only', + }) + } + if (requestType === 'REVOKE_ACCESS' && item.accountSelection) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: [...path, 'accountSelection'], + message: 'Machine identity revoke requests cannot include accountSelection', + }) + } + if (requestType !== 'REVOKE_ACCESS') { + const selection = item.accountSelection + if ( + !selection || + selection.length !== 1 || + !selection[0]?.accounts || + selection[0].accounts.length !== 1 + ) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: [...path, 'accountSelection'], + message: + 'Machine identity grant and modify items require exactly one source and one account selection', + }) + } + } + if (requestType === 'MODIFY_ACCESS' && !item.startDate && !item.removeDate) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path, + message: 'Machine identity modify items require startDate or removeDate', + }) + } + }) + }) + } else if ((value.requestType ?? 'GRANT_ACCESS') === 'REVOKE_ACCESS') { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['requestedForWithRequestedItems'], + message: 'Human revoke requests must use requestedFor and requestedItems', + }) + } + } + }), + sailpoint_cancel_access_request: operationSchema('sailpoint_cancel_access_request', { + accountActivityId: requiredString('Account activity ID'), + comment: requiredString('Comment', 10_000), + }), + sailpoint_get_access_request_status: operationSchema('sailpoint_get_access_request_status', { + ...listFields(), + requestedFor: optionalString(MAX_ID_LENGTH), + requestedBy: optionalString(MAX_ID_LENGTH), + regardingIdentity: optionalString(MAX_ID_LENGTH), + assignedTo: optionalString(MAX_ID_LENGTH), + requestState: z.literal('EXECUTING').optional(), + }).superRefine((value, ctx) => { + if (value.regardingIdentity && (value.requestedFor || value.requestedBy)) { + ctx.addIssue({ + code: z.ZodIssueCode.custom, + path: ['regardingIdentity'], + message: 'regardingIdentity cannot be combined with requestedFor or requestedBy', + }) + } + }), + sailpoint_list_pending_access_request_approvals: operationSchema( + 'sailpoint_list_pending_access_request_approvals', + { ownerId: optionalString(MAX_ID_LENGTH), ...listFields() } + ), + sailpoint_approve_access_request: operationSchema('sailpoint_approve_access_request', { + approvalId: requiredString('Approval ID'), + comment: optionalString(10_000), + }), + sailpoint_reject_access_request: operationSchema('sailpoint_reject_access_request', { + approvalId: requiredString('Approval ID'), + comment: requiredString('Comment', 10_000), + }), + sailpoint_get_task_status: operationSchema('sailpoint_get_task_status', { + id: requiredString('Task ID'), + }), + sailpoint_load_accounts: operationSchema('sailpoint_load_accounts', { + sourceId: requiredString('Source ID'), + file: FileInputSchema.optional().nullable(), + disableOptimization: z.boolean().optional(), + }), + sailpoint_load_entitlements: operationSchema('sailpoint_load_entitlements', { + sourceId: requiredString('Source ID'), + file: FileInputSchema.optional().nullable(), + }), +} as const + +export type SailPointOperationId = keyof typeof schemas + +export const SAILPOINT_OPERATION_IDS = Object.freeze(Object.keys(schemas) as SailPointOperationId[]) + +export type SailPointInput = z.output<(typeof schemas)[SailPointOperationId]> + +export function parseSailPointInput( + toolId: string, + input: unknown +): { success: true; data: SailPointInput } | { success: false; error: z.ZodError } | null { + const schema = schemas[toolId as SailPointOperationId] + if (!schema) return null + const parsed = schema.safeParse(input) + if (!parsed.success) return parsed + return { success: true, data: parsed.data as SailPointInput } +} diff --git a/apps/sim/lib/internal/tool-operations/registry.server.ts b/apps/sim/lib/internal/tool-operations/registry.server.ts index 9a752b81578..64b179c1d75 100644 --- a/apps/sim/lib/internal/tool-operations/registry.server.ts +++ b/apps/sim/lib/internal/tool-operations/registry.server.ts @@ -969,6 +969,46 @@ const MICROSOFT_TEAMS_TOOL_IDS = [ const BREX_TOOL_IDS = ['brex_match_receipt', 'brex_upload_receipt'] as const +const SAILPOINT_TOOL_IDS = [ + 'sailpoint_approve_access_request', + 'sailpoint_cancel_access_request', + 'sailpoint_decide_certification_review_items', + 'sailpoint_get_access_profile', + 'sailpoint_get_access_profile_entitlements', + 'sailpoint_get_access_request_status', + 'sailpoint_get_account', + 'sailpoint_get_account_activity', + 'sailpoint_get_account_entitlements', + 'sailpoint_get_campaign', + 'sailpoint_get_certification', + 'sailpoint_get_entitlement', + 'sailpoint_get_identity', + 'sailpoint_get_role', + 'sailpoint_get_role_entitlements', + 'sailpoint_get_source', + 'sailpoint_get_task_status', + 'sailpoint_list_access_profiles', + 'sailpoint_list_account_activities', + 'sailpoint_list_accounts', + 'sailpoint_list_campaigns', + 'sailpoint_list_certification_review_items', + 'sailpoint_list_certifications', + 'sailpoint_list_entitlements', + 'sailpoint_list_identities', + 'sailpoint_list_identity_entitlements', + 'sailpoint_list_pending_access_request_approvals', + 'sailpoint_list_roles', + 'sailpoint_list_sources', + 'sailpoint_load_accounts', + 'sailpoint_load_entitlements', + 'sailpoint_reject_access_request', + 'sailpoint_request_access', + 'sailpoint_search', + 'sailpoint_search_aggregate', + 'sailpoint_search_count', + 'sailpoint_sign_off_certification', +] as const + const LATEX_TOOL_IDS = ['latex_compile'] as const const ONEDRIVE_TOOL_IDS = ['onedrive_download', 'onedrive_upload'] as const @@ -1489,6 +1529,9 @@ registerFamily(handlerLoaders, MICROSOFT_TEAMS_TOOL_IDS, async () => { registerFamily(handlerLoaders, BREX_TOOL_IDS, async () => { return (await import('@/lib/internal/brex/execute-tool')).executeBrexTool }) +registerFamily(handlerLoaders, SAILPOINT_TOOL_IDS, async () => { + return (await import('@/lib/internal/sailpoint/execute-tool')).executeSailPointTool +}) registerFamily(handlerLoaders, LATEX_TOOL_IDS, async () => { return (await import('@/lib/internal/latex/execute-tool')).executeLatexTool }) diff --git a/apps/sim/tools/generated/tool-ids.ts b/apps/sim/tools/generated/tool-ids.ts index fed8cbfc0aa..ea88e53cc74 100644 --- a/apps/sim/tools/generated/tool-ids.ts +++ b/apps/sim/tools/generated/tool-ids.ts @@ -3,7 +3,7 @@ /** Every registered tool id, including versioned variants. */ const toolIds: string[] = JSON.parse( - '["a2a_cancel_task","a2a_get_agent_card","a2a_get_task","a2a_send_message","affinity_batch_update_entity_fields","affinity_batch_update_list_entry_fields","affinity_create_list","affinity_create_list_field_dropdown_option","affinity_create_merge","affinity_create_note","affinity_create_reminder","affinity_delete_list_field_dropdown_option","affinity_delete_note","affinity_get_company","affinity_get_current_user","affinity_get_entity_field_value","affinity_get_list","affinity_get_list_entry","affinity_get_list_entry_field","affinity_get_list_field_dropdown_option","affinity_get_merge","affinity_get_merge_task","affinity_get_note","affinity_get_opportunity","affinity_get_person","affinity_get_saved_view","affinity_get_transcript","affinity_get_user","affinity_list_calls","affinity_list_chat_messages","affinity_list_companies","affinity_list_coworker_connections","affinity_list_emails","affinity_list_entity_field_values","affinity_list_entity_list_entries","affinity_list_entity_lists","affinity_list_entity_notes","affinity_list_entity_relationships","affinity_list_field_dropdown_options","affinity_list_field_metadata","affinity_list_field_value_changes","affinity_list_investor_executive_connections","affinity_list_list_entries","affinity_list_list_entry_field_value_changes","affinity_list_list_entry_fields","affinity_list_list_field_dropdown_options","affinity_list_list_fields","affinity_list_lists","affinity_list_meetings","affinity_list_merge_tasks","affinity_list_merges","affinity_list_note_attached_companies","affinity_list_note_attached_opportunities","affinity_list_note_attached_persons","affinity_list_note_replies","affinity_list_notes","affinity_list_opportunities","affinity_list_persons","affinity_list_reminders","affinity_list_saved_view_entries","affinity_list_saved_views","affinity_list_transcript_fragments","affinity_list_transcripts","affinity_list_users","affinity_search_companies","affinity_search_files","affinity_search_list_entries","affinity_search_notes","affinity_search_persons","affinity_semantic_search","affinity_update_entity_field_value","affinity_update_list_entry_field","affinity_update_list_field_dropdown_option","affinity_update_note","agentmail_create_draft","agentmail_create_inbox","agentmail_delete_draft","agentmail_delete_inbox","agentmail_delete_thread","agentmail_forward_message","agentmail_get_draft","agentmail_get_inbox","agentmail_get_message","agentmail_get_thread","agentmail_list_drafts","agentmail_list_inboxes","agentmail_list_messages","agentmail_list_threads","agentmail_reply_message","agentmail_send_draft","agentmail_send_message","agentmail_update_draft","agentmail_update_inbox","agentmail_update_message","agentmail_update_thread","agentphone_create_call","agentphone_create_contact","agentphone_create_number","agentphone_delete_contact","agentphone_get_call","agentphone_get_call_transcript","agentphone_get_contact","agentphone_get_conversation","agentphone_get_conversation_messages","agentphone_get_number_messages","agentphone_get_usage","agentphone_get_usage_daily","agentphone_get_usage_monthly","agentphone_list_calls","agentphone_list_contacts","agentphone_list_conversations","agentphone_list_numbers","agentphone_react_to_message","agentphone_release_number","agentphone_send_message","agentphone_update_contact","agentphone_update_conversation","agiloft_async_status","agiloft_attach_file","agiloft_attachment_info","agiloft_create_record","agiloft_delete_record","agiloft_get_choice_line_id","agiloft_list_tables","agiloft_lock_record","agiloft_nlp_search","agiloft_read_record","agiloft_remove_attachment","agiloft_retrieve_attachment","agiloft_run_action_button","agiloft_saved_search","agiloft_search_records","agiloft_select_records","agiloft_update_record","agiloft_upsert_record","ahrefs_anchors","ahrefs_backlinks","ahrefs_backlinks_stats","ahrefs_batch_analysis","ahrefs_broken_backlinks","ahrefs_domain_rating","ahrefs_domain_rating_history","ahrefs_keyword_overview","ahrefs_keywords_history","ahrefs_metrics","ahrefs_metrics_history","ahrefs_organic_competitors","ahrefs_organic_keywords","ahrefs_paid_pages","ahrefs_rank_tracker_competitors_overview","ahrefs_rank_tracker_competitors_stats","ahrefs_rank_tracker_overview","ahrefs_rank_tracker_serp_overview","ahrefs_refdomains_history","ahrefs_referring_domains","ahrefs_related_terms","ahrefs_site_audit_page_explorer","ahrefs_top_pages","airtable_create_records","airtable_delete_records","airtable_get_base_schema","airtable_get_record","airtable_list_bases","airtable_list_records","airtable_list_tables","airtable_update_multiple_records","airtable_update_record","airtable_upsert_records","airweave_search","algolia_add_record","algolia_batch_operations","algolia_browse_records","algolia_clear_records","algolia_copy_move_index","algolia_delete_by_filter","algolia_delete_index","algolia_delete_record","algolia_get_record","algolia_get_records","algolia_get_settings","algolia_get_task_status","algolia_list_indices","algolia_partial_update_record","algolia_search","algolia_update_settings","amplitude_event_segmentation","amplitude_funnels","amplitude_get_active_users","amplitude_get_revenue","amplitude_group_identify","amplitude_identify_user","amplitude_list_events","amplitude_realtime_active_users","amplitude_retention","amplitude_send_event","amplitude_user_activity","amplitude_user_profile","amplitude_user_search","apify_get_dataset_items","apify_get_run","apify_run_actor_async","apify_run_actor_sync","apify_run_task","apollo_account_bulk_create","apollo_account_bulk_update","apollo_account_create","apollo_account_search","apollo_account_update","apollo_contact_bulk_create","apollo_contact_bulk_update","apollo_contact_create","apollo_contact_search","apollo_contact_update","apollo_email_accounts","apollo_opportunity_create","apollo_opportunity_get","apollo_opportunity_search","apollo_opportunity_update","apollo_organization_bulk_enrich","apollo_organization_enrich","apollo_organization_search","apollo_people_bulk_enrich","apollo_people_enrich","apollo_people_search","apollo_sequence_add_contacts","apollo_sequence_search","apollo_task_create","apollo_task_search","appconfig_create_application","appconfig_create_configuration_profile","appconfig_create_environment","appconfig_create_hosted_configuration_version","appconfig_delete_application","appconfig_delete_configuration_profile","appconfig_delete_environment","appconfig_delete_hosted_configuration_version","appconfig_get_application","appconfig_get_configuration","appconfig_get_configuration_profile","appconfig_get_deployment","appconfig_get_environment","appconfig_get_hosted_configuration_version","appconfig_list_applications","appconfig_list_configuration_profiles","appconfig_list_deployment_strategies","appconfig_list_deployments","appconfig_list_environments","appconfig_list_hosted_configuration_versions","appconfig_start_deployment","appconfig_stop_deployment","appconfig_update_application","appconfig_update_configuration_profile","appconfig_update_environment","arxiv_get_author_papers","arxiv_get_paper","arxiv_search","asana_add_comment","asana_add_followers","asana_create_project","asana_create_section","asana_create_subtask","asana_create_task","asana_delete_task","asana_get_project","asana_get_projects","asana_get_task","asana_list_sections","asana_list_workspaces","asana_search_tasks","asana_update_task","ashby_add_candidate_tag","ashby_anonymize_candidate","ashby_change_application_source","ashby_change_application_stage","ashby_create_application","ashby_create_candidate","ashby_create_note","ashby_delete_application","ashby_get_application","ashby_get_candidate","ashby_get_job","ashby_get_job_posting","ashby_get_offer","ashby_list_applications","ashby_list_archive_reasons","ashby_list_candidate_tags","ashby_list_candidates","ashby_list_custom_fields","ashby_list_departments","ashby_list_interviews","ashby_list_job_postings","ashby_list_jobs","ashby_list_locations","ashby_list_notes","ashby_list_offers","ashby_list_openings","ashby_list_sources","ashby_list_users","ashby_remove_candidate_tag","ashby_search_candidates","ashby_set_custom_field_value","ashby_set_custom_field_values","ashby_update_candidate","athena_batch_get_query_execution","athena_create_named_query","athena_delete_named_query","athena_get_named_query","athena_get_query_execution","athena_get_query_results","athena_list_databases","athena_list_named_queries","athena_list_query_executions","athena_list_table_metadata","athena_start_query","athena_stop_query","attio_assert_record","attio_create_attribute","attio_create_comment","attio_create_list","attio_create_list_entry","attio_create_note","attio_create_object","attio_create_record","attio_create_task","attio_create_webhook","attio_delete_comment","attio_delete_list_entry","attio_delete_note","attio_delete_record","attio_delete_task","attio_delete_webhook","attio_get_attribute","attio_get_comment","attio_get_list","attio_get_list_entry","attio_get_member","attio_get_note","attio_get_object","attio_get_record","attio_get_task","attio_get_thread","attio_get_webhook","attio_list_attributes","attio_list_lists","attio_list_members","attio_list_notes","attio_list_objects","attio_list_records","attio_list_tasks","attio_list_threads","attio_list_webhooks","attio_query_list_entries","attio_search_records","attio_update_attribute","attio_update_list","attio_update_list_entry","attio_update_object","attio_update_record","attio_update_task","attio_update_webhook","azure_data_explorer_create_table","azure_data_explorer_drop_table","azure_data_explorer_ingest_from_query","azure_data_explorer_ingest_inline","azure_data_explorer_list_databases","azure_data_explorer_list_functions","azure_data_explorer_list_tables","azure_data_explorer_management","azure_data_explorer_query","azure_data_explorer_show_database_schema","azure_data_explorer_show_ingestion_failures","azure_data_explorer_show_operations","azure_data_explorer_show_table_details","azure_data_explorer_show_table_schema","azure_devops_add_comment","azure_devops_create_work_item","azure_devops_get_build_log","azure_devops_get_build_timeline","azure_devops_get_comments","azure_devops_get_pipeline","azure_devops_get_pipeline_run","azure_devops_get_work_item","azure_devops_get_work_items_batch","azure_devops_get_work_items_between_builds","azure_devops_list_build_logs","azure_devops_list_builds","azure_devops_list_pipeline_runs","azure_devops_list_pipelines","azure_devops_query_work_items","azure_devops_update_work_item","bitbucket_approve_pull_request","bitbucket_create_branch","bitbucket_create_pull_request","bitbucket_create_pull_request_comment","bitbucket_decline_pull_request","bitbucket_delete_branch","bitbucket_get_commit","bitbucket_get_file","bitbucket_get_file_metadata","bitbucket_get_pipeline","bitbucket_get_pipeline_step_log","bitbucket_get_pull_request","bitbucket_get_pull_request_diff","bitbucket_get_pull_request_diffstat","bitbucket_get_pull_request_merge_task_status","bitbucket_get_repository","bitbucket_list_branches","bitbucket_list_commits","bitbucket_list_directory","bitbucket_list_pipeline_steps","bitbucket_list_pipelines","bitbucket_list_pull_request_comments","bitbucket_list_pull_request_commit_statuses","bitbucket_list_pull_requests","bitbucket_list_repositories","bitbucket_list_workspaces","bitbucket_merge_pull_request","bitbucket_request_pull_request_changes","bitbucket_stop_pipeline","bitbucket_trigger_pipeline","box_copy_file","box_create_folder","box_delete_file","box_delete_folder","box_download_file","box_get_file_info","box_list_folder_items","box_search","box_sign_cancel_request","box_sign_create_request","box_sign_get_request","box_sign_list_requests","box_sign_resend_request","box_update_file","box_upload_file","brandfetch_get_brand","brandfetch_search","brex_archive_budget","brex_create_budget","brex_create_spend_limit","brex_create_transfer","brex_create_vendor","brex_get_budget","brex_get_cash_account","brex_get_company","brex_get_current_user","brex_get_expense","brex_get_spend_limit","brex_get_transfer","brex_get_user","brex_get_vendor","brex_list_budgets","brex_list_card_accounts","brex_list_card_statements","brex_list_card_transactions","brex_list_cards","brex_list_cash_accounts","brex_list_cash_statements","brex_list_cash_transactions","brex_list_departments","brex_list_expenses","brex_list_locations","brex_list_spend_limits","brex_list_titles","brex_list_transfers","brex_list_users","brex_list_vendors","brex_match_receipt","brex_update_expense","brex_update_vendor","brex_upload_receipt","brightdata_cancel_snapshot","brightdata_discover","brightdata_download_snapshot","brightdata_scrape_dataset","brightdata_scrape_url","brightdata_serp_search","brightdata_snapshot_status","brightdata_sync_scrape","browser_use_run_task","buffer_create_idea","buffer_create_post","buffer_delete_post","buffer_edit_post","buffer_get_account","buffer_get_channels","buffer_get_idea_groups","buffer_get_ideas","buffer_get_post","buffer_get_posts","calcom_cancel_booking","calcom_confirm_booking","calcom_create_booking","calcom_create_event_type","calcom_create_schedule","calcom_decline_booking","calcom_delete_event_type","calcom_delete_schedule","calcom_get_booking","calcom_get_default_schedule","calcom_get_event_type","calcom_get_schedule","calcom_get_slots","calcom_list_bookings","calcom_list_event_types","calcom_list_schedules","calcom_reschedule_booking","calcom_update_event_type","calcom_update_schedule","calendly_cancel_event","calendly_create_event_invitee","calendly_create_invitee_no_show","calendly_create_scheduling_link","calendly_create_webhook","calendly_delete_invitee_no_show","calendly_delete_webhook","calendly_get_current_user","calendly_get_event_invitee","calendly_get_event_type","calendly_get_scheduled_event","calendly_get_user","calendly_list_event_invitees","calendly_list_event_type_available_times","calendly_list_event_types","calendly_list_organization_memberships","calendly_list_routing_form_submissions","calendly_list_routing_forms","calendly_list_scheduled_events","calendly_list_user_availability_schedules","calendly_list_user_busy_times","calendly_list_webhooks","cbinsights_chat","cbinsights_get_commercial_maturity_history","cbinsights_get_exit_probability_history","cbinsights_get_mosaic_history","cbinsights_get_org_business_relationships","cbinsights_get_org_funding_window","cbinsights_get_org_fundings","cbinsights_get_org_investments","cbinsights_get_org_management_and_board","cbinsights_get_org_outlook","cbinsights_get_org_portfolio_exits","cbinsights_get_org_revenue","cbinsights_get_scouting_report","cbinsights_get_strategy_map","cbinsights_list_business_relationships","cbinsights_list_funding_window","cbinsights_list_fundings","cbinsights_list_investments","cbinsights_list_management_and_board","cbinsights_list_outlook","cbinsights_list_portfolio_exits","cbinsights_list_revenue","cbinsights_lookup_organizations","cbinsights_rag","cbinsights_search_firmographics","clay_populate","clerk_add_organization_member","clerk_ban_user","clerk_create_actor_token","clerk_create_allowlist_identifier","clerk_create_blocklist_identifier","clerk_create_organization","clerk_create_organization_invitation","clerk_create_user","clerk_delete_allowlist_identifier","clerk_delete_blocklist_identifier","clerk_delete_organization","clerk_delete_user","clerk_get_jwt_template","clerk_get_organization","clerk_get_session","clerk_get_user","clerk_get_user_oauth_token","clerk_list_allowlist_identifiers","clerk_list_blocklist_identifiers","clerk_list_jwt_templates","clerk_list_organization_invitations","clerk_list_organization_memberships","clerk_list_organizations","clerk_list_sessions","clerk_list_users","clerk_lock_user","clerk_remove_organization_member","clerk_revoke_actor_token","clerk_revoke_session","clerk_unban_user","clerk_unlock_user","clerk_update_organization","clerk_update_organization_membership","clerk_update_user","clickhouse_count_rows","clickhouse_create_database","clickhouse_create_table","clickhouse_delete","clickhouse_describe_table","clickhouse_drop_database","clickhouse_drop_partition","clickhouse_drop_table","clickhouse_execute","clickhouse_insert","clickhouse_insert_rows","clickhouse_introspect","clickhouse_kill_query","clickhouse_list_clusters","clickhouse_list_databases","clickhouse_list_mutations","clickhouse_list_partitions","clickhouse_list_running_queries","clickhouse_list_tables","clickhouse_optimize_table","clickhouse_query","clickhouse_rename_table","clickhouse_show_create_table","clickhouse_table_stats","clickhouse_truncate_table","clickhouse_update","clickup_add_tag_to_task","clickup_create_checklist","clickup_create_checklist_item","clickup_create_comment","clickup_create_folder","clickup_create_list","clickup_create_task","clickup_create_time_entry","clickup_delete_checklist","clickup_delete_checklist_item","clickup_delete_comment","clickup_delete_task","clickup_delete_time_entry","clickup_get_comments","clickup_get_custom_fields","clickup_get_folders","clickup_get_list_members","clickup_get_lists","clickup_get_running_timer","clickup_get_space_tags","clickup_get_spaces","clickup_get_task","clickup_get_task_members","clickup_get_tasks","clickup_get_time_entries","clickup_get_workspaces","clickup_remove_custom_field_value","clickup_remove_tag_from_task","clickup_search_tasks","clickup_set_custom_field_value","clickup_start_timer","clickup_stop_timer","clickup_update_checklist","clickup_update_checklist_item","clickup_update_comment","clickup_update_task","clickup_update_time_entry","clickup_upload_attachment","cloudflare_create_access_application","cloudflare_create_access_policy","cloudflare_create_access_service_token","cloudflare_create_dns_record","cloudflare_create_r2_bucket","cloudflare_create_rate_limit_rule","cloudflare_create_ruleset","cloudflare_create_ruleset_rule","cloudflare_create_zone","cloudflare_delete_access_application","cloudflare_delete_access_policy","cloudflare_delete_dns_record","cloudflare_delete_r2_bucket","cloudflare_delete_ruleset_rule","cloudflare_delete_zone","cloudflare_dns_analytics","cloudflare_get_access_application","cloudflare_get_r2_bucket","cloudflare_get_ruleset","cloudflare_get_ruleset_entrypoint","cloudflare_get_tunnel","cloudflare_get_tunnel_configuration","cloudflare_get_worker_script_settings","cloudflare_get_zone","cloudflare_get_zone_settings","cloudflare_list_access_applications","cloudflare_list_access_groups","cloudflare_list_access_identity_providers","cloudflare_list_access_policies","cloudflare_list_access_service_tokens","cloudflare_list_certificates","cloudflare_list_dns_records","cloudflare_list_managed_ruleset_overrides","cloudflare_list_r2_buckets","cloudflare_list_rate_limit_rules","cloudflare_list_rulesets","cloudflare_list_tunnels","cloudflare_list_worker_routes","cloudflare_list_worker_scripts","cloudflare_list_zones","cloudflare_purge_cache","cloudflare_revoke_access_service_token","cloudflare_update_access_application","cloudflare_update_access_policy","cloudflare_update_dns_record","cloudflare_update_rate_limit_rule","cloudflare_update_ruleset_rule","cloudflare_update_zone_setting","cloudformation_cancel_update_stack","cloudformation_create_change_set","cloudformation_create_stack","cloudformation_delete_stack","cloudformation_describe_change_set","cloudformation_describe_stack_drift_detection_status","cloudformation_describe_stack_events","cloudformation_describe_stacks","cloudformation_detect_stack_drift","cloudformation_execute_change_set","cloudformation_get_template","cloudformation_get_template_summary","cloudformation_list_stack_resources","cloudformation_update_stack","cloudformation_validate_template","cloudwatch_describe_alarm_history","cloudwatch_describe_alarms","cloudwatch_describe_log_groups","cloudwatch_describe_log_streams","cloudwatch_filter_log_events","cloudwatch_get_log_events","cloudwatch_get_metric_statistics","cloudwatch_list_metrics","cloudwatch_mute_alarm","cloudwatch_put_log_group_retention","cloudwatch_put_metric_data","cloudwatch_query_logs","cloudwatch_unmute_alarm","codepipeline_disable_stage_transition","codepipeline_enable_stage_transition","codepipeline_get_pipeline","codepipeline_get_pipeline_execution","codepipeline_get_pipeline_state","codepipeline_list_action_executions","codepipeline_list_pipeline_executions","codepipeline_list_pipelines","codepipeline_put_approval_result","codepipeline_retry_stage_execution","codepipeline_start_execution","codepipeline_stop_execution","confluence_add_label","confluence_create_blogpost","confluence_create_comment","confluence_create_page","confluence_create_page_property","confluence_create_space","confluence_create_space_property","confluence_delete_attachment","confluence_delete_blogpost","confluence_delete_comment","confluence_delete_label","confluence_delete_page","confluence_delete_page_property","confluence_delete_space","confluence_delete_space_property","confluence_get_blogpost","confluence_get_page_ancestors","confluence_get_page_children","confluence_get_page_descendants","confluence_get_page_version","confluence_get_pages_by_label","confluence_get_space","confluence_get_task","confluence_get_user","confluence_list_attachments","confluence_list_blogposts","confluence_list_blogposts_in_space","confluence_list_comments","confluence_list_labels","confluence_list_page_properties","confluence_list_page_versions","confluence_list_pages_in_space","confluence_list_space_labels","confluence_list_space_permissions","confluence_list_space_properties","confluence_list_spaces","confluence_list_tasks","confluence_retrieve","confluence_search","confluence_search_in_space","confluence_update","confluence_update_blogpost","confluence_update_comment","confluence_update_space","confluence_update_task","confluence_upload_attachment","context_dev_classify_naics","context_dev_classify_sic","context_dev_crawl","context_dev_extract","context_dev_extract_product","context_dev_extract_products","context_dev_get_brand","context_dev_get_brand_by_email","context_dev_get_brand_by_name","context_dev_get_brand_by_ticker","context_dev_identify_transaction","context_dev_map","context_dev_scrape_fonts","context_dev_scrape_html","context_dev_scrape_images","context_dev_scrape_markdown","context_dev_scrape_styleguide","context_dev_screenshot","context_dev_search","convex_action","convex_document_deltas","convex_list_documents","convex_list_tables","convex_mutation","convex_query","convex_run_function","crowdstrike_create_indicators","crowdstrike_delete_indicators","crowdstrike_delete_rtr_session","crowdstrike_execute_rtr_command","crowdstrike_get_alert_details","crowdstrike_get_case_details","crowdstrike_get_host_group_details","crowdstrike_get_indicator_details","crowdstrike_get_rtr_command_status","crowdstrike_get_sensor_aggregates","crowdstrike_get_sensor_details","crowdstrike_get_vulnerability_details","crowdstrike_init_rtr_session","crowdstrike_perform_host_action","crowdstrike_perform_host_group_action","crowdstrike_query_alerts","crowdstrike_query_cases","crowdstrike_query_host_groups","crowdstrike_query_indicators","crowdstrike_query_sensors","crowdstrike_query_vulnerabilities","crowdstrike_update_alerts","crowdstrike_update_indicators","crunchbase_autocomplete","crunchbase_get_acquisition","crunchbase_get_entity","crunchbase_get_entity_card","crunchbase_get_fields_metadata","crunchbase_get_funding_round","crunchbase_get_organization","crunchbase_get_person","crunchbase_list_deleted_entities","crunchbase_search_acquisitions","crunchbase_search_entities","crunchbase_search_funding_rounds","crunchbase_search_organizations","crunchbase_search_people","cursor_add_followup","cursor_add_followup_v2","cursor_delete_agent","cursor_delete_agent_v2","cursor_download_artifact","cursor_download_artifact_v2","cursor_get_agent","cursor_get_agent_v2","cursor_get_api_key_info","cursor_get_api_key_info_v2","cursor_get_conversation","cursor_get_conversation_v2","cursor_launch_agent","cursor_launch_agent_v2","cursor_list_agents","cursor_list_agents_v2","cursor_list_artifacts","cursor_list_artifacts_v2","cursor_list_models","cursor_list_models_v2","cursor_list_repositories","cursor_list_repositories_v2","cursor_stop_agent","cursor_stop_agent_v2","dagster_delete_run","dagster_get_asset","dagster_get_run","dagster_get_run_logs","dagster_launch_run","dagster_list_assets","dagster_list_jobs","dagster_list_runs","dagster_list_schedules","dagster_list_sensors","dagster_materialize_assets","dagster_reexecute_run","dagster_report_asset_materialization","dagster_start_schedule","dagster_start_sensor","dagster_stop_schedule","dagster_stop_sensor","dagster_terminate_run","dagster_wipe_asset","databricks_cancel_run","databricks_execute_sql","databricks_get_cluster","databricks_get_job","databricks_get_run","databricks_get_run_output","databricks_get_statement","databricks_list_clusters","databricks_list_jobs","databricks_list_runs","databricks_list_warehouses","databricks_run_job","datadog_add_incident_todo","datadog_cancel_downtime","datadog_create_dashboard","datadog_create_downtime","datadog_create_event","datadog_create_incident","datadog_create_monitor","datadog_create_slo","datadog_delete_dashboard","datadog_delete_slo","datadog_get_browser_synthetics_results","datadog_get_dashboard","datadog_get_incident","datadog_get_monitor","datadog_get_security_signal","datadog_get_slo","datadog_get_slo_history","datadog_get_synthetics_results","datadog_get_synthetics_test","datadog_list_dashboards","datadog_list_downtimes","datadog_list_incidents","datadog_list_monitors","datadog_list_security_rules","datadog_list_security_signals","datadog_list_services","datadog_list_slos","datadog_list_synthetics_tests","datadog_mute_monitor","datadog_query_logs","datadog_query_timeseries","datadog_search_spans","datadog_send_logs","datadog_submit_metrics","datadog_trigger_synthetics_tests","datadog_unmute_monitor","datadog_update_incident","datadog_update_security_signal_assignee","datadog_update_security_signal_state","datadog_update_slo","datadog_update_synthetics_status","datagma_enrich_company","datagma_enrich_person","datagma_find_email","datagma_find_phone","datagma_get_credits","daytona_create_sandbox","daytona_delete_sandbox","daytona_download_file","daytona_execute_command","daytona_get_sandbox","daytona_git_clone","daytona_list_files","daytona_list_sandboxes","daytona_run_code","daytona_start_sandbox","daytona_stop_sandbox","daytona_upload_file","deployed_block_executor","deployments_deploy","deployments_get_version","deployments_list_versions","deployments_promote","deployments_undeploy","devin_append_session_tags","devin_archive_session","devin_create_session","devin_get_session","devin_get_session_tags","devin_list_session_attachments","devin_list_session_messages","devin_list_sessions","devin_replace_session_tags","devin_send_message","devin_terminate_session","discord_add_reaction","discord_archive_thread","discord_assign_role","discord_ban_member","discord_bulk_delete_messages","discord_create_channel","discord_create_invite","discord_create_role","discord_create_thread","discord_create_webhook","discord_delete_channel","discord_delete_invite","discord_delete_message","discord_delete_role","discord_delete_webhook","discord_edit_message","discord_execute_webhook","discord_get_channel","discord_get_invite","discord_get_member","discord_get_messages","discord_get_pinned_messages","discord_get_server","discord_get_user","discord_get_webhook","discord_join_thread","discord_kick_member","discord_leave_thread","discord_list_channels","discord_list_roles","discord_pin_message","discord_remove_reaction","discord_remove_role","discord_send_message","discord_unban_member","discord_unpin_message","discord_update_channel","discord_update_member","discord_update_role","docusign_create_from_template","docusign_download_document","docusign_get_envelope","docusign_list_envelopes","docusign_list_recipients","docusign_list_templates","docusign_send_envelope","docusign_void_envelope","downdetector_get_company","downdetector_get_company_attribution","downdetector_get_company_baseline","downdetector_get_company_events","downdetector_get_company_incidents","downdetector_get_company_indicators","downdetector_get_company_last_15","downdetector_get_company_status","downdetector_get_provider","downdetector_get_reports","downdetector_get_site_companies","downdetector_list_categories","downdetector_list_incidents","downdetector_list_sites","downdetector_search_companies","dropbox_copy","dropbox_create_folder","dropbox_create_shared_link","dropbox_delete","dropbox_download","dropbox_get_metadata","dropbox_list_folder","dropbox_list_revisions","dropbox_list_shared_links","dropbox_move","dropbox_restore","dropbox_search","dropbox_upload","dropcontact_enrich_contact","dspy_chain_of_thought","dspy_predict","dspy_react","dub_bulk_create_links","dub_bulk_delete_links","dub_bulk_update_links","dub_create_link","dub_create_tag","dub_delete_link","dub_get_analytics","dub_get_events","dub_get_link","dub_get_links_count","dub_get_qr_code","dub_list_domains","dub_list_folders","dub_list_links","dub_list_tags","dub_update_link","dub_upsert_link","duckduckgo_search","dynamodb_delete","dynamodb_get","dynamodb_introspect","dynamodb_put","dynamodb_query","dynamodb_scan","dynamodb_update","dynatrace_add_problem_comment","dynatrace_add_tags","dynatrace_close_problem","dynatrace_create_settings_object","dynatrace_create_slo","dynatrace_delete_problem_comment","dynatrace_delete_settings_object","dynatrace_delete_slo","dynatrace_delete_tag","dynatrace_execute_synthetic_monitors","dynatrace_get_attack","dynatrace_get_audit_logs","dynatrace_get_entity","dynatrace_get_event","dynatrace_get_metric","dynatrace_get_problem","dynatrace_get_problem_comment","dynatrace_get_security_problem","dynatrace_get_settings_object","dynatrace_get_slo","dynatrace_get_synthetic_batch","dynatrace_ingest_event","dynatrace_ingest_logs","dynatrace_ingest_metrics","dynatrace_list_attacks","dynatrace_list_entities","dynatrace_list_entity_types","dynatrace_list_events","dynatrace_list_metrics","dynatrace_list_problem_comments","dynatrace_list_problems","dynatrace_list_remediation_items","dynatrace_list_security_problems","dynatrace_list_settings_objects","dynatrace_list_settings_schemas","dynatrace_list_slos","dynatrace_list_synthetic_monitors","dynatrace_list_tags","dynatrace_mute_security_problem","dynatrace_mute_security_problems","dynatrace_query_metrics","dynatrace_search_logs","dynatrace_unmute_security_problem","dynatrace_unmute_security_problems","dynatrace_update_problem_comment","dynatrace_update_settings_object","dynatrace_update_slo","elasticsearch_bulk","elasticsearch_cluster_health","elasticsearch_cluster_stats","elasticsearch_count","elasticsearch_create_index","elasticsearch_delete_document","elasticsearch_delete_index","elasticsearch_get_document","elasticsearch_get_index","elasticsearch_index_document","elasticsearch_list_indices","elasticsearch_search","elasticsearch_update_document","elevenlabs_audio_isolation","elevenlabs_edit_voice_settings","elevenlabs_get_user","elevenlabs_get_voice","elevenlabs_get_voice_settings","elevenlabs_list_models","elevenlabs_list_voices","elevenlabs_sound_effects","elevenlabs_speech_to_speech","elevenlabs_tts","emailbison_attach_leads_to_campaign","emailbison_attach_tags_to_leads","emailbison_create_campaign","emailbison_create_lead","emailbison_create_tag","emailbison_get_lead","emailbison_list_campaigns","emailbison_list_leads","emailbison_list_replies","emailbison_list_tags","emailbison_update_campaign","emailbison_update_campaign_status","emailbison_update_lead","embeddings_cohere","embeddings_gemini","embeddings_mistral","embeddings_openai","embeddings_openrouter","enrich_check_credits","enrich_company_funding","enrich_company_lookup","enrich_company_revenue","enrich_disposable_email_check","enrich_email_to_ip","enrich_email_to_person_lite","enrich_email_to_phone","enrich_email_to_profile","enrich_find_email","enrich_get_post_details","enrich_ip_to_company","enrich_linkedin_profile","enrich_linkedin_to_personal_email","enrich_linkedin_to_work_email","enrich_phone_finder","enrich_reverse_hash_lookup","enrich_sales_pointer_people","enrich_search_company","enrich_search_company_activities","enrich_search_company_employees","enrich_search_jobs","enrich_search_logo","enrich_search_people","enrich_search_people_activities","enrich_search_post_comments","enrich_search_post_comments_by_url","enrich_search_post_reactions","enrich_search_post_reactions_by_url","enrich_search_posts","enrich_search_similar_companies","enrich_verify_email","enrichment_run","enrow_find_email","enrow_verify_email","exa_agent","exa_answer","exa_find_similar_links","exa_get_contents","exa_search","extend_parser","extend_parser_v2","fathom_get_summary","fathom_get_transcript","fathom_list_meeting_types","fathom_list_meetings","fathom_list_team_members","fathom_list_teams","file_append","file_compress","file_decompress","file_fetch","file_get","file_get_content","file_manage_sharing","file_parser","file_parser_v2","file_parser_v3","file_read","file_search","file_write","findymail_find_email_from_linkedin","findymail_find_email_from_name","findymail_find_emails_by_domain","findymail_find_employees","findymail_find_phone","findymail_get_company","findymail_get_credits","findymail_lookup_technologies","findymail_reverse_email_lookup","findymail_search_technologies","findymail_verify_email","firecrawl_agent","firecrawl_batch_scrape","firecrawl_batch_scrape_status","firecrawl_cancel_crawl","firecrawl_crawl","firecrawl_crawl_status","firecrawl_credit_usage","firecrawl_extract","firecrawl_extract_status","firecrawl_map","firecrawl_parse","firecrawl_scrape","firecrawl_search","fireflies_add_to_live_meeting","fireflies_create_bite","fireflies_delete_transcript","fireflies_get_transcript","fireflies_get_user","fireflies_list_bites","fireflies_list_contacts","fireflies_list_transcripts","fireflies_list_users","fireflies_upload_audio","flint_create_task","flint_generate_pages","flint_get_task","function_execute","gamma_check_status","gamma_generate","gamma_generate_from_template","gamma_list_folders","gamma_list_themes","github_add_assignees","github_add_assignees_v2","github_add_labels","github_add_labels_v2","github_cancel_workflow_run","github_cancel_workflow_run_v2","github_check_star","github_check_star_v2","github_close_issue","github_close_issue_v2","github_close_pr","github_close_pr_v2","github_comment","github_comment_v2","github_compare_commits","github_compare_commits_v2","github_create_branch","github_create_branch_v2","github_create_comment_reaction","github_create_comment_reaction_v2","github_create_file","github_create_file_v2","github_create_gist","github_create_gist_v2","github_create_issue","github_create_issue_reaction","github_create_issue_reaction_v2","github_create_issue_v2","github_create_milestone","github_create_milestone_v2","github_create_pr","github_create_pr_review","github_create_pr_review_v2","github_create_pr_v2","github_create_project","github_create_project_v2","github_create_release","github_create_release_v2","github_delete_branch","github_delete_branch_v2","github_delete_comment","github_delete_comment_reaction","github_delete_comment_reaction_v2","github_delete_comment_v2","github_delete_file","github_delete_file_v2","github_delete_gist","github_delete_gist_v2","github_delete_issue_reaction","github_delete_issue_reaction_v2","github_delete_milestone","github_delete_milestone_v2","github_delete_project","github_delete_project_v2","github_delete_release","github_delete_release_v2","github_fork_gist","github_fork_gist_v2","github_fork_repo","github_fork_repo_v2","github_get_branch","github_get_branch_protection","github_get_branch_protection_v2","github_get_branch_v2","github_get_commit","github_get_commit_v2","github_get_file_content","github_get_file_content_v2","github_get_gist","github_get_gist_v2","github_get_issue","github_get_issue_v2","github_get_latest_release","github_get_latest_release_v2","github_get_milestone","github_get_milestone_v2","github_get_pr_files","github_get_pr_files_v2","github_get_project","github_get_project_v2","github_get_readme","github_get_readme_v2","github_get_release","github_get_release_v2","github_get_tree","github_get_tree_v2","github_get_workflow","github_get_workflow_run","github_get_workflow_run_v2","github_get_workflow_v2","github_issue_comment","github_issue_comment_v2","github_job_logs","github_latest_commit","github_latest_commit_v2","github_list_branches","github_list_branches_v2","github_list_commits","github_list_commits_v2","github_list_forks","github_list_forks_v2","github_list_gists","github_list_gists_v2","github_list_issue_comments","github_list_issue_comments_v2","github_list_issues","github_list_issues_v2","github_list_milestones","github_list_milestones_v2","github_list_pr_comments","github_list_pr_comments_v2","github_list_projects","github_list_projects_v2","github_list_prs","github_list_prs_v2","github_list_releases","github_list_releases_v2","github_list_review_threads","github_list_stargazers","github_list_stargazers_v2","github_list_tags","github_list_tags_v2","github_list_workflow_runs","github_list_workflow_runs_v2","github_list_workflows","github_list_workflows_v2","github_merge_pr","github_merge_pr_v2","github_pr","github_pr_v2","github_remove_label","github_remove_label_v2","github_reply_review_thread","github_repo_info","github_repo_info_v2","github_request_reviewers","github_request_reviewers_v2","github_rerun_workflow","github_rerun_workflow_v2","github_resolve_review_thread","github_search_code","github_search_code_v2","github_search_commits","github_search_commits_v2","github_search_issues","github_search_issues_v2","github_search_repos","github_search_repos_v2","github_search_users","github_search_users_v2","github_star_gist","github_star_gist_v2","github_star_repo","github_star_repo_v2","github_status_check_rollup","github_trigger_workflow","github_trigger_workflow_v2","github_unstar_gist","github_unstar_gist_v2","github_unstar_repo","github_unstar_repo_v2","github_update_branch_protection","github_update_branch_protection_v2","github_update_comment","github_update_comment_v2","github_update_file","github_update_file_v2","github_update_gist","github_update_gist_v2","github_update_issue","github_update_issue_v2","github_update_milestone","github_update_milestone_v2","github_update_pr","github_update_pr_v2","github_update_project","github_update_project_v2","github_update_release","github_update_release_v2","gitlab_activate_user","gitlab_add_member","gitlab_add_saml_group_link","gitlab_approve_access_request","gitlab_approve_merge_request","gitlab_approve_user","gitlab_ban_user","gitlab_block_user","gitlab_cancel_pipeline","gitlab_compare_branches","gitlab_create_branch","gitlab_create_file","gitlab_create_issue","gitlab_create_issue_note","gitlab_create_merge_request","gitlab_create_merge_request_note","gitlab_create_pipeline","gitlab_create_release","gitlab_create_user","gitlab_deactivate_user","gitlab_delete_branch","gitlab_delete_issue","gitlab_delete_saml_group_link","gitlab_delete_user","gitlab_delete_user_identity","gitlab_deny_access_request","gitlab_get_file","gitlab_get_group","gitlab_get_issue","gitlab_get_job_log","gitlab_get_merge_request","gitlab_get_merge_request_changes","gitlab_get_pipeline","gitlab_get_project","gitlab_invite_member","gitlab_list_access_requests","gitlab_list_branches","gitlab_list_commits","gitlab_list_groups","gitlab_list_invitations","gitlab_list_issues","gitlab_list_members","gitlab_list_merge_requests","gitlab_list_pipeline_jobs","gitlab_list_pipelines","gitlab_list_projects","gitlab_list_releases","gitlab_list_repository_tree","gitlab_list_saml_group_links","gitlab_list_user_memberships","gitlab_merge_merge_request","gitlab_play_job","gitlab_reject_user","gitlab_remove_member","gitlab_retry_pipeline","gitlab_revoke_invitation","gitlab_search_users","gitlab_unban_user","gitlab_unblock_user","gitlab_update_file","gitlab_update_invitation","gitlab_update_issue","gitlab_update_member","gitlab_update_merge_request","gitlab_update_user","gmail_add_label","gmail_add_label_v2","gmail_archive","gmail_archive_v2","gmail_create_label_v2","gmail_delete","gmail_delete_draft_v2","gmail_delete_label_v2","gmail_delete_v2","gmail_draft","gmail_draft_v2","gmail_edit_draft_v2","gmail_get_draft_v2","gmail_get_thread_v2","gmail_list_drafts_v2","gmail_list_labels_v2","gmail_list_threads_v2","gmail_mark_read","gmail_mark_read_v2","gmail_mark_unread","gmail_mark_unread_v2","gmail_move","gmail_move_v2","gmail_read","gmail_read_v2","gmail_remove_label","gmail_remove_label_v2","gmail_search","gmail_search_v2","gmail_send","gmail_send_v2","gmail_trash_thread_v2","gmail_unarchive","gmail_unarchive_v2","gmail_untrash_thread_v2","gmail_update_label_v2","gong_aggregate_activity","gong_aggregate_by_period","gong_answered_scorecards","gong_ask_anything","gong_assign_flow_prospects","gong_create_call","gong_day_by_day_activity","gong_get_brief","gong_get_call","gong_get_call_transcript","gong_get_coaching","gong_get_extensive_calls","gong_get_folder_content","gong_get_logs","gong_get_prospect_flows","gong_get_user","gong_interaction_stats","gong_list_calls","gong_list_flows","gong_list_library_folders","gong_list_scorecards","gong_list_trackers","gong_list_users","gong_list_workspaces","gong_lookup_email","gong_lookup_phone","gong_purge_email_address","gong_purge_phone_number","gong_unassign_flow_prospects","google_ads_ad_performance","google_ads_campaign_performance","google_ads_list_ad_groups","google_ads_list_campaigns","google_ads_list_customers","google_ads_search","google_appsheet_add_rows","google_appsheet_delete_rows","google_appsheet_edit_rows","google_appsheet_find_rows","google_bigquery_create_dataset","google_bigquery_create_table","google_bigquery_delete_dataset","google_bigquery_delete_table","google_bigquery_get_query_results","google_bigquery_get_table","google_bigquery_insert_rows","google_bigquery_list_datasets","google_bigquery_list_table_data","google_bigquery_list_tables","google_bigquery_query","google_books_volume_details","google_books_volume_search","google_calendar_create","google_calendar_create_calendar","google_calendar_create_calendar_v2","google_calendar_create_v2","google_calendar_delete","google_calendar_delete_calendar","google_calendar_delete_calendar_v2","google_calendar_delete_v2","google_calendar_freebusy","google_calendar_freebusy_v2","google_calendar_get","google_calendar_get_v2","google_calendar_instances","google_calendar_instances_v2","google_calendar_invite","google_calendar_invite_v2","google_calendar_list","google_calendar_list_acl","google_calendar_list_acl_v2","google_calendar_list_calendars","google_calendar_list_calendars_v2","google_calendar_list_v2","google_calendar_move","google_calendar_move_v2","google_calendar_quick_add","google_calendar_quick_add_v2","google_calendar_share_calendar","google_calendar_share_calendar_v2","google_calendar_unshare_calendar","google_calendar_unshare_calendar_v2","google_calendar_update","google_calendar_update_acl","google_calendar_update_acl_v2","google_calendar_update_calendar","google_calendar_update_calendar_v2","google_calendar_update_v2","google_contacts_create","google_contacts_delete","google_contacts_get","google_contacts_list","google_contacts_search","google_contacts_update","google_docs_create","google_docs_create_named_range","google_docs_create_paragraph_bullets","google_docs_delete_content_range","google_docs_delete_named_range","google_docs_delete_paragraph_bullets","google_docs_insert_image","google_docs_insert_page_break","google_docs_insert_table","google_docs_insert_text","google_docs_read","google_docs_replace_text","google_docs_update_paragraph_style","google_docs_update_text_style","google_docs_write","google_drive_copy","google_drive_create_comment","google_drive_create_folder","google_drive_delete","google_drive_delete_comment","google_drive_download","google_drive_export","google_drive_get_about","google_drive_get_content","google_drive_get_file","google_drive_get_revision","google_drive_list","google_drive_list_comments","google_drive_list_permissions","google_drive_list_revisions","google_drive_move","google_drive_search","google_drive_share","google_drive_trash","google_drive_unshare","google_drive_untrash","google_drive_update","google_drive_upload","google_forms_batch_update","google_forms_create_form","google_forms_create_watch","google_forms_delete_watch","google_forms_get_form","google_forms_get_responses","google_forms_list_watches","google_forms_renew_watch","google_forms_set_publish_settings","google_groups_add_alias","google_groups_add_member","google_groups_create_group","google_groups_delete_group","google_groups_get_group","google_groups_get_member","google_groups_get_settings","google_groups_has_member","google_groups_list_aliases","google_groups_list_groups","google_groups_list_members","google_groups_remove_alias","google_groups_remove_member","google_groups_update_group","google_groups_update_member","google_groups_update_settings","google_maps_air_quality","google_maps_directions","google_maps_distance_matrix","google_maps_elevation","google_maps_geocode","google_maps_geolocate","google_maps_place_details","google_maps_places_nearby","google_maps_places_search","google_maps_pollen","google_maps_reverse_geocode","google_maps_snap_to_roads","google_maps_solar","google_maps_speed_limits","google_maps_timezone","google_maps_validate_address","google_meet_create_space","google_meet_end_conference","google_meet_get_conference_record","google_meet_get_space","google_meet_list_conference_records","google_meet_list_participants","google_pagespeed_analyze","google_search","google_sheets_append","google_sheets_append_v2","google_sheets_batch_clear_v2","google_sheets_batch_get_v2","google_sheets_batch_update_v2","google_sheets_clear_v2","google_sheets_copy_sheet_v2","google_sheets_create_spreadsheet_v2","google_sheets_delete_rows_v2","google_sheets_delete_sheet_v2","google_sheets_delete_spreadsheet_v2","google_sheets_get_spreadsheet_v2","google_sheets_read","google_sheets_read_v2","google_sheets_update","google_sheets_update_v2","google_sheets_write","google_sheets_write_v2","google_slides_add_image","google_slides_add_slide","google_slides_batch_update","google_slides_copy_presentation","google_slides_create","google_slides_create_line","google_slides_create_paragraph_bullets","google_slides_create_shape","google_slides_create_sheets_chart","google_slides_create_table","google_slides_create_video","google_slides_delete_object","google_slides_delete_paragraph_bullets","google_slides_delete_table_column","google_slides_delete_table_row","google_slides_delete_text","google_slides_duplicate_object","google_slides_export_presentation","google_slides_get_page","google_slides_get_thumbnail","google_slides_group_objects","google_slides_insert_table_columns","google_slides_insert_table_rows","google_slides_insert_text","google_slides_merge_table_cells","google_slides_read","google_slides_refresh_sheets_chart","google_slides_replace_all_shapes_with_image","google_slides_replace_all_shapes_with_sheets_chart","google_slides_replace_all_text","google_slides_replace_image","google_slides_reroute_line","google_slides_ungroup_objects","google_slides_unmerge_table_cells","google_slides_update_image_properties","google_slides_update_line_category","google_slides_update_line_properties","google_slides_update_page_element_alt_text","google_slides_update_page_element_transform","google_slides_update_page_elements_z_order","google_slides_update_page_properties","google_slides_update_paragraph_style","google_slides_update_shape_properties","google_slides_update_slide_properties","google_slides_update_slides_position","google_slides_update_table_border_properties","google_slides_update_table_cell_properties","google_slides_update_table_column_properties","google_slides_update_table_row_properties","google_slides_update_text_style","google_slides_update_video_properties","google_slides_write","google_tasks_create","google_tasks_delete","google_tasks_get","google_tasks_list","google_tasks_list_task_lists","google_tasks_update","google_translate_detect","google_translate_text","google_vault_add_held_accounts","google_vault_add_matters_permissions","google_vault_close_matters","google_vault_create_matters","google_vault_create_matters_export","google_vault_create_matters_holds","google_vault_create_saved_query","google_vault_delete_matters","google_vault_delete_matters_export","google_vault_delete_matters_holds","google_vault_delete_saved_query","google_vault_download_export_file","google_vault_list_matters","google_vault_list_matters_export","google_vault_list_matters_holds","google_vault_list_saved_queries","google_vault_remove_held_accounts","google_vault_remove_matters_permissions","google_vault_reopen_matters","google_vault_undelete_matters","google_vault_update_matters","google_vault_update_matters_holds","grafana_check_data_source_health","grafana_create_alert_rule","grafana_create_annotation","grafana_create_contact_point","grafana_create_dashboard","grafana_create_folder","grafana_delete_alert_rule","grafana_delete_annotation","grafana_delete_contact_point","grafana_delete_dashboard","grafana_delete_folder","grafana_get_alert_rule","grafana_get_alert_rule_group","grafana_get_dashboard","grafana_get_data_source","grafana_get_folder","grafana_get_health","grafana_list_alert_rules","grafana_list_annotations","grafana_list_contact_points","grafana_list_dashboards","grafana_list_data_sources","grafana_list_folders","grafana_move_folder","grafana_query_data_source","grafana_update_alert_rule","grafana_update_annotation","grafana_update_contact_point","grafana_update_dashboard","grafana_update_folder","grain_create_hook","grain_create_hook_v2","grain_delete_hook","grain_delete_hook_v2","grain_get_recording","grain_get_transcript","grain_list_hooks","grain_list_hooks_v2","grain_list_meeting_types","grain_list_recordings","grain_list_teams","grain_list_views","granola_create_webhook_endpoint","granola_delete_webhook_endpoint","granola_get_note","granola_get_transcript","granola_list_audit_events","granola_list_folders","granola_list_notes","granola_list_webhook_endpoints","granola_update_webhook_endpoint","greenhouse_get_application","greenhouse_get_candidate","greenhouse_get_job","greenhouse_get_user","greenhouse_list_applications","greenhouse_list_candidates","greenhouse_list_departments","greenhouse_list_job_stages","greenhouse_list_jobs","greenhouse_list_offices","greenhouse_list_users","greptile_index_repo","greptile_query","greptile_search","greptile_status","guardrails_validate","harmonic_batch_get_people","harmonic_clear_people_saved_search_net_new_results","harmonic_enrich_person","harmonic_get_company_employees","harmonic_get_email_enrichment_job","harmonic_get_email_enrichment_usage","harmonic_get_enrichment_status","harmonic_get_people_saved_search_net_new_results","harmonic_get_people_saved_search_results","harmonic_get_person","harmonic_list_people_saved_searches","harmonic_search_people_scout","harmonic_submit_email_enrichment_job","hex_cancel_run","hex_create_collection","hex_create_group","hex_deactivate_user","hex_delete_group","hex_get_collection","hex_get_data_connection","hex_get_group","hex_get_project","hex_get_project_runs","hex_get_queried_tables","hex_get_run_status","hex_list_collections","hex_list_data_connections","hex_list_groups","hex_list_projects","hex_list_users","hex_run_project","hex_update_collection","hex_update_group","hex_update_project","http_request","hubspot_add_list_memberships","hubspot_create_appointment","hubspot_create_association","hubspot_create_company","hubspot_create_contact","hubspot_create_deal","hubspot_create_email","hubspot_create_line_item","hubspot_create_list","hubspot_create_note","hubspot_create_ticket","hubspot_delete_association","hubspot_delete_company","hubspot_delete_contact","hubspot_delete_deal","hubspot_delete_line_item","hubspot_delete_ticket","hubspot_get_appointment","hubspot_get_association_labels","hubspot_get_cart","hubspot_get_company","hubspot_get_contact","hubspot_get_deal","hubspot_get_email","hubspot_get_line_item","hubspot_get_list","hubspot_get_list_memberships","hubspot_get_marketing_event","hubspot_get_note","hubspot_get_properties","hubspot_get_quote","hubspot_get_ticket","hubspot_get_users","hubspot_list_appointments","hubspot_list_associations","hubspot_list_carts","hubspot_list_companies","hubspot_list_contacts","hubspot_list_deals","hubspot_list_emails","hubspot_list_line_items","hubspot_list_lists","hubspot_list_marketing_events","hubspot_list_notes","hubspot_list_owners","hubspot_list_quotes","hubspot_list_tickets","hubspot_remove_list_memberships","hubspot_search_companies","hubspot_search_contacts","hubspot_search_deals","hubspot_search_emails","hubspot_search_line_items","hubspot_search_notes","hubspot_search_quotes","hubspot_search_tickets","hubspot_update_appointment","hubspot_update_company","hubspot_update_contact","hubspot_update_deal","hubspot_update_line_item","hubspot_update_ticket","huggingface_chat","hunter_companies_find","hunter_discover","hunter_domain_search","hunter_email_count","hunter_email_finder","hunter_email_verifier","iam_add_user_to_group","iam_attach_role_policy","iam_attach_user_policy","iam_create_access_key","iam_create_role","iam_create_user","iam_delete_access_key","iam_delete_role","iam_delete_user","iam_detach_role_policy","iam_detach_user_policy","iam_get_role","iam_get_user","iam_list_attached_role_policies","iam_list_attached_user_policies","iam_list_groups","iam_list_policies","iam_list_roles","iam_list_users","iam_remove_user_from_group","iam_simulate_principal_policy","icypeas_find_email","icypeas_verify_email","identity_center_check_assignment_deletion_status","identity_center_check_assignment_status","identity_center_create_account_assignment","identity_center_delete_account_assignment","identity_center_describe_account","identity_center_get_group","identity_center_get_user","identity_center_list_account_assignments","identity_center_list_accounts","identity_center_list_groups","identity_center_list_instances","identity_center_list_permission_sets","image_generate","incidentio_actions_create","incidentio_actions_list","incidentio_actions_show","incidentio_actions_update","incidentio_alert_events_create","incidentio_alerts_list","incidentio_alerts_resolve","incidentio_alerts_show","incidentio_catalog_entries_list","incidentio_catalog_types_list","incidentio_custom_fields_create","incidentio_custom_fields_delete","incidentio_custom_fields_list","incidentio_custom_fields_show","incidentio_custom_fields_update","incidentio_escalation_paths_create","incidentio_escalation_paths_delete","incidentio_escalation_paths_list","incidentio_escalation_paths_show","incidentio_escalation_paths_update","incidentio_escalations_cancel","incidentio_escalations_create","incidentio_escalations_list","incidentio_escalations_show","incidentio_follow_ups_create","incidentio_follow_ups_list","incidentio_follow_ups_show","incidentio_follow_ups_update","incidentio_incident_alerts_list","incidentio_incident_memberships_create","incidentio_incident_memberships_revoke","incidentio_incident_participants_list","incidentio_incident_roles_create","incidentio_incident_roles_delete","incidentio_incident_roles_list","incidentio_incident_roles_show","incidentio_incident_roles_update","incidentio_incident_statuses_list","incidentio_incident_timestamps_list","incidentio_incident_timestamps_show","incidentio_incident_types_list","incidentio_incident_updates_list","incidentio_incidents_create","incidentio_incidents_list","incidentio_incidents_show","incidentio_incidents_update","incidentio_on_call_now","incidentio_schedule_entries_list","incidentio_schedule_overrides_create","incidentio_schedule_overrides_list","incidentio_schedules_create","incidentio_schedules_delete","incidentio_schedules_list","incidentio_schedules_show","incidentio_schedules_update","incidentio_severities_list","incidentio_teams_list","incidentio_teams_show","incidentio_users_list","incidentio_users_show","incidentio_workflows_create","incidentio_workflows_delete","incidentio_workflows_list","incidentio_workflows_show","incidentio_workflows_update","infisical_create_secret","infisical_delete_secret","infisical_get_secret","infisical_list_secrets","infisical_update_secret","instagram_delete_comment","instagram_download_media","instagram_get_account_insights","instagram_get_container_status","instagram_get_conversation_messages","instagram_get_media","instagram_get_media_insights","instagram_get_message","instagram_get_profile","instagram_get_publishing_limit","instagram_hide_comment","instagram_list_comments","instagram_list_conversations","instagram_list_media","instagram_list_stories","instagram_private_reply","instagram_publish_carousel","instagram_publish_image","instagram_publish_reel","instagram_publish_story","instagram_publish_video","instagram_reply_to_comment","instagram_send_text_message","instagram_set_comments_enabled","instantly_activate_campaign","instantly_create_campaign","instantly_create_lead","instantly_create_lead_list","instantly_delete_campaign","instantly_delete_leads","instantly_get_lead","instantly_list_campaigns","instantly_list_emails","instantly_list_lead_lists","instantly_list_leads","instantly_patch_campaign","instantly_patch_lead","instantly_pause_campaign","instantly_reply_to_email","instantly_update_lead_interest_status","intercom_assign_conversation_v2","intercom_attach_contact_to_company_v2","intercom_close_conversation_v2","intercom_create_company","intercom_create_company_v2","intercom_create_contact","intercom_create_contact_v2","intercom_create_event_v2","intercom_create_message","intercom_create_message_v2","intercom_create_note_v2","intercom_create_tag_v2","intercom_create_ticket","intercom_create_ticket_v2","intercom_delete_contact","intercom_delete_contact_v2","intercom_detach_contact_from_company_v2","intercom_get_company","intercom_get_company_v2","intercom_get_contact","intercom_get_contact_v2","intercom_get_conversation","intercom_get_conversation_v2","intercom_get_ticket","intercom_get_ticket_v2","intercom_list_admins_v2","intercom_list_companies","intercom_list_companies_v2","intercom_list_contacts","intercom_list_contacts_v2","intercom_list_conversations","intercom_list_conversations_v2","intercom_list_tags_v2","intercom_open_conversation_v2","intercom_reply_conversation","intercom_reply_conversation_v2","intercom_search_contacts","intercom_search_contacts_v2","intercom_search_conversations","intercom_search_conversations_v2","intercom_snooze_conversation_v2","intercom_tag_contact_v2","intercom_tag_conversation_v2","intercom_untag_contact_v2","intercom_update_contact","intercom_update_contact_v2","intercom_update_ticket_v2","jina_read_url","jina_search","jira_add_attachment","jira_add_comment","jira_add_watcher","jira_add_worklog","jira_assign_issue","jira_bulk_read","jira_create_issue_link","jira_delete_attachment","jira_delete_comment","jira_delete_issue","jira_delete_issue_link","jira_delete_worklog","jira_get_attachments","jira_get_comments","jira_get_fields","jira_get_project","jira_get_transitions","jira_get_users","jira_get_worklogs","jira_list_issue_types","jira_list_projects","jira_remove_watcher","jira_retrieve","jira_search_issues","jira_search_users","jira_transition_issue","jira_update","jira_update_comment","jira_update_worklog","jira_write","jotform_add_label_resources","jotform_clone_form","jotform_create_form","jotform_create_label","jotform_create_question","jotform_create_questions","jotform_create_report","jotform_create_submission","jotform_create_submissions","jotform_create_webhook","jotform_delete_form","jotform_delete_label","jotform_delete_question","jotform_delete_report","jotform_delete_submission","jotform_delete_webhook","jotform_get_form","jotform_get_form_properties","jotform_get_history","jotform_get_label","jotform_get_question","jotform_get_report","jotform_get_settings","jotform_get_submission","jotform_get_usage","jotform_get_user","jotform_list_form_files","jotform_list_form_reports","jotform_list_form_submissions","jotform_list_forms","jotform_list_label_resources","jotform_list_labels","jotform_list_questions","jotform_list_reports","jotform_list_submissions","jotform_list_subusers","jotform_list_webhooks","jotform_remove_label_resources","jotform_update_form_properties","jotform_update_label","jotform_update_question","jotform_update_settings","jotform_update_submission","jsm_add_comment","jsm_add_customer","jsm_add_organization","jsm_add_participants","jsm_answer_approval","jsm_attach_form","jsm_copy_forms","jsm_create_object","jsm_create_organization","jsm_create_request","jsm_delete_form","jsm_delete_object","jsm_externalise_form","jsm_get_approvals","jsm_get_comments","jsm_get_customers","jsm_get_form","jsm_get_form_answers","jsm_get_form_structure","jsm_get_form_templates","jsm_get_issue_forms","jsm_get_object","jsm_get_object_schema","jsm_get_object_type_attributes","jsm_get_organizations","jsm_get_participants","jsm_get_queues","jsm_get_request","jsm_get_request_type_fields","jsm_get_request_types","jsm_get_requests","jsm_get_service_desks","jsm_get_sla","jsm_get_transitions","jsm_internalise_form","jsm_list_object_schemas","jsm_list_object_types","jsm_reopen_form","jsm_save_form_answers","jsm_search_objects_aql","jsm_submit_form","jsm_transition_request","jsm_update_object","jupyter_copy_content","jupyter_create_file","jupyter_create_session","jupyter_delete_content","jupyter_delete_session","jupyter_get_content","jupyter_interrupt_kernel","jupyter_list_contents","jupyter_list_kernels","jupyter_list_kernelspecs","jupyter_list_sessions","jupyter_rename_content","jupyter_restart_kernel","jupyter_start_kernel","jupyter_stop_kernel","jupyter_upload_file","kalshi_amend_order","kalshi_amend_order_v2","kalshi_cancel_order","kalshi_cancel_order_v2","kalshi_create_order","kalshi_create_order_v2","kalshi_get_balance","kalshi_get_balance_v2","kalshi_get_candlesticks","kalshi_get_candlesticks_v2","kalshi_get_event","kalshi_get_event_candlesticks","kalshi_get_event_candlesticks_v2","kalshi_get_event_v2","kalshi_get_events","kalshi_get_events_v2","kalshi_get_exchange_announcements","kalshi_get_exchange_announcements_v2","kalshi_get_exchange_schedule","kalshi_get_exchange_schedule_v2","kalshi_get_exchange_status","kalshi_get_exchange_status_v2","kalshi_get_fills","kalshi_get_fills_v2","kalshi_get_market","kalshi_get_market_v2","kalshi_get_markets","kalshi_get_markets_v2","kalshi_get_order","kalshi_get_order_v2","kalshi_get_orderbook","kalshi_get_orderbook_v2","kalshi_get_orders","kalshi_get_orders_v2","kalshi_get_positions","kalshi_get_positions_v2","kalshi_get_series_by_ticker","kalshi_get_series_by_ticker_v2","kalshi_get_series_list","kalshi_get_series_list_v2","kalshi_get_settlements","kalshi_get_settlements_v2","kalshi_get_trades","kalshi_get_trades_v2","ketch_get_consent","ketch_get_subscriptions","ketch_invoke_right","ketch_set_consent","ketch_set_subscriptions","knowledge_create_document","knowledge_delete_chunk","knowledge_delete_document","knowledge_get_connector","knowledge_get_document","knowledge_list_chunks","knowledge_list_connectors","knowledge_list_documents","knowledge_list_tags","knowledge_search","knowledge_trigger_sync","knowledge_update_chunk","knowledge_upload_chunk","knowledge_upsert_document","lambda_add_permission","lambda_create_alias","lambda_create_event_source_mapping","lambda_create_function","lambda_create_function_url_config","lambda_delete_alias","lambda_delete_event_source_mapping","lambda_delete_function","lambda_delete_function_concurrency","lambda_delete_function_event_invoke_config","lambda_delete_function_url_config","lambda_delete_provisioned_concurrency_config","lambda_get_account_settings","lambda_get_alias","lambda_get_event_source_mapping","lambda_get_function","lambda_get_function_concurrency","lambda_get_function_configuration","lambda_get_function_event_invoke_config","lambda_get_function_recursion_config","lambda_get_function_url_config","lambda_get_layer_version","lambda_get_policy","lambda_get_provisioned_concurrency_config","lambda_get_runtime_management_config","lambda_invoke","lambda_list_aliases","lambda_list_event_source_mappings","lambda_list_function_event_invoke_configs","lambda_list_function_url_configs","lambda_list_functions","lambda_list_layer_versions","lambda_list_layers","lambda_list_provisioned_concurrency_configs","lambda_list_tags","lambda_list_versions_by_function","lambda_publish_version","lambda_put_function_concurrency","lambda_put_function_event_invoke_config","lambda_put_function_recursion_config","lambda_put_provisioned_concurrency_config","lambda_put_runtime_management_config","lambda_remove_permission","lambda_tag_resource","lambda_untag_resource","lambda_update_alias","lambda_update_event_source_mapping","lambda_update_function_code","lambda_update_function_configuration","lambda_update_function_url_config","langsmith_create_feedback","langsmith_create_run","langsmith_create_runs_batch","langsmith_get_run","langsmith_update_run","latex_compile","latex_get_package","latex_list_fonts","latex_search_packages","launchdarkly_create_flag","launchdarkly_delete_flag","launchdarkly_get_audit_log","launchdarkly_get_flag","launchdarkly_get_flag_status","launchdarkly_list_environments","launchdarkly_list_flags","launchdarkly_list_members","launchdarkly_list_projects","launchdarkly_list_segments","launchdarkly_toggle_flag","launchdarkly_update_flag","leadmagic_company_search","leadmagic_email_to_profile","leadmagic_find_email","leadmagic_find_mobile","leadmagic_get_credits","leadmagic_profile_search","leadmagic_profile_to_email","leadmagic_role_finder","leadmagic_validate_email","lemlist_get_activities","lemlist_get_lead","lemlist_send_email","linear_add_label_to_issue","linear_add_label_to_project","linear_archive_issue","linear_archive_label","linear_archive_project","linear_create_attachment","linear_create_comment","linear_create_customer","linear_create_customer_request","linear_create_customer_status","linear_create_customer_tier","linear_create_cycle","linear_create_favorite","linear_create_issue","linear_create_issue_relation","linear_create_label","linear_create_project","linear_create_project_label","linear_create_project_milestone","linear_create_project_status","linear_create_project_update","linear_create_workflow_state","linear_delete_attachment","linear_delete_comment","linear_delete_customer","linear_delete_customer_status","linear_delete_customer_tier","linear_delete_issue","linear_delete_issue_relation","linear_delete_project","linear_delete_project_label","linear_delete_project_milestone","linear_delete_project_status","linear_get_active_cycle","linear_get_customer","linear_get_cycle","linear_get_issue","linear_get_project","linear_get_viewer","linear_list_attachments","linear_list_comments","linear_list_customer_requests","linear_list_customer_statuses","linear_list_customer_tiers","linear_list_customers","linear_list_cycles","linear_list_favorites","linear_list_issue_relations","linear_list_labels","linear_list_notifications","linear_list_project_labels","linear_list_project_milestones","linear_list_project_statuses","linear_list_project_updates","linear_list_projects","linear_list_teams","linear_list_users","linear_list_workflow_states","linear_merge_customers","linear_read_issues","linear_remove_label_from_issue","linear_remove_label_from_project","linear_search_issues","linear_unarchive_issue","linear_update_attachment","linear_update_comment","linear_update_customer","linear_update_customer_request","linear_update_customer_status","linear_update_customer_tier","linear_update_issue","linear_update_label","linear_update_notification","linear_update_project","linear_update_project_label","linear_update_project_milestone","linear_update_project_status","linear_update_workflow_state","linkedin_get_profile","linkedin_share_post","linkup_search","linq_add_participant","linq_check_imessage","linq_check_rcs","linq_create_attachment","linq_create_chat","linq_create_contact_card","linq_create_webhook_subscription","linq_delete_attachment","linq_delete_message","linq_delete_webhook_subscription","linq_edit_message","linq_get_attachment","linq_get_chat","linq_get_contact_card","linq_get_message","linq_get_webhook_subscription","linq_leave_chat","linq_list_chats","linq_list_messages","linq_list_phone_numbers","linq_list_thread","linq_list_webhook_events","linq_list_webhook_subscriptions","linq_mark_chat_read","linq_react_to_message","linq_remove_participant","linq_send_message","linq_send_voice_memo","linq_share_contact_card","linq_start_typing","linq_stop_typing","linq_update_chat","linq_update_contact_card","linq_update_webhook_subscription","llm_chat","logfire_get_token_info","logfire_get_trace","logfire_query","logfire_search_records","logrocket_create_release","logrocket_get_audit_logs","logrocket_get_highlights","logrocket_identify_user","logrocket_list_exported_sessions","logrocket_request_highlights","logs_get","logs_get_execution","logs_get_run_details","logs_query","logs_query_runs","loops_check_contact_suppression","loops_create_contact","loops_create_contact_property","loops_delete_contact","loops_find_contact","loops_get_transactional_email","loops_list_contact_properties","loops_list_mailing_lists","loops_list_transactional_emails","loops_remove_contact_suppression","loops_send_event","loops_send_transactional_email","loops_update_contact","luma_add_guests","luma_cancel_event","luma_create_event","luma_get_event","luma_get_guest","luma_get_guests","luma_list_events","luma_lookup_event","luma_send_invites","luma_update_event","luma_update_guest_status","mailchimp_add_member","mailchimp_add_member_tags","mailchimp_add_or_update_member","mailchimp_add_segment_member","mailchimp_add_subscriber_to_automation","mailchimp_archive_member","mailchimp_create_audience","mailchimp_create_batch_operation","mailchimp_create_campaign","mailchimp_create_interest","mailchimp_create_interest_category","mailchimp_create_landing_page","mailchimp_create_merge_field","mailchimp_create_segment","mailchimp_create_template","mailchimp_delete_audience","mailchimp_delete_batch_operation","mailchimp_delete_campaign","mailchimp_delete_interest","mailchimp_delete_interest_category","mailchimp_delete_landing_page","mailchimp_delete_member","mailchimp_delete_merge_field","mailchimp_delete_segment","mailchimp_delete_template","mailchimp_get_audience","mailchimp_get_audiences","mailchimp_get_automation","mailchimp_get_automations","mailchimp_get_batch_operation","mailchimp_get_batch_operations","mailchimp_get_campaign","mailchimp_get_campaign_content","mailchimp_get_campaign_report","mailchimp_get_campaign_reports","mailchimp_get_campaigns","mailchimp_get_interest","mailchimp_get_interest_categories","mailchimp_get_interest_category","mailchimp_get_interests","mailchimp_get_landing_page","mailchimp_get_landing_pages","mailchimp_get_member","mailchimp_get_member_tags","mailchimp_get_members","mailchimp_get_merge_field","mailchimp_get_merge_fields","mailchimp_get_segment","mailchimp_get_segment_members","mailchimp_get_segments","mailchimp_get_template","mailchimp_get_templates","mailchimp_pause_automation","mailchimp_publish_landing_page","mailchimp_remove_member_tags","mailchimp_remove_segment_member","mailchimp_replicate_campaign","mailchimp_schedule_campaign","mailchimp_send_campaign","mailchimp_set_campaign_content","mailchimp_start_automation","mailchimp_unarchive_member","mailchimp_unpublish_landing_page","mailchimp_unschedule_campaign","mailchimp_update_audience","mailchimp_update_campaign","mailchimp_update_interest","mailchimp_update_interest_category","mailchimp_update_landing_page","mailchimp_update_member","mailchimp_update_merge_field","mailchimp_update_segment","mailchimp_update_template","mailgun_add_list_member","mailgun_create_mailing_list","mailgun_get_domain","mailgun_get_mailing_list","mailgun_get_message","mailgun_list_domains","mailgun_list_messages","mailgun_send_message","managed_agent_archive_session","managed_agent_create_session","managed_agent_delete_session","managed_agent_get_session","managed_agent_interrupt_session","managed_agent_list_events","managed_agent_respond_custom_tool","managed_agent_respond_tool_confirmation","managed_agent_run_session","managed_agent_send_message","managed_agent_update_session","mem0_add_memories","mem0_get_memories","mem0_search_memories","memory_add","memory_delete","memory_get","memory_get_all","microsoft_ad_add_directory_role_member","microsoft_ad_add_group_member","microsoft_ad_add_user_app_role_assignment","microsoft_ad_assign_license","microsoft_ad_create_group","microsoft_ad_create_user","microsoft_ad_delete_group","microsoft_ad_delete_user","microsoft_ad_get_conditional_access_policy","microsoft_ad_get_device","microsoft_ad_get_group","microsoft_ad_get_user","microsoft_ad_list_authentication_methods","microsoft_ad_list_conditional_access_policies","microsoft_ad_list_devices","microsoft_ad_list_directory_audits","microsoft_ad_list_directory_role_members","microsoft_ad_list_directory_roles","microsoft_ad_list_group_members","microsoft_ad_list_groups","microsoft_ad_list_service_principal_app_role_assignments","microsoft_ad_list_service_principals","microsoft_ad_list_sign_ins","microsoft_ad_list_subscribed_skus","microsoft_ad_list_user_app_role_assignments","microsoft_ad_list_user_devices","microsoft_ad_list_user_licenses","microsoft_ad_list_users","microsoft_ad_remove_directory_role_member","microsoft_ad_remove_group_member","microsoft_ad_remove_user_app_role_assignment","microsoft_ad_reset_password","microsoft_ad_revoke_sign_in_sessions","microsoft_ad_set_password","microsoft_ad_update_group","microsoft_ad_update_user","microsoft_dataverse_associate","microsoft_dataverse_create_multiple","microsoft_dataverse_create_record","microsoft_dataverse_delete_record","microsoft_dataverse_disassociate","microsoft_dataverse_download_file","microsoft_dataverse_execute_action","microsoft_dataverse_execute_function","microsoft_dataverse_fetchxml_query","microsoft_dataverse_get_entity_metadata","microsoft_dataverse_get_record","microsoft_dataverse_list_records","microsoft_dataverse_search","microsoft_dataverse_update_multiple","microsoft_dataverse_update_record","microsoft_dataverse_upload_file","microsoft_dataverse_upsert_record","microsoft_dataverse_whoami","microsoft_dynamics_365_close_case","microsoft_dynamics_365_close_opportunity","microsoft_dynamics_365_create_record","microsoft_dynamics_365_get_record","microsoft_dynamics_365_list_records","microsoft_dynamics_365_qualify_lead","microsoft_dynamics_365_search_records","microsoft_dynamics_365_update_record","microsoft_excel_clear_range","microsoft_excel_create_table","microsoft_excel_delete_worksheet","microsoft_excel_format_range","microsoft_excel_read","microsoft_excel_read_v2","microsoft_excel_sort_range","microsoft_excel_table_add","microsoft_excel_worksheet_add","microsoft_excel_write","microsoft_excel_write_v2","microsoft_planner_create_bucket","microsoft_planner_create_plan","microsoft_planner_create_task","microsoft_planner_delete_bucket","microsoft_planner_delete_plan","microsoft_planner_delete_task","microsoft_planner_get_plan_details","microsoft_planner_get_task_details","microsoft_planner_list_buckets","microsoft_planner_list_plans","microsoft_planner_read_bucket","microsoft_planner_read_plan","microsoft_planner_read_task","microsoft_planner_update_bucket","microsoft_planner_update_plan","microsoft_planner_update_plan_details","microsoft_planner_update_task","microsoft_planner_update_task_details","microsoft_teams_delete_channel_message","microsoft_teams_delete_chat_message","microsoft_teams_get_message","microsoft_teams_list_channel_members","microsoft_teams_list_channels","microsoft_teams_list_chat_members","microsoft_teams_list_chats","microsoft_teams_list_team_members","microsoft_teams_list_teams","microsoft_teams_read_channel","microsoft_teams_read_chat","microsoft_teams_reply_to_message","microsoft_teams_set_reaction","microsoft_teams_unset_reaction","microsoft_teams_update_channel_message","microsoft_teams_update_chat_message","microsoft_teams_write_channel","microsoft_teams_write_chat","microsoft_word_append","microsoft_word_create","microsoft_word_create_from_template","microsoft_word_export_pdf","microsoft_word_list","microsoft_word_read","microsoft_word_replace_text","microsoft_word_update","millionverifier_get_credits","millionverifier_verify_email","mintlify_create_agent_job","mintlify_create_assistant_message","mintlify_detect_ai_prose","mintlify_get_agent_job","mintlify_get_assistant_caller_stats","mintlify_get_assistant_conversations","mintlify_get_feedback","mintlify_get_feedback_by_page","mintlify_get_page_content","mintlify_get_searches","mintlify_get_update_status","mintlify_get_views","mintlify_get_visitors","mintlify_search","mintlify_send_agent_message","mintlify_trigger_automation","mintlify_trigger_preview","mintlify_trigger_update","mistral_parser","mistral_parser_v2","mistral_parser_v3","modal_call_function","modal_chat_completion","modal_list_models","monday_archive_item","monday_change_column_value","monday_create_board","monday_create_column","monday_create_group","monday_create_item","monday_create_subitem","monday_create_update","monday_delete_item","monday_duplicate_item","monday_get_board","monday_get_groups","monday_get_item","monday_get_items","monday_list_boards","monday_move_item_to_group","monday_search_items","monday_update_item","mongodb_delete","mongodb_execute","mongodb_insert","mongodb_introspect","mongodb_query","mongodb_update","mssql_delete","mssql_execute","mssql_insert","mssql_introspect","mssql_query","mssql_update","mysql_delete","mysql_execute","mysql_insert","mysql_introspect","mysql_query","mysql_update","neo4j_create","neo4j_delete","neo4j_execute","neo4j_introspect","neo4j_merge","neo4j_query","neo4j_update","netsuite_attach_record","netsuite_batch_create_records","netsuite_batch_delete_records","netsuite_batch_get_records","netsuite_batch_update_records","netsuite_batch_upsert_records","netsuite_create_record","netsuite_delete_record","netsuite_detach_record","netsuite_execute_action","netsuite_execute_dataset","netsuite_execute_suiteql","netsuite_get_async_result","netsuite_get_async_status","netsuite_get_governance_limits","netsuite_get_record","netsuite_get_record_form","netsuite_get_record_metadata","netsuite_get_select_options","netsuite_get_server_time","netsuite_get_subresource","netsuite_list_datasets","netsuite_list_record_types","netsuite_list_records","netsuite_transform_record","netsuite_update_record","netsuite_upsert_record","neverbounce_get_credits","neverbounce_verify_email","new_relic_create_deployment_event","new_relic_get_entity","new_relic_nrql_query","new_relic_search_entities","notion_add_database_row","notion_add_database_row_v2","notion_append_blocks","notion_append_blocks_v2","notion_create_comment","notion_create_comment_v2","notion_create_database","notion_create_database_v2","notion_create_page","notion_create_page_v2","notion_delete_block","notion_delete_block_v2","notion_list_comments","notion_list_comments_v2","notion_list_users","notion_list_users_v2","notion_query_database","notion_query_database_v2","notion_read","notion_read_database","notion_read_database_v2","notion_read_v2","notion_retrieve_block","notion_retrieve_block_children","notion_retrieve_block_children_v2","notion_retrieve_block_v2","notion_retrieve_user","notion_retrieve_user_v2","notion_search","notion_search_v2","notion_update_block","notion_update_block_v2","notion_update_page","notion_update_page_v2","notion_write","notion_write_v2","obsidian_append_active","obsidian_append_note","obsidian_append_periodic_note","obsidian_create_note","obsidian_delete_note","obsidian_execute_command","obsidian_get_active","obsidian_get_note","obsidian_get_periodic_note","obsidian_list_commands","obsidian_list_files","obsidian_open_file","obsidian_patch_active","obsidian_patch_note","obsidian_search","okta_activate_group_rule","okta_activate_user","okta_add_user_to_group","okta_assign_group_to_app","okta_assign_user_role","okta_assign_user_to_app","okta_clear_user_sessions","okta_create_group","okta_create_group_rule","okta_create_user","okta_deactivate_group_rule","okta_deactivate_user","okta_delete_group","okta_delete_group_rule","okta_delete_user","okta_enroll_factor","okta_get_app","okta_get_factor","okta_get_group","okta_get_group_rule","okta_get_logs","okta_get_session","okta_get_user","okta_list_app_groups","okta_list_app_users","okta_list_apps","okta_list_factors","okta_list_group_members","okta_list_group_rules","okta_list_groups","okta_list_user_roles","okta_list_users","okta_remove_group_from_app","okta_remove_user_from_app","okta_remove_user_from_group","okta_remove_user_role","okta_reset_all_factors","okta_reset_factor","okta_reset_password","okta_revoke_session","okta_suspend_user","okta_unsuspend_user","okta_update_group","okta_update_user","onedrive_copy","onedrive_create_folder","onedrive_create_share_link","onedrive_delete","onedrive_download","onedrive_get_drive_info","onedrive_get_item","onedrive_list","onedrive_move","onedrive_search","onedrive_upload","onepassword_create_item","onepassword_delete_item","onepassword_get_item","onepassword_get_item_file","onepassword_get_vault","onepassword_list_items","onepassword_list_vaults","onepassword_replace_item","onepassword_resolve_secret","onepassword_update_item","openai_embeddings","openai_image","outlook_calendar_create_event","outlook_calendar_delete_event","outlook_calendar_get_event","outlook_calendar_list_events","outlook_calendar_respond","outlook_calendar_update_event","outlook_copy","outlook_create_folder","outlook_delete","outlook_draft","outlook_forward","outlook_get_attachment","outlook_list_attachments","outlook_list_folders","outlook_mark_read","outlook_mark_unread","outlook_move","outlook_read","outlook_reply","outlook_reply_all","outlook_search","outlook_send","outlook_update_message","pagerduty_add_note","pagerduty_create_incident","pagerduty_get_incident","pagerduty_get_service","pagerduty_list_escalation_policies","pagerduty_list_incident_alerts","pagerduty_list_incidents","pagerduty_list_oncalls","pagerduty_list_schedules","pagerduty_list_services","pagerduty_list_users","pagerduty_merge_incidents","pagerduty_send_event","pagerduty_snooze_incident","pagerduty_update_incident","parallel_deep_research","parallel_extract","parallel_search","pdl_autocomplete","pdl_bulk_company_enrich","pdl_bulk_person_enrich","pdl_clean_company","pdl_clean_location","pdl_clean_school","pdl_company_enrich","pdl_company_search","pdl_person_enrich","pdl_person_identify","pdl_person_search","perplexity_chat","perplexity_search","persona_approve_inquiry","persona_create_account","persona_create_inquiry","persona_create_report","persona_decline_inquiry","persona_expire_inquiry","persona_generate_inquiry_link","persona_get_account","persona_get_case","persona_get_document","persona_get_inquiry","persona_get_report","persona_get_verification","persona_import_accounts","persona_list_accounts","persona_list_cases","persona_list_inquiries","persona_list_inquiry_templates","persona_list_reports","persona_mark_inquiry_for_review","persona_print_inquiry_pdf","persona_redact_account","persona_redact_inquiry","persona_resume_inquiry","persona_update_account","persona_update_inquiry","pinecone_delete_vectors","pinecone_describe_index","pinecone_describe_index_stats","pinecone_fetch","pinecone_generate_embeddings","pinecone_list_indexes","pinecone_list_vector_ids","pinecone_search_text","pinecone_search_vector","pinecone_update_vector","pinecone_upsert_text","pipedrive_create_activity","pipedrive_create_deal","pipedrive_create_lead","pipedrive_create_project","pipedrive_delete_lead","pipedrive_get_activities","pipedrive_get_all_deals","pipedrive_get_deal","pipedrive_get_files","pipedrive_get_leads","pipedrive_get_mail_messages","pipedrive_get_mail_thread","pipedrive_get_pipeline_deals","pipedrive_get_pipelines","pipedrive_get_projects","pipedrive_update_activity","pipedrive_update_deal","pipedrive_update_lead","pitchbook_company_active_investors","pitchbook_company_bio","pitchbook_company_deal_service_providers","pitchbook_company_deals","pitchbook_company_financials","pitchbook_company_general_service_providers","pitchbook_company_industries","pitchbook_company_investors","pitchbook_company_most_recent_debt_financing","pitchbook_company_most_recent_financials","pitchbook_company_most_recent_financing","pitchbook_company_search","pitchbook_company_similar_companies","pitchbook_company_social_analytics","pitchbook_company_updates","pitchbook_company_vc_exit_predictions","pitchbook_contracts_history","pitchbook_cost_of_calls","pitchbook_credit_history","pitchbook_credit_news","pitchbook_credit_news_bulk","pitchbook_credit_news_most_recent","pitchbook_credit_news_search","pitchbook_deal_bio","pitchbook_deal_cap_table_history","pitchbook_deal_debt_lenders","pitchbook_deal_detailed","pitchbook_deal_investors","pitchbook_deal_multiples","pitchbook_deal_search","pitchbook_deal_service_providers","pitchbook_deal_stock_info","pitchbook_deal_tranche_info","pitchbook_deal_updates","pitchbook_deal_valuation","pitchbook_entity_affiliates","pitchbook_entity_locations","pitchbook_entity_news","pitchbook_entity_people","pitchbook_entity_updates","pitchbook_fund_active_investments","pitchbook_fund_benchmark","pitchbook_fund_bio","pitchbook_fund_cash_flows","pitchbook_fund_commitments","pitchbook_fund_investment_preferences","pitchbook_fund_investments","pitchbook_fund_performance","pitchbook_fund_search","pitchbook_fund_team","pitchbook_fund_updates","pitchbook_investor_active_investments","pitchbook_investor_bio","pitchbook_investor_board_seats","pitchbook_investor_deal_service_providers","pitchbook_investor_funds","pitchbook_investor_general_service_providers","pitchbook_investor_investments","pitchbook_investor_last_closed_fund","pitchbook_investor_preferences","pitchbook_investor_search","pitchbook_investor_updates","pitchbook_limited_partner_actual_allocations","pitchbook_limited_partner_bio","pitchbook_limited_partner_commitment_aggregates","pitchbook_limited_partner_commitment_preferences","pitchbook_limited_partner_commitments_detailed","pitchbook_limited_partner_search","pitchbook_limited_partner_service_providers","pitchbook_limited_partner_target_allocations","pitchbook_limited_partner_updates","pitchbook_lookup_table_structure","pitchbook_lookup_tables","pitchbook_patent_detailed","pitchbook_patent_search","pitchbook_people_search","pitchbook_person_bio","pitchbook_person_contact","pitchbook_person_education_work","pitchbook_sandbox_entities","pitchbook_search","pitchbook_service_provider_bio","pitchbook_service_provider_search","pitchbook_service_provider_updates","pitchbook_serviced_companies","pitchbook_serviced_deals","pitchbook_serviced_funds","pitchbook_serviced_investors","pitchbook_serviced_limited_partners","pitchbook_shared_search","pitchbook_usage_report","polymarket_get_activity","polymarket_get_event","polymarket_get_events","polymarket_get_holders","polymarket_get_last_trade_price","polymarket_get_leaderboard","polymarket_get_market","polymarket_get_markets","polymarket_get_midpoint","polymarket_get_orderbook","polymarket_get_positions","polymarket_get_price","polymarket_get_price_history","polymarket_get_series","polymarket_get_series_by_id","polymarket_get_spread","polymarket_get_tags","polymarket_get_tick_size","polymarket_get_trades","polymarket_search","postgresql_delete","postgresql_execute","postgresql_insert","postgresql_introspect","postgresql_query","postgresql_update","posthog_batch_events","posthog_capture_event","posthog_create_annotation","posthog_create_cohort","posthog_create_dashboard","posthog_create_experiment","posthog_create_feature_flag","posthog_create_insight","posthog_create_survey","posthog_delete_feature_flag","posthog_delete_person","posthog_delete_survey","posthog_evaluate_flags","posthog_get_cohort","posthog_get_dashboard","posthog_get_event_definition","posthog_get_experiment","posthog_get_feature_flag","posthog_get_insight","posthog_get_organization","posthog_get_person","posthog_get_project","posthog_get_property_definition","posthog_get_session_recording","posthog_get_survey","posthog_list_actions","posthog_list_annotations","posthog_list_cohorts","posthog_list_dashboards","posthog_list_event_definitions","posthog_list_experiments","posthog_list_feature_flags","posthog_list_insights","posthog_list_organizations","posthog_list_persons","posthog_list_projects","posthog_list_property_definitions","posthog_list_recording_playlists","posthog_list_session_recordings","posthog_list_surveys","posthog_query","posthog_update_cohort","posthog_update_event_definition","posthog_update_experiment","posthog_update_feature_flag","posthog_update_insight","posthog_update_property_definition","posthog_update_survey","profound_bot_logs","profound_bots_report","profound_category_assets","profound_category_personas","profound_category_prompts","profound_category_tags","profound_category_topics","profound_citation_prompts","profound_citations_report","profound_list_assets","profound_list_categories","profound_list_domains","profound_list_models","profound_list_optimizations","profound_list_personas","profound_list_regions","profound_optimization_analysis","profound_prompt_answers","profound_prompt_volume","profound_query_fanouts","profound_raw_logs","profound_referrals_report","profound_sentiment_report","profound_visibility_report","prospeo_account_information","prospeo_bulk_enrich_company","prospeo_bulk_enrich_person","prospeo_enrich_company","prospeo_enrich_person","prospeo_search_company","prospeo_search_person","prospeo_search_suggestions","pulse_parser","pulse_parser_v2","qdrant_fetch_points","qdrant_search_vector","qdrant_upsert_points","quartr_get_audio","quartr_get_company","quartr_get_event","quartr_get_event_summary","quartr_get_report","quartr_get_slide_deck","quartr_get_transcript","quartr_list_audio","quartr_list_companies","quartr_list_document_types","quartr_list_documents","quartr_list_event_types","quartr_list_events","quartr_list_live_events","quartr_list_reports","quartr_list_slide_decks","quartr_list_transcripts","quiver_image_to_svg","quiver_list_models","quiver_text_to_svg","rabbitmq_create_binding","rabbitmq_create_exchange","rabbitmq_create_policy","rabbitmq_create_queue","rabbitmq_delete_binding","rabbitmq_delete_exchange","rabbitmq_delete_policy","rabbitmq_delete_queue","rabbitmq_get_exchange","rabbitmq_get_messages","rabbitmq_get_overview","rabbitmq_get_queue","rabbitmq_health_check","rabbitmq_list_bindings","rabbitmq_list_channels","rabbitmq_list_connections","rabbitmq_list_consumers","rabbitmq_list_exchange_bindings","rabbitmq_list_exchanges","rabbitmq_list_nodes","rabbitmq_list_policies","rabbitmq_list_queues","rabbitmq_list_vhosts","rabbitmq_publish_message","rabbitmq_purge_queue","railway_create_environment","railway_create_project","railway_create_service","railway_delete_environment","railway_delete_project","railway_delete_service","railway_delete_variable","railway_deploy_service","railway_get_deployment","railway_get_deployment_logs","railway_get_project","railway_list_deployments","railway_list_project_members","railway_list_projects","railway_list_variables","railway_restart_deployment","railway_rollback_deployment","railway_transfer_project","railway_update_project","railway_upsert_variable","rb2b_credit_check","rb2b_email_to_activity","rb2b_hem_to_best_linkedin","rb2b_hem_to_business_profile","rb2b_hem_to_linkedin","rb2b_hem_to_maid","rb2b_ip_to_company","rb2b_ip_to_hem","rb2b_ip_to_maid","rb2b_linkedin_slug_search","rb2b_linkedin_to_best_personal_email","rb2b_linkedin_to_business_profile","rb2b_linkedin_to_hashed_emails","rb2b_linkedin_to_mobile_phone","rb2b_linkedin_to_personal_email","rds_delete","rds_execute","rds_insert","rds_introspect","rds_query","rds_update","reddit_delete","reddit_edit","reddit_get_comments","reddit_get_controversial","reddit_get_info","reddit_get_me","reddit_get_messages","reddit_get_posts","reddit_get_saved","reddit_get_subreddit_info","reddit_get_subreddit_rules","reddit_get_user","reddit_get_user_comments","reddit_get_user_posts","reddit_hide","reddit_hot_posts","reddit_list_my_subreddits","reddit_lock","reddit_mark_all_read","reddit_mark_read","reddit_marknsfw","reddit_mod_approve","reddit_mod_distinguish","reddit_mod_remove","reddit_mod_sticky","reddit_reply","reddit_report","reddit_save","reddit_search","reddit_search_subreddits","reddit_send_message","reddit_submit_post","reddit_subscribe","reddit_unhide","reddit_unlock","reddit_unmarknsfw","reddit_unsave","reddit_vote","redis_command","redis_delete","redis_exists","redis_expire","redis_get","redis_hdel","redis_hget","redis_hgetall","redis_hset","redis_incr","redis_incrby","redis_keys","redis_llen","redis_lpop","redis_lpush","redis_lrange","redis_persist","redis_rpop","redis_rpush","redis_set","redis_setnx","redis_ttl","reducto_parser","reducto_parser_v2","resend_cancel_email","resend_create_audience","resend_create_broadcast","resend_create_contact","resend_delete_audience","resend_delete_contact","resend_get_audience","resend_get_broadcast","resend_get_contact","resend_get_email","resend_list_audiences","resend_list_contacts","resend_list_domains","resend_send","resend_send_broadcast","resend_update_contact","revenuecat_create_purchase","revenuecat_defer_google_subscription","revenuecat_delete_customer","revenuecat_get_customer","revenuecat_grant_entitlement","revenuecat_list_offerings","revenuecat_refund_google_subscription","revenuecat_revoke_entitlement","revenuecat_revoke_google_subscription","revenuecat_update_subscriber_attributes","rippling_bulk_create_custom_object_records","rippling_bulk_delete_custom_object_records","rippling_bulk_update_custom_object_records","rippling_create_business_partner","rippling_create_business_partner_group","rippling_create_custom_app","rippling_create_custom_object","rippling_create_custom_object_field","rippling_create_custom_object_record","rippling_create_custom_page","rippling_create_custom_setting","rippling_create_department","rippling_create_draft_hires","rippling_create_object_category","rippling_create_title","rippling_create_work_location","rippling_delete_business_partner","rippling_delete_business_partner_group","rippling_delete_custom_app","rippling_delete_custom_object","rippling_delete_custom_object_field","rippling_delete_custom_object_record","rippling_delete_custom_page","rippling_delete_custom_setting","rippling_delete_object_category","rippling_delete_title","rippling_delete_work_location","rippling_get_business_partner","rippling_get_business_partner_group","rippling_get_current_user","rippling_get_custom_app","rippling_get_custom_object","rippling_get_custom_object_field","rippling_get_custom_object_record","rippling_get_custom_object_record_by_external_id","rippling_get_custom_page","rippling_get_custom_setting","rippling_get_department","rippling_get_employment_type","rippling_get_job_function","rippling_get_object_category","rippling_get_report_run","rippling_get_supergroup","rippling_get_team","rippling_get_title","rippling_get_user","rippling_get_work_location","rippling_get_worker","rippling_list_business_partner_groups","rippling_list_business_partners","rippling_list_companies","rippling_list_custom_apps","rippling_list_custom_fields","rippling_list_custom_object_fields","rippling_list_custom_object_records","rippling_list_custom_objects","rippling_list_custom_pages","rippling_list_custom_settings","rippling_list_departments","rippling_list_employment_types","rippling_list_entitlements","rippling_list_job_functions","rippling_list_object_categories","rippling_list_supergroup_exclusion_members","rippling_list_supergroup_inclusion_members","rippling_list_supergroup_members","rippling_list_supergroups","rippling_list_teams","rippling_list_titles","rippling_list_users","rippling_list_work_locations","rippling_list_workers","rippling_query_custom_object_records","rippling_trigger_report_run","rippling_update_custom_app","rippling_update_custom_object","rippling_update_custom_object_field","rippling_update_custom_object_record","rippling_update_custom_page","rippling_update_custom_setting","rippling_update_department","rippling_update_object_category","rippling_update_supergroup_exclusion_members","rippling_update_supergroup_inclusion_members","rippling_update_title","rippling_update_work_location","rocketlane_add_field_option","rocketlane_add_project_members","rocketlane_add_task_assignees","rocketlane_add_task_dependencies","rocketlane_add_task_followers","rocketlane_archive_project","rocketlane_assign_placeholders","rocketlane_create_field","rocketlane_create_phase","rocketlane_create_project","rocketlane_create_space","rocketlane_create_space_document","rocketlane_create_task","rocketlane_create_time_entry","rocketlane_create_time_off","rocketlane_delete_field","rocketlane_delete_phase","rocketlane_delete_project","rocketlane_delete_space","rocketlane_delete_space_document","rocketlane_delete_task","rocketlane_delete_time_entry","rocketlane_delete_time_off","rocketlane_get_field","rocketlane_get_invoice","rocketlane_get_invoice_line_items","rocketlane_get_invoice_payments","rocketlane_get_phase","rocketlane_get_project","rocketlane_get_space","rocketlane_get_space_document","rocketlane_get_task","rocketlane_get_time_entry","rocketlane_get_time_off","rocketlane_get_user","rocketlane_import_template","rocketlane_list_fields","rocketlane_list_invoices","rocketlane_list_phases","rocketlane_list_placeholders","rocketlane_list_projects","rocketlane_list_resource_allocations","rocketlane_list_space_documents","rocketlane_list_spaces","rocketlane_list_tasks","rocketlane_list_time_entries","rocketlane_list_time_entry_categories","rocketlane_list_time_offs","rocketlane_list_users","rocketlane_move_task_to_phase","rocketlane_remove_project_members","rocketlane_remove_task_assignees","rocketlane_remove_task_dependencies","rocketlane_remove_task_followers","rocketlane_search_time_entries","rocketlane_unassign_placeholders","rocketlane_update_field","rocketlane_update_field_option","rocketlane_update_phase","rocketlane_update_project","rocketlane_update_space","rocketlane_update_space_document","rocketlane_update_task","rocketlane_update_time_entry","rootly_acknowledge_alert","rootly_add_incident_event","rootly_add_subscribers","rootly_assign_incident_role","rootly_create_action_item","rootly_create_alert","rootly_create_incident","rootly_create_status_page_event","rootly_delete_action_item","rootly_delete_incident","rootly_escalate_alert","rootly_get_alert","rootly_get_incident","rootly_list_action_items","rootly_list_alerts","rootly_list_causes","rootly_list_environments","rootly_list_escalation_policies","rootly_list_functionalities","rootly_list_incident_events","rootly_list_incident_roles","rootly_list_incident_types","rootly_list_incidents","rootly_list_on_calls","rootly_list_playbooks","rootly_list_retrospectives","rootly_list_schedules","rootly_list_services","rootly_list_severities","rootly_list_teams","rootly_list_users","rootly_mitigate_incident","rootly_remove_subscribers","rootly_resolve_alert","rootly_resolve_incident","rootly_run_workflow","rootly_snooze_alert","rootly_unassign_incident_role","rootly_update_action_item","rootly_update_alert","rootly_update_incident","s3_copy_object","s3_create_bucket","s3_delete_bucket","s3_delete_object","s3_delete_objects","s3_get_object","s3_head_object","s3_list_buckets","s3_list_objects","s3_presigned_url","s3_put_object","salesforce_create_account","salesforce_create_case","salesforce_create_contact","salesforce_create_custom_field","salesforce_create_custom_object","salesforce_create_lead","salesforce_create_opportunity","salesforce_create_task","salesforce_delete_account","salesforce_delete_case","salesforce_delete_contact","salesforce_delete_custom_field","salesforce_delete_lead","salesforce_delete_opportunity","salesforce_delete_task","salesforce_describe_object","salesforce_get_accounts","salesforce_get_cases","salesforce_get_contacts","salesforce_get_dashboard","salesforce_get_leads","salesforce_get_opportunities","salesforce_get_report","salesforce_get_tasks","salesforce_list_dashboards","salesforce_list_objects","salesforce_list_report_types","salesforce_list_reports","salesforce_query","salesforce_query_more","salesforce_refresh_dashboard","salesforce_run_report","salesforce_tooling_query","salesforce_update_account","salesforce_update_case","salesforce_update_contact","salesforce_update_custom_field","salesforce_update_lead","salesforce_update_opportunity","salesforce_update_task","sap_concur_approve_expense_report","sap_concur_associate_attendees","sap_concur_create_cash_advance","sap_concur_create_expected_expense","sap_concur_create_expense_report","sap_concur_create_list_item","sap_concur_create_purchase_request","sap_concur_create_quick_expense","sap_concur_create_quick_expense_with_image","sap_concur_create_report_comment","sap_concur_create_travel_request","sap_concur_create_user","sap_concur_delete_expected_expense","sap_concur_delete_expense","sap_concur_delete_expense_report","sap_concur_delete_list_item","sap_concur_delete_travel_request","sap_concur_delete_user","sap_concur_get_allocation","sap_concur_get_budget","sap_concur_get_cash_advance","sap_concur_get_expected_expense","sap_concur_get_expense","sap_concur_get_expense_report","sap_concur_get_itemizations","sap_concur_get_itinerary","sap_concur_get_list","sap_concur_get_list_item","sap_concur_get_purchase_request","sap_concur_get_receipt","sap_concur_get_receipt_status","sap_concur_get_request_cash_advance","sap_concur_get_travel_profile","sap_concur_get_travel_request","sap_concur_get_user","sap_concur_issue_cash_advance","sap_concur_list_allocations","sap_concur_list_attendee_associations","sap_concur_list_budget_categories","sap_concur_list_budgets","sap_concur_list_exceptions","sap_concur_list_expected_expenses","sap_concur_list_expense_reports","sap_concur_list_expenses","sap_concur_list_itineraries","sap_concur_list_list_items","sap_concur_list_lists","sap_concur_list_receipts","sap_concur_list_report_comments","sap_concur_list_reports_to_approve","sap_concur_list_travel_profiles_summary","sap_concur_list_travel_request_comments","sap_concur_list_travel_requests","sap_concur_list_users","sap_concur_move_travel_request","sap_concur_recall_expense_report","sap_concur_remove_all_attendees","sap_concur_search_locations","sap_concur_search_users","sap_concur_send_back_expense_report","sap_concur_submit_expense_report","sap_concur_update_allocation","sap_concur_update_expected_expense","sap_concur_update_expense","sap_concur_update_expense_report","sap_concur_update_list_item","sap_concur_update_travel_request","sap_concur_update_user","sap_concur_upload_exchange_rates","sap_concur_upload_receipt_image","sap_s4hana_create_business_partner","sap_s4hana_create_purchase_order","sap_s4hana_create_purchase_requisition","sap_s4hana_create_sales_order","sap_s4hana_delete_sales_order","sap_s4hana_get_billing_document","sap_s4hana_get_business_partner","sap_s4hana_get_customer","sap_s4hana_get_inbound_delivery","sap_s4hana_get_material_document","sap_s4hana_get_outbound_delivery","sap_s4hana_get_product","sap_s4hana_get_purchase_order","sap_s4hana_get_purchase_requisition","sap_s4hana_get_sales_order","sap_s4hana_get_supplier","sap_s4hana_get_supplier_invoice","sap_s4hana_list_billing_documents","sap_s4hana_list_business_partners","sap_s4hana_list_customers","sap_s4hana_list_inbound_deliveries","sap_s4hana_list_material_documents","sap_s4hana_list_material_stock","sap_s4hana_list_outbound_deliveries","sap_s4hana_list_products","sap_s4hana_list_purchase_orders","sap_s4hana_list_purchase_requisitions","sap_s4hana_list_sales_orders","sap_s4hana_list_supplier_invoices","sap_s4hana_list_suppliers","sap_s4hana_odata_query","sap_s4hana_update_business_partner","sap_s4hana_update_customer","sap_s4hana_update_product","sap_s4hana_update_purchase_order","sap_s4hana_update_purchase_requisition","sap_s4hana_update_sales_order","sap_s4hana_update_supplier","search_tool","secrets_manager_create_secret","secrets_manager_delete_secret","secrets_manager_describe_secret","secrets_manager_get_secret","secrets_manager_list_secrets","secrets_manager_restore_secret","secrets_manager_rotate_secret","secrets_manager_tag_resource","secrets_manager_untag_resource","secrets_manager_update_secret","semrush_backlinks","semrush_backlinks_anchors","semrush_backlinks_competitors","semrush_backlinks_geo_distribution","semrush_backlinks_indexed_pages","semrush_backlinks_overview","semrush_backlinks_tld_distribution","semrush_batch_keyword_overview","semrush_broad_match_keywords","semrush_domain_ad_copies","semrush_domain_ad_history","semrush_domain_organic_competitors","semrush_domain_organic_keywords","semrush_domain_overview","semrush_domain_overview_all","semrush_domain_overview_history","semrush_domain_paid_competitors","semrush_domain_paid_keywords","semrush_domain_pla_copies","semrush_domain_pla_keywords","semrush_domain_vs_domain","semrush_keyword_ad_history","semrush_keyword_difficulty","semrush_keyword_overview","semrush_keyword_overview_all","semrush_keyword_questions","semrush_organic_results","semrush_paid_results","semrush_referring_domains","semrush_referring_ips","semrush_related_keywords","semrush_subdomain_ad_copies","semrush_subdomain_organic_keywords","semrush_subdomain_overview","semrush_subdomain_overview_all","semrush_subdomain_overview_history","semrush_subdomain_paid_keywords","semrush_top_domains","semrush_url_organic_keywords","semrush_url_overview","semrush_url_overview_all","semrush_url_overview_history","semrush_url_paid_keywords","semrush_winners_and_losers","sendblue_evaluate_service","sendblue_get_message","sendblue_send_group_message","sendblue_send_message","sendblue_send_typing_indicator","sendgrid_add_contact","sendgrid_add_contacts_to_list","sendgrid_create_list","sendgrid_create_template","sendgrid_create_template_version","sendgrid_delete_contacts","sendgrid_delete_list","sendgrid_delete_template","sendgrid_get_contact","sendgrid_get_list","sendgrid_get_template","sendgrid_list_all_lists","sendgrid_list_templates","sendgrid_remove_contacts_from_list","sendgrid_search_contacts","sendgrid_send_mail","sentry_events_get","sentry_events_list","sentry_issues_get","sentry_issues_list","sentry_issues_update","sentry_projects_create","sentry_projects_get","sentry_projects_list","sentry_projects_update","sentry_releases_create","sentry_releases_deploy","sentry_releases_list","sentry_teams_list","serper_search","servicenow_add_incident_comment","servicenow_aggregate","servicenow_close_incident","servicenow_create_change_request","servicenow_create_incident","servicenow_create_record","servicenow_delete_record","servicenow_download_attachment","servicenow_find_user","servicenow_get_change_next_states","servicenow_get_change_request","servicenow_get_ci","servicenow_get_incident","servicenow_get_knowledge_article","servicenow_get_requested_item","servicenow_list_approvals","servicenow_list_attachments","servicenow_list_catalog_items","servicenow_list_change_requests","servicenow_list_change_tasks","servicenow_list_ci_relationships","servicenow_list_group_members","servicenow_list_incidents","servicenow_list_requested_items","servicenow_order_catalog_item","servicenow_read_record","servicenow_resolve_incident","servicenow_search_cis","servicenow_search_knowledge","servicenow_update_approval","servicenow_update_change_request","servicenow_update_change_state","servicenow_update_incident","servicenow_update_record","servicenow_upload_attachment","ses_create_configuration_set","ses_create_email_identity","ses_create_template","ses_delete_email_identity","ses_delete_suppressed_destination","ses_delete_template","ses_get_account","ses_get_email_identity","ses_get_suppressed_destination","ses_get_template","ses_list_identities","ses_list_suppressed_destinations","ses_list_templates","ses_put_suppressed_destination","ses_send_bulk_email","ses_send_custom_verification_email","ses_send_email","ses_send_templated_email","ses_update_template","sftp_delete","sftp_download","sftp_list","sftp_mkdir","sftp_upload","sharepoint_add_list_items","sharepoint_create_list","sharepoint_create_page","sharepoint_delete_file","sharepoint_delete_list_item","sharepoint_delete_page","sharepoint_download_file","sharepoint_get_drive_item","sharepoint_get_list","sharepoint_get_list_item","sharepoint_list_sites","sharepoint_publish_page","sharepoint_read_page","sharepoint_update_list","sharepoint_update_page","sharepoint_upload_file","shopify_adjust_inventory","shopify_cancel_order","shopify_create_customer","shopify_create_fulfillment","shopify_create_product","shopify_delete_customer","shopify_delete_product","shopify_get_collection","shopify_get_customer","shopify_get_inventory_level","shopify_get_order","shopify_get_product","shopify_list_collections","shopify_list_customers","shopify_list_inventory_items","shopify_list_locations","shopify_list_orders","shopify_list_products","shopify_update_customer","shopify_update_order","shopify_update_product","similarweb_bounce_rate","similarweb_page_views","similarweb_pages_per_visit","similarweb_traffic_visits","similarweb_visit_duration","similarweb_website_overview","sixtyfour_enrich_company","sixtyfour_enrich_lead","sixtyfour_find_email","sixtyfour_find_phone","slack_add_reaction","slack_archive_conversation","slack_canvas","slack_create_channel_canvas","slack_create_conversation","slack_delete_canvas","slack_delete_message","slack_delete_scheduled_message","slack_download","slack_edit_canvas","slack_ephemeral_message","slack_get_canvas","slack_get_channel_history","slack_get_channel_info","slack_get_message","slack_get_permalink","slack_get_thread","slack_get_thread_replies","slack_get_user","slack_get_user_presence","slack_invite_to_conversation","slack_list_canvases","slack_list_channels","slack_list_members","slack_list_scheduled_messages","slack_list_users","slack_lookup_canvas_sections","slack_message","slack_message_reader","slack_open_view","slack_publish_view","slack_push_view","slack_remove_reaction","slack_rename_conversation","slack_schedule_message","slack_set_conversation_purpose","slack_set_conversation_topic","slack_set_status","slack_set_suggested_prompts","slack_set_title","slack_update_message","slack_update_view","smartlead_add_email_accounts_to_campaign","smartlead_add_leads_to_campaign","smartlead_create_campaign","smartlead_create_lead_list","smartlead_delete_campaign","smartlead_delete_campaign_webhook","smartlead_delete_lead_from_campaign","smartlead_delete_lead_list","smartlead_duplicate_campaign","smartlead_export_campaign_leads","smartlead_get_campaign","smartlead_get_campaign_analytics","smartlead_get_campaign_analytics_by_date","smartlead_get_campaign_lead_statistics","smartlead_get_campaign_mailbox_statistics","smartlead_get_campaign_sequences","smartlead_get_campaign_statistics","smartlead_get_campaign_top_level_analytics_by_date","smartlead_get_campaign_webhook_summary","smartlead_get_lead_by_email","smartlead_get_lead_by_id","smartlead_get_lead_list","smartlead_get_lead_message_history","smartlead_list_campaign_email_accounts","smartlead_list_campaign_leads","smartlead_list_campaign_webhooks","smartlead_list_campaigns","smartlead_list_clients","smartlead_list_email_accounts","smartlead_list_inbox_replies","smartlead_list_lead_activities","smartlead_list_lead_categories","smartlead_list_lead_lists","smartlead_mark_lead_complete","smartlead_pause_lead","smartlead_remove_email_accounts_from_campaign","smartlead_resume_lead","smartlead_save_campaign_sequences","smartlead_unsubscribe_lead_from_campaign","smartlead_unsubscribe_lead_globally","smartlead_update_campaign_schedule","smartlead_update_campaign_settings","smartlead_update_campaign_status","smartlead_update_lead","smartlead_update_lead_category","smartlead_update_lead_list","smartlead_upsert_campaign_webhook","sms_send","smtp_send_mail","snowflake_alter_warehouse","snowflake_call_procedure","snowflake_cancel_statement","snowflake_cancel_task_run","snowflake_delete_rows","snowflake_execute_sql","snowflake_get_statement","snowflake_get_task","snowflake_get_task_run","snowflake_get_task_run_output","snowflake_get_warehouse","snowflake_insert_rows","snowflake_introspect_schema","snowflake_list_copy_history","snowflake_list_databases","snowflake_list_query_history","snowflake_list_schemas","snowflake_list_tables","snowflake_list_task_runs","snowflake_list_tasks","snowflake_list_warehouses","snowflake_load_data","snowflake_resume_task","snowflake_resume_warehouse","snowflake_run_task","snowflake_suspend_task","snowflake_suspend_warehouse","snowflake_unload_data","snowflake_update_rows","snowflake_upsert_rows","splunk_cancel_search_job","splunk_create_search_job","splunk_dispatch_saved_search","splunk_get_fired_alerts","splunk_get_saved_search","splunk_get_search_job","splunk_get_search_results","splunk_list_apps","splunk_list_fired_alerts","splunk_list_indexes","splunk_list_saved_searches","splunk_run_search","sportmonks_core_get_cities","sportmonks_core_get_city","sportmonks_core_get_continent","sportmonks_core_get_continents","sportmonks_core_get_countries","sportmonks_core_get_country","sportmonks_core_get_entity_filters","sportmonks_core_get_my_usage","sportmonks_core_get_region","sportmonks_core_get_regions","sportmonks_core_get_timezones","sportmonks_core_get_type","sportmonks_core_get_type_by_entity","sportmonks_core_get_types","sportmonks_core_search_cities","sportmonks_core_search_countries","sportmonks_core_search_regions","sportmonks_football_expected_by_player","sportmonks_football_expected_by_team","sportmonks_football_get_all_commentaries","sportmonks_football_get_all_fixtures","sportmonks_football_get_all_players","sportmonks_football_get_all_rivals","sportmonks_football_get_all_teams","sportmonks_football_get_all_transfer_rumours","sportmonks_football_get_all_transfers","sportmonks_football_get_brackets_by_season","sportmonks_football_get_coach","sportmonks_football_get_coaches","sportmonks_football_get_coaches_by_country","sportmonks_football_get_commentaries_by_fixture","sportmonks_football_get_current_leagues_by_team","sportmonks_football_get_expected_lineups_by_player","sportmonks_football_get_expected_lineups_by_team","sportmonks_football_get_extended_team_squad","sportmonks_football_get_fixture","sportmonks_football_get_fixtures_by_date","sportmonks_football_get_fixtures_by_date_range","sportmonks_football_get_fixtures_by_date_range_for_team","sportmonks_football_get_fixtures_by_ids","sportmonks_football_get_grouped_standings_by_round","sportmonks_football_get_head_to_head","sportmonks_football_get_inplay_livescores","sportmonks_football_get_latest_coaches","sportmonks_football_get_latest_fixtures","sportmonks_football_get_latest_livescores","sportmonks_football_get_latest_players","sportmonks_football_get_latest_totw","sportmonks_football_get_latest_transfers","sportmonks_football_get_league","sportmonks_football_get_leagues","sportmonks_football_get_leagues_by_country","sportmonks_football_get_leagues_by_date","sportmonks_football_get_leagues_by_team","sportmonks_football_get_live_leagues","sportmonks_football_get_live_probabilities","sportmonks_football_get_live_probabilities_by_fixture","sportmonks_football_get_live_standings_by_league","sportmonks_football_get_livescores","sportmonks_football_get_match_facts","sportmonks_football_get_match_facts_by_date_range","sportmonks_football_get_match_facts_by_fixture","sportmonks_football_get_match_facts_by_league","sportmonks_football_get_past_fixtures_by_tv_station","sportmonks_football_get_player","sportmonks_football_get_players_by_country","sportmonks_football_get_postmatch_news","sportmonks_football_get_postmatch_news_by_season","sportmonks_football_get_predictability_by_league","sportmonks_football_get_prematch_news","sportmonks_football_get_prematch_news_by_season","sportmonks_football_get_prematch_news_upcoming","sportmonks_football_get_probabilities","sportmonks_football_get_probabilities_by_fixture","sportmonks_football_get_referee","sportmonks_football_get_referees","sportmonks_football_get_referees_by_country","sportmonks_football_get_referees_by_season","sportmonks_football_get_rivals_by_team","sportmonks_football_get_round","sportmonks_football_get_round_statistics","sportmonks_football_get_rounds","sportmonks_football_get_rounds_by_season","sportmonks_football_get_schedules_by_season","sportmonks_football_get_schedules_by_season_and_team","sportmonks_football_get_schedules_by_team","sportmonks_football_get_season","sportmonks_football_get_seasons","sportmonks_football_get_seasons_by_team","sportmonks_football_get_stage","sportmonks_football_get_stage_statistics","sportmonks_football_get_stages","sportmonks_football_get_stages_by_season","sportmonks_football_get_standing_corrections_by_season","sportmonks_football_get_standings","sportmonks_football_get_standings_by_round","sportmonks_football_get_standings_by_season","sportmonks_football_get_state","sportmonks_football_get_states","sportmonks_football_get_team","sportmonks_football_get_team_rankings","sportmonks_football_get_team_rankings_by_date","sportmonks_football_get_team_rankings_by_team","sportmonks_football_get_team_squad","sportmonks_football_get_team_squad_by_season","sportmonks_football_get_teams_by_country","sportmonks_football_get_teams_by_season","sportmonks_football_get_topscorers_by_season","sportmonks_football_get_topscorers_by_stage","sportmonks_football_get_totw","sportmonks_football_get_totw_by_round","sportmonks_football_get_transfer","sportmonks_football_get_transfer_rumour","sportmonks_football_get_transfer_rumours_between_dates","sportmonks_football_get_transfer_rumours_by_player","sportmonks_football_get_transfer_rumours_by_team","sportmonks_football_get_transfers_between_dates","sportmonks_football_get_transfers_by_player","sportmonks_football_get_transfers_by_team","sportmonks_football_get_tv_station","sportmonks_football_get_tv_stations","sportmonks_football_get_tv_stations_by_fixture","sportmonks_football_get_upcoming_fixtures_by_market","sportmonks_football_get_upcoming_fixtures_by_tv_station","sportmonks_football_get_value_bets","sportmonks_football_get_value_bets_by_fixture","sportmonks_football_get_venue","sportmonks_football_get_venues","sportmonks_football_get_venues_by_season","sportmonks_football_search_coaches","sportmonks_football_search_fixtures","sportmonks_football_search_leagues","sportmonks_football_search_players","sportmonks_football_search_referees","sportmonks_football_search_rounds","sportmonks_football_search_seasons","sportmonks_football_search_stages","sportmonks_football_search_teams","sportmonks_football_search_venues","sportmonks_motorsport_get_all_fixtures","sportmonks_motorsport_get_current_leagues_by_team","sportmonks_motorsport_get_driver","sportmonks_motorsport_get_driver_standings","sportmonks_motorsport_get_driver_standings_by_season","sportmonks_motorsport_get_drivers","sportmonks_motorsport_get_drivers_by_country","sportmonks_motorsport_get_drivers_by_season","sportmonks_motorsport_get_fixture","sportmonks_motorsport_get_fixtures_by_date","sportmonks_motorsport_get_fixtures_by_date_range","sportmonks_motorsport_get_fixtures_by_ids","sportmonks_motorsport_get_laps_by_fixture","sportmonks_motorsport_get_laps_by_fixture_and_driver","sportmonks_motorsport_get_laps_by_fixture_and_lap","sportmonks_motorsport_get_latest_laps_by_fixture","sportmonks_motorsport_get_latest_pitstops_by_fixture","sportmonks_motorsport_get_latest_stints_by_fixture","sportmonks_motorsport_get_latest_updated_drivers","sportmonks_motorsport_get_latest_updated_fixtures","sportmonks_motorsport_get_league","sportmonks_motorsport_get_leagues","sportmonks_motorsport_get_leagues_by_country","sportmonks_motorsport_get_leagues_by_date","sportmonks_motorsport_get_leagues_by_live","sportmonks_motorsport_get_leagues_by_team","sportmonks_motorsport_get_livescores","sportmonks_motorsport_get_pitstops_by_fixture","sportmonks_motorsport_get_pitstops_by_fixture_and_driver","sportmonks_motorsport_get_pitstops_by_fixture_and_lap","sportmonks_motorsport_get_race_results_by_season_and_driver","sportmonks_motorsport_get_race_results_by_season_and_team","sportmonks_motorsport_get_schedules_by_season","sportmonks_motorsport_get_season","sportmonks_motorsport_get_seasons","sportmonks_motorsport_get_stage","sportmonks_motorsport_get_stages","sportmonks_motorsport_get_stages_by_season","sportmonks_motorsport_get_state","sportmonks_motorsport_get_states","sportmonks_motorsport_get_stints_by_fixture","sportmonks_motorsport_get_stints_by_fixture_and_driver","sportmonks_motorsport_get_stints_by_fixture_and_stint","sportmonks_motorsport_get_team","sportmonks_motorsport_get_team_standings","sportmonks_motorsport_get_team_standings_by_season","sportmonks_motorsport_get_teams","sportmonks_motorsport_get_teams_by_country","sportmonks_motorsport_get_teams_by_season","sportmonks_motorsport_get_venue","sportmonks_motorsport_get_venues","sportmonks_motorsport_get_venues_by_season","sportmonks_motorsport_search_drivers","sportmonks_motorsport_search_leagues","sportmonks_motorsport_search_stages","sportmonks_motorsport_search_teams","sportmonks_motorsport_search_venues","sportmonks_odds_get_all_historical_odds","sportmonks_odds_get_all_inplay_odds","sportmonks_odds_get_all_pre_match_odds","sportmonks_odds_get_all_premium_odds","sportmonks_odds_get_bookmaker","sportmonks_odds_get_bookmaker_event_ids_by_fixture","sportmonks_odds_get_bookmakers","sportmonks_odds_get_bookmakers_by_fixture","sportmonks_odds_get_inplay_odds_by_fixture","sportmonks_odds_get_inplay_odds_by_fixture_and_bookmaker","sportmonks_odds_get_inplay_odds_by_fixture_and_market","sportmonks_odds_get_last_updated_inplay_odds","sportmonks_odds_get_last_updated_pre_match_odds","sportmonks_odds_get_market","sportmonks_odds_get_markets","sportmonks_odds_get_pre_match_odds_by_fixture","sportmonks_odds_get_pre_match_odds_by_fixture_and_bookmaker","sportmonks_odds_get_pre_match_odds_by_fixture_and_market","sportmonks_odds_get_premium_odds_by_fixture","sportmonks_odds_get_premium_odds_by_fixture_and_bookmaker","sportmonks_odds_get_premium_odds_by_fixture_and_market","sportmonks_odds_get_updated_historical_odds_between","sportmonks_odds_get_updated_premium_odds_between","sportmonks_odds_search_bookmakers","sportmonks_odds_search_markets","spotify_add_playlist_cover","spotify_add_to_queue","spotify_add_tracks_to_playlist","spotify_check_following","spotify_check_playlist_followers","spotify_check_saved_albums","spotify_check_saved_audiobooks","spotify_check_saved_episodes","spotify_check_saved_shows","spotify_check_saved_tracks","spotify_create_playlist","spotify_follow_artists","spotify_follow_playlist","spotify_get_album","spotify_get_album_tracks","spotify_get_albums","spotify_get_artist","spotify_get_artist_albums","spotify_get_artist_top_tracks","spotify_get_artists","spotify_get_audiobook","spotify_get_audiobook_chapters","spotify_get_audiobooks","spotify_get_categories","spotify_get_current_user","spotify_get_currently_playing","spotify_get_devices","spotify_get_episode","spotify_get_episodes","spotify_get_followed_artists","spotify_get_markets","spotify_get_new_releases","spotify_get_playback_state","spotify_get_playlist","spotify_get_playlist_cover","spotify_get_playlist_tracks","spotify_get_queue","spotify_get_recently_played","spotify_get_saved_albums","spotify_get_saved_audiobooks","spotify_get_saved_episodes","spotify_get_saved_shows","spotify_get_saved_tracks","spotify_get_show","spotify_get_show_episodes","spotify_get_shows","spotify_get_top_artists","spotify_get_top_tracks","spotify_get_track","spotify_get_tracks","spotify_get_user_playlists","spotify_get_user_profile","spotify_pause","spotify_play","spotify_remove_saved_albums","spotify_remove_saved_audiobooks","spotify_remove_saved_episodes","spotify_remove_saved_shows","spotify_remove_saved_tracks","spotify_remove_tracks_from_playlist","spotify_reorder_playlist_items","spotify_replace_playlist_items","spotify_save_albums","spotify_save_audiobooks","spotify_save_episodes","spotify_save_shows","spotify_save_tracks","spotify_search","spotify_seek","spotify_set_repeat","spotify_set_shuffle","spotify_set_volume","spotify_skip_next","spotify_skip_previous","spotify_transfer_playback","spotify_unfollow_artists","spotify_unfollow_playlist","spotify_update_playlist","sqs_send","square_batch_retrieve_inventory_counts","square_cancel_invoice","square_cancel_payment","square_complete_payment","square_create_catalog_image","square_create_customer","square_create_invoice","square_create_order","square_create_payment","square_delete_catalog_object","square_delete_customer","square_delete_invoice","square_get_catalog_object","square_get_customer","square_get_invoice","square_get_location","square_get_order","square_get_payment","square_get_refund","square_list_catalog","square_list_customers","square_list_invoices","square_list_locations","square_list_payments","square_list_refunds","square_pay_order","square_publish_invoice","square_refund_payment","square_search_catalog_objects","square_search_customers","square_search_invoices","square_search_orders","square_update_customer","square_upsert_catalog_object","ssh_check_command_exists","ssh_check_file_exists","ssh_create_directory","ssh_delete_file","ssh_download_file","ssh_execute_command","ssh_execute_script","ssh_get_system_info","ssh_list_directory","ssh_move_rename","ssh_read_file_content","ssh_upload_file","ssh_write_file_content","stagehand_agent","stagehand_extract","stripe_cancel_payment_intent","stripe_cancel_subscription","stripe_capture_charge","stripe_capture_payment_intent","stripe_confirm_payment_intent","stripe_create_charge","stripe_create_customer","stripe_create_invoice","stripe_create_payment_intent","stripe_create_price","stripe_create_product","stripe_create_subscription","stripe_delete_customer","stripe_delete_invoice","stripe_delete_product","stripe_finalize_invoice","stripe_list_charges","stripe_list_customers","stripe_list_events","stripe_list_invoices","stripe_list_payment_intents","stripe_list_prices","stripe_list_products","stripe_list_subscriptions","stripe_pay_invoice","stripe_resume_subscription","stripe_retrieve_charge","stripe_retrieve_customer","stripe_retrieve_event","stripe_retrieve_invoice","stripe_retrieve_payment_intent","stripe_retrieve_price","stripe_retrieve_product","stripe_retrieve_subscription","stripe_search_charges","stripe_search_customers","stripe_search_invoices","stripe_search_payment_intents","stripe_search_prices","stripe_search_products","stripe_search_subscriptions","stripe_send_invoice","stripe_update_charge","stripe_update_customer","stripe_update_invoice","stripe_update_payment_intent","stripe_update_price","stripe_update_product","stripe_update_subscription","stripe_void_invoice","sts_assume_role","sts_assume_role_with_saml","sts_assume_role_with_web_identity","sts_get_access_key_info","sts_get_caller_identity","sts_get_session_token","stt_assemblyai","stt_assemblyai_v2","stt_deepgram","stt_deepgram_v2","stt_elevenlabs","stt_elevenlabs_v2","stt_gemini","stt_gemini_v2","stt_whisper","stt_whisper_v2","supabase_count","supabase_delete","supabase_get_row","supabase_insert","supabase_introspect","supabase_invoke_function","supabase_query","supabase_rpc","supabase_storage_copy","supabase_storage_create_bucket","supabase_storage_create_signed_upload_url","supabase_storage_create_signed_url","supabase_storage_delete","supabase_storage_delete_bucket","supabase_storage_download","supabase_storage_empty_bucket","supabase_storage_get_public_url","supabase_storage_list","supabase_storage_list_buckets","supabase_storage_move","supabase_storage_update_bucket","supabase_storage_upload","supabase_text_search","supabase_update","supabase_upsert","supabase_vector_search","table_batch_insert_rows","table_create","table_delete_row","table_delete_rows_by_filter","table_get_row","table_get_schema","table_insert_row","table_list","table_query_rows","table_query_rows_v2","table_update_row","table_update_rows_by_filter","table_upsert_row","tailscale_authorize_device","tailscale_create_auth_key","tailscale_delete_auth_key","tailscale_delete_device","tailscale_delete_user","tailscale_expire_device_key","tailscale_get_acl","tailscale_get_auth_key","tailscale_get_device","tailscale_get_device_routes","tailscale_get_dns_preferences","tailscale_get_dns_searchpaths","tailscale_list_auth_keys","tailscale_list_devices","tailscale_list_dns_nameservers","tailscale_list_users","tailscale_set_acl","tailscale_set_device_routes","tailscale_set_device_tags","tailscale_set_dns_nameservers","tailscale_set_dns_preferences","tailscale_set_dns_searchpaths","tailscale_suspend_user","tailscale_update_device_key","tavily_crawl","tavily_extract","tavily_map","tavily_search","telegram_copy_message","telegram_delete_message","telegram_edit_message_text","telegram_forward_message","telegram_get_chat","telegram_get_chat_member","telegram_message","telegram_pin_message","telegram_send_animation","telegram_send_audio","telegram_send_chat_action","telegram_send_contact","telegram_send_document","telegram_send_location","telegram_send_photo","telegram_send_poll","telegram_send_video","telegram_set_message_reaction","telegram_unpin_message","temporal_cancel_workflow","temporal_count_workflows","temporal_create_schedule","temporal_delete_schedule","temporal_describe_schedule","temporal_describe_task_queue","temporal_describe_workflow","temporal_get_workflow_history","temporal_list_schedules","temporal_list_workflows","temporal_pause_schedule","temporal_query_workflow","temporal_reset_workflow","temporal_signal_with_start","temporal_signal_workflow","temporal_start_workflow","temporal_terminate_workflow","temporal_trigger_schedule","temporal_unpause_schedule","temporal_update_workflow","textract_analyze_expense","textract_analyze_id","textract_parser","textract_parser_v2","thinking_tool","thrive_add_audience_managers","thrive_add_audience_members","thrive_add_user_tags","thrive_create_assignment","thrive_create_audience","thrive_create_completion","thrive_create_user","thrive_delete_assignment","thrive_delete_audience","thrive_delete_user","thrive_get_activity","thrive_get_assignment","thrive_get_audience","thrive_get_completion","thrive_get_content","thrive_get_cpd_category","thrive_get_cpd_entry","thrive_get_cpd_requirement","thrive_get_enrolment","thrive_get_skill_levels","thrive_get_tag","thrive_get_user_by_id","thrive_get_user_by_ref","thrive_list_assignments","thrive_list_audience_managers","thrive_list_audience_members","thrive_list_audiences","thrive_list_completions","thrive_list_enrolments","thrive_list_tags","thrive_query_activities","thrive_query_content","thrive_query_cpd_categories","thrive_query_cpd_entries","thrive_query_cpd_requirements","thrive_query_cpd_user_summaries","thrive_remove_audience_manager","thrive_remove_audience_member","thrive_remove_user_tags","thrive_replace_audience_managers","thrive_replace_audience_members","thrive_search_users","thrive_suspend_user","thrive_update_assignment","thrive_update_audience","thrive_update_user","thrive_update_user_skills","tiktok_get_post_status","tiktok_get_user","tiktok_list_videos","tiktok_query_videos","tiktok_upload_video_draft","tinybird_append_datasource","tinybird_delete_datasource_rows","tinybird_events","tinybird_get_job","tinybird_query","tinybird_query_pipe","tinybird_truncate_datasource","tinyfish_cancel_run","tinyfish_fetch","tinyfish_get_run","tinyfish_list_runs","tinyfish_list_vault_items","tinyfish_run","tinyfish_run_async","tinyfish_search","trello_add_checklist","trello_add_checklist_item","trello_add_comment","trello_add_label","trello_add_member","trello_create_board","trello_create_card","trello_create_list","trello_delete_card","trello_get_actions","trello_get_board","trello_get_card","trello_list_cards","trello_list_lists","trello_list_members","trello_remove_label","trello_remove_member","trello_search","trello_update_card","trello_update_checklist_item","trello_update_list","trigger_dev_activate_schedule","trigger_dev_add_run_tags","trigger_dev_batch_trigger_task","trigger_dev_cancel_run","trigger_dev_complete_waitpoint_token","trigger_dev_create_env_var","trigger_dev_create_schedule","trigger_dev_create_waitpoint_token","trigger_dev_deactivate_schedule","trigger_dev_delete_env_var","trigger_dev_delete_schedule","trigger_dev_execute_query","trigger_dev_get_batch","trigger_dev_get_batch_results","trigger_dev_get_deployment","trigger_dev_get_env_var","trigger_dev_get_latest_deployment","trigger_dev_get_query_schema","trigger_dev_get_queue","trigger_dev_get_run","trigger_dev_get_run_events","trigger_dev_get_run_result","trigger_dev_get_run_trace","trigger_dev_get_schedule","trigger_dev_get_waitpoint_token","trigger_dev_import_env_vars","trigger_dev_list_deployments","trigger_dev_list_env_vars","trigger_dev_list_queues","trigger_dev_list_runs","trigger_dev_list_schedules","trigger_dev_list_timezones","trigger_dev_list_waitpoint_tokens","trigger_dev_override_queue_concurrency","trigger_dev_pause_queue","trigger_dev_promote_deployment","trigger_dev_replay_run","trigger_dev_reschedule_run","trigger_dev_reset_queue_concurrency","trigger_dev_resume_queue","trigger_dev_trigger_task","trigger_dev_update_env_var","trigger_dev_update_run_metadata","trigger_dev_update_schedule","tts_azure","tts_cartesia","tts_deepgram","tts_elevenlabs","tts_google","tts_openai","tts_playht","twilio_send_sms","twilio_voice_get_recording","twilio_voice_list_calls","twilio_voice_make_call","typeform_create_form","typeform_delete_form","typeform_files","typeform_get_form","typeform_insights","typeform_list_forms","typeform_responses","typeform_update_form","upstash_redis_command","upstash_redis_delete","upstash_redis_exists","upstash_redis_expire","upstash_redis_get","upstash_redis_hget","upstash_redis_hgetall","upstash_redis_hset","upstash_redis_incr","upstash_redis_incrby","upstash_redis_keys","upstash_redis_lpush","upstash_redis_lrange","upstash_redis_set","upstash_redis_setnx","upstash_redis_ttl","uptimerobot_create_alert_contact","uptimerobot_create_maintenance_window","uptimerobot_create_monitor","uptimerobot_create_psp","uptimerobot_delete_alert_contact","uptimerobot_delete_maintenance_window","uptimerobot_delete_monitor","uptimerobot_delete_psp","uptimerobot_get_account","uptimerobot_get_alert_contact","uptimerobot_get_incident","uptimerobot_get_maintenance_window","uptimerobot_get_monitor","uptimerobot_get_psp","uptimerobot_list_alert_contacts","uptimerobot_list_incidents","uptimerobot_list_maintenance_windows","uptimerobot_list_monitors","uptimerobot_list_psps","uptimerobot_pause_monitor","uptimerobot_start_monitor","uptimerobot_update_maintenance_window","uptimerobot_update_monitor","uptimerobot_update_psp","vanta_download_document_file","vanta_get_control","vanta_get_document","vanta_get_framework","vanta_get_person","vanta_get_policy","vanta_get_risk_scenario","vanta_get_test","vanta_get_vendor","vanta_get_vulnerable_asset","vanta_list_control_documents","vanta_list_control_tests","vanta_list_controls","vanta_list_document_uploads","vanta_list_documents","vanta_list_framework_controls","vanta_list_frameworks","vanta_list_monitored_computers","vanta_list_people","vanta_list_policies","vanta_list_risk_scenarios","vanta_list_test_entities","vanta_list_tests","vanta_list_vendors","vanta_list_vulnerabilities","vanta_list_vulnerability_remediations","vanta_list_vulnerable_assets","vanta_submit_document","vanta_upload_document_file","vercel_add_domain","vercel_add_project_domain","vercel_cancel_deployment","vercel_create_alias","vercel_create_check","vercel_create_deployment","vercel_create_dns_record","vercel_create_edge_config","vercel_create_env_var","vercel_create_project","vercel_create_webhook","vercel_delete_alias","vercel_delete_deployment","vercel_delete_dns_record","vercel_delete_domain","vercel_delete_edge_config","vercel_delete_env_var","vercel_delete_project","vercel_delete_webhook","vercel_get_alias","vercel_get_check","vercel_get_deployment","vercel_get_deployment_events","vercel_get_domain","vercel_get_domain_config","vercel_get_edge_config","vercel_get_edge_config_items","vercel_get_env_vars","vercel_get_project","vercel_get_team","vercel_get_user","vercel_get_webhook","vercel_list_aliases","vercel_list_checks","vercel_list_deployment_files","vercel_list_deployments","vercel_list_dns_records","vercel_list_domains","vercel_list_edge_configs","vercel_list_project_domains","vercel_list_projects","vercel_list_team_members","vercel_list_teams","vercel_list_webhooks","vercel_pause_project","vercel_promote_deployment","vercel_remove_project_domain","vercel_rerequest_check","vercel_unpause_project","vercel_update_check","vercel_update_dns_record","vercel_update_edge_config_items","vercel_update_env_var","vercel_update_project","vercel_update_project_domain","vercel_verify_project_domain","video_falai","video_luma","video_minimax","video_runway","video_veo","vision_tool","vision_tool_v2","wealthbox_read_contact","wealthbox_read_note","wealthbox_read_task","wealthbox_write_contact","wealthbox_write_note","wealthbox_write_task","webflow_create_item","webflow_delete_item","webflow_get_item","webflow_list_items","webflow_update_item","webhook_request","whatsapp_get_media","whatsapp_mark_read","whatsapp_send_interactive","whatsapp_send_media","whatsapp_send_message","whatsapp_send_reaction","whatsapp_send_template","whatsapp_upload_media","wikipedia_content","wikipedia_random","wikipedia_search","wikipedia_summary","windchill_check_in_document","windchill_check_in_documents","windchill_check_out_document","windchill_check_out_documents","windchill_create_document","windchill_create_documents","windchill_delete_document","windchill_delete_documents","windchill_download_attachment","windchill_download_primary_content","windchill_get_document","windchill_get_document_structure","windchill_get_primary_content","windchill_get_valid_state_transitions","windchill_list_attachments","windchill_list_documents","windchill_revise_document","windchill_revise_documents","windchill_set_lifecycle_state","windchill_undo_check_out_document","windchill_undo_check_out_documents","windchill_update_common_properties","windchill_update_document","windchill_update_document_security_labels","windchill_update_documents","windchill_upload_attachments","windchill_upload_primary_content","wiza_company_enrichment","wiza_get_credits","wiza_individual_reveal","wiza_prospect_search","wordpress_create_category","wordpress_create_comment","wordpress_create_page","wordpress_create_post","wordpress_create_tag","wordpress_delete_category","wordpress_delete_comment","wordpress_delete_media","wordpress_delete_page","wordpress_delete_post","wordpress_delete_tag","wordpress_get_category","wordpress_get_current_user","wordpress_get_media","wordpress_get_page","wordpress_get_post","wordpress_get_tag","wordpress_get_user","wordpress_list_categories","wordpress_list_comments","wordpress_list_media","wordpress_list_pages","wordpress_list_posts","wordpress_list_tags","wordpress_list_users","wordpress_search_content","wordpress_update_category","wordpress_update_comment","wordpress_update_page","wordpress_update_post","wordpress_update_tag","wordpress_upload_media","workday_assign_onboarding","workday_change_job","workday_create_prehire","workday_get_compensation","workday_get_organizations","workday_get_worker","workday_hire_employee","workday_list_workers","workday_terminate_worker","workday_update_worker","workflow_executor","x_create_bookmark","x_create_tweet","x_delete_bookmark","x_delete_tweet","x_get_blocking","x_get_bookmarks","x_get_followers","x_get_following","x_get_liked_tweets","x_get_liking_users","x_get_me","x_get_personalized_trends","x_get_quote_tweets","x_get_retweeted_by","x_get_trends_by_woeid","x_get_tweets_by_ids","x_get_usage","x_get_user_mentions","x_get_user_timeline","x_get_user_tweets","x_hide_reply","x_manage_block","x_manage_follow","x_manage_like","x_manage_mute","x_manage_retweet","x_read","x_search","x_search_tweets","x_search_users","x_user","x_write","youtube_channel_info","youtube_channel_playlists","youtube_channel_videos","youtube_comments","youtube_playlist_items","youtube_search","youtube_trending","youtube_video_categories","youtube_video_details","zendesk_autocomplete_organizations","zendesk_create_organization","zendesk_create_organizations_bulk","zendesk_create_ticket","zendesk_create_tickets_bulk","zendesk_create_user","zendesk_create_users_bulk","zendesk_delete_organization","zendesk_delete_ticket","zendesk_delete_user","zendesk_get_current_user","zendesk_get_organization","zendesk_get_organizations","zendesk_get_ticket","zendesk_get_tickets","zendesk_get_user","zendesk_get_users","zendesk_merge_tickets","zendesk_search","zendesk_search_count","zendesk_search_users","zendesk_update_organization","zendesk_update_ticket","zendesk_update_tickets_bulk","zendesk_update_user","zendesk_update_users_bulk","zep_add_messages","zep_add_user","zep_create_thread","zep_delete_thread","zep_get_context","zep_get_messages","zep_get_threads","zep_get_user","zep_get_user_threads","zerobounce_get_credits","zerobounce_verify_email","zoho_desk_add_comment","zoho_desk_get_attachment","zoho_desk_get_contact","zoho_desk_get_thread","zoho_desk_get_ticket","zoho_desk_list_comments","zoho_desk_list_organizations","zoho_desk_list_threads","zoho_desk_list_tickets","zoho_desk_update_ticket","zoom_create_meeting","zoom_delete_meeting","zoom_delete_recording","zoom_get_meeting","zoom_get_meeting_invitation","zoom_get_meeting_recordings","zoom_list_meetings","zoom_list_past_participants","zoom_list_recordings","zoom_update_meeting","zoominfo_enrich_companies","zoominfo_enrich_contacts","zoominfo_search_companies","zoominfo_search_contacts","zoominfo_search_intent","zoominfo_search_news"]' + '["a2a_cancel_task","a2a_get_agent_card","a2a_get_task","a2a_send_message","affinity_batch_update_entity_fields","affinity_batch_update_list_entry_fields","affinity_create_list","affinity_create_list_field_dropdown_option","affinity_create_merge","affinity_create_note","affinity_create_reminder","affinity_delete_list_field_dropdown_option","affinity_delete_note","affinity_get_company","affinity_get_current_user","affinity_get_entity_field_value","affinity_get_list","affinity_get_list_entry","affinity_get_list_entry_field","affinity_get_list_field_dropdown_option","affinity_get_merge","affinity_get_merge_task","affinity_get_note","affinity_get_opportunity","affinity_get_person","affinity_get_saved_view","affinity_get_transcript","affinity_get_user","affinity_list_calls","affinity_list_chat_messages","affinity_list_companies","affinity_list_coworker_connections","affinity_list_emails","affinity_list_entity_field_values","affinity_list_entity_list_entries","affinity_list_entity_lists","affinity_list_entity_notes","affinity_list_entity_relationships","affinity_list_field_dropdown_options","affinity_list_field_metadata","affinity_list_field_value_changes","affinity_list_investor_executive_connections","affinity_list_list_entries","affinity_list_list_entry_field_value_changes","affinity_list_list_entry_fields","affinity_list_list_field_dropdown_options","affinity_list_list_fields","affinity_list_lists","affinity_list_meetings","affinity_list_merge_tasks","affinity_list_merges","affinity_list_note_attached_companies","affinity_list_note_attached_opportunities","affinity_list_note_attached_persons","affinity_list_note_replies","affinity_list_notes","affinity_list_opportunities","affinity_list_persons","affinity_list_reminders","affinity_list_saved_view_entries","affinity_list_saved_views","affinity_list_transcript_fragments","affinity_list_transcripts","affinity_list_users","affinity_search_companies","affinity_search_files","affinity_search_list_entries","affinity_search_notes","affinity_search_persons","affinity_semantic_search","affinity_update_entity_field_value","affinity_update_list_entry_field","affinity_update_list_field_dropdown_option","affinity_update_note","agentmail_create_draft","agentmail_create_inbox","agentmail_delete_draft","agentmail_delete_inbox","agentmail_delete_thread","agentmail_forward_message","agentmail_get_draft","agentmail_get_inbox","agentmail_get_message","agentmail_get_thread","agentmail_list_drafts","agentmail_list_inboxes","agentmail_list_messages","agentmail_list_threads","agentmail_reply_message","agentmail_send_draft","agentmail_send_message","agentmail_update_draft","agentmail_update_inbox","agentmail_update_message","agentmail_update_thread","agentphone_create_call","agentphone_create_contact","agentphone_create_number","agentphone_delete_contact","agentphone_get_call","agentphone_get_call_transcript","agentphone_get_contact","agentphone_get_conversation","agentphone_get_conversation_messages","agentphone_get_number_messages","agentphone_get_usage","agentphone_get_usage_daily","agentphone_get_usage_monthly","agentphone_list_calls","agentphone_list_contacts","agentphone_list_conversations","agentphone_list_numbers","agentphone_react_to_message","agentphone_release_number","agentphone_send_message","agentphone_update_contact","agentphone_update_conversation","agiloft_async_status","agiloft_attach_file","agiloft_attachment_info","agiloft_create_record","agiloft_delete_record","agiloft_get_choice_line_id","agiloft_list_tables","agiloft_lock_record","agiloft_nlp_search","agiloft_read_record","agiloft_remove_attachment","agiloft_retrieve_attachment","agiloft_run_action_button","agiloft_saved_search","agiloft_search_records","agiloft_select_records","agiloft_update_record","agiloft_upsert_record","ahrefs_anchors","ahrefs_backlinks","ahrefs_backlinks_stats","ahrefs_batch_analysis","ahrefs_broken_backlinks","ahrefs_domain_rating","ahrefs_domain_rating_history","ahrefs_keyword_overview","ahrefs_keywords_history","ahrefs_metrics","ahrefs_metrics_history","ahrefs_organic_competitors","ahrefs_organic_keywords","ahrefs_paid_pages","ahrefs_rank_tracker_competitors_overview","ahrefs_rank_tracker_competitors_stats","ahrefs_rank_tracker_overview","ahrefs_rank_tracker_serp_overview","ahrefs_refdomains_history","ahrefs_referring_domains","ahrefs_related_terms","ahrefs_site_audit_page_explorer","ahrefs_top_pages","airtable_create_records","airtable_delete_records","airtable_get_base_schema","airtable_get_record","airtable_list_bases","airtable_list_records","airtable_list_tables","airtable_update_multiple_records","airtable_update_record","airtable_upsert_records","airweave_search","algolia_add_record","algolia_batch_operations","algolia_browse_records","algolia_clear_records","algolia_copy_move_index","algolia_delete_by_filter","algolia_delete_index","algolia_delete_record","algolia_get_record","algolia_get_records","algolia_get_settings","algolia_get_task_status","algolia_list_indices","algolia_partial_update_record","algolia_search","algolia_update_settings","amplitude_event_segmentation","amplitude_funnels","amplitude_get_active_users","amplitude_get_revenue","amplitude_group_identify","amplitude_identify_user","amplitude_list_events","amplitude_realtime_active_users","amplitude_retention","amplitude_send_event","amplitude_user_activity","amplitude_user_profile","amplitude_user_search","apify_get_dataset_items","apify_get_run","apify_run_actor_async","apify_run_actor_sync","apify_run_task","apollo_account_bulk_create","apollo_account_bulk_update","apollo_account_create","apollo_account_search","apollo_account_update","apollo_contact_bulk_create","apollo_contact_bulk_update","apollo_contact_create","apollo_contact_search","apollo_contact_update","apollo_email_accounts","apollo_opportunity_create","apollo_opportunity_get","apollo_opportunity_search","apollo_opportunity_update","apollo_organization_bulk_enrich","apollo_organization_enrich","apollo_organization_search","apollo_people_bulk_enrich","apollo_people_enrich","apollo_people_search","apollo_sequence_add_contacts","apollo_sequence_search","apollo_task_create","apollo_task_search","appconfig_create_application","appconfig_create_configuration_profile","appconfig_create_environment","appconfig_create_hosted_configuration_version","appconfig_delete_application","appconfig_delete_configuration_profile","appconfig_delete_environment","appconfig_delete_hosted_configuration_version","appconfig_get_application","appconfig_get_configuration","appconfig_get_configuration_profile","appconfig_get_deployment","appconfig_get_environment","appconfig_get_hosted_configuration_version","appconfig_list_applications","appconfig_list_configuration_profiles","appconfig_list_deployment_strategies","appconfig_list_deployments","appconfig_list_environments","appconfig_list_hosted_configuration_versions","appconfig_start_deployment","appconfig_stop_deployment","appconfig_update_application","appconfig_update_configuration_profile","appconfig_update_environment","arxiv_get_author_papers","arxiv_get_paper","arxiv_search","asana_add_comment","asana_add_followers","asana_create_project","asana_create_section","asana_create_subtask","asana_create_task","asana_delete_task","asana_get_project","asana_get_projects","asana_get_task","asana_list_sections","asana_list_workspaces","asana_search_tasks","asana_update_task","ashby_add_candidate_tag","ashby_anonymize_candidate","ashby_change_application_source","ashby_change_application_stage","ashby_create_application","ashby_create_candidate","ashby_create_note","ashby_delete_application","ashby_get_application","ashby_get_candidate","ashby_get_job","ashby_get_job_posting","ashby_get_offer","ashby_list_applications","ashby_list_archive_reasons","ashby_list_candidate_tags","ashby_list_candidates","ashby_list_custom_fields","ashby_list_departments","ashby_list_interviews","ashby_list_job_postings","ashby_list_jobs","ashby_list_locations","ashby_list_notes","ashby_list_offers","ashby_list_openings","ashby_list_sources","ashby_list_users","ashby_remove_candidate_tag","ashby_search_candidates","ashby_set_custom_field_value","ashby_set_custom_field_values","ashby_update_candidate","athena_batch_get_query_execution","athena_create_named_query","athena_delete_named_query","athena_get_named_query","athena_get_query_execution","athena_get_query_results","athena_list_databases","athena_list_named_queries","athena_list_query_executions","athena_list_table_metadata","athena_start_query","athena_stop_query","attio_assert_record","attio_create_attribute","attio_create_comment","attio_create_list","attio_create_list_entry","attio_create_note","attio_create_object","attio_create_record","attio_create_task","attio_create_webhook","attio_delete_comment","attio_delete_list_entry","attio_delete_note","attio_delete_record","attio_delete_task","attio_delete_webhook","attio_get_attribute","attio_get_comment","attio_get_list","attio_get_list_entry","attio_get_member","attio_get_note","attio_get_object","attio_get_record","attio_get_task","attio_get_thread","attio_get_webhook","attio_list_attributes","attio_list_lists","attio_list_members","attio_list_notes","attio_list_objects","attio_list_records","attio_list_tasks","attio_list_threads","attio_list_webhooks","attio_query_list_entries","attio_search_records","attio_update_attribute","attio_update_list","attio_update_list_entry","attio_update_object","attio_update_record","attio_update_task","attio_update_webhook","azure_data_explorer_create_table","azure_data_explorer_drop_table","azure_data_explorer_ingest_from_query","azure_data_explorer_ingest_inline","azure_data_explorer_list_databases","azure_data_explorer_list_functions","azure_data_explorer_list_tables","azure_data_explorer_management","azure_data_explorer_query","azure_data_explorer_show_database_schema","azure_data_explorer_show_ingestion_failures","azure_data_explorer_show_operations","azure_data_explorer_show_table_details","azure_data_explorer_show_table_schema","azure_devops_add_comment","azure_devops_create_work_item","azure_devops_get_build_log","azure_devops_get_build_timeline","azure_devops_get_comments","azure_devops_get_pipeline","azure_devops_get_pipeline_run","azure_devops_get_work_item","azure_devops_get_work_items_batch","azure_devops_get_work_items_between_builds","azure_devops_list_build_logs","azure_devops_list_builds","azure_devops_list_pipeline_runs","azure_devops_list_pipelines","azure_devops_query_work_items","azure_devops_update_work_item","bitbucket_approve_pull_request","bitbucket_create_branch","bitbucket_create_pull_request","bitbucket_create_pull_request_comment","bitbucket_decline_pull_request","bitbucket_delete_branch","bitbucket_get_commit","bitbucket_get_file","bitbucket_get_file_metadata","bitbucket_get_pipeline","bitbucket_get_pipeline_step_log","bitbucket_get_pull_request","bitbucket_get_pull_request_diff","bitbucket_get_pull_request_diffstat","bitbucket_get_pull_request_merge_task_status","bitbucket_get_repository","bitbucket_list_branches","bitbucket_list_commits","bitbucket_list_directory","bitbucket_list_pipeline_steps","bitbucket_list_pipelines","bitbucket_list_pull_request_comments","bitbucket_list_pull_request_commit_statuses","bitbucket_list_pull_requests","bitbucket_list_repositories","bitbucket_list_workspaces","bitbucket_merge_pull_request","bitbucket_request_pull_request_changes","bitbucket_stop_pipeline","bitbucket_trigger_pipeline","box_copy_file","box_create_folder","box_delete_file","box_delete_folder","box_download_file","box_get_file_info","box_list_folder_items","box_search","box_sign_cancel_request","box_sign_create_request","box_sign_get_request","box_sign_list_requests","box_sign_resend_request","box_update_file","box_upload_file","brandfetch_get_brand","brandfetch_search","brex_archive_budget","brex_create_budget","brex_create_spend_limit","brex_create_transfer","brex_create_vendor","brex_get_budget","brex_get_cash_account","brex_get_company","brex_get_current_user","brex_get_expense","brex_get_spend_limit","brex_get_transfer","brex_get_user","brex_get_vendor","brex_list_budgets","brex_list_card_accounts","brex_list_card_statements","brex_list_card_transactions","brex_list_cards","brex_list_cash_accounts","brex_list_cash_statements","brex_list_cash_transactions","brex_list_departments","brex_list_expenses","brex_list_locations","brex_list_spend_limits","brex_list_titles","brex_list_transfers","brex_list_users","brex_list_vendors","brex_match_receipt","brex_update_expense","brex_update_vendor","brex_upload_receipt","brightdata_cancel_snapshot","brightdata_discover","brightdata_download_snapshot","brightdata_scrape_dataset","brightdata_scrape_url","brightdata_serp_search","brightdata_snapshot_status","brightdata_sync_scrape","browser_use_run_task","buffer_create_idea","buffer_create_post","buffer_delete_post","buffer_edit_post","buffer_get_account","buffer_get_channels","buffer_get_idea_groups","buffer_get_ideas","buffer_get_post","buffer_get_posts","calcom_cancel_booking","calcom_confirm_booking","calcom_create_booking","calcom_create_event_type","calcom_create_schedule","calcom_decline_booking","calcom_delete_event_type","calcom_delete_schedule","calcom_get_booking","calcom_get_default_schedule","calcom_get_event_type","calcom_get_schedule","calcom_get_slots","calcom_list_bookings","calcom_list_event_types","calcom_list_schedules","calcom_reschedule_booking","calcom_update_event_type","calcom_update_schedule","calendly_cancel_event","calendly_create_event_invitee","calendly_create_invitee_no_show","calendly_create_scheduling_link","calendly_create_webhook","calendly_delete_invitee_no_show","calendly_delete_webhook","calendly_get_current_user","calendly_get_event_invitee","calendly_get_event_type","calendly_get_scheduled_event","calendly_get_user","calendly_list_event_invitees","calendly_list_event_type_available_times","calendly_list_event_types","calendly_list_organization_memberships","calendly_list_routing_form_submissions","calendly_list_routing_forms","calendly_list_scheduled_events","calendly_list_user_availability_schedules","calendly_list_user_busy_times","calendly_list_webhooks","cbinsights_chat","cbinsights_get_commercial_maturity_history","cbinsights_get_exit_probability_history","cbinsights_get_mosaic_history","cbinsights_get_org_business_relationships","cbinsights_get_org_funding_window","cbinsights_get_org_fundings","cbinsights_get_org_investments","cbinsights_get_org_management_and_board","cbinsights_get_org_outlook","cbinsights_get_org_portfolio_exits","cbinsights_get_org_revenue","cbinsights_get_scouting_report","cbinsights_get_strategy_map","cbinsights_list_business_relationships","cbinsights_list_funding_window","cbinsights_list_fundings","cbinsights_list_investments","cbinsights_list_management_and_board","cbinsights_list_outlook","cbinsights_list_portfolio_exits","cbinsights_list_revenue","cbinsights_lookup_organizations","cbinsights_rag","cbinsights_search_firmographics","clay_populate","clerk_add_organization_member","clerk_ban_user","clerk_create_actor_token","clerk_create_allowlist_identifier","clerk_create_blocklist_identifier","clerk_create_organization","clerk_create_organization_invitation","clerk_create_user","clerk_delete_allowlist_identifier","clerk_delete_blocklist_identifier","clerk_delete_organization","clerk_delete_user","clerk_get_jwt_template","clerk_get_organization","clerk_get_session","clerk_get_user","clerk_get_user_oauth_token","clerk_list_allowlist_identifiers","clerk_list_blocklist_identifiers","clerk_list_jwt_templates","clerk_list_organization_invitations","clerk_list_organization_memberships","clerk_list_organizations","clerk_list_sessions","clerk_list_users","clerk_lock_user","clerk_remove_organization_member","clerk_revoke_actor_token","clerk_revoke_session","clerk_unban_user","clerk_unlock_user","clerk_update_organization","clerk_update_organization_membership","clerk_update_user","clickhouse_count_rows","clickhouse_create_database","clickhouse_create_table","clickhouse_delete","clickhouse_describe_table","clickhouse_drop_database","clickhouse_drop_partition","clickhouse_drop_table","clickhouse_execute","clickhouse_insert","clickhouse_insert_rows","clickhouse_introspect","clickhouse_kill_query","clickhouse_list_clusters","clickhouse_list_databases","clickhouse_list_mutations","clickhouse_list_partitions","clickhouse_list_running_queries","clickhouse_list_tables","clickhouse_optimize_table","clickhouse_query","clickhouse_rename_table","clickhouse_show_create_table","clickhouse_table_stats","clickhouse_truncate_table","clickhouse_update","clickup_add_tag_to_task","clickup_create_checklist","clickup_create_checklist_item","clickup_create_comment","clickup_create_folder","clickup_create_list","clickup_create_task","clickup_create_time_entry","clickup_delete_checklist","clickup_delete_checklist_item","clickup_delete_comment","clickup_delete_task","clickup_delete_time_entry","clickup_get_comments","clickup_get_custom_fields","clickup_get_folders","clickup_get_list_members","clickup_get_lists","clickup_get_running_timer","clickup_get_space_tags","clickup_get_spaces","clickup_get_task","clickup_get_task_members","clickup_get_tasks","clickup_get_time_entries","clickup_get_workspaces","clickup_remove_custom_field_value","clickup_remove_tag_from_task","clickup_search_tasks","clickup_set_custom_field_value","clickup_start_timer","clickup_stop_timer","clickup_update_checklist","clickup_update_checklist_item","clickup_update_comment","clickup_update_task","clickup_update_time_entry","clickup_upload_attachment","cloudflare_create_access_application","cloudflare_create_access_policy","cloudflare_create_access_service_token","cloudflare_create_dns_record","cloudflare_create_r2_bucket","cloudflare_create_rate_limit_rule","cloudflare_create_ruleset","cloudflare_create_ruleset_rule","cloudflare_create_zone","cloudflare_delete_access_application","cloudflare_delete_access_policy","cloudflare_delete_dns_record","cloudflare_delete_r2_bucket","cloudflare_delete_ruleset_rule","cloudflare_delete_zone","cloudflare_dns_analytics","cloudflare_get_access_application","cloudflare_get_r2_bucket","cloudflare_get_ruleset","cloudflare_get_ruleset_entrypoint","cloudflare_get_tunnel","cloudflare_get_tunnel_configuration","cloudflare_get_worker_script_settings","cloudflare_get_zone","cloudflare_get_zone_settings","cloudflare_list_access_applications","cloudflare_list_access_groups","cloudflare_list_access_identity_providers","cloudflare_list_access_policies","cloudflare_list_access_service_tokens","cloudflare_list_certificates","cloudflare_list_dns_records","cloudflare_list_managed_ruleset_overrides","cloudflare_list_r2_buckets","cloudflare_list_rate_limit_rules","cloudflare_list_rulesets","cloudflare_list_tunnels","cloudflare_list_worker_routes","cloudflare_list_worker_scripts","cloudflare_list_zones","cloudflare_purge_cache","cloudflare_revoke_access_service_token","cloudflare_update_access_application","cloudflare_update_access_policy","cloudflare_update_dns_record","cloudflare_update_rate_limit_rule","cloudflare_update_ruleset_rule","cloudflare_update_zone_setting","cloudformation_cancel_update_stack","cloudformation_create_change_set","cloudformation_create_stack","cloudformation_delete_stack","cloudformation_describe_change_set","cloudformation_describe_stack_drift_detection_status","cloudformation_describe_stack_events","cloudformation_describe_stacks","cloudformation_detect_stack_drift","cloudformation_execute_change_set","cloudformation_get_template","cloudformation_get_template_summary","cloudformation_list_stack_resources","cloudformation_update_stack","cloudformation_validate_template","cloudwatch_describe_alarm_history","cloudwatch_describe_alarms","cloudwatch_describe_log_groups","cloudwatch_describe_log_streams","cloudwatch_filter_log_events","cloudwatch_get_log_events","cloudwatch_get_metric_statistics","cloudwatch_list_metrics","cloudwatch_mute_alarm","cloudwatch_put_log_group_retention","cloudwatch_put_metric_data","cloudwatch_query_logs","cloudwatch_unmute_alarm","codepipeline_disable_stage_transition","codepipeline_enable_stage_transition","codepipeline_get_pipeline","codepipeline_get_pipeline_execution","codepipeline_get_pipeline_state","codepipeline_list_action_executions","codepipeline_list_pipeline_executions","codepipeline_list_pipelines","codepipeline_put_approval_result","codepipeline_retry_stage_execution","codepipeline_start_execution","codepipeline_stop_execution","confluence_add_label","confluence_create_blogpost","confluence_create_comment","confluence_create_page","confluence_create_page_property","confluence_create_space","confluence_create_space_property","confluence_delete_attachment","confluence_delete_blogpost","confluence_delete_comment","confluence_delete_label","confluence_delete_page","confluence_delete_page_property","confluence_delete_space","confluence_delete_space_property","confluence_get_blogpost","confluence_get_page_ancestors","confluence_get_page_children","confluence_get_page_descendants","confluence_get_page_version","confluence_get_pages_by_label","confluence_get_space","confluence_get_task","confluence_get_user","confluence_list_attachments","confluence_list_blogposts","confluence_list_blogposts_in_space","confluence_list_comments","confluence_list_labels","confluence_list_page_properties","confluence_list_page_versions","confluence_list_pages_in_space","confluence_list_space_labels","confluence_list_space_permissions","confluence_list_space_properties","confluence_list_spaces","confluence_list_tasks","confluence_retrieve","confluence_search","confluence_search_in_space","confluence_update","confluence_update_blogpost","confluence_update_comment","confluence_update_space","confluence_update_task","confluence_upload_attachment","context_dev_classify_naics","context_dev_classify_sic","context_dev_crawl","context_dev_extract","context_dev_extract_product","context_dev_extract_products","context_dev_get_brand","context_dev_get_brand_by_email","context_dev_get_brand_by_name","context_dev_get_brand_by_ticker","context_dev_identify_transaction","context_dev_map","context_dev_scrape_fonts","context_dev_scrape_html","context_dev_scrape_images","context_dev_scrape_markdown","context_dev_scrape_styleguide","context_dev_screenshot","context_dev_search","convex_action","convex_document_deltas","convex_list_documents","convex_list_tables","convex_mutation","convex_query","convex_run_function","crowdstrike_create_indicators","crowdstrike_delete_indicators","crowdstrike_delete_rtr_session","crowdstrike_execute_rtr_command","crowdstrike_get_alert_details","crowdstrike_get_case_details","crowdstrike_get_host_group_details","crowdstrike_get_indicator_details","crowdstrike_get_rtr_command_status","crowdstrike_get_sensor_aggregates","crowdstrike_get_sensor_details","crowdstrike_get_vulnerability_details","crowdstrike_init_rtr_session","crowdstrike_perform_host_action","crowdstrike_perform_host_group_action","crowdstrike_query_alerts","crowdstrike_query_cases","crowdstrike_query_host_groups","crowdstrike_query_indicators","crowdstrike_query_sensors","crowdstrike_query_vulnerabilities","crowdstrike_update_alerts","crowdstrike_update_indicators","crunchbase_autocomplete","crunchbase_get_acquisition","crunchbase_get_entity","crunchbase_get_entity_card","crunchbase_get_fields_metadata","crunchbase_get_funding_round","crunchbase_get_organization","crunchbase_get_person","crunchbase_list_deleted_entities","crunchbase_search_acquisitions","crunchbase_search_entities","crunchbase_search_funding_rounds","crunchbase_search_organizations","crunchbase_search_people","cursor_add_followup","cursor_add_followup_v2","cursor_delete_agent","cursor_delete_agent_v2","cursor_download_artifact","cursor_download_artifact_v2","cursor_get_agent","cursor_get_agent_v2","cursor_get_api_key_info","cursor_get_api_key_info_v2","cursor_get_conversation","cursor_get_conversation_v2","cursor_launch_agent","cursor_launch_agent_v2","cursor_list_agents","cursor_list_agents_v2","cursor_list_artifacts","cursor_list_artifacts_v2","cursor_list_models","cursor_list_models_v2","cursor_list_repositories","cursor_list_repositories_v2","cursor_stop_agent","cursor_stop_agent_v2","dagster_delete_run","dagster_get_asset","dagster_get_run","dagster_get_run_logs","dagster_launch_run","dagster_list_assets","dagster_list_jobs","dagster_list_runs","dagster_list_schedules","dagster_list_sensors","dagster_materialize_assets","dagster_reexecute_run","dagster_report_asset_materialization","dagster_start_schedule","dagster_start_sensor","dagster_stop_schedule","dagster_stop_sensor","dagster_terminate_run","dagster_wipe_asset","databricks_cancel_run","databricks_execute_sql","databricks_get_cluster","databricks_get_job","databricks_get_run","databricks_get_run_output","databricks_get_statement","databricks_list_clusters","databricks_list_jobs","databricks_list_runs","databricks_list_warehouses","databricks_run_job","datadog_add_incident_todo","datadog_cancel_downtime","datadog_create_dashboard","datadog_create_downtime","datadog_create_event","datadog_create_incident","datadog_create_monitor","datadog_create_slo","datadog_delete_dashboard","datadog_delete_slo","datadog_get_browser_synthetics_results","datadog_get_dashboard","datadog_get_incident","datadog_get_monitor","datadog_get_security_signal","datadog_get_slo","datadog_get_slo_history","datadog_get_synthetics_results","datadog_get_synthetics_test","datadog_list_dashboards","datadog_list_downtimes","datadog_list_incidents","datadog_list_monitors","datadog_list_security_rules","datadog_list_security_signals","datadog_list_services","datadog_list_slos","datadog_list_synthetics_tests","datadog_mute_monitor","datadog_query_logs","datadog_query_timeseries","datadog_search_spans","datadog_send_logs","datadog_submit_metrics","datadog_trigger_synthetics_tests","datadog_unmute_monitor","datadog_update_incident","datadog_update_security_signal_assignee","datadog_update_security_signal_state","datadog_update_slo","datadog_update_synthetics_status","datagma_enrich_company","datagma_enrich_person","datagma_find_email","datagma_find_phone","datagma_get_credits","daytona_create_sandbox","daytona_delete_sandbox","daytona_download_file","daytona_execute_command","daytona_get_sandbox","daytona_git_clone","daytona_list_files","daytona_list_sandboxes","daytona_run_code","daytona_start_sandbox","daytona_stop_sandbox","daytona_upload_file","deployed_block_executor","deployments_deploy","deployments_get_version","deployments_list_versions","deployments_promote","deployments_undeploy","devin_append_session_tags","devin_archive_session","devin_create_session","devin_get_session","devin_get_session_tags","devin_list_session_attachments","devin_list_session_messages","devin_list_sessions","devin_replace_session_tags","devin_send_message","devin_terminate_session","discord_add_reaction","discord_archive_thread","discord_assign_role","discord_ban_member","discord_bulk_delete_messages","discord_create_channel","discord_create_invite","discord_create_role","discord_create_thread","discord_create_webhook","discord_delete_channel","discord_delete_invite","discord_delete_message","discord_delete_role","discord_delete_webhook","discord_edit_message","discord_execute_webhook","discord_get_channel","discord_get_invite","discord_get_member","discord_get_messages","discord_get_pinned_messages","discord_get_server","discord_get_user","discord_get_webhook","discord_join_thread","discord_kick_member","discord_leave_thread","discord_list_channels","discord_list_roles","discord_pin_message","discord_remove_reaction","discord_remove_role","discord_send_message","discord_unban_member","discord_unpin_message","discord_update_channel","discord_update_member","discord_update_role","docusign_create_from_template","docusign_download_document","docusign_get_envelope","docusign_list_envelopes","docusign_list_recipients","docusign_list_templates","docusign_send_envelope","docusign_void_envelope","downdetector_get_company","downdetector_get_company_attribution","downdetector_get_company_baseline","downdetector_get_company_events","downdetector_get_company_incidents","downdetector_get_company_indicators","downdetector_get_company_last_15","downdetector_get_company_status","downdetector_get_provider","downdetector_get_reports","downdetector_get_site_companies","downdetector_list_categories","downdetector_list_incidents","downdetector_list_sites","downdetector_search_companies","dropbox_copy","dropbox_create_folder","dropbox_create_shared_link","dropbox_delete","dropbox_download","dropbox_get_metadata","dropbox_list_folder","dropbox_list_revisions","dropbox_list_shared_links","dropbox_move","dropbox_restore","dropbox_search","dropbox_upload","dropcontact_enrich_contact","dspy_chain_of_thought","dspy_predict","dspy_react","dub_bulk_create_links","dub_bulk_delete_links","dub_bulk_update_links","dub_create_link","dub_create_tag","dub_delete_link","dub_get_analytics","dub_get_events","dub_get_link","dub_get_links_count","dub_get_qr_code","dub_list_domains","dub_list_folders","dub_list_links","dub_list_tags","dub_update_link","dub_upsert_link","duckduckgo_search","dynamodb_delete","dynamodb_get","dynamodb_introspect","dynamodb_put","dynamodb_query","dynamodb_scan","dynamodb_update","dynatrace_add_problem_comment","dynatrace_add_tags","dynatrace_close_problem","dynatrace_create_settings_object","dynatrace_create_slo","dynatrace_delete_problem_comment","dynatrace_delete_settings_object","dynatrace_delete_slo","dynatrace_delete_tag","dynatrace_execute_synthetic_monitors","dynatrace_get_attack","dynatrace_get_audit_logs","dynatrace_get_entity","dynatrace_get_event","dynatrace_get_metric","dynatrace_get_problem","dynatrace_get_problem_comment","dynatrace_get_security_problem","dynatrace_get_settings_object","dynatrace_get_slo","dynatrace_get_synthetic_batch","dynatrace_ingest_event","dynatrace_ingest_logs","dynatrace_ingest_metrics","dynatrace_list_attacks","dynatrace_list_entities","dynatrace_list_entity_types","dynatrace_list_events","dynatrace_list_metrics","dynatrace_list_problem_comments","dynatrace_list_problems","dynatrace_list_remediation_items","dynatrace_list_security_problems","dynatrace_list_settings_objects","dynatrace_list_settings_schemas","dynatrace_list_slos","dynatrace_list_synthetic_monitors","dynatrace_list_tags","dynatrace_mute_security_problem","dynatrace_mute_security_problems","dynatrace_query_metrics","dynatrace_search_logs","dynatrace_unmute_security_problem","dynatrace_unmute_security_problems","dynatrace_update_problem_comment","dynatrace_update_settings_object","dynatrace_update_slo","elasticsearch_bulk","elasticsearch_cluster_health","elasticsearch_cluster_stats","elasticsearch_count","elasticsearch_create_index","elasticsearch_delete_document","elasticsearch_delete_index","elasticsearch_get_document","elasticsearch_get_index","elasticsearch_index_document","elasticsearch_list_indices","elasticsearch_search","elasticsearch_update_document","elevenlabs_audio_isolation","elevenlabs_edit_voice_settings","elevenlabs_get_user","elevenlabs_get_voice","elevenlabs_get_voice_settings","elevenlabs_list_models","elevenlabs_list_voices","elevenlabs_sound_effects","elevenlabs_speech_to_speech","elevenlabs_tts","emailbison_attach_leads_to_campaign","emailbison_attach_tags_to_leads","emailbison_create_campaign","emailbison_create_lead","emailbison_create_tag","emailbison_get_lead","emailbison_list_campaigns","emailbison_list_leads","emailbison_list_replies","emailbison_list_tags","emailbison_update_campaign","emailbison_update_campaign_status","emailbison_update_lead","embeddings_cohere","embeddings_gemini","embeddings_mistral","embeddings_openai","embeddings_openrouter","enrich_check_credits","enrich_company_funding","enrich_company_lookup","enrich_company_revenue","enrich_disposable_email_check","enrich_email_to_ip","enrich_email_to_person_lite","enrich_email_to_phone","enrich_email_to_profile","enrich_find_email","enrich_get_post_details","enrich_ip_to_company","enrich_linkedin_profile","enrich_linkedin_to_personal_email","enrich_linkedin_to_work_email","enrich_phone_finder","enrich_reverse_hash_lookup","enrich_sales_pointer_people","enrich_search_company","enrich_search_company_activities","enrich_search_company_employees","enrich_search_jobs","enrich_search_logo","enrich_search_people","enrich_search_people_activities","enrich_search_post_comments","enrich_search_post_comments_by_url","enrich_search_post_reactions","enrich_search_post_reactions_by_url","enrich_search_posts","enrich_search_similar_companies","enrich_verify_email","enrichment_run","enrow_find_email","enrow_verify_email","exa_agent","exa_answer","exa_find_similar_links","exa_get_contents","exa_search","extend_parser","extend_parser_v2","fathom_get_summary","fathom_get_transcript","fathom_list_meeting_types","fathom_list_meetings","fathom_list_team_members","fathom_list_teams","file_append","file_compress","file_decompress","file_fetch","file_get","file_get_content","file_manage_sharing","file_parser","file_parser_v2","file_parser_v3","file_read","file_search","file_write","findymail_find_email_from_linkedin","findymail_find_email_from_name","findymail_find_emails_by_domain","findymail_find_employees","findymail_find_phone","findymail_get_company","findymail_get_credits","findymail_lookup_technologies","findymail_reverse_email_lookup","findymail_search_technologies","findymail_verify_email","firecrawl_agent","firecrawl_batch_scrape","firecrawl_batch_scrape_status","firecrawl_cancel_crawl","firecrawl_crawl","firecrawl_crawl_status","firecrawl_credit_usage","firecrawl_extract","firecrawl_extract_status","firecrawl_map","firecrawl_parse","firecrawl_scrape","firecrawl_search","fireflies_add_to_live_meeting","fireflies_create_bite","fireflies_delete_transcript","fireflies_get_transcript","fireflies_get_user","fireflies_list_bites","fireflies_list_contacts","fireflies_list_transcripts","fireflies_list_users","fireflies_upload_audio","flint_create_task","flint_generate_pages","flint_get_task","function_execute","gamma_check_status","gamma_generate","gamma_generate_from_template","gamma_list_folders","gamma_list_themes","github_add_assignees","github_add_assignees_v2","github_add_labels","github_add_labels_v2","github_cancel_workflow_run","github_cancel_workflow_run_v2","github_check_star","github_check_star_v2","github_close_issue","github_close_issue_v2","github_close_pr","github_close_pr_v2","github_comment","github_comment_v2","github_compare_commits","github_compare_commits_v2","github_create_branch","github_create_branch_v2","github_create_comment_reaction","github_create_comment_reaction_v2","github_create_file","github_create_file_v2","github_create_gist","github_create_gist_v2","github_create_issue","github_create_issue_reaction","github_create_issue_reaction_v2","github_create_issue_v2","github_create_milestone","github_create_milestone_v2","github_create_pr","github_create_pr_review","github_create_pr_review_v2","github_create_pr_v2","github_create_project","github_create_project_v2","github_create_release","github_create_release_v2","github_delete_branch","github_delete_branch_v2","github_delete_comment","github_delete_comment_reaction","github_delete_comment_reaction_v2","github_delete_comment_v2","github_delete_file","github_delete_file_v2","github_delete_gist","github_delete_gist_v2","github_delete_issue_reaction","github_delete_issue_reaction_v2","github_delete_milestone","github_delete_milestone_v2","github_delete_project","github_delete_project_v2","github_delete_release","github_delete_release_v2","github_fork_gist","github_fork_gist_v2","github_fork_repo","github_fork_repo_v2","github_get_branch","github_get_branch_protection","github_get_branch_protection_v2","github_get_branch_v2","github_get_commit","github_get_commit_v2","github_get_file_content","github_get_file_content_v2","github_get_gist","github_get_gist_v2","github_get_issue","github_get_issue_v2","github_get_latest_release","github_get_latest_release_v2","github_get_milestone","github_get_milestone_v2","github_get_pr_files","github_get_pr_files_v2","github_get_project","github_get_project_v2","github_get_readme","github_get_readme_v2","github_get_release","github_get_release_v2","github_get_tree","github_get_tree_v2","github_get_workflow","github_get_workflow_run","github_get_workflow_run_v2","github_get_workflow_v2","github_issue_comment","github_issue_comment_v2","github_job_logs","github_latest_commit","github_latest_commit_v2","github_list_branches","github_list_branches_v2","github_list_commits","github_list_commits_v2","github_list_forks","github_list_forks_v2","github_list_gists","github_list_gists_v2","github_list_issue_comments","github_list_issue_comments_v2","github_list_issues","github_list_issues_v2","github_list_milestones","github_list_milestones_v2","github_list_pr_comments","github_list_pr_comments_v2","github_list_projects","github_list_projects_v2","github_list_prs","github_list_prs_v2","github_list_releases","github_list_releases_v2","github_list_review_threads","github_list_stargazers","github_list_stargazers_v2","github_list_tags","github_list_tags_v2","github_list_workflow_runs","github_list_workflow_runs_v2","github_list_workflows","github_list_workflows_v2","github_merge_pr","github_merge_pr_v2","github_pr","github_pr_v2","github_remove_label","github_remove_label_v2","github_reply_review_thread","github_repo_info","github_repo_info_v2","github_request_reviewers","github_request_reviewers_v2","github_rerun_workflow","github_rerun_workflow_v2","github_resolve_review_thread","github_search_code","github_search_code_v2","github_search_commits","github_search_commits_v2","github_search_issues","github_search_issues_v2","github_search_repos","github_search_repos_v2","github_search_users","github_search_users_v2","github_star_gist","github_star_gist_v2","github_star_repo","github_star_repo_v2","github_status_check_rollup","github_trigger_workflow","github_trigger_workflow_v2","github_unstar_gist","github_unstar_gist_v2","github_unstar_repo","github_unstar_repo_v2","github_update_branch_protection","github_update_branch_protection_v2","github_update_comment","github_update_comment_v2","github_update_file","github_update_file_v2","github_update_gist","github_update_gist_v2","github_update_issue","github_update_issue_v2","github_update_milestone","github_update_milestone_v2","github_update_pr","github_update_pr_v2","github_update_project","github_update_project_v2","github_update_release","github_update_release_v2","gitlab_activate_user","gitlab_add_member","gitlab_add_saml_group_link","gitlab_approve_access_request","gitlab_approve_merge_request","gitlab_approve_user","gitlab_ban_user","gitlab_block_user","gitlab_cancel_pipeline","gitlab_compare_branches","gitlab_create_branch","gitlab_create_file","gitlab_create_issue","gitlab_create_issue_note","gitlab_create_merge_request","gitlab_create_merge_request_note","gitlab_create_pipeline","gitlab_create_release","gitlab_create_user","gitlab_deactivate_user","gitlab_delete_branch","gitlab_delete_issue","gitlab_delete_saml_group_link","gitlab_delete_user","gitlab_delete_user_identity","gitlab_deny_access_request","gitlab_get_file","gitlab_get_group","gitlab_get_issue","gitlab_get_job_log","gitlab_get_merge_request","gitlab_get_merge_request_changes","gitlab_get_pipeline","gitlab_get_project","gitlab_invite_member","gitlab_list_access_requests","gitlab_list_branches","gitlab_list_commits","gitlab_list_groups","gitlab_list_invitations","gitlab_list_issues","gitlab_list_members","gitlab_list_merge_requests","gitlab_list_pipeline_jobs","gitlab_list_pipelines","gitlab_list_projects","gitlab_list_releases","gitlab_list_repository_tree","gitlab_list_saml_group_links","gitlab_list_user_memberships","gitlab_merge_merge_request","gitlab_play_job","gitlab_reject_user","gitlab_remove_member","gitlab_retry_pipeline","gitlab_revoke_invitation","gitlab_search_users","gitlab_unban_user","gitlab_unblock_user","gitlab_update_file","gitlab_update_invitation","gitlab_update_issue","gitlab_update_member","gitlab_update_merge_request","gitlab_update_user","gmail_add_label","gmail_add_label_v2","gmail_archive","gmail_archive_v2","gmail_create_label_v2","gmail_delete","gmail_delete_draft_v2","gmail_delete_label_v2","gmail_delete_v2","gmail_draft","gmail_draft_v2","gmail_edit_draft_v2","gmail_get_draft_v2","gmail_get_thread_v2","gmail_list_drafts_v2","gmail_list_labels_v2","gmail_list_threads_v2","gmail_mark_read","gmail_mark_read_v2","gmail_mark_unread","gmail_mark_unread_v2","gmail_move","gmail_move_v2","gmail_read","gmail_read_v2","gmail_remove_label","gmail_remove_label_v2","gmail_search","gmail_search_v2","gmail_send","gmail_send_v2","gmail_trash_thread_v2","gmail_unarchive","gmail_unarchive_v2","gmail_untrash_thread_v2","gmail_update_label_v2","gong_aggregate_activity","gong_aggregate_by_period","gong_answered_scorecards","gong_ask_anything","gong_assign_flow_prospects","gong_create_call","gong_day_by_day_activity","gong_get_brief","gong_get_call","gong_get_call_transcript","gong_get_coaching","gong_get_extensive_calls","gong_get_folder_content","gong_get_logs","gong_get_prospect_flows","gong_get_user","gong_interaction_stats","gong_list_calls","gong_list_flows","gong_list_library_folders","gong_list_scorecards","gong_list_trackers","gong_list_users","gong_list_workspaces","gong_lookup_email","gong_lookup_phone","gong_purge_email_address","gong_purge_phone_number","gong_unassign_flow_prospects","google_ads_ad_performance","google_ads_campaign_performance","google_ads_list_ad_groups","google_ads_list_campaigns","google_ads_list_customers","google_ads_search","google_appsheet_add_rows","google_appsheet_delete_rows","google_appsheet_edit_rows","google_appsheet_find_rows","google_bigquery_create_dataset","google_bigquery_create_table","google_bigquery_delete_dataset","google_bigquery_delete_table","google_bigquery_get_query_results","google_bigquery_get_table","google_bigquery_insert_rows","google_bigquery_list_datasets","google_bigquery_list_table_data","google_bigquery_list_tables","google_bigquery_query","google_books_volume_details","google_books_volume_search","google_calendar_create","google_calendar_create_calendar","google_calendar_create_calendar_v2","google_calendar_create_v2","google_calendar_delete","google_calendar_delete_calendar","google_calendar_delete_calendar_v2","google_calendar_delete_v2","google_calendar_freebusy","google_calendar_freebusy_v2","google_calendar_get","google_calendar_get_v2","google_calendar_instances","google_calendar_instances_v2","google_calendar_invite","google_calendar_invite_v2","google_calendar_list","google_calendar_list_acl","google_calendar_list_acl_v2","google_calendar_list_calendars","google_calendar_list_calendars_v2","google_calendar_list_v2","google_calendar_move","google_calendar_move_v2","google_calendar_quick_add","google_calendar_quick_add_v2","google_calendar_share_calendar","google_calendar_share_calendar_v2","google_calendar_unshare_calendar","google_calendar_unshare_calendar_v2","google_calendar_update","google_calendar_update_acl","google_calendar_update_acl_v2","google_calendar_update_calendar","google_calendar_update_calendar_v2","google_calendar_update_v2","google_contacts_create","google_contacts_delete","google_contacts_get","google_contacts_list","google_contacts_search","google_contacts_update","google_docs_create","google_docs_create_named_range","google_docs_create_paragraph_bullets","google_docs_delete_content_range","google_docs_delete_named_range","google_docs_delete_paragraph_bullets","google_docs_insert_image","google_docs_insert_page_break","google_docs_insert_table","google_docs_insert_text","google_docs_read","google_docs_replace_text","google_docs_update_paragraph_style","google_docs_update_text_style","google_docs_write","google_drive_copy","google_drive_create_comment","google_drive_create_folder","google_drive_delete","google_drive_delete_comment","google_drive_download","google_drive_export","google_drive_get_about","google_drive_get_content","google_drive_get_file","google_drive_get_revision","google_drive_list","google_drive_list_comments","google_drive_list_permissions","google_drive_list_revisions","google_drive_move","google_drive_search","google_drive_share","google_drive_trash","google_drive_unshare","google_drive_untrash","google_drive_update","google_drive_upload","google_forms_batch_update","google_forms_create_form","google_forms_create_watch","google_forms_delete_watch","google_forms_get_form","google_forms_get_responses","google_forms_list_watches","google_forms_renew_watch","google_forms_set_publish_settings","google_groups_add_alias","google_groups_add_member","google_groups_create_group","google_groups_delete_group","google_groups_get_group","google_groups_get_member","google_groups_get_settings","google_groups_has_member","google_groups_list_aliases","google_groups_list_groups","google_groups_list_members","google_groups_remove_alias","google_groups_remove_member","google_groups_update_group","google_groups_update_member","google_groups_update_settings","google_maps_air_quality","google_maps_directions","google_maps_distance_matrix","google_maps_elevation","google_maps_geocode","google_maps_geolocate","google_maps_place_details","google_maps_places_nearby","google_maps_places_search","google_maps_pollen","google_maps_reverse_geocode","google_maps_snap_to_roads","google_maps_solar","google_maps_speed_limits","google_maps_timezone","google_maps_validate_address","google_meet_create_space","google_meet_end_conference","google_meet_get_conference_record","google_meet_get_space","google_meet_list_conference_records","google_meet_list_participants","google_pagespeed_analyze","google_search","google_sheets_append","google_sheets_append_v2","google_sheets_batch_clear_v2","google_sheets_batch_get_v2","google_sheets_batch_update_v2","google_sheets_clear_v2","google_sheets_copy_sheet_v2","google_sheets_create_spreadsheet_v2","google_sheets_delete_rows_v2","google_sheets_delete_sheet_v2","google_sheets_delete_spreadsheet_v2","google_sheets_get_spreadsheet_v2","google_sheets_read","google_sheets_read_v2","google_sheets_update","google_sheets_update_v2","google_sheets_write","google_sheets_write_v2","google_slides_add_image","google_slides_add_slide","google_slides_batch_update","google_slides_copy_presentation","google_slides_create","google_slides_create_line","google_slides_create_paragraph_bullets","google_slides_create_shape","google_slides_create_sheets_chart","google_slides_create_table","google_slides_create_video","google_slides_delete_object","google_slides_delete_paragraph_bullets","google_slides_delete_table_column","google_slides_delete_table_row","google_slides_delete_text","google_slides_duplicate_object","google_slides_export_presentation","google_slides_get_page","google_slides_get_thumbnail","google_slides_group_objects","google_slides_insert_table_columns","google_slides_insert_table_rows","google_slides_insert_text","google_slides_merge_table_cells","google_slides_read","google_slides_refresh_sheets_chart","google_slides_replace_all_shapes_with_image","google_slides_replace_all_shapes_with_sheets_chart","google_slides_replace_all_text","google_slides_replace_image","google_slides_reroute_line","google_slides_ungroup_objects","google_slides_unmerge_table_cells","google_slides_update_image_properties","google_slides_update_line_category","google_slides_update_line_properties","google_slides_update_page_element_alt_text","google_slides_update_page_element_transform","google_slides_update_page_elements_z_order","google_slides_update_page_properties","google_slides_update_paragraph_style","google_slides_update_shape_properties","google_slides_update_slide_properties","google_slides_update_slides_position","google_slides_update_table_border_properties","google_slides_update_table_cell_properties","google_slides_update_table_column_properties","google_slides_update_table_row_properties","google_slides_update_text_style","google_slides_update_video_properties","google_slides_write","google_tasks_create","google_tasks_delete","google_tasks_get","google_tasks_list","google_tasks_list_task_lists","google_tasks_update","google_translate_detect","google_translate_text","google_vault_add_held_accounts","google_vault_add_matters_permissions","google_vault_close_matters","google_vault_create_matters","google_vault_create_matters_export","google_vault_create_matters_holds","google_vault_create_saved_query","google_vault_delete_matters","google_vault_delete_matters_export","google_vault_delete_matters_holds","google_vault_delete_saved_query","google_vault_download_export_file","google_vault_list_matters","google_vault_list_matters_export","google_vault_list_matters_holds","google_vault_list_saved_queries","google_vault_remove_held_accounts","google_vault_remove_matters_permissions","google_vault_reopen_matters","google_vault_undelete_matters","google_vault_update_matters","google_vault_update_matters_holds","grafana_check_data_source_health","grafana_create_alert_rule","grafana_create_annotation","grafana_create_contact_point","grafana_create_dashboard","grafana_create_folder","grafana_delete_alert_rule","grafana_delete_annotation","grafana_delete_contact_point","grafana_delete_dashboard","grafana_delete_folder","grafana_get_alert_rule","grafana_get_alert_rule_group","grafana_get_dashboard","grafana_get_data_source","grafana_get_folder","grafana_get_health","grafana_list_alert_rules","grafana_list_annotations","grafana_list_contact_points","grafana_list_dashboards","grafana_list_data_sources","grafana_list_folders","grafana_move_folder","grafana_query_data_source","grafana_update_alert_rule","grafana_update_annotation","grafana_update_contact_point","grafana_update_dashboard","grafana_update_folder","grain_create_hook","grain_create_hook_v2","grain_delete_hook","grain_delete_hook_v2","grain_get_recording","grain_get_transcript","grain_list_hooks","grain_list_hooks_v2","grain_list_meeting_types","grain_list_recordings","grain_list_teams","grain_list_views","granola_create_webhook_endpoint","granola_delete_webhook_endpoint","granola_get_note","granola_get_transcript","granola_list_audit_events","granola_list_folders","granola_list_notes","granola_list_webhook_endpoints","granola_update_webhook_endpoint","greenhouse_get_application","greenhouse_get_candidate","greenhouse_get_job","greenhouse_get_user","greenhouse_list_applications","greenhouse_list_candidates","greenhouse_list_departments","greenhouse_list_job_stages","greenhouse_list_jobs","greenhouse_list_offices","greenhouse_list_users","greptile_index_repo","greptile_query","greptile_search","greptile_status","guardrails_validate","harmonic_batch_get_people","harmonic_clear_people_saved_search_net_new_results","harmonic_enrich_person","harmonic_get_company_employees","harmonic_get_email_enrichment_job","harmonic_get_email_enrichment_usage","harmonic_get_enrichment_status","harmonic_get_people_saved_search_net_new_results","harmonic_get_people_saved_search_results","harmonic_get_person","harmonic_list_people_saved_searches","harmonic_search_people_scout","harmonic_submit_email_enrichment_job","hex_cancel_run","hex_create_collection","hex_create_group","hex_deactivate_user","hex_delete_group","hex_get_collection","hex_get_data_connection","hex_get_group","hex_get_project","hex_get_project_runs","hex_get_queried_tables","hex_get_run_status","hex_list_collections","hex_list_data_connections","hex_list_groups","hex_list_projects","hex_list_users","hex_run_project","hex_update_collection","hex_update_group","hex_update_project","http_request","hubspot_add_list_memberships","hubspot_create_appointment","hubspot_create_association","hubspot_create_company","hubspot_create_contact","hubspot_create_deal","hubspot_create_email","hubspot_create_line_item","hubspot_create_list","hubspot_create_note","hubspot_create_ticket","hubspot_delete_association","hubspot_delete_company","hubspot_delete_contact","hubspot_delete_deal","hubspot_delete_line_item","hubspot_delete_ticket","hubspot_get_appointment","hubspot_get_association_labels","hubspot_get_cart","hubspot_get_company","hubspot_get_contact","hubspot_get_deal","hubspot_get_email","hubspot_get_line_item","hubspot_get_list","hubspot_get_list_memberships","hubspot_get_marketing_event","hubspot_get_note","hubspot_get_properties","hubspot_get_quote","hubspot_get_ticket","hubspot_get_users","hubspot_list_appointments","hubspot_list_associations","hubspot_list_carts","hubspot_list_companies","hubspot_list_contacts","hubspot_list_deals","hubspot_list_emails","hubspot_list_line_items","hubspot_list_lists","hubspot_list_marketing_events","hubspot_list_notes","hubspot_list_owners","hubspot_list_quotes","hubspot_list_tickets","hubspot_remove_list_memberships","hubspot_search_companies","hubspot_search_contacts","hubspot_search_deals","hubspot_search_emails","hubspot_search_line_items","hubspot_search_notes","hubspot_search_quotes","hubspot_search_tickets","hubspot_update_appointment","hubspot_update_company","hubspot_update_contact","hubspot_update_deal","hubspot_update_line_item","hubspot_update_ticket","huggingface_chat","hunter_companies_find","hunter_discover","hunter_domain_search","hunter_email_count","hunter_email_finder","hunter_email_verifier","iam_add_user_to_group","iam_attach_role_policy","iam_attach_user_policy","iam_create_access_key","iam_create_role","iam_create_user","iam_delete_access_key","iam_delete_role","iam_delete_user","iam_detach_role_policy","iam_detach_user_policy","iam_get_role","iam_get_user","iam_list_attached_role_policies","iam_list_attached_user_policies","iam_list_groups","iam_list_policies","iam_list_roles","iam_list_users","iam_remove_user_from_group","iam_simulate_principal_policy","icypeas_find_email","icypeas_verify_email","identity_center_check_assignment_deletion_status","identity_center_check_assignment_status","identity_center_create_account_assignment","identity_center_delete_account_assignment","identity_center_describe_account","identity_center_get_group","identity_center_get_user","identity_center_list_account_assignments","identity_center_list_accounts","identity_center_list_groups","identity_center_list_instances","identity_center_list_permission_sets","image_generate","incidentio_actions_create","incidentio_actions_list","incidentio_actions_show","incidentio_actions_update","incidentio_alert_events_create","incidentio_alerts_list","incidentio_alerts_resolve","incidentio_alerts_show","incidentio_catalog_entries_list","incidentio_catalog_types_list","incidentio_custom_fields_create","incidentio_custom_fields_delete","incidentio_custom_fields_list","incidentio_custom_fields_show","incidentio_custom_fields_update","incidentio_escalation_paths_create","incidentio_escalation_paths_delete","incidentio_escalation_paths_list","incidentio_escalation_paths_show","incidentio_escalation_paths_update","incidentio_escalations_cancel","incidentio_escalations_create","incidentio_escalations_list","incidentio_escalations_show","incidentio_follow_ups_create","incidentio_follow_ups_list","incidentio_follow_ups_show","incidentio_follow_ups_update","incidentio_incident_alerts_list","incidentio_incident_memberships_create","incidentio_incident_memberships_revoke","incidentio_incident_participants_list","incidentio_incident_roles_create","incidentio_incident_roles_delete","incidentio_incident_roles_list","incidentio_incident_roles_show","incidentio_incident_roles_update","incidentio_incident_statuses_list","incidentio_incident_timestamps_list","incidentio_incident_timestamps_show","incidentio_incident_types_list","incidentio_incident_updates_list","incidentio_incidents_create","incidentio_incidents_list","incidentio_incidents_show","incidentio_incidents_update","incidentio_on_call_now","incidentio_schedule_entries_list","incidentio_schedule_overrides_create","incidentio_schedule_overrides_list","incidentio_schedules_create","incidentio_schedules_delete","incidentio_schedules_list","incidentio_schedules_show","incidentio_schedules_update","incidentio_severities_list","incidentio_teams_list","incidentio_teams_show","incidentio_users_list","incidentio_users_show","incidentio_workflows_create","incidentio_workflows_delete","incidentio_workflows_list","incidentio_workflows_show","incidentio_workflows_update","infisical_create_secret","infisical_delete_secret","infisical_get_secret","infisical_list_secrets","infisical_update_secret","instagram_delete_comment","instagram_download_media","instagram_get_account_insights","instagram_get_container_status","instagram_get_conversation_messages","instagram_get_media","instagram_get_media_insights","instagram_get_message","instagram_get_profile","instagram_get_publishing_limit","instagram_hide_comment","instagram_list_comments","instagram_list_conversations","instagram_list_media","instagram_list_stories","instagram_private_reply","instagram_publish_carousel","instagram_publish_image","instagram_publish_reel","instagram_publish_story","instagram_publish_video","instagram_reply_to_comment","instagram_send_text_message","instagram_set_comments_enabled","instantly_activate_campaign","instantly_create_campaign","instantly_create_lead","instantly_create_lead_list","instantly_delete_campaign","instantly_delete_leads","instantly_get_lead","instantly_list_campaigns","instantly_list_emails","instantly_list_lead_lists","instantly_list_leads","instantly_patch_campaign","instantly_patch_lead","instantly_pause_campaign","instantly_reply_to_email","instantly_update_lead_interest_status","intercom_assign_conversation_v2","intercom_attach_contact_to_company_v2","intercom_close_conversation_v2","intercom_create_company","intercom_create_company_v2","intercom_create_contact","intercom_create_contact_v2","intercom_create_event_v2","intercom_create_message","intercom_create_message_v2","intercom_create_note_v2","intercom_create_tag_v2","intercom_create_ticket","intercom_create_ticket_v2","intercom_delete_contact","intercom_delete_contact_v2","intercom_detach_contact_from_company_v2","intercom_get_company","intercom_get_company_v2","intercom_get_contact","intercom_get_contact_v2","intercom_get_conversation","intercom_get_conversation_v2","intercom_get_ticket","intercom_get_ticket_v2","intercom_list_admins_v2","intercom_list_companies","intercom_list_companies_v2","intercom_list_contacts","intercom_list_contacts_v2","intercom_list_conversations","intercom_list_conversations_v2","intercom_list_tags_v2","intercom_open_conversation_v2","intercom_reply_conversation","intercom_reply_conversation_v2","intercom_search_contacts","intercom_search_contacts_v2","intercom_search_conversations","intercom_search_conversations_v2","intercom_snooze_conversation_v2","intercom_tag_contact_v2","intercom_tag_conversation_v2","intercom_untag_contact_v2","intercom_update_contact","intercom_update_contact_v2","intercom_update_ticket_v2","jina_read_url","jina_search","jira_add_attachment","jira_add_comment","jira_add_watcher","jira_add_worklog","jira_assign_issue","jira_bulk_read","jira_create_issue_link","jira_delete_attachment","jira_delete_comment","jira_delete_issue","jira_delete_issue_link","jira_delete_worklog","jira_get_attachments","jira_get_comments","jira_get_fields","jira_get_project","jira_get_transitions","jira_get_users","jira_get_worklogs","jira_list_issue_types","jira_list_projects","jira_remove_watcher","jira_retrieve","jira_search_issues","jira_search_users","jira_transition_issue","jira_update","jira_update_comment","jira_update_worklog","jira_write","jotform_add_label_resources","jotform_clone_form","jotform_create_form","jotform_create_label","jotform_create_question","jotform_create_questions","jotform_create_report","jotform_create_submission","jotform_create_submissions","jotform_create_webhook","jotform_delete_form","jotform_delete_label","jotform_delete_question","jotform_delete_report","jotform_delete_submission","jotform_delete_webhook","jotform_get_form","jotform_get_form_properties","jotform_get_history","jotform_get_label","jotform_get_question","jotform_get_report","jotform_get_settings","jotform_get_submission","jotform_get_usage","jotform_get_user","jotform_list_form_files","jotform_list_form_reports","jotform_list_form_submissions","jotform_list_forms","jotform_list_label_resources","jotform_list_labels","jotform_list_questions","jotform_list_reports","jotform_list_submissions","jotform_list_subusers","jotform_list_webhooks","jotform_remove_label_resources","jotform_update_form_properties","jotform_update_label","jotform_update_question","jotform_update_settings","jotform_update_submission","jsm_add_comment","jsm_add_customer","jsm_add_organization","jsm_add_participants","jsm_answer_approval","jsm_attach_form","jsm_copy_forms","jsm_create_object","jsm_create_organization","jsm_create_request","jsm_delete_form","jsm_delete_object","jsm_externalise_form","jsm_get_approvals","jsm_get_comments","jsm_get_customers","jsm_get_form","jsm_get_form_answers","jsm_get_form_structure","jsm_get_form_templates","jsm_get_issue_forms","jsm_get_object","jsm_get_object_schema","jsm_get_object_type_attributes","jsm_get_organizations","jsm_get_participants","jsm_get_queues","jsm_get_request","jsm_get_request_type_fields","jsm_get_request_types","jsm_get_requests","jsm_get_service_desks","jsm_get_sla","jsm_get_transitions","jsm_internalise_form","jsm_list_object_schemas","jsm_list_object_types","jsm_reopen_form","jsm_save_form_answers","jsm_search_objects_aql","jsm_submit_form","jsm_transition_request","jsm_update_object","jupyter_copy_content","jupyter_create_file","jupyter_create_session","jupyter_delete_content","jupyter_delete_session","jupyter_get_content","jupyter_interrupt_kernel","jupyter_list_contents","jupyter_list_kernels","jupyter_list_kernelspecs","jupyter_list_sessions","jupyter_rename_content","jupyter_restart_kernel","jupyter_start_kernel","jupyter_stop_kernel","jupyter_upload_file","kalshi_amend_order","kalshi_amend_order_v2","kalshi_cancel_order","kalshi_cancel_order_v2","kalshi_create_order","kalshi_create_order_v2","kalshi_get_balance","kalshi_get_balance_v2","kalshi_get_candlesticks","kalshi_get_candlesticks_v2","kalshi_get_event","kalshi_get_event_candlesticks","kalshi_get_event_candlesticks_v2","kalshi_get_event_v2","kalshi_get_events","kalshi_get_events_v2","kalshi_get_exchange_announcements","kalshi_get_exchange_announcements_v2","kalshi_get_exchange_schedule","kalshi_get_exchange_schedule_v2","kalshi_get_exchange_status","kalshi_get_exchange_status_v2","kalshi_get_fills","kalshi_get_fills_v2","kalshi_get_market","kalshi_get_market_v2","kalshi_get_markets","kalshi_get_markets_v2","kalshi_get_order","kalshi_get_order_v2","kalshi_get_orderbook","kalshi_get_orderbook_v2","kalshi_get_orders","kalshi_get_orders_v2","kalshi_get_positions","kalshi_get_positions_v2","kalshi_get_series_by_ticker","kalshi_get_series_by_ticker_v2","kalshi_get_series_list","kalshi_get_series_list_v2","kalshi_get_settlements","kalshi_get_settlements_v2","kalshi_get_trades","kalshi_get_trades_v2","ketch_get_consent","ketch_get_subscriptions","ketch_invoke_right","ketch_set_consent","ketch_set_subscriptions","knowledge_create_document","knowledge_delete_chunk","knowledge_delete_document","knowledge_get_connector","knowledge_get_document","knowledge_list_chunks","knowledge_list_connectors","knowledge_list_documents","knowledge_list_tags","knowledge_search","knowledge_trigger_sync","knowledge_update_chunk","knowledge_upload_chunk","knowledge_upsert_document","lambda_add_permission","lambda_create_alias","lambda_create_event_source_mapping","lambda_create_function","lambda_create_function_url_config","lambda_delete_alias","lambda_delete_event_source_mapping","lambda_delete_function","lambda_delete_function_concurrency","lambda_delete_function_event_invoke_config","lambda_delete_function_url_config","lambda_delete_provisioned_concurrency_config","lambda_get_account_settings","lambda_get_alias","lambda_get_event_source_mapping","lambda_get_function","lambda_get_function_concurrency","lambda_get_function_configuration","lambda_get_function_event_invoke_config","lambda_get_function_recursion_config","lambda_get_function_url_config","lambda_get_layer_version","lambda_get_policy","lambda_get_provisioned_concurrency_config","lambda_get_runtime_management_config","lambda_invoke","lambda_list_aliases","lambda_list_event_source_mappings","lambda_list_function_event_invoke_configs","lambda_list_function_url_configs","lambda_list_functions","lambda_list_layer_versions","lambda_list_layers","lambda_list_provisioned_concurrency_configs","lambda_list_tags","lambda_list_versions_by_function","lambda_publish_version","lambda_put_function_concurrency","lambda_put_function_event_invoke_config","lambda_put_function_recursion_config","lambda_put_provisioned_concurrency_config","lambda_put_runtime_management_config","lambda_remove_permission","lambda_tag_resource","lambda_untag_resource","lambda_update_alias","lambda_update_event_source_mapping","lambda_update_function_code","lambda_update_function_configuration","lambda_update_function_url_config","langsmith_create_feedback","langsmith_create_run","langsmith_create_runs_batch","langsmith_get_run","langsmith_update_run","latex_compile","latex_get_package","latex_list_fonts","latex_search_packages","launchdarkly_create_flag","launchdarkly_delete_flag","launchdarkly_get_audit_log","launchdarkly_get_flag","launchdarkly_get_flag_status","launchdarkly_list_environments","launchdarkly_list_flags","launchdarkly_list_members","launchdarkly_list_projects","launchdarkly_list_segments","launchdarkly_toggle_flag","launchdarkly_update_flag","leadmagic_company_search","leadmagic_email_to_profile","leadmagic_find_email","leadmagic_find_mobile","leadmagic_get_credits","leadmagic_profile_search","leadmagic_profile_to_email","leadmagic_role_finder","leadmagic_validate_email","lemlist_get_activities","lemlist_get_lead","lemlist_send_email","linear_add_label_to_issue","linear_add_label_to_project","linear_archive_issue","linear_archive_label","linear_archive_project","linear_create_attachment","linear_create_comment","linear_create_customer","linear_create_customer_request","linear_create_customer_status","linear_create_customer_tier","linear_create_cycle","linear_create_favorite","linear_create_issue","linear_create_issue_relation","linear_create_label","linear_create_project","linear_create_project_label","linear_create_project_milestone","linear_create_project_status","linear_create_project_update","linear_create_workflow_state","linear_delete_attachment","linear_delete_comment","linear_delete_customer","linear_delete_customer_status","linear_delete_customer_tier","linear_delete_issue","linear_delete_issue_relation","linear_delete_project","linear_delete_project_label","linear_delete_project_milestone","linear_delete_project_status","linear_get_active_cycle","linear_get_customer","linear_get_cycle","linear_get_issue","linear_get_project","linear_get_viewer","linear_list_attachments","linear_list_comments","linear_list_customer_requests","linear_list_customer_statuses","linear_list_customer_tiers","linear_list_customers","linear_list_cycles","linear_list_favorites","linear_list_issue_relations","linear_list_labels","linear_list_notifications","linear_list_project_labels","linear_list_project_milestones","linear_list_project_statuses","linear_list_project_updates","linear_list_projects","linear_list_teams","linear_list_users","linear_list_workflow_states","linear_merge_customers","linear_read_issues","linear_remove_label_from_issue","linear_remove_label_from_project","linear_search_issues","linear_unarchive_issue","linear_update_attachment","linear_update_comment","linear_update_customer","linear_update_customer_request","linear_update_customer_status","linear_update_customer_tier","linear_update_issue","linear_update_label","linear_update_notification","linear_update_project","linear_update_project_label","linear_update_project_milestone","linear_update_project_status","linear_update_workflow_state","linkedin_get_profile","linkedin_share_post","linkup_search","linq_add_participant","linq_check_imessage","linq_check_rcs","linq_create_attachment","linq_create_chat","linq_create_contact_card","linq_create_webhook_subscription","linq_delete_attachment","linq_delete_message","linq_delete_webhook_subscription","linq_edit_message","linq_get_attachment","linq_get_chat","linq_get_contact_card","linq_get_message","linq_get_webhook_subscription","linq_leave_chat","linq_list_chats","linq_list_messages","linq_list_phone_numbers","linq_list_thread","linq_list_webhook_events","linq_list_webhook_subscriptions","linq_mark_chat_read","linq_react_to_message","linq_remove_participant","linq_send_message","linq_send_voice_memo","linq_share_contact_card","linq_start_typing","linq_stop_typing","linq_update_chat","linq_update_contact_card","linq_update_webhook_subscription","llm_chat","logfire_get_token_info","logfire_get_trace","logfire_query","logfire_search_records","logrocket_create_release","logrocket_get_audit_logs","logrocket_get_highlights","logrocket_identify_user","logrocket_list_exported_sessions","logrocket_request_highlights","logs_get","logs_get_execution","logs_get_run_details","logs_query","logs_query_runs","loops_check_contact_suppression","loops_create_contact","loops_create_contact_property","loops_delete_contact","loops_find_contact","loops_get_transactional_email","loops_list_contact_properties","loops_list_mailing_lists","loops_list_transactional_emails","loops_remove_contact_suppression","loops_send_event","loops_send_transactional_email","loops_update_contact","luma_add_guests","luma_cancel_event","luma_create_event","luma_get_event","luma_get_guest","luma_get_guests","luma_list_events","luma_lookup_event","luma_send_invites","luma_update_event","luma_update_guest_status","mailchimp_add_member","mailchimp_add_member_tags","mailchimp_add_or_update_member","mailchimp_add_segment_member","mailchimp_add_subscriber_to_automation","mailchimp_archive_member","mailchimp_create_audience","mailchimp_create_batch_operation","mailchimp_create_campaign","mailchimp_create_interest","mailchimp_create_interest_category","mailchimp_create_landing_page","mailchimp_create_merge_field","mailchimp_create_segment","mailchimp_create_template","mailchimp_delete_audience","mailchimp_delete_batch_operation","mailchimp_delete_campaign","mailchimp_delete_interest","mailchimp_delete_interest_category","mailchimp_delete_landing_page","mailchimp_delete_member","mailchimp_delete_merge_field","mailchimp_delete_segment","mailchimp_delete_template","mailchimp_get_audience","mailchimp_get_audiences","mailchimp_get_automation","mailchimp_get_automations","mailchimp_get_batch_operation","mailchimp_get_batch_operations","mailchimp_get_campaign","mailchimp_get_campaign_content","mailchimp_get_campaign_report","mailchimp_get_campaign_reports","mailchimp_get_campaigns","mailchimp_get_interest","mailchimp_get_interest_categories","mailchimp_get_interest_category","mailchimp_get_interests","mailchimp_get_landing_page","mailchimp_get_landing_pages","mailchimp_get_member","mailchimp_get_member_tags","mailchimp_get_members","mailchimp_get_merge_field","mailchimp_get_merge_fields","mailchimp_get_segment","mailchimp_get_segment_members","mailchimp_get_segments","mailchimp_get_template","mailchimp_get_templates","mailchimp_pause_automation","mailchimp_publish_landing_page","mailchimp_remove_member_tags","mailchimp_remove_segment_member","mailchimp_replicate_campaign","mailchimp_schedule_campaign","mailchimp_send_campaign","mailchimp_set_campaign_content","mailchimp_start_automation","mailchimp_unarchive_member","mailchimp_unpublish_landing_page","mailchimp_unschedule_campaign","mailchimp_update_audience","mailchimp_update_campaign","mailchimp_update_interest","mailchimp_update_interest_category","mailchimp_update_landing_page","mailchimp_update_member","mailchimp_update_merge_field","mailchimp_update_segment","mailchimp_update_template","mailgun_add_list_member","mailgun_create_mailing_list","mailgun_get_domain","mailgun_get_mailing_list","mailgun_get_message","mailgun_list_domains","mailgun_list_messages","mailgun_send_message","managed_agent_archive_session","managed_agent_create_session","managed_agent_delete_session","managed_agent_get_session","managed_agent_interrupt_session","managed_agent_list_events","managed_agent_respond_custom_tool","managed_agent_respond_tool_confirmation","managed_agent_run_session","managed_agent_send_message","managed_agent_update_session","mem0_add_memories","mem0_get_memories","mem0_search_memories","memory_add","memory_delete","memory_get","memory_get_all","microsoft_ad_add_directory_role_member","microsoft_ad_add_group_member","microsoft_ad_add_user_app_role_assignment","microsoft_ad_assign_license","microsoft_ad_create_group","microsoft_ad_create_user","microsoft_ad_delete_group","microsoft_ad_delete_user","microsoft_ad_get_conditional_access_policy","microsoft_ad_get_device","microsoft_ad_get_group","microsoft_ad_get_user","microsoft_ad_list_authentication_methods","microsoft_ad_list_conditional_access_policies","microsoft_ad_list_devices","microsoft_ad_list_directory_audits","microsoft_ad_list_directory_role_members","microsoft_ad_list_directory_roles","microsoft_ad_list_group_members","microsoft_ad_list_groups","microsoft_ad_list_service_principal_app_role_assignments","microsoft_ad_list_service_principals","microsoft_ad_list_sign_ins","microsoft_ad_list_subscribed_skus","microsoft_ad_list_user_app_role_assignments","microsoft_ad_list_user_devices","microsoft_ad_list_user_licenses","microsoft_ad_list_users","microsoft_ad_remove_directory_role_member","microsoft_ad_remove_group_member","microsoft_ad_remove_user_app_role_assignment","microsoft_ad_reset_password","microsoft_ad_revoke_sign_in_sessions","microsoft_ad_set_password","microsoft_ad_update_group","microsoft_ad_update_user","microsoft_dataverse_associate","microsoft_dataverse_create_multiple","microsoft_dataverse_create_record","microsoft_dataverse_delete_record","microsoft_dataverse_disassociate","microsoft_dataverse_download_file","microsoft_dataverse_execute_action","microsoft_dataverse_execute_function","microsoft_dataverse_fetchxml_query","microsoft_dataverse_get_entity_metadata","microsoft_dataverse_get_record","microsoft_dataverse_list_records","microsoft_dataverse_search","microsoft_dataverse_update_multiple","microsoft_dataverse_update_record","microsoft_dataverse_upload_file","microsoft_dataverse_upsert_record","microsoft_dataverse_whoami","microsoft_dynamics_365_close_case","microsoft_dynamics_365_close_opportunity","microsoft_dynamics_365_create_record","microsoft_dynamics_365_get_record","microsoft_dynamics_365_list_records","microsoft_dynamics_365_qualify_lead","microsoft_dynamics_365_search_records","microsoft_dynamics_365_update_record","microsoft_excel_clear_range","microsoft_excel_create_table","microsoft_excel_delete_worksheet","microsoft_excel_format_range","microsoft_excel_read","microsoft_excel_read_v2","microsoft_excel_sort_range","microsoft_excel_table_add","microsoft_excel_worksheet_add","microsoft_excel_write","microsoft_excel_write_v2","microsoft_planner_create_bucket","microsoft_planner_create_plan","microsoft_planner_create_task","microsoft_planner_delete_bucket","microsoft_planner_delete_plan","microsoft_planner_delete_task","microsoft_planner_get_plan_details","microsoft_planner_get_task_details","microsoft_planner_list_buckets","microsoft_planner_list_plans","microsoft_planner_read_bucket","microsoft_planner_read_plan","microsoft_planner_read_task","microsoft_planner_update_bucket","microsoft_planner_update_plan","microsoft_planner_update_plan_details","microsoft_planner_update_task","microsoft_planner_update_task_details","microsoft_teams_delete_channel_message","microsoft_teams_delete_chat_message","microsoft_teams_get_message","microsoft_teams_list_channel_members","microsoft_teams_list_channels","microsoft_teams_list_chat_members","microsoft_teams_list_chats","microsoft_teams_list_team_members","microsoft_teams_list_teams","microsoft_teams_read_channel","microsoft_teams_read_chat","microsoft_teams_reply_to_message","microsoft_teams_set_reaction","microsoft_teams_unset_reaction","microsoft_teams_update_channel_message","microsoft_teams_update_chat_message","microsoft_teams_write_channel","microsoft_teams_write_chat","microsoft_word_append","microsoft_word_create","microsoft_word_create_from_template","microsoft_word_export_pdf","microsoft_word_list","microsoft_word_read","microsoft_word_replace_text","microsoft_word_update","millionverifier_get_credits","millionverifier_verify_email","mintlify_create_agent_job","mintlify_create_assistant_message","mintlify_detect_ai_prose","mintlify_get_agent_job","mintlify_get_assistant_caller_stats","mintlify_get_assistant_conversations","mintlify_get_feedback","mintlify_get_feedback_by_page","mintlify_get_page_content","mintlify_get_searches","mintlify_get_update_status","mintlify_get_views","mintlify_get_visitors","mintlify_search","mintlify_send_agent_message","mintlify_trigger_automation","mintlify_trigger_preview","mintlify_trigger_update","mistral_parser","mistral_parser_v2","mistral_parser_v3","modal_call_function","modal_chat_completion","modal_list_models","monday_archive_item","monday_change_column_value","monday_create_board","monday_create_column","monday_create_group","monday_create_item","monday_create_subitem","monday_create_update","monday_delete_item","monday_duplicate_item","monday_get_board","monday_get_groups","monday_get_item","monday_get_items","monday_list_boards","monday_move_item_to_group","monday_search_items","monday_update_item","mongodb_delete","mongodb_execute","mongodb_insert","mongodb_introspect","mongodb_query","mongodb_update","mssql_delete","mssql_execute","mssql_insert","mssql_introspect","mssql_query","mssql_update","mysql_delete","mysql_execute","mysql_insert","mysql_introspect","mysql_query","mysql_update","neo4j_create","neo4j_delete","neo4j_execute","neo4j_introspect","neo4j_merge","neo4j_query","neo4j_update","netsuite_attach_record","netsuite_batch_create_records","netsuite_batch_delete_records","netsuite_batch_get_records","netsuite_batch_update_records","netsuite_batch_upsert_records","netsuite_create_record","netsuite_delete_record","netsuite_detach_record","netsuite_execute_action","netsuite_execute_dataset","netsuite_execute_suiteql","netsuite_get_async_result","netsuite_get_async_status","netsuite_get_governance_limits","netsuite_get_record","netsuite_get_record_form","netsuite_get_record_metadata","netsuite_get_select_options","netsuite_get_server_time","netsuite_get_subresource","netsuite_list_datasets","netsuite_list_record_types","netsuite_list_records","netsuite_transform_record","netsuite_update_record","netsuite_upsert_record","neverbounce_get_credits","neverbounce_verify_email","new_relic_create_deployment_event","new_relic_get_entity","new_relic_nrql_query","new_relic_search_entities","notion_add_database_row","notion_add_database_row_v2","notion_append_blocks","notion_append_blocks_v2","notion_create_comment","notion_create_comment_v2","notion_create_database","notion_create_database_v2","notion_create_page","notion_create_page_v2","notion_delete_block","notion_delete_block_v2","notion_list_comments","notion_list_comments_v2","notion_list_users","notion_list_users_v2","notion_query_database","notion_query_database_v2","notion_read","notion_read_database","notion_read_database_v2","notion_read_v2","notion_retrieve_block","notion_retrieve_block_children","notion_retrieve_block_children_v2","notion_retrieve_block_v2","notion_retrieve_user","notion_retrieve_user_v2","notion_search","notion_search_v2","notion_update_block","notion_update_block_v2","notion_update_page","notion_update_page_v2","notion_write","notion_write_v2","obsidian_append_active","obsidian_append_note","obsidian_append_periodic_note","obsidian_create_note","obsidian_delete_note","obsidian_execute_command","obsidian_get_active","obsidian_get_note","obsidian_get_periodic_note","obsidian_list_commands","obsidian_list_files","obsidian_open_file","obsidian_patch_active","obsidian_patch_note","obsidian_search","okta_activate_group_rule","okta_activate_user","okta_add_user_to_group","okta_assign_group_to_app","okta_assign_user_role","okta_assign_user_to_app","okta_clear_user_sessions","okta_create_group","okta_create_group_rule","okta_create_user","okta_deactivate_group_rule","okta_deactivate_user","okta_delete_group","okta_delete_group_rule","okta_delete_user","okta_enroll_factor","okta_get_app","okta_get_factor","okta_get_group","okta_get_group_rule","okta_get_logs","okta_get_session","okta_get_user","okta_list_app_groups","okta_list_app_users","okta_list_apps","okta_list_factors","okta_list_group_members","okta_list_group_rules","okta_list_groups","okta_list_user_roles","okta_list_users","okta_remove_group_from_app","okta_remove_user_from_app","okta_remove_user_from_group","okta_remove_user_role","okta_reset_all_factors","okta_reset_factor","okta_reset_password","okta_revoke_session","okta_suspend_user","okta_unsuspend_user","okta_update_group","okta_update_user","onedrive_copy","onedrive_create_folder","onedrive_create_share_link","onedrive_delete","onedrive_download","onedrive_get_drive_info","onedrive_get_item","onedrive_list","onedrive_move","onedrive_search","onedrive_upload","onepassword_create_item","onepassword_delete_item","onepassword_get_item","onepassword_get_item_file","onepassword_get_vault","onepassword_list_items","onepassword_list_vaults","onepassword_replace_item","onepassword_resolve_secret","onepassword_update_item","openai_embeddings","openai_image","outlook_calendar_create_event","outlook_calendar_delete_event","outlook_calendar_get_event","outlook_calendar_list_events","outlook_calendar_respond","outlook_calendar_update_event","outlook_copy","outlook_create_folder","outlook_delete","outlook_draft","outlook_forward","outlook_get_attachment","outlook_list_attachments","outlook_list_folders","outlook_mark_read","outlook_mark_unread","outlook_move","outlook_read","outlook_reply","outlook_reply_all","outlook_search","outlook_send","outlook_update_message","pagerduty_add_note","pagerduty_create_incident","pagerduty_get_incident","pagerduty_get_service","pagerduty_list_escalation_policies","pagerduty_list_incident_alerts","pagerduty_list_incidents","pagerduty_list_oncalls","pagerduty_list_schedules","pagerduty_list_services","pagerduty_list_users","pagerduty_merge_incidents","pagerduty_send_event","pagerduty_snooze_incident","pagerduty_update_incident","parallel_deep_research","parallel_extract","parallel_search","pdl_autocomplete","pdl_bulk_company_enrich","pdl_bulk_person_enrich","pdl_clean_company","pdl_clean_location","pdl_clean_school","pdl_company_enrich","pdl_company_search","pdl_person_enrich","pdl_person_identify","pdl_person_search","perplexity_chat","perplexity_search","persona_approve_inquiry","persona_create_account","persona_create_inquiry","persona_create_report","persona_decline_inquiry","persona_expire_inquiry","persona_generate_inquiry_link","persona_get_account","persona_get_case","persona_get_document","persona_get_inquiry","persona_get_report","persona_get_verification","persona_import_accounts","persona_list_accounts","persona_list_cases","persona_list_inquiries","persona_list_inquiry_templates","persona_list_reports","persona_mark_inquiry_for_review","persona_print_inquiry_pdf","persona_redact_account","persona_redact_inquiry","persona_resume_inquiry","persona_update_account","persona_update_inquiry","pinecone_delete_vectors","pinecone_describe_index","pinecone_describe_index_stats","pinecone_fetch","pinecone_generate_embeddings","pinecone_list_indexes","pinecone_list_vector_ids","pinecone_search_text","pinecone_search_vector","pinecone_update_vector","pinecone_upsert_text","pipedrive_create_activity","pipedrive_create_deal","pipedrive_create_lead","pipedrive_create_project","pipedrive_delete_lead","pipedrive_get_activities","pipedrive_get_all_deals","pipedrive_get_deal","pipedrive_get_files","pipedrive_get_leads","pipedrive_get_mail_messages","pipedrive_get_mail_thread","pipedrive_get_pipeline_deals","pipedrive_get_pipelines","pipedrive_get_projects","pipedrive_update_activity","pipedrive_update_deal","pipedrive_update_lead","pitchbook_company_active_investors","pitchbook_company_bio","pitchbook_company_deal_service_providers","pitchbook_company_deals","pitchbook_company_financials","pitchbook_company_general_service_providers","pitchbook_company_industries","pitchbook_company_investors","pitchbook_company_most_recent_debt_financing","pitchbook_company_most_recent_financials","pitchbook_company_most_recent_financing","pitchbook_company_search","pitchbook_company_similar_companies","pitchbook_company_social_analytics","pitchbook_company_updates","pitchbook_company_vc_exit_predictions","pitchbook_contracts_history","pitchbook_cost_of_calls","pitchbook_credit_history","pitchbook_credit_news","pitchbook_credit_news_bulk","pitchbook_credit_news_most_recent","pitchbook_credit_news_search","pitchbook_deal_bio","pitchbook_deal_cap_table_history","pitchbook_deal_debt_lenders","pitchbook_deal_detailed","pitchbook_deal_investors","pitchbook_deal_multiples","pitchbook_deal_search","pitchbook_deal_service_providers","pitchbook_deal_stock_info","pitchbook_deal_tranche_info","pitchbook_deal_updates","pitchbook_deal_valuation","pitchbook_entity_affiliates","pitchbook_entity_locations","pitchbook_entity_news","pitchbook_entity_people","pitchbook_entity_updates","pitchbook_fund_active_investments","pitchbook_fund_benchmark","pitchbook_fund_bio","pitchbook_fund_cash_flows","pitchbook_fund_commitments","pitchbook_fund_investment_preferences","pitchbook_fund_investments","pitchbook_fund_performance","pitchbook_fund_search","pitchbook_fund_team","pitchbook_fund_updates","pitchbook_investor_active_investments","pitchbook_investor_bio","pitchbook_investor_board_seats","pitchbook_investor_deal_service_providers","pitchbook_investor_funds","pitchbook_investor_general_service_providers","pitchbook_investor_investments","pitchbook_investor_last_closed_fund","pitchbook_investor_preferences","pitchbook_investor_search","pitchbook_investor_updates","pitchbook_limited_partner_actual_allocations","pitchbook_limited_partner_bio","pitchbook_limited_partner_commitment_aggregates","pitchbook_limited_partner_commitment_preferences","pitchbook_limited_partner_commitments_detailed","pitchbook_limited_partner_search","pitchbook_limited_partner_service_providers","pitchbook_limited_partner_target_allocations","pitchbook_limited_partner_updates","pitchbook_lookup_table_structure","pitchbook_lookup_tables","pitchbook_patent_detailed","pitchbook_patent_search","pitchbook_people_search","pitchbook_person_bio","pitchbook_person_contact","pitchbook_person_education_work","pitchbook_sandbox_entities","pitchbook_search","pitchbook_service_provider_bio","pitchbook_service_provider_search","pitchbook_service_provider_updates","pitchbook_serviced_companies","pitchbook_serviced_deals","pitchbook_serviced_funds","pitchbook_serviced_investors","pitchbook_serviced_limited_partners","pitchbook_shared_search","pitchbook_usage_report","polymarket_get_activity","polymarket_get_event","polymarket_get_events","polymarket_get_holders","polymarket_get_last_trade_price","polymarket_get_leaderboard","polymarket_get_market","polymarket_get_markets","polymarket_get_midpoint","polymarket_get_orderbook","polymarket_get_positions","polymarket_get_price","polymarket_get_price_history","polymarket_get_series","polymarket_get_series_by_id","polymarket_get_spread","polymarket_get_tags","polymarket_get_tick_size","polymarket_get_trades","polymarket_search","postgresql_delete","postgresql_execute","postgresql_insert","postgresql_introspect","postgresql_query","postgresql_update","posthog_batch_events","posthog_capture_event","posthog_create_annotation","posthog_create_cohort","posthog_create_dashboard","posthog_create_experiment","posthog_create_feature_flag","posthog_create_insight","posthog_create_survey","posthog_delete_feature_flag","posthog_delete_person","posthog_delete_survey","posthog_evaluate_flags","posthog_get_cohort","posthog_get_dashboard","posthog_get_event_definition","posthog_get_experiment","posthog_get_feature_flag","posthog_get_insight","posthog_get_organization","posthog_get_person","posthog_get_project","posthog_get_property_definition","posthog_get_session_recording","posthog_get_survey","posthog_list_actions","posthog_list_annotations","posthog_list_cohorts","posthog_list_dashboards","posthog_list_event_definitions","posthog_list_experiments","posthog_list_feature_flags","posthog_list_insights","posthog_list_organizations","posthog_list_persons","posthog_list_projects","posthog_list_property_definitions","posthog_list_recording_playlists","posthog_list_session_recordings","posthog_list_surveys","posthog_query","posthog_update_cohort","posthog_update_event_definition","posthog_update_experiment","posthog_update_feature_flag","posthog_update_insight","posthog_update_property_definition","posthog_update_survey","profound_bot_logs","profound_bots_report","profound_category_assets","profound_category_personas","profound_category_prompts","profound_category_tags","profound_category_topics","profound_citation_prompts","profound_citations_report","profound_list_assets","profound_list_categories","profound_list_domains","profound_list_models","profound_list_optimizations","profound_list_personas","profound_list_regions","profound_optimization_analysis","profound_prompt_answers","profound_prompt_volume","profound_query_fanouts","profound_raw_logs","profound_referrals_report","profound_sentiment_report","profound_visibility_report","prospeo_account_information","prospeo_bulk_enrich_company","prospeo_bulk_enrich_person","prospeo_enrich_company","prospeo_enrich_person","prospeo_search_company","prospeo_search_person","prospeo_search_suggestions","pulse_parser","pulse_parser_v2","qdrant_fetch_points","qdrant_search_vector","qdrant_upsert_points","quartr_get_audio","quartr_get_company","quartr_get_event","quartr_get_event_summary","quartr_get_report","quartr_get_slide_deck","quartr_get_transcript","quartr_list_audio","quartr_list_companies","quartr_list_document_types","quartr_list_documents","quartr_list_event_types","quartr_list_events","quartr_list_live_events","quartr_list_reports","quartr_list_slide_decks","quartr_list_transcripts","quiver_image_to_svg","quiver_list_models","quiver_text_to_svg","rabbitmq_create_binding","rabbitmq_create_exchange","rabbitmq_create_policy","rabbitmq_create_queue","rabbitmq_delete_binding","rabbitmq_delete_exchange","rabbitmq_delete_policy","rabbitmq_delete_queue","rabbitmq_get_exchange","rabbitmq_get_messages","rabbitmq_get_overview","rabbitmq_get_queue","rabbitmq_health_check","rabbitmq_list_bindings","rabbitmq_list_channels","rabbitmq_list_connections","rabbitmq_list_consumers","rabbitmq_list_exchange_bindings","rabbitmq_list_exchanges","rabbitmq_list_nodes","rabbitmq_list_policies","rabbitmq_list_queues","rabbitmq_list_vhosts","rabbitmq_publish_message","rabbitmq_purge_queue","railway_create_environment","railway_create_project","railway_create_service","railway_delete_environment","railway_delete_project","railway_delete_service","railway_delete_variable","railway_deploy_service","railway_get_deployment","railway_get_deployment_logs","railway_get_project","railway_list_deployments","railway_list_project_members","railway_list_projects","railway_list_variables","railway_restart_deployment","railway_rollback_deployment","railway_transfer_project","railway_update_project","railway_upsert_variable","rb2b_credit_check","rb2b_email_to_activity","rb2b_hem_to_best_linkedin","rb2b_hem_to_business_profile","rb2b_hem_to_linkedin","rb2b_hem_to_maid","rb2b_ip_to_company","rb2b_ip_to_hem","rb2b_ip_to_maid","rb2b_linkedin_slug_search","rb2b_linkedin_to_best_personal_email","rb2b_linkedin_to_business_profile","rb2b_linkedin_to_hashed_emails","rb2b_linkedin_to_mobile_phone","rb2b_linkedin_to_personal_email","rds_delete","rds_execute","rds_insert","rds_introspect","rds_query","rds_update","reddit_delete","reddit_edit","reddit_get_comments","reddit_get_controversial","reddit_get_info","reddit_get_me","reddit_get_messages","reddit_get_posts","reddit_get_saved","reddit_get_subreddit_info","reddit_get_subreddit_rules","reddit_get_user","reddit_get_user_comments","reddit_get_user_posts","reddit_hide","reddit_hot_posts","reddit_list_my_subreddits","reddit_lock","reddit_mark_all_read","reddit_mark_read","reddit_marknsfw","reddit_mod_approve","reddit_mod_distinguish","reddit_mod_remove","reddit_mod_sticky","reddit_reply","reddit_report","reddit_save","reddit_search","reddit_search_subreddits","reddit_send_message","reddit_submit_post","reddit_subscribe","reddit_unhide","reddit_unlock","reddit_unmarknsfw","reddit_unsave","reddit_vote","redis_command","redis_delete","redis_exists","redis_expire","redis_get","redis_hdel","redis_hget","redis_hgetall","redis_hset","redis_incr","redis_incrby","redis_keys","redis_llen","redis_lpop","redis_lpush","redis_lrange","redis_persist","redis_rpop","redis_rpush","redis_set","redis_setnx","redis_ttl","reducto_parser","reducto_parser_v2","resend_cancel_email","resend_create_audience","resend_create_broadcast","resend_create_contact","resend_delete_audience","resend_delete_contact","resend_get_audience","resend_get_broadcast","resend_get_contact","resend_get_email","resend_list_audiences","resend_list_contacts","resend_list_domains","resend_send","resend_send_broadcast","resend_update_contact","revenuecat_create_purchase","revenuecat_defer_google_subscription","revenuecat_delete_customer","revenuecat_get_customer","revenuecat_grant_entitlement","revenuecat_list_offerings","revenuecat_refund_google_subscription","revenuecat_revoke_entitlement","revenuecat_revoke_google_subscription","revenuecat_update_subscriber_attributes","rippling_bulk_create_custom_object_records","rippling_bulk_delete_custom_object_records","rippling_bulk_update_custom_object_records","rippling_create_business_partner","rippling_create_business_partner_group","rippling_create_custom_app","rippling_create_custom_object","rippling_create_custom_object_field","rippling_create_custom_object_record","rippling_create_custom_page","rippling_create_custom_setting","rippling_create_department","rippling_create_draft_hires","rippling_create_object_category","rippling_create_title","rippling_create_work_location","rippling_delete_business_partner","rippling_delete_business_partner_group","rippling_delete_custom_app","rippling_delete_custom_object","rippling_delete_custom_object_field","rippling_delete_custom_object_record","rippling_delete_custom_page","rippling_delete_custom_setting","rippling_delete_object_category","rippling_delete_title","rippling_delete_work_location","rippling_get_business_partner","rippling_get_business_partner_group","rippling_get_current_user","rippling_get_custom_app","rippling_get_custom_object","rippling_get_custom_object_field","rippling_get_custom_object_record","rippling_get_custom_object_record_by_external_id","rippling_get_custom_page","rippling_get_custom_setting","rippling_get_department","rippling_get_employment_type","rippling_get_job_function","rippling_get_object_category","rippling_get_report_run","rippling_get_supergroup","rippling_get_team","rippling_get_title","rippling_get_user","rippling_get_work_location","rippling_get_worker","rippling_list_business_partner_groups","rippling_list_business_partners","rippling_list_companies","rippling_list_custom_apps","rippling_list_custom_fields","rippling_list_custom_object_fields","rippling_list_custom_object_records","rippling_list_custom_objects","rippling_list_custom_pages","rippling_list_custom_settings","rippling_list_departments","rippling_list_employment_types","rippling_list_entitlements","rippling_list_job_functions","rippling_list_object_categories","rippling_list_supergroup_exclusion_members","rippling_list_supergroup_inclusion_members","rippling_list_supergroup_members","rippling_list_supergroups","rippling_list_teams","rippling_list_titles","rippling_list_users","rippling_list_work_locations","rippling_list_workers","rippling_query_custom_object_records","rippling_trigger_report_run","rippling_update_custom_app","rippling_update_custom_object","rippling_update_custom_object_field","rippling_update_custom_object_record","rippling_update_custom_page","rippling_update_custom_setting","rippling_update_department","rippling_update_object_category","rippling_update_supergroup_exclusion_members","rippling_update_supergroup_inclusion_members","rippling_update_title","rippling_update_work_location","rocketlane_add_field_option","rocketlane_add_project_members","rocketlane_add_task_assignees","rocketlane_add_task_dependencies","rocketlane_add_task_followers","rocketlane_archive_project","rocketlane_assign_placeholders","rocketlane_create_field","rocketlane_create_phase","rocketlane_create_project","rocketlane_create_space","rocketlane_create_space_document","rocketlane_create_task","rocketlane_create_time_entry","rocketlane_create_time_off","rocketlane_delete_field","rocketlane_delete_phase","rocketlane_delete_project","rocketlane_delete_space","rocketlane_delete_space_document","rocketlane_delete_task","rocketlane_delete_time_entry","rocketlane_delete_time_off","rocketlane_get_field","rocketlane_get_invoice","rocketlane_get_invoice_line_items","rocketlane_get_invoice_payments","rocketlane_get_phase","rocketlane_get_project","rocketlane_get_space","rocketlane_get_space_document","rocketlane_get_task","rocketlane_get_time_entry","rocketlane_get_time_off","rocketlane_get_user","rocketlane_import_template","rocketlane_list_fields","rocketlane_list_invoices","rocketlane_list_phases","rocketlane_list_placeholders","rocketlane_list_projects","rocketlane_list_resource_allocations","rocketlane_list_space_documents","rocketlane_list_spaces","rocketlane_list_tasks","rocketlane_list_time_entries","rocketlane_list_time_entry_categories","rocketlane_list_time_offs","rocketlane_list_users","rocketlane_move_task_to_phase","rocketlane_remove_project_members","rocketlane_remove_task_assignees","rocketlane_remove_task_dependencies","rocketlane_remove_task_followers","rocketlane_search_time_entries","rocketlane_unassign_placeholders","rocketlane_update_field","rocketlane_update_field_option","rocketlane_update_phase","rocketlane_update_project","rocketlane_update_space","rocketlane_update_space_document","rocketlane_update_task","rocketlane_update_time_entry","rootly_acknowledge_alert","rootly_add_incident_event","rootly_add_subscribers","rootly_assign_incident_role","rootly_create_action_item","rootly_create_alert","rootly_create_incident","rootly_create_status_page_event","rootly_delete_action_item","rootly_delete_incident","rootly_escalate_alert","rootly_get_alert","rootly_get_incident","rootly_list_action_items","rootly_list_alerts","rootly_list_causes","rootly_list_environments","rootly_list_escalation_policies","rootly_list_functionalities","rootly_list_incident_events","rootly_list_incident_roles","rootly_list_incident_types","rootly_list_incidents","rootly_list_on_calls","rootly_list_playbooks","rootly_list_retrospectives","rootly_list_schedules","rootly_list_services","rootly_list_severities","rootly_list_teams","rootly_list_users","rootly_mitigate_incident","rootly_remove_subscribers","rootly_resolve_alert","rootly_resolve_incident","rootly_run_workflow","rootly_snooze_alert","rootly_unassign_incident_role","rootly_update_action_item","rootly_update_alert","rootly_update_incident","s3_copy_object","s3_create_bucket","s3_delete_bucket","s3_delete_object","s3_delete_objects","s3_get_object","s3_head_object","s3_list_buckets","s3_list_objects","s3_presigned_url","s3_put_object","sailpoint_approve_access_request","sailpoint_cancel_access_request","sailpoint_decide_certification_review_items","sailpoint_get_access_profile","sailpoint_get_access_profile_entitlements","sailpoint_get_access_request_status","sailpoint_get_account","sailpoint_get_account_activity","sailpoint_get_account_entitlements","sailpoint_get_campaign","sailpoint_get_certification","sailpoint_get_entitlement","sailpoint_get_identity","sailpoint_get_role","sailpoint_get_role_entitlements","sailpoint_get_source","sailpoint_get_task_status","sailpoint_list_access_profiles","sailpoint_list_account_activities","sailpoint_list_accounts","sailpoint_list_campaigns","sailpoint_list_certification_review_items","sailpoint_list_certifications","sailpoint_list_entitlements","sailpoint_list_identities","sailpoint_list_identity_entitlements","sailpoint_list_pending_access_request_approvals","sailpoint_list_roles","sailpoint_list_sources","sailpoint_load_accounts","sailpoint_load_entitlements","sailpoint_reject_access_request","sailpoint_request_access","sailpoint_search","sailpoint_search_aggregate","sailpoint_search_count","sailpoint_sign_off_certification","salesforce_create_account","salesforce_create_case","salesforce_create_contact","salesforce_create_custom_field","salesforce_create_custom_object","salesforce_create_lead","salesforce_create_opportunity","salesforce_create_task","salesforce_delete_account","salesforce_delete_case","salesforce_delete_contact","salesforce_delete_custom_field","salesforce_delete_lead","salesforce_delete_opportunity","salesforce_delete_task","salesforce_describe_object","salesforce_get_accounts","salesforce_get_cases","salesforce_get_contacts","salesforce_get_dashboard","salesforce_get_leads","salesforce_get_opportunities","salesforce_get_report","salesforce_get_tasks","salesforce_list_dashboards","salesforce_list_objects","salesforce_list_report_types","salesforce_list_reports","salesforce_query","salesforce_query_more","salesforce_refresh_dashboard","salesforce_run_report","salesforce_tooling_query","salesforce_update_account","salesforce_update_case","salesforce_update_contact","salesforce_update_custom_field","salesforce_update_lead","salesforce_update_opportunity","salesforce_update_task","sap_concur_approve_expense_report","sap_concur_associate_attendees","sap_concur_create_cash_advance","sap_concur_create_expected_expense","sap_concur_create_expense_report","sap_concur_create_list_item","sap_concur_create_purchase_request","sap_concur_create_quick_expense","sap_concur_create_quick_expense_with_image","sap_concur_create_report_comment","sap_concur_create_travel_request","sap_concur_create_user","sap_concur_delete_expected_expense","sap_concur_delete_expense","sap_concur_delete_expense_report","sap_concur_delete_list_item","sap_concur_delete_travel_request","sap_concur_delete_user","sap_concur_get_allocation","sap_concur_get_budget","sap_concur_get_cash_advance","sap_concur_get_expected_expense","sap_concur_get_expense","sap_concur_get_expense_report","sap_concur_get_itemizations","sap_concur_get_itinerary","sap_concur_get_list","sap_concur_get_list_item","sap_concur_get_purchase_request","sap_concur_get_receipt","sap_concur_get_receipt_status","sap_concur_get_request_cash_advance","sap_concur_get_travel_profile","sap_concur_get_travel_request","sap_concur_get_user","sap_concur_issue_cash_advance","sap_concur_list_allocations","sap_concur_list_attendee_associations","sap_concur_list_budget_categories","sap_concur_list_budgets","sap_concur_list_exceptions","sap_concur_list_expected_expenses","sap_concur_list_expense_reports","sap_concur_list_expenses","sap_concur_list_itineraries","sap_concur_list_list_items","sap_concur_list_lists","sap_concur_list_receipts","sap_concur_list_report_comments","sap_concur_list_reports_to_approve","sap_concur_list_travel_profiles_summary","sap_concur_list_travel_request_comments","sap_concur_list_travel_requests","sap_concur_list_users","sap_concur_move_travel_request","sap_concur_recall_expense_report","sap_concur_remove_all_attendees","sap_concur_search_locations","sap_concur_search_users","sap_concur_send_back_expense_report","sap_concur_submit_expense_report","sap_concur_update_allocation","sap_concur_update_expected_expense","sap_concur_update_expense","sap_concur_update_expense_report","sap_concur_update_list_item","sap_concur_update_travel_request","sap_concur_update_user","sap_concur_upload_exchange_rates","sap_concur_upload_receipt_image","sap_s4hana_create_business_partner","sap_s4hana_create_purchase_order","sap_s4hana_create_purchase_requisition","sap_s4hana_create_sales_order","sap_s4hana_delete_sales_order","sap_s4hana_get_billing_document","sap_s4hana_get_business_partner","sap_s4hana_get_customer","sap_s4hana_get_inbound_delivery","sap_s4hana_get_material_document","sap_s4hana_get_outbound_delivery","sap_s4hana_get_product","sap_s4hana_get_purchase_order","sap_s4hana_get_purchase_requisition","sap_s4hana_get_sales_order","sap_s4hana_get_supplier","sap_s4hana_get_supplier_invoice","sap_s4hana_list_billing_documents","sap_s4hana_list_business_partners","sap_s4hana_list_customers","sap_s4hana_list_inbound_deliveries","sap_s4hana_list_material_documents","sap_s4hana_list_material_stock","sap_s4hana_list_outbound_deliveries","sap_s4hana_list_products","sap_s4hana_list_purchase_orders","sap_s4hana_list_purchase_requisitions","sap_s4hana_list_sales_orders","sap_s4hana_list_supplier_invoices","sap_s4hana_list_suppliers","sap_s4hana_odata_query","sap_s4hana_update_business_partner","sap_s4hana_update_customer","sap_s4hana_update_product","sap_s4hana_update_purchase_order","sap_s4hana_update_purchase_requisition","sap_s4hana_update_sales_order","sap_s4hana_update_supplier","search_tool","secrets_manager_create_secret","secrets_manager_delete_secret","secrets_manager_describe_secret","secrets_manager_get_secret","secrets_manager_list_secrets","secrets_manager_restore_secret","secrets_manager_rotate_secret","secrets_manager_tag_resource","secrets_manager_untag_resource","secrets_manager_update_secret","semrush_backlinks","semrush_backlinks_anchors","semrush_backlinks_competitors","semrush_backlinks_geo_distribution","semrush_backlinks_indexed_pages","semrush_backlinks_overview","semrush_backlinks_tld_distribution","semrush_batch_keyword_overview","semrush_broad_match_keywords","semrush_domain_ad_copies","semrush_domain_ad_history","semrush_domain_organic_competitors","semrush_domain_organic_keywords","semrush_domain_overview","semrush_domain_overview_all","semrush_domain_overview_history","semrush_domain_paid_competitors","semrush_domain_paid_keywords","semrush_domain_pla_copies","semrush_domain_pla_keywords","semrush_domain_vs_domain","semrush_keyword_ad_history","semrush_keyword_difficulty","semrush_keyword_overview","semrush_keyword_overview_all","semrush_keyword_questions","semrush_organic_results","semrush_paid_results","semrush_referring_domains","semrush_referring_ips","semrush_related_keywords","semrush_subdomain_ad_copies","semrush_subdomain_organic_keywords","semrush_subdomain_overview","semrush_subdomain_overview_all","semrush_subdomain_overview_history","semrush_subdomain_paid_keywords","semrush_top_domains","semrush_url_organic_keywords","semrush_url_overview","semrush_url_overview_all","semrush_url_overview_history","semrush_url_paid_keywords","semrush_winners_and_losers","sendblue_evaluate_service","sendblue_get_message","sendblue_send_group_message","sendblue_send_message","sendblue_send_typing_indicator","sendgrid_add_contact","sendgrid_add_contacts_to_list","sendgrid_create_list","sendgrid_create_template","sendgrid_create_template_version","sendgrid_delete_contacts","sendgrid_delete_list","sendgrid_delete_template","sendgrid_get_contact","sendgrid_get_list","sendgrid_get_template","sendgrid_list_all_lists","sendgrid_list_templates","sendgrid_remove_contacts_from_list","sendgrid_search_contacts","sendgrid_send_mail","sentry_events_get","sentry_events_list","sentry_issues_get","sentry_issues_list","sentry_issues_update","sentry_projects_create","sentry_projects_get","sentry_projects_list","sentry_projects_update","sentry_releases_create","sentry_releases_deploy","sentry_releases_list","sentry_teams_list","serper_search","servicenow_add_incident_comment","servicenow_aggregate","servicenow_close_incident","servicenow_create_change_request","servicenow_create_incident","servicenow_create_record","servicenow_delete_record","servicenow_download_attachment","servicenow_find_user","servicenow_get_change_next_states","servicenow_get_change_request","servicenow_get_ci","servicenow_get_incident","servicenow_get_knowledge_article","servicenow_get_requested_item","servicenow_list_approvals","servicenow_list_attachments","servicenow_list_catalog_items","servicenow_list_change_requests","servicenow_list_change_tasks","servicenow_list_ci_relationships","servicenow_list_group_members","servicenow_list_incidents","servicenow_list_requested_items","servicenow_order_catalog_item","servicenow_read_record","servicenow_resolve_incident","servicenow_search_cis","servicenow_search_knowledge","servicenow_update_approval","servicenow_update_change_request","servicenow_update_change_state","servicenow_update_incident","servicenow_update_record","servicenow_upload_attachment","ses_create_configuration_set","ses_create_email_identity","ses_create_template","ses_delete_email_identity","ses_delete_suppressed_destination","ses_delete_template","ses_get_account","ses_get_email_identity","ses_get_suppressed_destination","ses_get_template","ses_list_identities","ses_list_suppressed_destinations","ses_list_templates","ses_put_suppressed_destination","ses_send_bulk_email","ses_send_custom_verification_email","ses_send_email","ses_send_templated_email","ses_update_template","sftp_delete","sftp_download","sftp_list","sftp_mkdir","sftp_upload","sharepoint_add_list_items","sharepoint_create_list","sharepoint_create_page","sharepoint_delete_file","sharepoint_delete_list_item","sharepoint_delete_page","sharepoint_download_file","sharepoint_get_drive_item","sharepoint_get_list","sharepoint_get_list_item","sharepoint_list_sites","sharepoint_publish_page","sharepoint_read_page","sharepoint_update_list","sharepoint_update_page","sharepoint_upload_file","shopify_adjust_inventory","shopify_cancel_order","shopify_create_customer","shopify_create_fulfillment","shopify_create_product","shopify_delete_customer","shopify_delete_product","shopify_get_collection","shopify_get_customer","shopify_get_inventory_level","shopify_get_order","shopify_get_product","shopify_list_collections","shopify_list_customers","shopify_list_inventory_items","shopify_list_locations","shopify_list_orders","shopify_list_products","shopify_update_customer","shopify_update_order","shopify_update_product","similarweb_bounce_rate","similarweb_page_views","similarweb_pages_per_visit","similarweb_traffic_visits","similarweb_visit_duration","similarweb_website_overview","sixtyfour_enrich_company","sixtyfour_enrich_lead","sixtyfour_find_email","sixtyfour_find_phone","slack_add_reaction","slack_archive_conversation","slack_canvas","slack_create_channel_canvas","slack_create_conversation","slack_delete_canvas","slack_delete_message","slack_delete_scheduled_message","slack_download","slack_edit_canvas","slack_ephemeral_message","slack_get_canvas","slack_get_channel_history","slack_get_channel_info","slack_get_message","slack_get_permalink","slack_get_thread","slack_get_thread_replies","slack_get_user","slack_get_user_presence","slack_invite_to_conversation","slack_list_canvases","slack_list_channels","slack_list_members","slack_list_scheduled_messages","slack_list_users","slack_lookup_canvas_sections","slack_message","slack_message_reader","slack_open_view","slack_publish_view","slack_push_view","slack_remove_reaction","slack_rename_conversation","slack_schedule_message","slack_set_conversation_purpose","slack_set_conversation_topic","slack_set_status","slack_set_suggested_prompts","slack_set_title","slack_update_message","slack_update_view","smartlead_add_email_accounts_to_campaign","smartlead_add_leads_to_campaign","smartlead_create_campaign","smartlead_create_lead_list","smartlead_delete_campaign","smartlead_delete_campaign_webhook","smartlead_delete_lead_from_campaign","smartlead_delete_lead_list","smartlead_duplicate_campaign","smartlead_export_campaign_leads","smartlead_get_campaign","smartlead_get_campaign_analytics","smartlead_get_campaign_analytics_by_date","smartlead_get_campaign_lead_statistics","smartlead_get_campaign_mailbox_statistics","smartlead_get_campaign_sequences","smartlead_get_campaign_statistics","smartlead_get_campaign_top_level_analytics_by_date","smartlead_get_campaign_webhook_summary","smartlead_get_lead_by_email","smartlead_get_lead_by_id","smartlead_get_lead_list","smartlead_get_lead_message_history","smartlead_list_campaign_email_accounts","smartlead_list_campaign_leads","smartlead_list_campaign_webhooks","smartlead_list_campaigns","smartlead_list_clients","smartlead_list_email_accounts","smartlead_list_inbox_replies","smartlead_list_lead_activities","smartlead_list_lead_categories","smartlead_list_lead_lists","smartlead_mark_lead_complete","smartlead_pause_lead","smartlead_remove_email_accounts_from_campaign","smartlead_resume_lead","smartlead_save_campaign_sequences","smartlead_unsubscribe_lead_from_campaign","smartlead_unsubscribe_lead_globally","smartlead_update_campaign_schedule","smartlead_update_campaign_settings","smartlead_update_campaign_status","smartlead_update_lead","smartlead_update_lead_category","smartlead_update_lead_list","smartlead_upsert_campaign_webhook","sms_send","smtp_send_mail","snowflake_alter_warehouse","snowflake_call_procedure","snowflake_cancel_statement","snowflake_cancel_task_run","snowflake_delete_rows","snowflake_execute_sql","snowflake_get_statement","snowflake_get_task","snowflake_get_task_run","snowflake_get_task_run_output","snowflake_get_warehouse","snowflake_insert_rows","snowflake_introspect_schema","snowflake_list_copy_history","snowflake_list_databases","snowflake_list_query_history","snowflake_list_schemas","snowflake_list_tables","snowflake_list_task_runs","snowflake_list_tasks","snowflake_list_warehouses","snowflake_load_data","snowflake_resume_task","snowflake_resume_warehouse","snowflake_run_task","snowflake_suspend_task","snowflake_suspend_warehouse","snowflake_unload_data","snowflake_update_rows","snowflake_upsert_rows","splunk_cancel_search_job","splunk_create_search_job","splunk_dispatch_saved_search","splunk_get_fired_alerts","splunk_get_saved_search","splunk_get_search_job","splunk_get_search_results","splunk_list_apps","splunk_list_fired_alerts","splunk_list_indexes","splunk_list_saved_searches","splunk_run_search","sportmonks_core_get_cities","sportmonks_core_get_city","sportmonks_core_get_continent","sportmonks_core_get_continents","sportmonks_core_get_countries","sportmonks_core_get_country","sportmonks_core_get_entity_filters","sportmonks_core_get_my_usage","sportmonks_core_get_region","sportmonks_core_get_regions","sportmonks_core_get_timezones","sportmonks_core_get_type","sportmonks_core_get_type_by_entity","sportmonks_core_get_types","sportmonks_core_search_cities","sportmonks_core_search_countries","sportmonks_core_search_regions","sportmonks_football_expected_by_player","sportmonks_football_expected_by_team","sportmonks_football_get_all_commentaries","sportmonks_football_get_all_fixtures","sportmonks_football_get_all_players","sportmonks_football_get_all_rivals","sportmonks_football_get_all_teams","sportmonks_football_get_all_transfer_rumours","sportmonks_football_get_all_transfers","sportmonks_football_get_brackets_by_season","sportmonks_football_get_coach","sportmonks_football_get_coaches","sportmonks_football_get_coaches_by_country","sportmonks_football_get_commentaries_by_fixture","sportmonks_football_get_current_leagues_by_team","sportmonks_football_get_expected_lineups_by_player","sportmonks_football_get_expected_lineups_by_team","sportmonks_football_get_extended_team_squad","sportmonks_football_get_fixture","sportmonks_football_get_fixtures_by_date","sportmonks_football_get_fixtures_by_date_range","sportmonks_football_get_fixtures_by_date_range_for_team","sportmonks_football_get_fixtures_by_ids","sportmonks_football_get_grouped_standings_by_round","sportmonks_football_get_head_to_head","sportmonks_football_get_inplay_livescores","sportmonks_football_get_latest_coaches","sportmonks_football_get_latest_fixtures","sportmonks_football_get_latest_livescores","sportmonks_football_get_latest_players","sportmonks_football_get_latest_totw","sportmonks_football_get_latest_transfers","sportmonks_football_get_league","sportmonks_football_get_leagues","sportmonks_football_get_leagues_by_country","sportmonks_football_get_leagues_by_date","sportmonks_football_get_leagues_by_team","sportmonks_football_get_live_leagues","sportmonks_football_get_live_probabilities","sportmonks_football_get_live_probabilities_by_fixture","sportmonks_football_get_live_standings_by_league","sportmonks_football_get_livescores","sportmonks_football_get_match_facts","sportmonks_football_get_match_facts_by_date_range","sportmonks_football_get_match_facts_by_fixture","sportmonks_football_get_match_facts_by_league","sportmonks_football_get_past_fixtures_by_tv_station","sportmonks_football_get_player","sportmonks_football_get_players_by_country","sportmonks_football_get_postmatch_news","sportmonks_football_get_postmatch_news_by_season","sportmonks_football_get_predictability_by_league","sportmonks_football_get_prematch_news","sportmonks_football_get_prematch_news_by_season","sportmonks_football_get_prematch_news_upcoming","sportmonks_football_get_probabilities","sportmonks_football_get_probabilities_by_fixture","sportmonks_football_get_referee","sportmonks_football_get_referees","sportmonks_football_get_referees_by_country","sportmonks_football_get_referees_by_season","sportmonks_football_get_rivals_by_team","sportmonks_football_get_round","sportmonks_football_get_round_statistics","sportmonks_football_get_rounds","sportmonks_football_get_rounds_by_season","sportmonks_football_get_schedules_by_season","sportmonks_football_get_schedules_by_season_and_team","sportmonks_football_get_schedules_by_team","sportmonks_football_get_season","sportmonks_football_get_seasons","sportmonks_football_get_seasons_by_team","sportmonks_football_get_stage","sportmonks_football_get_stage_statistics","sportmonks_football_get_stages","sportmonks_football_get_stages_by_season","sportmonks_football_get_standing_corrections_by_season","sportmonks_football_get_standings","sportmonks_football_get_standings_by_round","sportmonks_football_get_standings_by_season","sportmonks_football_get_state","sportmonks_football_get_states","sportmonks_football_get_team","sportmonks_football_get_team_rankings","sportmonks_football_get_team_rankings_by_date","sportmonks_football_get_team_rankings_by_team","sportmonks_football_get_team_squad","sportmonks_football_get_team_squad_by_season","sportmonks_football_get_teams_by_country","sportmonks_football_get_teams_by_season","sportmonks_football_get_topscorers_by_season","sportmonks_football_get_topscorers_by_stage","sportmonks_football_get_totw","sportmonks_football_get_totw_by_round","sportmonks_football_get_transfer","sportmonks_football_get_transfer_rumour","sportmonks_football_get_transfer_rumours_between_dates","sportmonks_football_get_transfer_rumours_by_player","sportmonks_football_get_transfer_rumours_by_team","sportmonks_football_get_transfers_between_dates","sportmonks_football_get_transfers_by_player","sportmonks_football_get_transfers_by_team","sportmonks_football_get_tv_station","sportmonks_football_get_tv_stations","sportmonks_football_get_tv_stations_by_fixture","sportmonks_football_get_upcoming_fixtures_by_market","sportmonks_football_get_upcoming_fixtures_by_tv_station","sportmonks_football_get_value_bets","sportmonks_football_get_value_bets_by_fixture","sportmonks_football_get_venue","sportmonks_football_get_venues","sportmonks_football_get_venues_by_season","sportmonks_football_search_coaches","sportmonks_football_search_fixtures","sportmonks_football_search_leagues","sportmonks_football_search_players","sportmonks_football_search_referees","sportmonks_football_search_rounds","sportmonks_football_search_seasons","sportmonks_football_search_stages","sportmonks_football_search_teams","sportmonks_football_search_venues","sportmonks_motorsport_get_all_fixtures","sportmonks_motorsport_get_current_leagues_by_team","sportmonks_motorsport_get_driver","sportmonks_motorsport_get_driver_standings","sportmonks_motorsport_get_driver_standings_by_season","sportmonks_motorsport_get_drivers","sportmonks_motorsport_get_drivers_by_country","sportmonks_motorsport_get_drivers_by_season","sportmonks_motorsport_get_fixture","sportmonks_motorsport_get_fixtures_by_date","sportmonks_motorsport_get_fixtures_by_date_range","sportmonks_motorsport_get_fixtures_by_ids","sportmonks_motorsport_get_laps_by_fixture","sportmonks_motorsport_get_laps_by_fixture_and_driver","sportmonks_motorsport_get_laps_by_fixture_and_lap","sportmonks_motorsport_get_latest_laps_by_fixture","sportmonks_motorsport_get_latest_pitstops_by_fixture","sportmonks_motorsport_get_latest_stints_by_fixture","sportmonks_motorsport_get_latest_updated_drivers","sportmonks_motorsport_get_latest_updated_fixtures","sportmonks_motorsport_get_league","sportmonks_motorsport_get_leagues","sportmonks_motorsport_get_leagues_by_country","sportmonks_motorsport_get_leagues_by_date","sportmonks_motorsport_get_leagues_by_live","sportmonks_motorsport_get_leagues_by_team","sportmonks_motorsport_get_livescores","sportmonks_motorsport_get_pitstops_by_fixture","sportmonks_motorsport_get_pitstops_by_fixture_and_driver","sportmonks_motorsport_get_pitstops_by_fixture_and_lap","sportmonks_motorsport_get_race_results_by_season_and_driver","sportmonks_motorsport_get_race_results_by_season_and_team","sportmonks_motorsport_get_schedules_by_season","sportmonks_motorsport_get_season","sportmonks_motorsport_get_seasons","sportmonks_motorsport_get_stage","sportmonks_motorsport_get_stages","sportmonks_motorsport_get_stages_by_season","sportmonks_motorsport_get_state","sportmonks_motorsport_get_states","sportmonks_motorsport_get_stints_by_fixture","sportmonks_motorsport_get_stints_by_fixture_and_driver","sportmonks_motorsport_get_stints_by_fixture_and_stint","sportmonks_motorsport_get_team","sportmonks_motorsport_get_team_standings","sportmonks_motorsport_get_team_standings_by_season","sportmonks_motorsport_get_teams","sportmonks_motorsport_get_teams_by_country","sportmonks_motorsport_get_teams_by_season","sportmonks_motorsport_get_venue","sportmonks_motorsport_get_venues","sportmonks_motorsport_get_venues_by_season","sportmonks_motorsport_search_drivers","sportmonks_motorsport_search_leagues","sportmonks_motorsport_search_stages","sportmonks_motorsport_search_teams","sportmonks_motorsport_search_venues","sportmonks_odds_get_all_historical_odds","sportmonks_odds_get_all_inplay_odds","sportmonks_odds_get_all_pre_match_odds","sportmonks_odds_get_all_premium_odds","sportmonks_odds_get_bookmaker","sportmonks_odds_get_bookmaker_event_ids_by_fixture","sportmonks_odds_get_bookmakers","sportmonks_odds_get_bookmakers_by_fixture","sportmonks_odds_get_inplay_odds_by_fixture","sportmonks_odds_get_inplay_odds_by_fixture_and_bookmaker","sportmonks_odds_get_inplay_odds_by_fixture_and_market","sportmonks_odds_get_last_updated_inplay_odds","sportmonks_odds_get_last_updated_pre_match_odds","sportmonks_odds_get_market","sportmonks_odds_get_markets","sportmonks_odds_get_pre_match_odds_by_fixture","sportmonks_odds_get_pre_match_odds_by_fixture_and_bookmaker","sportmonks_odds_get_pre_match_odds_by_fixture_and_market","sportmonks_odds_get_premium_odds_by_fixture","sportmonks_odds_get_premium_odds_by_fixture_and_bookmaker","sportmonks_odds_get_premium_odds_by_fixture_and_market","sportmonks_odds_get_updated_historical_odds_between","sportmonks_odds_get_updated_premium_odds_between","sportmonks_odds_search_bookmakers","sportmonks_odds_search_markets","spotify_add_playlist_cover","spotify_add_to_queue","spotify_add_tracks_to_playlist","spotify_check_following","spotify_check_playlist_followers","spotify_check_saved_albums","spotify_check_saved_audiobooks","spotify_check_saved_episodes","spotify_check_saved_shows","spotify_check_saved_tracks","spotify_create_playlist","spotify_follow_artists","spotify_follow_playlist","spotify_get_album","spotify_get_album_tracks","spotify_get_albums","spotify_get_artist","spotify_get_artist_albums","spotify_get_artist_top_tracks","spotify_get_artists","spotify_get_audiobook","spotify_get_audiobook_chapters","spotify_get_audiobooks","spotify_get_categories","spotify_get_current_user","spotify_get_currently_playing","spotify_get_devices","spotify_get_episode","spotify_get_episodes","spotify_get_followed_artists","spotify_get_markets","spotify_get_new_releases","spotify_get_playback_state","spotify_get_playlist","spotify_get_playlist_cover","spotify_get_playlist_tracks","spotify_get_queue","spotify_get_recently_played","spotify_get_saved_albums","spotify_get_saved_audiobooks","spotify_get_saved_episodes","spotify_get_saved_shows","spotify_get_saved_tracks","spotify_get_show","spotify_get_show_episodes","spotify_get_shows","spotify_get_top_artists","spotify_get_top_tracks","spotify_get_track","spotify_get_tracks","spotify_get_user_playlists","spotify_get_user_profile","spotify_pause","spotify_play","spotify_remove_saved_albums","spotify_remove_saved_audiobooks","spotify_remove_saved_episodes","spotify_remove_saved_shows","spotify_remove_saved_tracks","spotify_remove_tracks_from_playlist","spotify_reorder_playlist_items","spotify_replace_playlist_items","spotify_save_albums","spotify_save_audiobooks","spotify_save_episodes","spotify_save_shows","spotify_save_tracks","spotify_search","spotify_seek","spotify_set_repeat","spotify_set_shuffle","spotify_set_volume","spotify_skip_next","spotify_skip_previous","spotify_transfer_playback","spotify_unfollow_artists","spotify_unfollow_playlist","spotify_update_playlist","sqs_send","square_batch_retrieve_inventory_counts","square_cancel_invoice","square_cancel_payment","square_complete_payment","square_create_catalog_image","square_create_customer","square_create_invoice","square_create_order","square_create_payment","square_delete_catalog_object","square_delete_customer","square_delete_invoice","square_get_catalog_object","square_get_customer","square_get_invoice","square_get_location","square_get_order","square_get_payment","square_get_refund","square_list_catalog","square_list_customers","square_list_invoices","square_list_locations","square_list_payments","square_list_refunds","square_pay_order","square_publish_invoice","square_refund_payment","square_search_catalog_objects","square_search_customers","square_search_invoices","square_search_orders","square_update_customer","square_upsert_catalog_object","ssh_check_command_exists","ssh_check_file_exists","ssh_create_directory","ssh_delete_file","ssh_download_file","ssh_execute_command","ssh_execute_script","ssh_get_system_info","ssh_list_directory","ssh_move_rename","ssh_read_file_content","ssh_upload_file","ssh_write_file_content","stagehand_agent","stagehand_extract","stripe_cancel_payment_intent","stripe_cancel_subscription","stripe_capture_charge","stripe_capture_payment_intent","stripe_confirm_payment_intent","stripe_create_charge","stripe_create_customer","stripe_create_invoice","stripe_create_payment_intent","stripe_create_price","stripe_create_product","stripe_create_subscription","stripe_delete_customer","stripe_delete_invoice","stripe_delete_product","stripe_finalize_invoice","stripe_list_charges","stripe_list_customers","stripe_list_events","stripe_list_invoices","stripe_list_payment_intents","stripe_list_prices","stripe_list_products","stripe_list_subscriptions","stripe_pay_invoice","stripe_resume_subscription","stripe_retrieve_charge","stripe_retrieve_customer","stripe_retrieve_event","stripe_retrieve_invoice","stripe_retrieve_payment_intent","stripe_retrieve_price","stripe_retrieve_product","stripe_retrieve_subscription","stripe_search_charges","stripe_search_customers","stripe_search_invoices","stripe_search_payment_intents","stripe_search_prices","stripe_search_products","stripe_search_subscriptions","stripe_send_invoice","stripe_update_charge","stripe_update_customer","stripe_update_invoice","stripe_update_payment_intent","stripe_update_price","stripe_update_product","stripe_update_subscription","stripe_void_invoice","sts_assume_role","sts_assume_role_with_saml","sts_assume_role_with_web_identity","sts_get_access_key_info","sts_get_caller_identity","sts_get_session_token","stt_assemblyai","stt_assemblyai_v2","stt_deepgram","stt_deepgram_v2","stt_elevenlabs","stt_elevenlabs_v2","stt_gemini","stt_gemini_v2","stt_whisper","stt_whisper_v2","supabase_count","supabase_delete","supabase_get_row","supabase_insert","supabase_introspect","supabase_invoke_function","supabase_query","supabase_rpc","supabase_storage_copy","supabase_storage_create_bucket","supabase_storage_create_signed_upload_url","supabase_storage_create_signed_url","supabase_storage_delete","supabase_storage_delete_bucket","supabase_storage_download","supabase_storage_empty_bucket","supabase_storage_get_public_url","supabase_storage_list","supabase_storage_list_buckets","supabase_storage_move","supabase_storage_update_bucket","supabase_storage_upload","supabase_text_search","supabase_update","supabase_upsert","supabase_vector_search","table_batch_insert_rows","table_create","table_delete_row","table_delete_rows_by_filter","table_get_row","table_get_schema","table_insert_row","table_list","table_query_rows","table_query_rows_v2","table_update_row","table_update_rows_by_filter","table_upsert_row","tailscale_authorize_device","tailscale_create_auth_key","tailscale_delete_auth_key","tailscale_delete_device","tailscale_delete_user","tailscale_expire_device_key","tailscale_get_acl","tailscale_get_auth_key","tailscale_get_device","tailscale_get_device_routes","tailscale_get_dns_preferences","tailscale_get_dns_searchpaths","tailscale_list_auth_keys","tailscale_list_devices","tailscale_list_dns_nameservers","tailscale_list_users","tailscale_set_acl","tailscale_set_device_routes","tailscale_set_device_tags","tailscale_set_dns_nameservers","tailscale_set_dns_preferences","tailscale_set_dns_searchpaths","tailscale_suspend_user","tailscale_update_device_key","tavily_crawl","tavily_extract","tavily_map","tavily_search","telegram_copy_message","telegram_delete_message","telegram_edit_message_text","telegram_forward_message","telegram_get_chat","telegram_get_chat_member","telegram_message","telegram_pin_message","telegram_send_animation","telegram_send_audio","telegram_send_chat_action","telegram_send_contact","telegram_send_document","telegram_send_location","telegram_send_photo","telegram_send_poll","telegram_send_video","telegram_set_message_reaction","telegram_unpin_message","temporal_cancel_workflow","temporal_count_workflows","temporal_create_schedule","temporal_delete_schedule","temporal_describe_schedule","temporal_describe_task_queue","temporal_describe_workflow","temporal_get_workflow_history","temporal_list_schedules","temporal_list_workflows","temporal_pause_schedule","temporal_query_workflow","temporal_reset_workflow","temporal_signal_with_start","temporal_signal_workflow","temporal_start_workflow","temporal_terminate_workflow","temporal_trigger_schedule","temporal_unpause_schedule","temporal_update_workflow","textract_analyze_expense","textract_analyze_id","textract_parser","textract_parser_v2","thinking_tool","thrive_add_audience_managers","thrive_add_audience_members","thrive_add_user_tags","thrive_create_assignment","thrive_create_audience","thrive_create_completion","thrive_create_user","thrive_delete_assignment","thrive_delete_audience","thrive_delete_user","thrive_get_activity","thrive_get_assignment","thrive_get_audience","thrive_get_completion","thrive_get_content","thrive_get_cpd_category","thrive_get_cpd_entry","thrive_get_cpd_requirement","thrive_get_enrolment","thrive_get_skill_levels","thrive_get_tag","thrive_get_user_by_id","thrive_get_user_by_ref","thrive_list_assignments","thrive_list_audience_managers","thrive_list_audience_members","thrive_list_audiences","thrive_list_completions","thrive_list_enrolments","thrive_list_tags","thrive_query_activities","thrive_query_content","thrive_query_cpd_categories","thrive_query_cpd_entries","thrive_query_cpd_requirements","thrive_query_cpd_user_summaries","thrive_remove_audience_manager","thrive_remove_audience_member","thrive_remove_user_tags","thrive_replace_audience_managers","thrive_replace_audience_members","thrive_search_users","thrive_suspend_user","thrive_update_assignment","thrive_update_audience","thrive_update_user","thrive_update_user_skills","tiktok_get_post_status","tiktok_get_user","tiktok_list_videos","tiktok_query_videos","tiktok_upload_video_draft","tinybird_append_datasource","tinybird_delete_datasource_rows","tinybird_events","tinybird_get_job","tinybird_query","tinybird_query_pipe","tinybird_truncate_datasource","tinyfish_cancel_run","tinyfish_fetch","tinyfish_get_run","tinyfish_list_runs","tinyfish_list_vault_items","tinyfish_run","tinyfish_run_async","tinyfish_search","trello_add_checklist","trello_add_checklist_item","trello_add_comment","trello_add_label","trello_add_member","trello_create_board","trello_create_card","trello_create_list","trello_delete_card","trello_get_actions","trello_get_board","trello_get_card","trello_list_cards","trello_list_lists","trello_list_members","trello_remove_label","trello_remove_member","trello_search","trello_update_card","trello_update_checklist_item","trello_update_list","trigger_dev_activate_schedule","trigger_dev_add_run_tags","trigger_dev_batch_trigger_task","trigger_dev_cancel_run","trigger_dev_complete_waitpoint_token","trigger_dev_create_env_var","trigger_dev_create_schedule","trigger_dev_create_waitpoint_token","trigger_dev_deactivate_schedule","trigger_dev_delete_env_var","trigger_dev_delete_schedule","trigger_dev_execute_query","trigger_dev_get_batch","trigger_dev_get_batch_results","trigger_dev_get_deployment","trigger_dev_get_env_var","trigger_dev_get_latest_deployment","trigger_dev_get_query_schema","trigger_dev_get_queue","trigger_dev_get_run","trigger_dev_get_run_events","trigger_dev_get_run_result","trigger_dev_get_run_trace","trigger_dev_get_schedule","trigger_dev_get_waitpoint_token","trigger_dev_import_env_vars","trigger_dev_list_deployments","trigger_dev_list_env_vars","trigger_dev_list_queues","trigger_dev_list_runs","trigger_dev_list_schedules","trigger_dev_list_timezones","trigger_dev_list_waitpoint_tokens","trigger_dev_override_queue_concurrency","trigger_dev_pause_queue","trigger_dev_promote_deployment","trigger_dev_replay_run","trigger_dev_reschedule_run","trigger_dev_reset_queue_concurrency","trigger_dev_resume_queue","trigger_dev_trigger_task","trigger_dev_update_env_var","trigger_dev_update_run_metadata","trigger_dev_update_schedule","tts_azure","tts_cartesia","tts_deepgram","tts_elevenlabs","tts_google","tts_openai","tts_playht","twilio_send_sms","twilio_voice_get_recording","twilio_voice_list_calls","twilio_voice_make_call","typeform_create_form","typeform_delete_form","typeform_files","typeform_get_form","typeform_insights","typeform_list_forms","typeform_responses","typeform_update_form","upstash_redis_command","upstash_redis_delete","upstash_redis_exists","upstash_redis_expire","upstash_redis_get","upstash_redis_hget","upstash_redis_hgetall","upstash_redis_hset","upstash_redis_incr","upstash_redis_incrby","upstash_redis_keys","upstash_redis_lpush","upstash_redis_lrange","upstash_redis_set","upstash_redis_setnx","upstash_redis_ttl","uptimerobot_create_alert_contact","uptimerobot_create_maintenance_window","uptimerobot_create_monitor","uptimerobot_create_psp","uptimerobot_delete_alert_contact","uptimerobot_delete_maintenance_window","uptimerobot_delete_monitor","uptimerobot_delete_psp","uptimerobot_get_account","uptimerobot_get_alert_contact","uptimerobot_get_incident","uptimerobot_get_maintenance_window","uptimerobot_get_monitor","uptimerobot_get_psp","uptimerobot_list_alert_contacts","uptimerobot_list_incidents","uptimerobot_list_maintenance_windows","uptimerobot_list_monitors","uptimerobot_list_psps","uptimerobot_pause_monitor","uptimerobot_start_monitor","uptimerobot_update_maintenance_window","uptimerobot_update_monitor","uptimerobot_update_psp","vanta_download_document_file","vanta_get_control","vanta_get_document","vanta_get_framework","vanta_get_person","vanta_get_policy","vanta_get_risk_scenario","vanta_get_test","vanta_get_vendor","vanta_get_vulnerable_asset","vanta_list_control_documents","vanta_list_control_tests","vanta_list_controls","vanta_list_document_uploads","vanta_list_documents","vanta_list_framework_controls","vanta_list_frameworks","vanta_list_monitored_computers","vanta_list_people","vanta_list_policies","vanta_list_risk_scenarios","vanta_list_test_entities","vanta_list_tests","vanta_list_vendors","vanta_list_vulnerabilities","vanta_list_vulnerability_remediations","vanta_list_vulnerable_assets","vanta_submit_document","vanta_upload_document_file","vercel_add_domain","vercel_add_project_domain","vercel_cancel_deployment","vercel_create_alias","vercel_create_check","vercel_create_deployment","vercel_create_dns_record","vercel_create_edge_config","vercel_create_env_var","vercel_create_project","vercel_create_webhook","vercel_delete_alias","vercel_delete_deployment","vercel_delete_dns_record","vercel_delete_domain","vercel_delete_edge_config","vercel_delete_env_var","vercel_delete_project","vercel_delete_webhook","vercel_get_alias","vercel_get_check","vercel_get_deployment","vercel_get_deployment_events","vercel_get_domain","vercel_get_domain_config","vercel_get_edge_config","vercel_get_edge_config_items","vercel_get_env_vars","vercel_get_project","vercel_get_team","vercel_get_user","vercel_get_webhook","vercel_list_aliases","vercel_list_checks","vercel_list_deployment_files","vercel_list_deployments","vercel_list_dns_records","vercel_list_domains","vercel_list_edge_configs","vercel_list_project_domains","vercel_list_projects","vercel_list_team_members","vercel_list_teams","vercel_list_webhooks","vercel_pause_project","vercel_promote_deployment","vercel_remove_project_domain","vercel_rerequest_check","vercel_unpause_project","vercel_update_check","vercel_update_dns_record","vercel_update_edge_config_items","vercel_update_env_var","vercel_update_project","vercel_update_project_domain","vercel_verify_project_domain","video_falai","video_luma","video_minimax","video_runway","video_veo","vision_tool","vision_tool_v2","wealthbox_read_contact","wealthbox_read_note","wealthbox_read_task","wealthbox_write_contact","wealthbox_write_note","wealthbox_write_task","webflow_create_item","webflow_delete_item","webflow_get_item","webflow_list_items","webflow_update_item","webhook_request","whatsapp_get_media","whatsapp_mark_read","whatsapp_send_interactive","whatsapp_send_media","whatsapp_send_message","whatsapp_send_reaction","whatsapp_send_template","whatsapp_upload_media","wikipedia_content","wikipedia_random","wikipedia_search","wikipedia_summary","windchill_check_in_document","windchill_check_in_documents","windchill_check_out_document","windchill_check_out_documents","windchill_create_document","windchill_create_documents","windchill_delete_document","windchill_delete_documents","windchill_download_attachment","windchill_download_primary_content","windchill_get_document","windchill_get_document_structure","windchill_get_primary_content","windchill_get_valid_state_transitions","windchill_list_attachments","windchill_list_documents","windchill_revise_document","windchill_revise_documents","windchill_set_lifecycle_state","windchill_undo_check_out_document","windchill_undo_check_out_documents","windchill_update_common_properties","windchill_update_document","windchill_update_document_security_labels","windchill_update_documents","windchill_upload_attachments","windchill_upload_primary_content","wiza_company_enrichment","wiza_get_credits","wiza_individual_reveal","wiza_prospect_search","wordpress_create_category","wordpress_create_comment","wordpress_create_page","wordpress_create_post","wordpress_create_tag","wordpress_delete_category","wordpress_delete_comment","wordpress_delete_media","wordpress_delete_page","wordpress_delete_post","wordpress_delete_tag","wordpress_get_category","wordpress_get_current_user","wordpress_get_media","wordpress_get_page","wordpress_get_post","wordpress_get_tag","wordpress_get_user","wordpress_list_categories","wordpress_list_comments","wordpress_list_media","wordpress_list_pages","wordpress_list_posts","wordpress_list_tags","wordpress_list_users","wordpress_search_content","wordpress_update_category","wordpress_update_comment","wordpress_update_page","wordpress_update_post","wordpress_update_tag","wordpress_upload_media","workday_assign_onboarding","workday_change_job","workday_create_prehire","workday_get_compensation","workday_get_organizations","workday_get_worker","workday_hire_employee","workday_list_workers","workday_terminate_worker","workday_update_worker","workflow_executor","x_create_bookmark","x_create_tweet","x_delete_bookmark","x_delete_tweet","x_get_blocking","x_get_bookmarks","x_get_followers","x_get_following","x_get_liked_tweets","x_get_liking_users","x_get_me","x_get_personalized_trends","x_get_quote_tweets","x_get_retweeted_by","x_get_trends_by_woeid","x_get_tweets_by_ids","x_get_usage","x_get_user_mentions","x_get_user_timeline","x_get_user_tweets","x_hide_reply","x_manage_block","x_manage_follow","x_manage_like","x_manage_mute","x_manage_retweet","x_read","x_search","x_search_tweets","x_search_users","x_user","x_write","youtube_channel_info","youtube_channel_playlists","youtube_channel_videos","youtube_comments","youtube_playlist_items","youtube_search","youtube_trending","youtube_video_categories","youtube_video_details","zendesk_autocomplete_organizations","zendesk_create_organization","zendesk_create_organizations_bulk","zendesk_create_ticket","zendesk_create_tickets_bulk","zendesk_create_user","zendesk_create_users_bulk","zendesk_delete_organization","zendesk_delete_ticket","zendesk_delete_user","zendesk_get_current_user","zendesk_get_organization","zendesk_get_organizations","zendesk_get_ticket","zendesk_get_tickets","zendesk_get_user","zendesk_get_users","zendesk_merge_tickets","zendesk_search","zendesk_search_count","zendesk_search_users","zendesk_update_organization","zendesk_update_ticket","zendesk_update_tickets_bulk","zendesk_update_user","zendesk_update_users_bulk","zep_add_messages","zep_add_user","zep_create_thread","zep_delete_thread","zep_get_context","zep_get_messages","zep_get_threads","zep_get_user","zep_get_user_threads","zerobounce_get_credits","zerobounce_verify_email","zoho_desk_add_comment","zoho_desk_get_attachment","zoho_desk_get_contact","zoho_desk_get_thread","zoho_desk_get_ticket","zoho_desk_list_comments","zoho_desk_list_organizations","zoho_desk_list_threads","zoho_desk_list_tickets","zoho_desk_update_ticket","zoom_create_meeting","zoom_delete_meeting","zoom_delete_recording","zoom_get_meeting","zoom_get_meeting_invitation","zoom_get_meeting_recordings","zoom_list_meetings","zoom_list_past_participants","zoom_list_recordings","zoom_update_meeting","zoominfo_enrich_companies","zoominfo_enrich_contacts","zoominfo_search_companies","zoominfo_search_contacts","zoominfo_search_intent","zoominfo_search_news"]' ) export default toolIds diff --git a/apps/sim/tools/generated/tool-metadata.ts b/apps/sim/tools/generated/tool-metadata.ts index 908d3797bc1..db31207aff5 100644 --- a/apps/sim/tools/generated/tool-metadata.ts +++ b/apps/sim/tools/generated/tool-metadata.ts @@ -3,7 +3,7 @@ /** Serializable metadata for every built-in tool, keyed by tool id. */ const toolMetadata: Record = JSON.parse( - '{"a2a_cancel_task":{"id":"a2a_cancel_task","name":"A2A Cancel Task","description":"Request cancellation of an in-progress A2A task.","version":"1.0.0","params":{"agentUrl":{"type":"string","required":true,"visibility":"user-only","description":"The A2A agent endpoint URL"},"taskId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The task ID to cancel"},"apiKey":{"type":"string","required":false,"visibility":"user-only","description":"API key for authentication (if required)"}},"hostedApiKey":"none"},"a2a_get_agent_card":{"id":"a2a_get_agent_card","name":"A2A Get Agent Card","description":"Fetch the Agent Card (discovery document) for an external A2A agent.","version":"1.0.0","params":{"agentUrl":{"type":"string","required":true,"visibility":"user-only","description":"The A2A agent endpoint URL"},"apiKey":{"type":"string","required":false,"visibility":"user-only","description":"API key for authentication (if required)"}},"hostedApiKey":"none"},"a2a_get_task":{"id":"a2a_get_task","name":"A2A Get Task","description":"Retrieve the current state and result of an A2A task.","version":"1.0.0","params":{"agentUrl":{"type":"string","required":true,"visibility":"user-only","description":"The A2A agent endpoint URL"},"taskId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The task ID to retrieve"},"historyLength":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of history messages to include"},"apiKey":{"type":"string","required":false,"visibility":"user-only","description":"API key for authentication (if required)"}},"hostedApiKey":"none"},"a2a_send_message":{"id":"a2a_send_message","name":"A2A Send Message","description":"Send a message to an external A2A agent and return its response.","version":"1.0.0","params":{"agentUrl":{"type":"string","required":true,"visibility":"user-only","description":"The A2A agent endpoint URL"},"message":{"type":"string","required":true,"visibility":"user-or-llm","description":"The message text to send"},"data":{"type":"json","required":false,"visibility":"user-or-llm","description":"Optional structured JSON data to attach"},"files":{"type":"json","required":false,"visibility":"user-or-llm","description":"Optional files to attach"},"taskId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Existing task ID to continue"},"contextId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Conversation context ID to continue"},"apiKey":{"type":"string","required":false,"visibility":"user-only","description":"API key for authentication (if required)"}},"hostedApiKey":"none"},"affinity_batch_update_entity_fields":{"id":"affinity_batch_update_entity_fields","name":"Affinity Batch Update Entity Fields","description":"Write up to 100 non-list field values on one company or person in a single request.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to write the fields on: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"updates":{"type":"json","required":true,"visibility":"user-or-llm","description":"Up to 100 field updates as [{\\"id\\":\\"\\",\\"value\\":{\\"type\\":\\"…\\",\\"data\\":…}}], using the same value shapes as a single field update"}},"hostedApiKey":"none"},"affinity_batch_update_list_entry_fields":{"id":"affinity_batch_update_list_entry_fields","name":"Affinity Batch Update List Entry Fields","description":"Write up to 100 field values on one list row in a single request. Requires the \\"Export data from Lists\\" permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"listEntryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list entry ID"},"updates":{"type":"json","required":true,"visibility":"user-or-llm","description":"Up to 100 field updates as [{\\"id\\":\\"\\",\\"value\\":{\\"type\\":\\"…\\",\\"data\\":…}}], using the same value shapes as a single field update"}},"hostedApiKey":"none"},"affinity_create_list":{"id":"affinity_create_list","name":"Affinity Create List","description":"Create a list. Its type fixes which entities it can hold, and the API key holder becomes its creator and owner.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the new list"},"type":{"type":"string","required":true,"visibility":"user-or-llm","description":"Entity kind the list holds: company, opportunity, or person"},"isPublic":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Whether everyone in the organization can see the list"}},"hostedApiKey":"none"},"affinity_create_list_field_dropdown_option":{"id":"affinity_create_list_field_dropdown_option","name":"Affinity Create List Field Dropdown Option","description":"Add a selectable option to a dropdown field on a list. A ranked or status option also needs a rank and a color.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown field ID on that list"},"type":{"type":"string","required":true,"visibility":"user-or-llm","description":"Kind of option to create, matching the field. dropdown takes only a label; ranked-dropdown also requires rank and color; status-dropdown additionally requires a status category. Sending a field the kind does not accept is rejected"},"text":{"type":"string","required":true,"visibility":"user-or-llm","description":"The option label"},"rank":{"type":"number","required":false,"visibility":"user-or-llm","description":"Sort order. Required on a ranked-dropdown or status-dropdown option"},"color":{"type":"string","required":false,"visibility":"user-or-llm","description":"Option color: white, gray, blue, green, purple, orange, or red. Required on a ranked-dropdown or status-dropdown option"},"statusCategory":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pipeline meaning of the option: open, won, lost, or on-hold. Status-dropdown options only"},"winRate":{"type":"number","required":false,"visibility":"user-or-llm","description":"Expected win rate of the status. Status-dropdown options only"}},"hostedApiKey":"none"},"affinity_create_merge":{"id":"affinity_create_merge","name":"Affinity Create Merge","description":"Fold a duplicate company or person into the record you are keeping. The merge runs asynchronously — poll the returned task to see it finish. Requires the \\"Manage duplicates\\" permission and an admin role.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"What to merge: companies or persons"},"primaryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to keep"},"duplicateId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the duplicate record to fold in"}},"hostedApiKey":"none"},"affinity_create_note":{"id":"affinity_create_note","name":"Affinity Create Note","description":"Write a note — attached to companies, persons, and opportunities, anchored to a meeting, call, or chat message, or posted as a reply to an existing note.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"type":{"type":"string","required":true,"visibility":"user-or-llm","description":"Note shape: entities to attach it to records, interaction to anchor it to a meeting, call, or chat message, or user-reply to reply to a note"},"html":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note body as HTML"},"companyIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Companies to attach the note to, e.g. [1, 2]. Not used on a reply"},"personIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Persons to attach the note to, e.g. [1, 2]. Not used on a reply"},"opportunityIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Opportunities to attach the note to, e.g. [1, 2]. Not used on a reply"},"interactionId":{"type":"string","required":false,"visibility":"user-or-llm","description":"The interaction to anchor the note to. Required for an interaction note"},"interactionType":{"type":"string","required":false,"visibility":"user-or-llm","description":"Kind of the anchoring interaction: meeting, call, or chat-message. Required for an interaction note"},"parentId":{"type":"string","required":false,"visibility":"user-or-llm","description":"The note being replied to. Required for a user-reply note"},"creatorId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Attribute the note to another internal person. Defaults to the API key holder"},"createdAt":{"type":"string","required":false,"visibility":"user-or-llm","description":"Backdate the note to this ISO 8601 timestamp"}},"hostedApiKey":"none"},"affinity_create_reminder":{"id":"affinity_create_reminder","name":"Affinity Create Reminder","description":"Create a reminder on one company, person, or opportunity. A recurring reminder resets whenever the chosen signal happens instead of firing once.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"type":{"type":"string","required":true,"visibility":"user-or-llm","description":"one-time to fire once, or recurring to reset on a signal"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"What the reminder is about: company, person, or opportunity"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company, person, or opportunity"},"dueDate":{"type":"string","required":false,"visibility":"user-or-llm","description":"When the reminder is due, as an ISO 8601 timestamp. Required for a one-time reminder; on a recurring one Affinity computes it from the period when omitted"},"content":{"type":"string","required":false,"visibility":"user-or-llm","description":"What the reminder says"},"ownerId":{"type":"string","required":true,"visibility":"user-or-llm","description":"User the reminder is assigned to. Must be an internal user. The API key holder is recorded as the creator, which is a separate field"},"resetTrigger":{"type":"string","required":false,"visibility":"user-or-llm","description":"What restarts a recurring reminder: interaction, email, or event. Required when the type is recurring"},"periodDays":{"type":"number","required":false,"visibility":"user-or-llm","description":"Days between firings of a recurring reminder. Required when the type is recurring"}},"hostedApiKey":"none"},"affinity_delete_list_field_dropdown_option":{"id":"affinity_delete_list_field_dropdown_option","name":"Affinity Delete List Field Dropdown Option","description":"Permanently delete a dropdown option on a list field. Every list entry currently set to it is cleared, and those values cannot be recovered.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown field ID on that list"},"dropdownOptionId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown option ID to delete"}},"hostedApiKey":"none"},"affinity_delete_note":{"id":"affinity_delete_note","name":"Affinity Delete Note","description":"Delete a note you created. Deleting a root note also deletes its replies; deleting a reply removes only that reply.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID to delete"}},"hostedApiKey":"none"},"affinity_get_company":{"id":"affinity_get_company","name":"Affinity Get Company","description":"Look up one company by ID. Field data is returned only for the Field IDs or Field Types asked for.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"companyId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The company ID"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, or relationship-intelligence. Mutually exclusive with Field IDs"}},"hostedApiKey":"none"},"affinity_get_current_user":{"id":"affinity_get_current_user","name":"Affinity Get Current User","description":"Verify an Affinity API key and return the tenant, the user behind the key, and the scopes the grant carries.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"}},"hostedApiKey":"none"},"affinity_get_entity_field_value":{"id":"affinity_get_entity_field_value","name":"Affinity Get Entity Field Value","description":"Read one non-list field value from a company or person.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to read the field from: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The field ID to read"}},"hostedApiKey":"none"},"affinity_get_list":{"id":"affinity_get_list","name":"Affinity Get List","description":"Read one list — its name, type, owner, and privacy setting.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"}},"hostedApiKey":"none"},"affinity_get_list_entry":{"id":"affinity_get_list_entry","name":"Affinity Get List Entry","description":"Read one row of a list with its entity. Field data is returned only for the Field IDs or Field Types asked for.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"listEntryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list entry ID"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, list, or relationship-intelligence. Mutually exclusive with Field IDs"}},"hostedApiKey":"none"},"affinity_get_list_entry_field":{"id":"affinity_get_list_entry_field","name":"Affinity Get List Entry Field","description":"Read one field value on a list row.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"listEntryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list entry ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The field ID to read"}},"hostedApiKey":"none"},"affinity_get_list_field_dropdown_option":{"id":"affinity_get_list_field_dropdown_option","name":"Affinity Get List Field Dropdown Option","description":"Read one dropdown option on a list field.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown field ID on that list"},"dropdownOptionId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown option ID"}},"hostedApiKey":"none"},"affinity_get_merge":{"id":"affinity_get_merge","name":"Affinity Get Merge","description":"Read the status of one company or person merge, including why it failed if it did.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which merge to read: companies or persons"},"mergeId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The merge ID"}},"hostedApiKey":"none"},"affinity_get_merge_task":{"id":"affinity_get_merge_task","name":"Affinity Get Merge Task","description":"Read one merge task and how its merges are progressing. Poll this after starting a merge.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which merge task to read: companies or persons"},"taskId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The merge task ID"}},"hostedApiKey":"none"},"affinity_get_note":{"id":"affinity_get_note","name":"Affinity Get Note","description":"Read one note with its body, author, mentions, and attached records.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID"},"includes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Extra properties to return, e.g. [\\"repliesCount\\",\\"personsPreview\\",\\"companiesPreview\\",\\"opportunitiesPreview\\"]. Those four fields are omitted unless requested here"}},"hostedApiKey":"none"},"affinity_get_opportunity":{"id":"affinity_get_opportunity","name":"Affinity Get Opportunity","description":"Read one opportunity and the list it belongs to. Its field data lives on the list entry.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"opportunityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The opportunity ID"}},"hostedApiKey":"none"},"affinity_get_person":{"id":"affinity_get_person","name":"Affinity Get Person","description":"Look up one person by ID. Field data is returned only for the Field IDs or Field Types asked for.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"personId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The person ID"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, or relationship-intelligence. Mutually exclusive with Field IDs"}},"hostedApiKey":"none"},"affinity_get_saved_view":{"id":"affinity_get_saved_view","name":"Affinity Get Saved View","description":"Read one saved view — its name, kind, and creation date.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"viewId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The saved view ID"}},"hostedApiKey":"none"},"affinity_get_transcript":{"id":"affinity_get_transcript","name":"Affinity Get Transcript","description":"Read one transcript with its first 100 fragments. Page the fragments endpoint for a longer meeting.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"transcriptId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The transcript ID"}},"hostedApiKey":"none"},"affinity_get_user":{"id":"affinity_get_user","name":"Affinity Get User","description":"Read one internal user. A user and their person record share the same numeric ID, so a person ID works here.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"userId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The user ID, which is also their person ID"}},"hostedApiKey":"none"},"affinity_list_calls":{"id":"affinity_list_calls","name":"Affinity List Calls","description":"Page through logged calls and their participants. Only calls the API key holder can see are returned.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_chat_messages":{"id":"affinity_list_chat_messages","name":"Affinity List Chat Messages","description":"Page through logged chat messages and their participants. Only messages the API key holder can see are returned.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_companies":{"id":"affinity_list_companies","name":"Affinity List Companies","description":"Page through companies. Companies come back without field data unless Field IDs or Field Types asks for it.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict the page to these company IDs, e.g. [1, 2, 3]"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, or relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_coworker_connections":{"id":"affinity_list_coworker_connections","name":"Affinity List Coworker Connections","description":"Find warm paths into a company through shared work history: who in your Affinity data once worked alongside the people you want to reach. Grouped by target, strongest first.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":true,"visibility":"user-or-llm","description":"Required scope. The only supported filter is target.currentCompany.id, e.g. \\"target.currentCompany.id=123\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of targets to return per page, 1-50. Defaults to 20"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_list_emails":{"id":"affinity_list_emails","name":"Affinity List Emails","description":"Page through email metadata — subject, participants, and timestamps. Affinity never exposes email bodies through the API.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_entity_field_values":{"id":"affinity_list_entity_field_values","name":"Affinity List Entity Field Values","description":"Page through a company\'s or person\'s non-list field values. List fields are not returned here — read those through the list entry.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to read field values from: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict to these field IDs. Mutually exclusive with Field Types"},"types":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict to these field categories: enriched, global, relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 20"}},"hostedApiKey":"none"},"affinity_list_entity_list_entries":{"id":"affinity_list_entity_list_entries","name":"Affinity List Entity List Entries","description":"Page through a company\'s or person\'s rows across every list, each carrying that list\'s field values and when the entity was added.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to look up the rows of: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_entity_lists":{"id":"affinity_list_entity_lists","name":"Affinity List Entity Lists","description":"List every list a company or person appears on that the caller can view.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to look up the lists of: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_entity_notes":{"id":"affinity_list_entity_notes","name":"Affinity List Entity Notes","description":"List the notes relevant to one company, person, or opportunity — directly attached notes plus notes reaching it through its people and meetings.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity the notes hang off: companies, persons, or opportunities"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company, person, or opportunity"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_list_entity_relationships":{"id":"affinity_list_entity_relationships","name":"Affinity List Entity Relationships","description":"List who knows a company or person, scored 0.0 to 1.0 by how much the two actually interact. Strongest first by default.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to look up relationships for: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression. This endpoint filters on interactionScore only, e.g. \\"interactionScore>=0.5\\""},"orderBy":{"type":"json","required":false,"visibility":"user-or-llm","description":"Sort order: [\\"interactionScore\\"] for weakest first, [\\"-interactionScore\\"] for strongest first (the default)"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_list_field_dropdown_options":{"id":"affinity_list_field_dropdown_options","name":"Affinity List Field Dropdown Options","description":"List the selectable options on a dropdown or ranked-dropdown company or person field. Writing such a field needs the option ID, not its text.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which field family the field belongs to: companies or persons"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown or ranked-dropdown field ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_field_metadata":{"id":"affinity_list_field_metadata","name":"Affinity List Field Metadata","description":"List the non-list company or person fields, with the value type, filter operators, and sort support of each. Start here to find the Field IDs the read and write tools take.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which fields to describe: companies or persons"},"includes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Extra properties to return: [\\"filterability\\",\\"sortability\\"]. Both are omitted unless requested here"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression. This endpoint filters on name only, e.g. \\"name=~Status\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_field_value_changes":{"id":"affinity_list_field_value_changes","name":"Affinity List Field Value Changes","description":"Page through field value changes across the whole workspace. Built for delta sync: follow nextCursor to the end of a run, then resume from the last cursor next time.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression over field.id, listEntry.id, changer.id, changedAt, or actionType. Resume a sync with e.g. \\"changedAt>2026-06-01T12:00:00Z\\""},"orderBy":{"type":"json","required":false,"visibility":"user-or-llm","description":"Sort order: [\\"changedAt\\"] for oldest first (the default), [\\"-changedAt\\"] for newest first"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_investor_executive_connections":{"id":"affinity_list_investor_executive_connections","name":"Affinity List Investor Executive Connections","description":"Find warm paths into a company through investment history: which investors in your Affinity data backed a company the people you want to reach once led. Grouped by target, strongest first.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":true,"visibility":"user-or-llm","description":"Required scope. The only supported filter is target.currentCompany.id, e.g. \\"target.currentCompany.id=123\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of targets to return per page, 1-50. Defaults to 20"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_list_list_entries":{"id":"affinity_list_list_entries","name":"Affinity List List Entries","description":"Page through the rows of a list. Rows come back without field data unless Field IDs or Field Types asks for it.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, list, or relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_list_entry_field_value_changes":{"id":"affinity_list_list_entry_field_value_changes","name":"Affinity List List Entry Field Value Changes","description":"Page through the history of one list row — who changed which field, when, and to what.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"listEntryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list entry ID"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression over field.id, changer.id, changedAt, or actionType, e.g. \\"field.id=field-1234\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_list_entry_fields":{"id":"affinity_list_list_entry_fields","name":"Affinity List List Entry Fields","description":"Page through every field value on one list row, including the list-specific columns. All fields are returned unless narrowed.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"listEntryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list entry ID"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict to these field IDs. Mutually exclusive with Field Types"},"types":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict to these field categories: enriched, global, list, relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 20"}},"hostedApiKey":"none"},"affinity_list_list_field_dropdown_options":{"id":"affinity_list_list_field_dropdown_options","name":"Affinity List List Field Dropdown Options","description":"List the selectable options on a dropdown, ranked-dropdown, or status-dropdown field of a list.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown field ID on that list"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_list_fields":{"id":"affinity_list_list_fields","name":"Affinity List List Fields","description":"List the fields available on one list, including its list-specific columns. Use these Field IDs when reading or writing list entries.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"includes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Extra properties to return: [\\"filterability\\",\\"sortability\\"]. Both are omitted unless requested here"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression. This endpoint filters on name only, e.g. \\"name=~Stage\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_lists":{"id":"affinity_list_lists","name":"Affinity List Lists","description":"Page through the lists in the organization that the caller can view.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"term":{"type":"string","required":false,"visibility":"user-or-llm","description":"Case-insensitive substring match on the list name"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_meetings":{"id":"affinity_list_meetings","name":"Affinity List Meetings","description":"Page through past and upcoming meetings with their organizer and attendees.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_merge_tasks":{"id":"affinity_list_merge_tasks","name":"Affinity List Merge Tasks","description":"Page through merge tasks, each summarizing how many of its merges are in progress, succeeded, or failed.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which merge tasks to list: companies or persons"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression. This endpoint filters on status only, e.g. \\"status=in-progress\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_merges":{"id":"affinity_list_merges","name":"Affinity List Merges","description":"Page through the company or person merges the organization has run, with the status and the records involved in each.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which merges to list: companies or persons"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression over status or taskId, e.g. \\"status=failed\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_note_attached_companies":{"id":"affinity_list_note_attached_companies","name":"Affinity List Note Attached Companies","description":"List the companies directly attached to one note.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_list_note_attached_opportunities":{"id":"affinity_list_note_attached_opportunities","name":"Affinity List Note Attached Opportunities","description":"List the opportunities directly attached to one note.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_list_note_attached_persons":{"id":"affinity_list_note_attached_persons","name":"Affinity List Note Attached Persons","description":"List the persons directly attached to one note.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_list_note_replies":{"id":"affinity_list_note_replies","name":"Affinity List Note Replies","description":"Page through the replies on one note, including AI Notetaker replies.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID whose replies to read"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_list_notes":{"id":"affinity_list_notes","name":"Affinity List Notes","description":"Page through every note the caller can see. Replies are excluded.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"includes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Extra properties to return, e.g. [\\"repliesCount\\",\\"personsPreview\\",\\"companiesPreview\\",\\"opportunitiesPreview\\"]. Those four fields are omitted unless requested here"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_list_opportunities":{"id":"affinity_list_opportunities","name":"Affinity List Opportunities","description":"Page through opportunities. Field data lives on the list entry, not here — read it through the list or saved view the opportunity belongs to.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict the page to these opportunity IDs, e.g. [1, 2, 3]"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_persons":{"id":"affinity_list_persons","name":"Affinity List Persons","description":"Page through persons. Persons come back without field data unless Field IDs or Field Types asks for it.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict the page to these person IDs, e.g. [1, 2, 3]"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, or relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_reminders":{"id":"affinity_list_reminders","name":"Affinity List Reminders","description":"Page through the reminders the caller can see. Filter by status to surface what is overdue.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_list_saved_view_entries":{"id":"affinity_list_saved_view_entries","name":"Affinity List Saved View Entries","description":"Page through the rows of a saved view. The view\'s own filters and columns decide which rows and which field data come back.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"viewId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The saved view ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_saved_views":{"id":"affinity_list_saved_views","name":"Affinity List Saved Views","description":"List the saved views on a list that the caller can view.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_list_transcript_fragments":{"id":"affinity_list_transcript_fragments","name":"Affinity List Transcript Fragments","description":"Page through everything said in a meeting, segment by segment with the speaker.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"transcriptId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The transcript ID"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_list_transcripts":{"id":"affinity_list_transcripts","name":"Affinity List Transcripts","description":"Page through meeting transcript metadata. Read one transcript to get what was actually said.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression, e.g. \\"createdAt>=2026-01-01\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_list_users":{"id":"affinity_list_users","name":"Affinity List Users","description":"Page through the internal users in the organization. Email addresses and roles are returned only to callers with the \\"Manage Users\\" permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"term":{"type":"string","required":false,"visibility":"user-or-llm","description":"Case-insensitive match across first name, last name, and primary email"},"filter":{"type":"string","required":false,"visibility":"user-or-llm","description":"Affinity Filtering Language expression over id or status, e.g. \\"status=active\\""},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_search_companies":{"id":"affinity_search_companies","name":"Affinity Search Companies","description":"Search companies by filters, sorts, and a free-text term. Requires the \\"Export All Organizations directory\\" permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filters":{"type":"json","required":false,"visibility":"user-or-llm","description":"Filter group as {operator: \\"and\\"|\\"or\\", filters: [...]}, at most 50 leaves. Each leaf is {valueType, fieldId, operator, value}, and a leaf may itself be a nested group"},"searchTerm":{"type":"string","required":false,"visibility":"user-or-llm","description":"Free-text term matched against the searchable fields. At least 3 characters"},"searchFieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs the search term is matched against. Defaults to the searchable fields"},"sorts":{"type":"json","required":false,"visibility":"user-or-llm","description":"Sort order as [{fieldId, direction: \\"asc\\"|\\"desc\\", attributeId?}], up to 5, applied in order"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, or relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_search_files":{"id":"affinity_search_files","name":"Affinity Search Files","description":"Search files by keyword, ordered by relevance. Narrow to specific files or to one company, or leave both unset to search the whole account.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"prompt":{"type":"string","required":true,"visibility":"user-or-llm","description":"What to search for. Between 3 and 500 characters"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict the search to these file IDs. Cannot be combined with Company ID"},"companyId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Restrict the search to one company\'s files. Cannot be combined with file IDs"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of files to return, 1-100. Defaults to 20"}},"hostedApiKey":"none"},"affinity_search_list_entries":{"id":"affinity_search_list_entries","name":"Affinity Search List Entries","description":"Search the rows of one list by filters, sorts, and a free-text term. Requires the \\"Export data from Lists\\" permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID to search"},"filters":{"type":"json","required":false,"visibility":"user-or-llm","description":"Filter group as {operator: \\"and\\"|\\"or\\", filters: [...]}, at most 50 leaves. Each leaf is {valueType, fieldId, operator, value}, and a leaf may itself be a nested group"},"searchTerm":{"type":"string","required":false,"visibility":"user-or-llm","description":"Free-text term matched against the searchable fields. At least 3 characters"},"searchFieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs the search term is matched against. Defaults to the searchable fields"},"sorts":{"type":"json","required":false,"visibility":"user-or-llm","description":"Sort order as [{fieldId, direction: \\"asc\\"|\\"desc\\", attributeId?}], up to 5, applied in order"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, list, or relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_search_notes":{"id":"affinity_search_notes","name":"Affinity Search Notes","description":"Search notes by keyword, ordered by relevance. Narrow to specific notes or to one company, or leave both unset to search the whole account.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"prompt":{"type":"string","required":true,"visibility":"user-or-llm","description":"What to search for. Between 3 and 500 characters"},"ids":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict the search to these note IDs. Cannot be combined with Company ID"},"companyId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Restrict the search to one company\'s notes. Cannot be combined with note IDs"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of notes to return, 1-100. Defaults to 20"}},"hostedApiKey":"none"},"affinity_search_persons":{"id":"affinity_search_persons","name":"Affinity Search Persons","description":"Search persons by filters, sorts, and a free-text term. Requires the \\"Export All People directory\\" permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"filters":{"type":"json","required":false,"visibility":"user-or-llm","description":"Filter group as {operator: \\"and\\"|\\"or\\", filters: [...]}, at most 50 leaves. Each leaf is {valueType, fieldId, operator, value}, and a leaf may itself be a nested group"},"searchTerm":{"type":"string","required":false,"visibility":"user-or-llm","description":"Free-text term matched against the searchable fields. At least 3 characters"},"searchFieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs the search term is matched against. Defaults to the searchable fields"},"sorts":{"type":"json","required":false,"visibility":"user-or-llm","description":"Sort order as [{fieldId, direction: \\"asc\\"|\\"desc\\", attributeId?}], up to 5, applied in order"},"fieldIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field IDs to return values for, e.g. [\\"affinity-data-location\\"]. Mutually exclusive with Field Types"},"fieldTypes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Field categories to return values for: enriched, global, or relationship-intelligence. Mutually exclusive with Field IDs"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous page, returned as nextCursor or prevCursor"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to return per page, 1-100. Defaults to 100"},"totalCount":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the total size of the collection. Costs an extra query"}},"hostedApiKey":"none"},"affinity_semantic_search":{"id":"affinity_semantic_search","name":"Affinity Semantic Search","description":"Find companies from a description in plain language — industry, technology, stage, or business model. Currently searches companies only.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"prompt":{"type":"string","required":true,"visibility":"user-or-llm","description":"What to look for, in plain language, e.g. \\"climate tech companies in our pipeline\\". Up to 500 characters"},"listIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Restrict the search to companies on these lists, e.g. [1, 2]"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of companies to return, 1-100. Defaults to 100"}},"hostedApiKey":"none"},"affinity_update_entity_field_value":{"id":"affinity_update_entity_field_value","name":"Affinity Update Entity Field Value","description":"Write one non-list field value on a company or person. The value type must match how the field is defined.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"entityType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Which entity to write the field on: companies or persons"},"entityId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of that company or person"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The field ID to write"},"value":{"type":"json","required":true,"visibility":"user-or-llm","description":"The new value as {type, data}, where type matches the field\'s value type. Examples: {\\"type\\":\\"text\\",\\"data\\":\\"Series B\\"}, {\\"type\\":\\"number\\",\\"data\\":42}, {\\"type\\":\\"dropdown\\",\\"data\\":{\\"dropdownOptionId\\":7}}, {\\"type\\":\\"person\\",\\"data\\":{\\"id\\":123}}, {\\"type\\":\\"person-multi\\",\\"data\\":[{\\"id\\":123}]}. Pass data as null to clear the field"}},"hostedApiKey":"none"},"affinity_update_list_entry_field":{"id":"affinity_update_list_entry_field","name":"Affinity Update List Entry Field","description":"Write one field value on a list row. Requires the \\"Export data from Lists\\" permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"listEntryId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list entry ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The field ID to write"},"value":{"type":"json","required":true,"visibility":"user-or-llm","description":"The new value as {type, data}, where type matches the field\'s value type. Examples: {\\"type\\":\\"text\\",\\"data\\":\\"Series B\\"}, {\\"type\\":\\"number\\",\\"data\\":42}, {\\"type\\":\\"dropdown\\",\\"data\\":{\\"dropdownOptionId\\":7}}, {\\"type\\":\\"person\\",\\"data\\":{\\"id\\":123}}, {\\"type\\":\\"person-multi\\",\\"data\\":[{\\"id\\":123}]}. Pass data as null to clear the field"}},"hostedApiKey":"none"},"affinity_update_list_field_dropdown_option":{"id":"affinity_update_list_field_dropdown_option","name":"Affinity Update List Field Dropdown Option","description":"Change a dropdown option on a list field. Every field is optional — supply only what should change, and only fields the option\'s kind actually has.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"listId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The list ID"},"fieldId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown field ID on that list"},"dropdownOptionId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The dropdown option ID to update"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Replacement option label. Supply at least one field to change"},"rank":{"type":"number","required":false,"visibility":"user-or-llm","description":"Sort order. Required on a ranked-dropdown or status-dropdown option"},"color":{"type":"string","required":false,"visibility":"user-or-llm","description":"Option color: white, gray, blue, green, purple, orange, or red. Required on a ranked-dropdown or status-dropdown option"},"statusCategory":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pipeline meaning of the option: open, won, lost, or on-hold. Status-dropdown options only"},"winRate":{"type":"number","required":false,"visibility":"user-or-llm","description":"Expected win rate of the status. Status-dropdown options only"}},"hostedApiKey":"none"},"affinity_update_note":{"id":"affinity_update_note","name":"Affinity Update Note","description":"Rewrite a note\'s body or replace which records it is attached to. Each list of IDs replaces that association wholesale, an empty list clears it, and omitting one leaves it untouched. A note\'s type cannot be changed.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Affinity API key, sent as a bearer token"},"noteId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note ID to update"},"html":{"type":"string","required":false,"visibility":"user-or-llm","description":"Replacement note body as HTML"},"companyIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Replacement set of attached companies, e.g. [1, 2]. Send [] to detach every company; omit to leave them unchanged"},"personIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Replacement set of attached persons, e.g. [1, 2]. Send [] to detach every person; omit to leave them unchanged"},"opportunityIds":{"type":"json","required":false,"visibility":"user-or-llm","description":"Replacement set of attached opportunities, e.g. [1, 2]. Send [] to detach every opportunity; omit to leave them unchanged"}},"hostedApiKey":"none"},"agentmail_create_draft":{"id":"agentmail_create_draft","name":"Create Draft","description":"Create a new email draft in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to create the draft in"},"to":{"type":"string","required":false,"visibility":"user-or-llm","description":"Recipient email addresses (comma-separated)"},"subject":{"type":"string","required":false,"visibility":"user-or-llm","description":"Draft subject line"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Plain text draft body"},"html":{"type":"string","required":false,"visibility":"user-or-llm","description":"HTML draft body"},"cc":{"type":"string","required":false,"visibility":"user-or-llm","description":"CC recipient email addresses (comma-separated)"},"bcc":{"type":"string","required":false,"visibility":"user-or-llm","description":"BCC recipient email addresses (comma-separated)"},"inReplyTo":{"type":"string","required":false,"visibility":"user-or-llm","description":"ID of message being replied to"},"sendAt":{"type":"string","required":false,"visibility":"user-or-llm","description":"ISO 8601 timestamp to schedule sending"}},"hostedApiKey":"none"},"agentmail_create_inbox":{"id":"agentmail_create_inbox","name":"Create Inbox","description":"Create a new email inbox with AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"username":{"type":"string","required":false,"visibility":"user-or-llm","description":"Username for the inbox email address"},"domain":{"type":"string","required":false,"visibility":"user-or-llm","description":"Domain for the inbox email address"},"displayName":{"type":"string","required":false,"visibility":"user-or-llm","description":"Display name for the inbox"}},"hostedApiKey":"none"},"agentmail_delete_draft":{"id":"agentmail_delete_draft","name":"Delete Draft","description":"Delete an email draft in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the draft"},"draftId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the draft to delete"}},"hostedApiKey":"none"},"agentmail_delete_inbox":{"id":"agentmail_delete_inbox","name":"Delete Inbox","description":"Delete an email inbox in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to delete"}},"hostedApiKey":"none"},"agentmail_delete_thread":{"id":"agentmail_delete_thread","name":"Delete Thread","description":"Delete an email thread in AgentMail (moves to trash, or permanently deletes if already in trash)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the thread"},"threadId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the thread to delete"},"permanent":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Force permanent deletion instead of moving to trash"}},"hostedApiKey":"none"},"agentmail_forward_message":{"id":"agentmail_forward_message","name":"Forward Message","description":"Forward an email message to new recipients in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the message"},"messageId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the message to forward"},"to":{"type":"string","required":true,"visibility":"user-or-llm","description":"Recipient email addresses (comma-separated)"},"subject":{"type":"string","required":false,"visibility":"user-or-llm","description":"Override subject line"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Additional plain text to prepend"},"html":{"type":"string","required":false,"visibility":"user-or-llm","description":"Additional HTML to prepend"},"cc":{"type":"string","required":false,"visibility":"user-or-llm","description":"CC recipient email addresses (comma-separated)"},"bcc":{"type":"string","required":false,"visibility":"user-or-llm","description":"BCC recipient email addresses (comma-separated)"}},"hostedApiKey":"none"},"agentmail_get_draft":{"id":"agentmail_get_draft","name":"Get Draft","description":"Get details of a specific email draft in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox the draft belongs to"},"draftId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the draft to retrieve"}},"hostedApiKey":"none"},"agentmail_get_inbox":{"id":"agentmail_get_inbox","name":"Get Inbox","description":"Get details of a specific email inbox in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to retrieve"}},"hostedApiKey":"none"},"agentmail_get_message":{"id":"agentmail_get_message","name":"Get Message","description":"Get details of a specific email message in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the message"},"messageId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the message to retrieve"}},"hostedApiKey":"none"},"agentmail_get_thread":{"id":"agentmail_get_thread","name":"Get Thread","description":"Get details of a specific email thread including messages in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the thread"},"threadId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the thread to retrieve"}},"hostedApiKey":"none"},"agentmail_list_drafts":{"id":"agentmail_list_drafts","name":"List Drafts","description":"List email drafts in an inbox in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to list drafts from"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of drafts to return"},"pageToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token for next page of results"}},"hostedApiKey":"none"},"agentmail_list_inboxes":{"id":"agentmail_list_inboxes","name":"List Inboxes","description":"List all email inboxes in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of inboxes to return"},"pageToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token for next page of results"}},"hostedApiKey":"none"},"agentmail_list_messages":{"id":"agentmail_list_messages","name":"List Messages","description":"List messages in an inbox in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to list messages from"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of messages to return"},"pageToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token for next page of results"}},"hostedApiKey":"none"},"agentmail_list_threads":{"id":"agentmail_list_threads","name":"List Threads","description":"List email threads in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to list threads from"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of threads to return"},"pageToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token for next page of results"},"labels":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated labels to filter threads by"},"before":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter threads before this ISO 8601 timestamp"},"after":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter threads after this ISO 8601 timestamp"}},"hostedApiKey":"none"},"agentmail_reply_message":{"id":"agentmail_reply_message","name":"Reply to Message","description":"Reply to an existing email message in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to reply from"},"messageId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the message to reply to"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Plain text reply body"},"html":{"type":"string","required":false,"visibility":"user-or-llm","description":"HTML reply body"},"to":{"type":"string","required":false,"visibility":"user-or-llm","description":"Override recipient email addresses (comma-separated)"},"cc":{"type":"string","required":false,"visibility":"user-or-llm","description":"CC email addresses (comma-separated)"},"bcc":{"type":"string","required":false,"visibility":"user-or-llm","description":"BCC email addresses (comma-separated)"},"replyAll":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Reply to all recipients of the original message"}},"hostedApiKey":"none"},"agentmail_send_draft":{"id":"agentmail_send_draft","name":"Send Draft","description":"Send an existing email draft in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the draft"},"draftId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the draft to send"}},"hostedApiKey":"none"},"agentmail_send_message":{"id":"agentmail_send_message","name":"Send Message","description":"Send an email message from an AgentMail inbox","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to send from"},"to":{"type":"string","required":true,"visibility":"user-or-llm","description":"Recipient email address (comma-separated for multiple)"},"subject":{"type":"string","required":true,"visibility":"user-or-llm","description":"Email subject line"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Plain text email body"},"html":{"type":"string","required":false,"visibility":"user-or-llm","description":"HTML email body"},"cc":{"type":"string","required":false,"visibility":"user-or-llm","description":"CC recipient email addresses (comma-separated)"},"bcc":{"type":"string","required":false,"visibility":"user-or-llm","description":"BCC recipient email addresses (comma-separated)"}},"hostedApiKey":"none"},"agentmail_update_draft":{"id":"agentmail_update_draft","name":"Update Draft","description":"Update an existing email draft in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the draft"},"draftId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the draft to update"},"to":{"type":"string","required":false,"visibility":"user-or-llm","description":"Recipient email addresses (comma-separated)"},"subject":{"type":"string","required":false,"visibility":"user-or-llm","description":"Draft subject line"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Plain text draft body"},"html":{"type":"string","required":false,"visibility":"user-or-llm","description":"HTML draft body"},"cc":{"type":"string","required":false,"visibility":"user-or-llm","description":"CC recipient email addresses (comma-separated)"},"bcc":{"type":"string","required":false,"visibility":"user-or-llm","description":"BCC recipient email addresses (comma-separated)"},"sendAt":{"type":"string","required":false,"visibility":"user-or-llm","description":"ISO 8601 timestamp to schedule sending"}},"hostedApiKey":"none"},"agentmail_update_inbox":{"id":"agentmail_update_inbox","name":"Update Inbox","description":"Update the display name of an email inbox in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox to update"},"displayName":{"type":"string","required":true,"visibility":"user-or-llm","description":"New display name for the inbox"}},"hostedApiKey":"none"},"agentmail_update_message":{"id":"agentmail_update_message","name":"Update Message","description":"Add or remove labels on an email message in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the message"},"messageId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the message to update"},"addLabels":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated labels to add to the message"},"removeLabels":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated labels to remove from the message"}},"hostedApiKey":"none"},"agentmail_update_thread":{"id":"agentmail_update_thread","name":"Update Thread Labels","description":"Add or remove labels on an email thread in AgentMail","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentMail API key"},"inboxId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the inbox containing the thread"},"threadId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the thread to update"},"addLabels":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated labels to add to the thread"},"removeLabels":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated labels to remove from the thread"}},"hostedApiKey":"none"},"agentphone_create_call":{"id":"agentphone_create_call","name":"Create Outbound Call","description":"Initiate an outbound voice call from an AgentPhone agent","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"agentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Agent that will handle the call"},"toNumber":{"type":"string","required":true,"visibility":"user-or-llm","description":"Phone number to call in E.164 format (e.g. +14155551234)"},"fromNumberId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Phone number ID to use as caller ID. Must belong to the agent. If omitted, the agent\'s first assigned number is used."},"initialGreeting":{"type":"string","required":false,"visibility":"user-or-llm","description":"Optional greeting spoken when the recipient answers"},"voice":{"type":"string","required":false,"visibility":"user-or-llm","description":"Voice ID override for this call (defaults to the agent\'s configured voice)"},"systemPrompt":{"type":"string","required":false,"visibility":"user-or-llm","description":"When provided, uses a built-in LLM for the conversation instead of forwarding to your webhook"}},"hostedApiKey":"none"},"agentphone_create_contact":{"id":"agentphone_create_contact","name":"Create Contact","description":"Create a new contact in AgentPhone","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"phoneNumber":{"type":"string","required":true,"visibility":"user-or-llm","description":"Phone number in E.164 format (e.g. +14155551234)"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Contact\'s full name"},"email":{"type":"string","required":false,"visibility":"user-or-llm","description":"Contact\'s email address"},"notes":{"type":"string","required":false,"visibility":"user-or-llm","description":"Freeform notes stored on the contact"}},"hostedApiKey":"none"},"agentphone_create_number":{"id":"agentphone_create_number","name":"Create Phone Number","description":"Provision a new SMS- and voice-enabled phone number","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Two-letter country code (e.g. US, CA). Defaults to US."},"areaCode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Preferred area code (US/CA only, e.g. \\"415\\"). Best-effort — may be ignored if unavailable."},"agentId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Optionally attach the number to an agent immediately"}},"hostedApiKey":"none"},"agentphone_delete_contact":{"id":"agentphone_delete_contact","name":"Delete Contact","description":"Delete a contact by ID","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"contactId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Contact ID"}},"hostedApiKey":"none"},"agentphone_get_call":{"id":"agentphone_get_call","name":"Get Call","description":"Fetch a call and its full transcript","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"callId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the call to retrieve"}},"hostedApiKey":"none"},"agentphone_get_call_transcript":{"id":"agentphone_get_call_transcript","name":"Get Call Transcript","description":"Get the full ordered transcript for a call","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"callId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the call to retrieve the transcript for"}},"hostedApiKey":"none"},"agentphone_get_contact":{"id":"agentphone_get_contact","name":"Get Contact","description":"Fetch a single contact by ID","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"contactId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Contact ID"}},"hostedApiKey":"none"},"agentphone_get_conversation":{"id":"agentphone_get_conversation","name":"Get Conversation","description":"Get a conversation along with its recent messages","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"conversationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Conversation ID"},"messageLimit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of recent messages to include (default 50, max 100)"}},"hostedApiKey":"none"},"agentphone_get_conversation_messages":{"id":"agentphone_get_conversation_messages","name":"Get Conversation Messages","description":"Get paginated messages for a conversation","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"conversationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Conversation ID"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of messages to return (default 50, max 200)"},"before":{"type":"string","required":false,"visibility":"user-or-llm","description":"Return messages received before this ISO 8601 timestamp"},"after":{"type":"string","required":false,"visibility":"user-or-llm","description":"Return messages received after this ISO 8601 timestamp"}},"hostedApiKey":"none"},"agentphone_get_number_messages":{"id":"agentphone_get_number_messages","name":"Get Phone Number Messages","description":"Fetch messages received on a specific phone number","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"numberId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the phone number"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of messages to return (default 50, max 200)"},"before":{"type":"string","required":false,"visibility":"user-or-llm","description":"Return messages received before this ISO 8601 timestamp"},"after":{"type":"string","required":false,"visibility":"user-or-llm","description":"Return messages received after this ISO 8601 timestamp"}},"hostedApiKey":"none"},"agentphone_get_usage":{"id":"agentphone_get_usage","name":"Get Usage","description":"Retrieve current usage statistics for the AgentPhone account","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"}},"hostedApiKey":"none"},"agentphone_get_usage_daily":{"id":"agentphone_get_usage_daily","name":"Get Daily Usage","description":"Get a daily breakdown of usage (messages, calls, webhooks) for the last N days","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"days":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of days to return (1-365, default 30)"}},"hostedApiKey":"none"},"agentphone_get_usage_monthly":{"id":"agentphone_get_usage_monthly","name":"Get Monthly Usage","description":"Get monthly usage aggregation (messages, calls, webhooks) for the last N months","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"months":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of months to return (1-24, default 6)"}},"hostedApiKey":"none"},"agentphone_list_calls":{"id":"agentphone_list_calls","name":"List Calls","description":"List voice calls for this AgentPhone account","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to return (default 20, max 100)"},"offset":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to skip (min 0)"},"status":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter by status (completed, in-progress, failed)"},"direction":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter by direction (inbound, outbound)"},"type":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter by call type (pstn, web)"},"search":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search by phone number (matches fromNumber or toNumber)"}},"hostedApiKey":"none"},"agentphone_list_contacts":{"id":"agentphone_list_contacts","name":"List Contacts","description":"List contacts for this AgentPhone account","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"search":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter by name or phone number (case-insensitive contains)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to return (default 50, max 200)"},"offset":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to skip (min 0)"}},"hostedApiKey":"none"},"agentphone_list_conversations":{"id":"agentphone_list_conversations","name":"List Conversations","description":"List conversations (message threads) for this AgentPhone account","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to return (default 20, max 100)"},"offset":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to skip (min 0)"}},"hostedApiKey":"none"},"agentphone_list_numbers":{"id":"agentphone_list_numbers","name":"List Phone Numbers","description":"List all phone numbers provisioned for this AgentPhone account","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to return (default 20, max 100)"},"offset":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to skip (min 0)"}},"hostedApiKey":"none"},"agentphone_react_to_message":{"id":"agentphone_react_to_message","name":"React to Message","description":"Send an iMessage tapback reaction to a message (iMessage only)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"messageId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the message to react to"},"reaction":{"type":"string","required":true,"visibility":"user-or-llm","description":"Reaction type: love, like, dislike, laugh, emphasize, or question"}},"hostedApiKey":"none"},"agentphone_release_number":{"id":"agentphone_release_number","name":"Release Phone Number","description":"Release (delete) a phone number. This action is irreversible.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"numberId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the phone number to release"}},"hostedApiKey":"none"},"agentphone_send_message":{"id":"agentphone_send_message","name":"Send Message","description":"Send an outbound SMS or iMessage from an AgentPhone agent","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"agentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Agent sending the message"},"toNumber":{"type":"string","required":true,"visibility":"user-or-llm","description":"Recipient phone number in E.164 format (e.g. +14155551234)"},"body":{"type":"string","required":true,"visibility":"user-or-llm","description":"Message text to send"},"mediaUrl":{"type":"string","required":false,"visibility":"user-or-llm","description":"Optional URL of an image, video, or file to attach"},"numberId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Phone number ID to send from. If omitted, the agent\'s first assigned number is used."}},"hostedApiKey":"none"},"agentphone_update_contact":{"id":"agentphone_update_contact","name":"Update Contact","description":"Update a contact\'s fields","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"contactId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Contact ID"},"phoneNumber":{"type":"string","required":false,"visibility":"user-or-llm","description":"New phone number in E.164 format"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"New contact name"},"email":{"type":"string","required":false,"visibility":"user-or-llm","description":"New email address"},"notes":{"type":"string","required":false,"visibility":"user-or-llm","description":"New freeform notes"}},"hostedApiKey":"none"},"agentphone_update_conversation":{"id":"agentphone_update_conversation","name":"Update Conversation","description":"Update conversation metadata (stored state). Pass null to clear existing metadata.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"AgentPhone API key"},"conversationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Conversation ID"},"metadata":{"type":"json","required":false,"visibility":"user-or-llm","description":"Custom key-value metadata to store on the conversation. Pass null to clear existing metadata."}},"hostedApiKey":"none"},"agiloft_async_status":{"id":"agiloft_async_status","name":"Agiloft Async Status","description":"Check whether an asynchronous Agiloft call, such as a run action button, has completed.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table the asynchronous call was made against"},"callbackId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Callback ID returned by the asynchronous call, e.g. from Run Action Button"}},"hostedApiKey":"none"},"agiloft_attach_file":{"id":"agiloft_attach_file","name":"Agiloft Attach File","description":"Attach a file to a field in an Agiloft record.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to attach the file to"},"fieldName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the attachment field"},"file":{"type":"file","required":true,"visibility":"user-or-llm","description":"File to attach"},"fileName":{"type":"string","required":false,"visibility":"user-or-llm","description":"Name to assign to the file (defaults to original file name)"},"overwrite":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Replace the contents of the field instead of adding another file to it"}},"hostedApiKey":"none"},"agiloft_attachment_info":{"id":"agiloft_attachment_info","name":"Agiloft Attachment Info","description":"Get information about file attachments on a record field.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to check attachments on"},"fieldName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the attachment field to inspect"}},"hostedApiKey":"none"},"agiloft_create_record":{"id":"agiloft_create_record","name":"Agiloft Create Record","description":"Create a new record in an Agiloft table.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"contacts.employees\\")"},"data":{"type":"string","required":true,"visibility":"user-or-llm","description":"Record field values as a JSON object (e.g., {\\"first_name\\": \\"John\\", \\"status\\": \\"Active\\"})"}},"hostedApiKey":"none"},"agiloft_delete_record":{"id":"agiloft_delete_record","name":"Agiloft Delete Record","description":"Delete a record from an Agiloft table.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"contacts.employees\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to delete"},"substituteIds":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated IDs of records that adopt the dependants of the deleted record. Read only when the delete rule is REPLACE_WITH_ANOTHER."},"deleteRule":{"type":"string","required":false,"visibility":"user-or-llm","description":"How to treat records that depend on this one: ERROR_IF_DEPENDANTS (default — fails rather than cascading), APPLY_DELETE_WHERE_POSSIBLE, DELETE_WHERE_POSSIBLE_OTHERWISE_UNLINK, APPLY_UNLINK, UNLINK_WHERE_POSSIBLE_OTHERWISE_DELETE, or REPLACE_WITH_ANOTHER"}},"hostedApiKey":"none"},"agiloft_get_choice_line_id":{"id":"agiloft_get_choice_line_id","name":"Agiloft Get Choice Line ID","description":"Resolve the internal numeric ID of a choice-list value, for use in EWSelect WHERE clauses against choice fields.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"case\\", \\"contracts\\")"},"fieldName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Choice field name (e.g., \\"priority\\", \\"status\\")"},"value":{"type":"string","required":true,"visibility":"user-or-llm","description":"Choice display value to resolve (e.g., \\"High\\", \\"Active\\")"}},"hostedApiKey":"none"},"agiloft_list_tables":{"id":"agiloft_list_tables","name":"Agiloft List Tables","description":"List the tables and fields in an Agiloft knowledge base, to discover the logical names other operations need.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":false,"visibility":"user-or-llm","description":"Logical name of a single table to describe (e.g., \\"contacts\\"). Leave empty to list every table in the knowledge base."},"includeLinkedInfo":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Include the source table and column behind each linked field"},"skipColumnsInfo":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Return table names only, omitting field details, for a much smaller response"}},"hostedApiKey":"none"},"agiloft_lock_record":{"id":"agiloft_lock_record","name":"Agiloft Lock Record","description":"Lock, unlock, or check the lock status of an Agiloft record.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to lock, unlock, or check"},"lockAction":{"type":"string","required":true,"visibility":"user-or-llm","description":"Action to perform: \\"lock\\", \\"unlock\\", or \\"check\\""},"force":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Unlock only: release a lock held by another user."}},"hostedApiKey":"none"},"agiloft_nlp_search":{"id":"agiloft_nlp_search","name":"Agiloft Natural Language Search","description":"Search Agiloft records by describing what you want in plain language, such as \\"active NDAs submitted last month\\".","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"nlpQuery":{"type":"string","required":true,"visibility":"user-or-llm","description":"The request in plain language, e.g. \\"Show me open, high-priority contracts\\". Structured field filters are not accepted — use Search Records for those."},"fields":{"type":"string","required":true,"visibility":"user-or-llm","description":"Comma-separated field names to return, e.g. \\"id, contract_title1, company_name\\""},"page":{"type":"string","required":false,"visibility":"user-or-llm","description":"Page number, starting from 0"},"limit":{"type":"string","required":false,"visibility":"user-or-llm","description":"Records per page"}},"hostedApiKey":"none"},"agiloft_read_record":{"id":"agiloft_read_record","name":"Agiloft Read Record","description":"Read a record by ID from an Agiloft table.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"contacts.employees\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to read"},"fields":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of field names to include in the response"}},"hostedApiKey":"none"},"agiloft_remove_attachment":{"id":"agiloft_remove_attachment","name":"Agiloft Remove Attachment","description":"Remove an attached file from a field in an Agiloft record.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record containing the attachment"},"fieldName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the attachment field"},"position":{"type":"string","required":true,"visibility":"user-or-llm","description":"Position index of the file to remove (starting from 0)"}},"hostedApiKey":"none"},"agiloft_retrieve_attachment":{"id":"agiloft_retrieve_attachment","name":"Agiloft Retrieve Attachment","description":"Download an attached file from an Agiloft record field.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record containing the attachment"},"fieldName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the attachment field"},"position":{"type":"string","required":true,"visibility":"user-or-llm","description":"Position index of the file in the field (starting from 0)"}},"hostedApiKey":"none"},"agiloft_run_action_button":{"id":"agiloft_run_action_button","name":"Agiloft Run Action Button","description":"Run an action button on an Agiloft record, such as an approval or send-for-signature step.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"case\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to run the action button on"},"actionButtonField":{"type":"string","required":true,"visibility":"user-or-llm","description":"Logical name of the field holding the action button (e.g., \\"ab_field\\")"}},"hostedApiKey":"none"},"agiloft_saved_search":{"id":"agiloft_saved_search","name":"Agiloft Saved Search","description":"List the saved searches defined for an Agiloft table.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Logical table name to list saved searches for (e.g., \\"contract\\")"}},"hostedApiKey":"none"},"agiloft_search_records":{"id":"agiloft_search_records","name":"Agiloft Search Records","description":"Search for records in an Agiloft table using a query.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name to search in (e.g., \\"contracts\\", \\"contacts.employees\\")"},"query":{"type":"string","required":false,"visibility":"user-or-llm","description":"Ad hoc EWSearch query. Combine conditions with && (and) or || (or) and quote every value — e.g. \\"summary~=\'test\'&&priority=\'High\'\\". Required unless a saved search is given."},"search":{"type":"string","required":false,"visibility":"user-or-llm","description":"Label of a saved search defined on the table (e.g., \\"C: Status is Closed\\"). Can be combined with a query to narrow it further."},"fields":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of field names to include in the results"},"page":{"type":"string","required":false,"visibility":"user-or-llm","description":"Page number for paginated results (starting from 0)"},"limit":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum number of records to return per page. Agiloft treats 0 as \\"all records\\", so leave it unset or use a positive value to keep result sizes bounded."}},"hostedApiKey":"none"},"agiloft_select_records":{"id":"agiloft_select_records","name":"Agiloft Select Records","description":"Select record IDs matching a SQL WHERE clause from an Agiloft table.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"contacts.employees\\")"},"where":{"type":"string","required":true,"visibility":"user-or-llm","description":"SQL WHERE clause using database column names (e.g., \\"summary like \'%new%\'\\" or \\"assigned_person=\'John Doe\'\\"). EWSelect has no page size and returns every matching ID, so append a database limit such as \\"limit 0,200\\" to bound the result."}},"hostedApiKey":"none"},"agiloft_update_record":{"id":"agiloft_update_record","name":"Agiloft Update Record","description":"Update an existing record in an Agiloft table.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"contacts.employees\\")"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the record to update"},"data":{"type":"string","required":true,"visibility":"user-or-llm","description":"Updated field values as a JSON object (e.g., {\\"status\\": \\"Active\\", \\"priority\\": \\"High\\"})"}},"hostedApiKey":"none"},"agiloft_upsert_record":{"id":"agiloft_upsert_record","name":"Agiloft Upsert Record","description":"Create an Agiloft record, or update it when a record already matches the given fields.","version":"1.0.0","params":{"instanceUrl":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft instance URL (e.g., https://mycompany.agiloft.com)"},"knowledgeBase":{"type":"string","required":true,"visibility":"user-only","description":"Knowledge base name"},"login":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft username"},"password":{"type":"string","required":true,"visibility":"user-only","description":"Agiloft password"},"table":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table name (e.g., \\"contracts\\", \\"contacts.employees\\")"},"match":{"type":"string","required":true,"visibility":"user-or-llm","description":"Field used to find an existing record (e.g., \\"ext_id\\"). Pick something that identifies a record uniquely — if more than one record matches, Agiloft writes nothing and returns a conflict."},"async":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Queue the write instead of waiting for it. Returns a callback ID instead of a record ID; pass that to Async Status to poll the result."},"data":{"type":"string","required":true,"visibility":"user-or-llm","description":"Field values as a JSON object. On create these populate the new record; on update only the supplied fields change."}},"hostedApiKey":"none"},"ahrefs_anchors":{"id":"ahrefs_anchors","name":"Ahrefs Anchors","description":"Get the anchor text distribution for a target domain or URL\'s backlinks, showing how many links and referring domains use each anchor text.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\" or \\"https://example.com/page\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match)"},"history":{"type":"string","required":false,"visibility":"user-or-llm","description":"Historical scope: \\"live\\" (currently live), \\"all_time\\" (default, includes lost backlinks), or \\"since:YYYY-MM-DD\\" (backlinks found since a date)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_backlinks":{"id":"ahrefs_backlinks","name":"Ahrefs Backlinks","description":"Get a list of backlinks pointing to a target domain or URL. Returns details about each backlink including source URL, anchor text, and domain rating.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\" or \\"https://example.com/page\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"history":{"type":"string","required":false,"visibility":"user-or-llm","description":"Historical scope: \\"live\\" (currently live backlinks), \\"all_time\\" (default, includes lost backlinks), or \\"since:YYYY-MM-DD\\" (backlinks found since a date)."},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_backlinks_stats":{"id":"ahrefs_backlinks_stats","name":"Ahrefs Backlinks Stats","description":"Get backlink and referring domain totals for a target domain or URL, both currently live and across all time.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\" or \\"https://example.com/page\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date to report metrics on, in YYYY-MM-DD format (defaults to today)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_batch_analysis":{"id":"ahrefs_batch_analysis","name":"Ahrefs Batch Analysis","description":"Get bulk SEO metrics (Domain Rating, backlinks, referring domains, organic traffic, and more) for multiple domains or URLs in a single request. Useful for comparing many competitors at once.","version":"1.0.0","params":{"targets":{"type":"string","required":true,"visibility":"user-or-llm","description":"Comma-separated list of domains or URLs to analyze. Example: \\"example.com,competitor.com\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode applied to every target: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match)"},"protocol":{"type":"string","required":false,"visibility":"user-or-llm","description":"Protocol applied to every target: \\"both\\" (default), \\"http\\", or \\"https\\""},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for traffic data. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"volumeMode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search volume calculation: \\"monthly\\" or \\"average\\" (default: \\"monthly\\")"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_broken_backlinks":{"id":"ahrefs_broken_backlinks","name":"Ahrefs Broken Backlinks","description":"Get a list of broken backlinks pointing to a target domain or URL. Useful for identifying link reclamation opportunities.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\" or \\"https://example.com/page\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_domain_rating":{"id":"ahrefs_domain_rating","name":"Ahrefs Domain Rating","description":"Get the Domain Rating (DR) and Ahrefs Rank for a target domain. Domain Rating shows the strength of a website\'s backlink profile on a scale from 0 to 100.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain to analyze (e.g., example.com)"},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date for historical data in YYYY-MM-DD format (defaults to today)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_domain_rating_history":{"id":"ahrefs_domain_rating_history","name":"Ahrefs Domain Rating History","description":"Get the historical Domain Rating (DR) trend for a target domain or URL over a date range, grouped daily, weekly, or monthly.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"dateFrom":{"type":"string","required":true,"visibility":"user-only","description":"Start date of the historical period, in YYYY-MM-DD format"},"dateTo":{"type":"string","required":false,"visibility":"user-only","description":"End date of the historical period, in YYYY-MM-DD format (defaults to today)"},"historyGrouping":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval for grouping data points: \\"daily\\", \\"weekly\\", or \\"monthly\\" (default: \\"monthly\\")"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_keyword_overview":{"id":"ahrefs_keyword_overview","name":"Ahrefs Keyword Overview","description":"Get detailed metrics for a keyword including search volume, keyword difficulty, CPC, clicks, and traffic potential.","version":"1.0.0","params":{"keyword":{"type":"string","required":true,"visibility":"user-or-llm","description":"The keyword to analyze"},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for keyword data. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_keywords_history":{"id":"ahrefs_keywords_history","name":"Ahrefs Keywords History","description":"Get the historical organic keyword ranking distribution for a target domain or URL over a date range: how many keywords rank in each position bucket at each point in time.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"dateFrom":{"type":"string","required":true,"visibility":"user-only","description":"Start date of the historical period, in YYYY-MM-DD format"},"dateTo":{"type":"string","required":false,"visibility":"user-only","description":"End date of the historical period, in YYYY-MM-DD format (defaults to today)"},"historyGrouping":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval for grouping data points: \\"daily\\", \\"weekly\\", or \\"monthly\\" (default: \\"monthly\\")"},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for search results. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_metrics":{"id":"ahrefs_metrics","name":"Ahrefs Metrics","description":"Get a one-call organic and paid search overview for a target domain or URL: organic traffic, organic keywords, paid traffic, paid keywords, and estimated traffic cost.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for traffic data. Example: \\"us\\", \\"gb\\", \\"de\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date to report metrics on, in YYYY-MM-DD format (defaults to today)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_metrics_history":{"id":"ahrefs_metrics_history","name":"Ahrefs Metrics History","description":"Get the historical organic and paid traffic trend for a target domain or URL over a date range: organic traffic/cost and paid traffic/cost at each point in time.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"dateFrom":{"type":"string","required":true,"visibility":"user-only","description":"Start date of the historical period, in YYYY-MM-DD format"},"dateTo":{"type":"string","required":false,"visibility":"user-only","description":"End date of the historical period, in YYYY-MM-DD format (defaults to today)"},"volumeMode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search volume calculation: \\"monthly\\" or \\"average\\" (default: \\"monthly\\")"},"historyGrouping":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval for grouping data points: \\"daily\\", \\"weekly\\", or \\"monthly\\" (default: \\"monthly\\")"},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for traffic data. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_organic_competitors":{"id":"ahrefs_organic_competitors","name":"Ahrefs Organic Competitors","description":"Get domains that compete with a target domain or URL for the same organic keywords, ranked by keyword overlap.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for search results. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date to report metrics on, in YYYY-MM-DD format (defaults to today)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_organic_keywords":{"id":"ahrefs_organic_keywords","name":"Ahrefs Organic Keywords","description":"Get organic keywords that a target domain or URL ranks for in Google search results. Returns keyword details including search volume, ranking position, and estimated traffic.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\" or \\"https://example.com/page\\""},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for search results. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date to report metrics on, in YYYY-MM-DD format (defaults to today)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_paid_pages":{"id":"ahrefs_paid_pages","name":"Ahrefs Paid Pages","description":"Get a target domain\'s pages that receive paid search traffic, sorted by estimated paid traffic. Returns page URLs with their paid traffic, keyword counts, and estimated spend.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for traffic data. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match)"},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date to report metrics on, in YYYY-MM-DD format (defaults to today)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_rank_tracker_competitors_overview":{"id":"ahrefs_rank_tracker_competitors_overview","name":"Ahrefs Rank Tracker Competitors Overview","description":"Get competitor rankings for the keywords tracked in an Ahrefs Rank Tracker project: each tracked keyword\'s volume and difficulty alongside every competitor\'s position, traffic, and traffic value. This endpoint is free and does not consume API units.","version":"1.0.0","params":{"projectId":{"type":"number","required":true,"visibility":"user-or-llm","description":"The Rank Tracker project ID (found in the project URL in Ahrefs)"},"date":{"type":"string","required":true,"visibility":"user-only","description":"Date to report rankings for, in YYYY-MM-DD format"},"device":{"type":"string","required":true,"visibility":"user-or-llm","description":"Rankings device type: \\"desktop\\" or \\"mobile\\""},"dateCompared":{"type":"string","required":false,"visibility":"user-only","description":"Comparison date in YYYY-MM-DD format, to compute position/traffic deltas"},"volumeMode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search volume calculation: \\"monthly\\" or \\"average\\" (default: \\"monthly\\")"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_rank_tracker_competitors_stats":{"id":"ahrefs_rank_tracker_competitors_stats","name":"Ahrefs Rank Tracker Competitors Stats","description":"Get aggregate competitor stats for an Ahrefs Rank Tracker project: each competitor\'s traffic, traffic value, average position, and share of voice across all tracked keywords. This endpoint is free and does not consume API units.","version":"1.0.0","params":{"projectId":{"type":"number","required":true,"visibility":"user-or-llm","description":"The Rank Tracker project ID (found in the project URL in Ahrefs)"},"date":{"type":"string","required":true,"visibility":"user-only","description":"Date to report metrics for, in YYYY-MM-DD format"},"device":{"type":"string","required":true,"visibility":"user-or-llm","description":"Rankings device type: \\"desktop\\" or \\"mobile\\""},"volumeMode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search volume calculation: \\"monthly\\" or \\"average\\" (default: \\"monthly\\")"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_rank_tracker_overview":{"id":"ahrefs_rank_tracker_overview","name":"Ahrefs Rank Tracker Overview","description":"Get ranking overview metrics for the keywords tracked in an Ahrefs Rank Tracker project: position, search volume, keyword difficulty, and estimated traffic. This endpoint is free and does not consume API units.","version":"1.0.0","params":{"projectId":{"type":"number","required":true,"visibility":"user-or-llm","description":"The Rank Tracker project ID (found in the project URL in Ahrefs)"},"date":{"type":"string","required":true,"visibility":"user-only","description":"Date to report rankings for, in YYYY-MM-DD format"},"device":{"type":"string","required":true,"visibility":"user-or-llm","description":"Rankings device type: \\"desktop\\" or \\"mobile\\""},"dateCompared":{"type":"string","required":false,"visibility":"user-only","description":"Comparison date in YYYY-MM-DD format, to compute position/traffic deltas"},"volumeMode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search volume calculation: \\"monthly\\" or \\"average\\" (default: \\"monthly\\")"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_rank_tracker_serp_overview":{"id":"ahrefs_rank_tracker_serp_overview","name":"Ahrefs Rank Tracker SERP Overview","description":"Get the full SERP (search engine results page) for a keyword tracked in an Ahrefs Rank Tracker project, including every ranking URL with its position, title, and authority metrics. This endpoint is free and does not consume API units.","version":"1.0.0","params":{"projectId":{"type":"number","required":true,"visibility":"user-or-llm","description":"The Rank Tracker project ID (found in the project URL in Ahrefs)"},"keyword":{"type":"string","required":true,"visibility":"user-or-llm","description":"The tracked keyword to retrieve SERP data for"},"country":{"type":"string","required":true,"visibility":"user-or-llm","description":"Country code for the tracked keyword. Example: \\"us\\", \\"gb\\", \\"de\\""},"device":{"type":"string","required":true,"visibility":"user-or-llm","description":"Rankings device type: \\"desktop\\" or \\"mobile\\""},"topPositions":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of top organic positions to return (defaults to all available)"},"date":{"type":"string","required":false,"visibility":"user-only","description":"Timestamp to return the last available SERP Overview at, in YYYY-MM-DDThh:mm:ss format"},"locationId":{"type":"number","required":false,"visibility":"user-or-llm","description":"Location ID of the tracked keyword, if tracked at a specific location"},"languageCode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Language code of the tracked keyword"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_refdomains_history":{"id":"ahrefs_refdomains_history","name":"Ahrefs Referring Domains History","description":"Get the historical referring domains trend for a target domain or URL over a date range, grouped daily, weekly, or monthly.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\""},"dateFrom":{"type":"string","required":true,"visibility":"user-only","description":"Start date of the historical period, in YYYY-MM-DD format"},"dateTo":{"type":"string","required":false,"visibility":"user-only","description":"End date of the historical period, in YYYY-MM-DD format (defaults to today)"},"historyGrouping":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval for grouping data points: \\"daily\\", \\"weekly\\", or \\"monthly\\" (default: \\"monthly\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_referring_domains":{"id":"ahrefs_referring_domains","name":"Ahrefs Referring Domains","description":"Get a list of domains that link to a target domain or URL. Returns unique referring domains with their domain rating, backlink counts, and discovery dates.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain or URL to analyze. Example: \\"example.com\\" or \\"https://example.com/page\\""},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"history":{"type":"string","required":false,"visibility":"user-or-llm","description":"Historical scope: \\"live\\" (currently live), \\"all_time\\" (default, includes lost domains), or \\"since:YYYY-MM-DD\\" (domains found since a date)."},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_related_terms":{"id":"ahrefs_related_terms","name":"Ahrefs Related Terms","description":"Get keyword ideas related to a seed keyword: terms the same top-ranking pages also rank for (\\"also rank for\\") or also discuss (\\"also talk about\\"), with volume, difficulty, and CPC.","version":"1.0.0","params":{"keyword":{"type":"string","required":true,"visibility":"user-or-llm","description":"The seed keyword to find related terms for"},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for keyword data. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"terms":{"type":"string","required":false,"visibility":"user-or-llm","description":"Type of related keywords to return: \\"also_rank_for\\", \\"also_talk_about\\", or \\"all\\" (default: \\"all\\")"},"viewFor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Whether to derive related terms from the top 10 or top 100 ranking pages (default: \\"top_10\\")"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_site_audit_page_explorer":{"id":"ahrefs_site_audit_page_explorer","name":"Ahrefs Site Audit Page Explorer","description":"Get crawled pages from an Ahrefs Site Audit project with health and SEO metrics: HTTP status, title, link counts, backlinks, indexability, and traffic. Optionally filter to pages affected by a specific issue.","version":"1.0.0","params":{"projectId":{"type":"number","required":true,"visibility":"user-or-llm","description":"The Site Audit project ID (found in the project URL in Ahrefs)"},"date":{"type":"string","required":false,"visibility":"user-only","description":"Crawl date in YYYY-MM-DDThh:mm:ss format (defaults to the most recent crawl)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"offset":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of results to skip, for pagination"},"issueId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Only return pages affected by this issue ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"ahrefs_top_pages":{"id":"ahrefs_top_pages","name":"Ahrefs Top Pages","description":"Get the top pages of a target domain sorted by organic traffic. Returns page URLs with their traffic, keyword counts, and estimated traffic value.","version":"1.0.0","params":{"target":{"type":"string","required":true,"visibility":"user-or-llm","description":"The target domain to analyze. Example: \\"example.com\\""},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Country code for traffic data. Example: \\"us\\", \\"gb\\", \\"de\\" (default: \\"us\\")"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Analysis mode: domain (entire domain), prefix (URL prefix), subdomains (include all subdomains, default), exact (exact URL match). Example: \\"domain\\""},"date":{"type":"string","required":false,"visibility":"user-only","description":"Date to report metrics on, in YYYY-MM-DD format (defaults to today)"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of results to return. Example: 50 (default: 1000)"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ahrefs API Key"}},"hostedApiKey":"none"},"airtable_create_records":{"id":"airtable_create_records","name":"Airtable Create Records","description":"Write new records to an Airtable table","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"records":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of records to create, each with a `fields` object"},"typecast":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"When true, Airtable automatically converts string values to the field type"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_delete_records":{"id":"airtable_delete_records","name":"Airtable Delete Records","description":"Delete one or more records from an Airtable table by ID","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"recordIds":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of record IDs to delete (each starts with \\"rec\\", e.g., [\\"recXXXXXXXXXXXXXX\\"]). Pass a single-element array to delete one record."}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_get_base_schema":{"id":"airtable_get_base_schema","name":"Airtable Get Base Schema","description":"Get the schema of all tables, fields, and views in an Airtable base","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_get_record":{"id":"airtable_get_record","name":"Airtable Get Record","description":"Retrieve a single record from an Airtable table by its ID","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Record ID to retrieve (starts with \\"rec\\", e.g., \\"recXXXXXXXXXXXXXX\\")"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_list_bases":{"id":"airtable_list_bases","name":"Airtable List Bases","description":"List all bases the authenticated user has access to","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"offset":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination offset for retrieving additional bases"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_list_records":{"id":"airtable_list_records","name":"Airtable List Records","description":"Read records from an Airtable table","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"maxRecords":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of records to return (default: all records)"},"filterFormula":{"type":"string","required":false,"visibility":"user-or-llm","description":"Formula to filter records (e.g., \\"({Field Name} = \'Value\')\\")"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_list_tables":{"id":"airtable_list_tables","name":"Airtable List Tables","description":"List all tables and their schema in an Airtable base","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_update_multiple_records":{"id":"airtable_update_multiple_records","name":"Airtable Update Multiple Records","description":"Update multiple existing records in an Airtable table","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"records":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of records to update, each with an `id` and a `fields` object"},"typecast":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"When true, Airtable automatically converts string values to the field type"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_update_record":{"id":"airtable_update_record","name":"Airtable Update Record","description":"Update an existing record in an Airtable table by ID","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"recordId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Record ID to update (starts with \\"rec\\", e.g., \\"recXXXXXXXXXXXXXX\\")"},"fields":{"type":"json","required":true,"visibility":"user-or-llm","description":"An object containing the field names and their new values"},"typecast":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"When true, Airtable automatically converts string values to the field type"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airtable_upsert_records":{"id":"airtable_upsert_records","name":"Airtable Upsert Records","description":"Update existing records or create new ones in an Airtable table, matching on the specified merge fields","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token"},"baseId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Airtable base ID (starts with \\"app\\", e.g., \\"appXXXXXXXXXXXXXX\\")"},"tableId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Table ID (starts with \\"tbl\\") or table name"},"records":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of records to upsert, each with a `fields` object"},"fieldsToMergeOn":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of field names used to match existing records (max 3). A record is updated when all merge fields match, otherwise it is created. Example: [\\"Name\\"]"},"typecast":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"When true, Airtable automatically converts string values to the field type"}},"oauth":{"required":true,"provider":"airtable"},"hostedApiKey":"none"},"airweave_search":{"id":"airweave_search","name":"Airweave Search","description":"Search your synced data collections using Airweave. Supports semantic search with hybrid, neural, or keyword retrieval strategies. Optionally generate AI-powered answers from search results.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Airweave API Key for authentication"},"collectionId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The readable ID of the collection to search"},"query":{"type":"string","required":true,"visibility":"user-or-llm","description":"The search query text"},"limit":{"type":"number","required":false,"visibility":"user-only","description":"Maximum number of results to return (default: 100)"},"retrievalStrategy":{"type":"string","required":false,"visibility":"user-or-llm","description":"Retrieval strategy: hybrid (default), neural, or keyword"},"expandQuery":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Generate query variations to improve recall"},"rerank":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Reorder results for improved relevance using LLM"},"generateAnswer":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Generate a natural-language answer to the query"}},"hostedApiKey":"none"},"algolia_add_record":{"id":"algolia_add_record","name":"Algolia Add Record","description":"Add or replace a record in an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"objectID":{"type":"string","required":false,"visibility":"user-or-llm","description":"Object ID for the record (auto-generated if not provided)"},"record":{"type":"json","required":true,"visibility":"user-or-llm","description":"JSON object representing the record to add"}},"hostedApiKey":"none"},"algolia_batch_operations":{"id":"algolia_batch_operations","name":"Algolia Batch Operations","description":"Perform batch add, update, partial update, or delete operations on records in an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"requests":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of batch operations. Each item has \\"action\\" (addObject, updateObject, partialUpdateObject, partialUpdateObjectNoCreate, deleteObject, delete, clear) and \\"body\\" (the record data; must include objectID for update/delete; use an empty object {} for the index-level delete/clear actions)"}},"hostedApiKey":"none"},"algolia_browse_records":{"id":"algolia_browse_records","name":"Algolia Browse Records","description":"Browse and iterate over all records in an Algolia index using cursor pagination","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key (must have browse ACL)"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index to browse"},"query":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search query to filter browsed records"},"filters":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter string to narrow down results"},"attributesToRetrieve":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of attributes to retrieve"},"hitsPerPage":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of hits per page (default: 1000, max: 1000)"},"cursor":{"type":"string","required":false,"visibility":"user-or-llm","description":"Cursor from a previous browse response for pagination"},"aroundLatLng":{"type":"string","required":false,"visibility":"user-or-llm","description":"Coordinates for geo-search (e.g., \\"40.71,-74.01\\")"},"aroundRadius":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum radius in meters for geo-search, or \\"all\\" for unlimited"},"insideBoundingBox":{"type":"json","required":false,"visibility":"user-or-llm","description":"Bounding box coordinates as [[lat1, lng1, lat2, lng2]] for geo-search"},"insidePolygon":{"type":"json","required":false,"visibility":"user-or-llm","description":"Polygon coordinates as [[lat1, lng1, lat2, lng2, lat3, lng3, ...]] for geo-search"}},"hostedApiKey":"none"},"algolia_clear_records":{"id":"algolia_clear_records","name":"Algolia Clear Records","description":"Clear all records from an Algolia index while keeping settings, synonyms, and rules","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key (must have deleteIndex ACL)"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index to clear"}},"hostedApiKey":"none"},"algolia_copy_move_index":{"id":"algolia_copy_move_index","name":"Algolia Copy/Move Index","description":"Copy or move an Algolia index to a new destination","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the source index"},"operation":{"type":"string","required":true,"visibility":"user-or-llm","description":"Operation to perform: \\"copy\\" or \\"move\\""},"destination":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the destination index"},"scope":{"type":"json","required":false,"visibility":"user-or-llm","description":"Array of scopes to copy (only for \\"copy\\" operation): [\\"settings\\", \\"synonyms\\", \\"rules\\"]. Omit to copy everything including records."}},"hostedApiKey":"none"},"algolia_delete_by_filter":{"id":"algolia_delete_by_filter","name":"Algolia Delete By Filter","description":"Delete all records matching a filter from an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key (must have deleteIndex ACL)"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"filters":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter expression to match records for deletion (e.g., \\"category:outdated\\")"},"facetFilters":{"type":"json","required":false,"visibility":"user-or-llm","description":"Array of facet filters (e.g., [\\"brand:Acme\\"])"},"numericFilters":{"type":"json","required":false,"visibility":"user-or-llm","description":"Array of numeric filters (e.g., [\\"price > 100\\"])"},"tagFilters":{"type":"json","required":false,"visibility":"user-or-llm","description":"Array of tag filters using the _tags attribute (e.g., [\\"published\\"])"},"aroundLatLng":{"type":"string","required":false,"visibility":"user-or-llm","description":"Coordinates for geo-search filter (e.g., \\"40.71,-74.01\\")"},"aroundRadius":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum radius in meters for geo-search, or \\"all\\" for unlimited"},"insideBoundingBox":{"type":"json","required":false,"visibility":"user-or-llm","description":"Bounding box coordinates as [[lat1, lng1, lat2, lng2]] for geo-search filter"},"insidePolygon":{"type":"json","required":false,"visibility":"user-or-llm","description":"Polygon coordinates as [[lat1, lng1, lat2, lng2, lat3, lng3, ...]] for geo-search filter"}},"hostedApiKey":"none"},"algolia_delete_index":{"id":"algolia_delete_index","name":"Algolia Delete Index","description":"Delete an entire Algolia index and all its records","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key (must have deleteIndex ACL)"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index to delete"}},"hostedApiKey":"none"},"algolia_delete_record":{"id":"algolia_delete_record","name":"Algolia Delete Record","description":"Delete a record by objectID from an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"objectID":{"type":"string","required":true,"visibility":"user-or-llm","description":"The objectID of the record to delete"}},"hostedApiKey":"none"},"algolia_get_record":{"id":"algolia_get_record","name":"Algolia Get Record","description":"Get a record by objectID from an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"objectID":{"type":"string","required":true,"visibility":"user-or-llm","description":"The objectID of the record to retrieve"},"attributesToRetrieve":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of attributes to retrieve"}},"hostedApiKey":"none"},"algolia_get_records":{"id":"algolia_get_records","name":"Algolia Get Records","description":"Retrieve multiple records by objectID from one or more Algolia indices","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Default index name for all requests"},"requests":{"type":"json","required":true,"visibility":"user-or-llm","description":"Array of objects specifying records to retrieve. Each must have \\"objectID\\" and optionally \\"indexName\\" and \\"attributesToRetrieve\\"."}},"hostedApiKey":"none"},"algolia_get_settings":{"id":"algolia_get_settings","name":"Algolia Get Settings","description":"Retrieve the settings of an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"}},"hostedApiKey":"none"},"algolia_get_task_status":{"id":"algolia_get_task_status","name":"Algolia Get Task Status","description":"Check whether an Algolia indexing task has finished publishing","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index the task ran against"},"taskID":{"type":"number","required":true,"visibility":"user-or-llm","description":"The taskID returned by a previous write operation"}},"hostedApiKey":"none"},"algolia_list_indices":{"id":"algolia_list_indices","name":"Algolia List Indices","description":"List all indices in an Algolia application","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key"},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for paginating indices (default: not paginated)"},"hitsPerPage":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of indices per page (default: 100)"}},"hostedApiKey":"none"},"algolia_partial_update_record":{"id":"algolia_partial_update_record","name":"Algolia Partial Update Record","description":"Partially update a record in an Algolia index without replacing it entirely","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"objectID":{"type":"string","required":true,"visibility":"user-or-llm","description":"The objectID of the record to update"},"attributes":{"type":"json","required":true,"visibility":"user-or-llm","description":"JSON object with attributes to update. Supports built-in operations like {\\"stock\\": {\\"_operation\\": \\"Decrement\\", \\"value\\": 1}}"},"createIfNotExists":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Whether to create the record if it does not exist (default: true)"}},"hostedApiKey":"none"},"algolia_search":{"id":"algolia_search","name":"Algolia Search","description":"Search an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia API Key"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index to search"},"query":{"type":"string","required":true,"visibility":"user-or-llm","description":"Search query text"},"hitsPerPage":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of hits per page (default: 20)"},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number to retrieve (default: 0)"},"filters":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter string (e.g., \\"category:electronics AND price < 100\\")"},"attributesToRetrieve":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of attributes to retrieve"},"facets":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of facet attribute names to retrieve counts for (use \\"*\\" for all)"},"getRankingInfo":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Whether to include detailed ranking information in each hit"},"aroundLatLng":{"type":"string","required":false,"visibility":"user-or-llm","description":"Coordinates for geo-search (e.g., \\"40.71,-74.01\\")"},"aroundRadius":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum radius in meters for geo-search, or \\"all\\" for unlimited"},"insideBoundingBox":{"type":"json","required":false,"visibility":"user-or-llm","description":"Bounding box coordinates as [[lat1, lng1, lat2, lng2]] for geo-search"},"insidePolygon":{"type":"json","required":false,"visibility":"user-or-llm","description":"Polygon coordinates as [[lat1, lng1, lat2, lng2, lat3, lng3, ...]] for geo-search"}},"hostedApiKey":"none"},"algolia_update_settings":{"id":"algolia_update_settings","name":"Algolia Update Settings","description":"Update the settings of an Algolia index","version":"1.0","params":{"applicationId":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Application ID"},"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Algolia Admin API Key (must have editSettings ACL)"},"indexName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the Algolia index"},"settings":{"type":"json","required":true,"visibility":"user-or-llm","description":"JSON object with settings to update (e.g., {\\"searchableAttributes\\": [\\"name\\", \\"description\\"], \\"customRanking\\": [\\"desc(popularity)\\"]})"},"forwardToReplicas":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Whether to apply changes to replica indices (default: false)"}},"hostedApiKey":"none"},"amplitude_event_segmentation":{"id":"amplitude_event_segmentation","name":"Amplitude Event Segmentation","description":"Query event analytics data with segmentation. Get event counts, uniques, averages, and more.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"eventType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Event type name to analyze"},"start":{"type":"string","required":true,"visibility":"user-or-llm","description":"Start date in YYYYMMDD format"},"end":{"type":"string","required":true,"visibility":"user-or-llm","description":"End date in YYYYMMDD format"},"metric":{"type":"string","required":false,"visibility":"user-or-llm","description":"Metric type: uniques, totals, pct_dau, average, histogram, sums, value_avg, or formula (default: uniques)"},"interval":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval: 1 (daily), 7 (weekly), or 30 (monthly)"},"groupBy":{"type":"string","required":false,"visibility":"user-or-llm","description":"Property name to group by (prefix custom user properties with \\"gp:\\")"},"groupBy2":{"type":"string","required":false,"visibility":"user-or-llm","description":"Second property name to group by (prefix custom user properties with \\"gp:\\")"},"limit":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum number of group-by values (max 1000)"},"filters":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON array of filter objects applied to the event, e.g. [{\\"subprop_type\\":\\"event\\",\\"subprop_key\\":\\"city\\",\\"subprop_op\\":\\"is\\",\\"subprop_value\\":[\\"San Francisco\\"]}]"},"formula":{"type":"string","required":false,"visibility":"user-or-llm","description":"Required when metric is \\"formula\\", e.g. \\"UNIQUES(A)/UNIQUES(B)\\""},"segment":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON segment definition(s) applied to the query"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_funnels":{"id":"amplitude_funnels","name":"Amplitude Funnels","description":"Analyze conversion rates and drop-off between a sequence of events.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"events":{"type":"string","required":true,"visibility":"user-or-llm","description":"JSON array of event objects, one per funnel step in order, e.g. [{\\"event_type\\":\\"signup\\"},{\\"event_type\\":\\"purchase\\"}]"},"start":{"type":"string","required":true,"visibility":"user-or-llm","description":"Start date in YYYYMMDD format"},"end":{"type":"string","required":true,"visibility":"user-or-llm","description":"End date in YYYYMMDD format"},"mode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Funnel ordering: \\"ordered\\", \\"unordered\\", or \\"sequential\\" (default: ordered)"},"userType":{"type":"string","required":false,"visibility":"user-or-llm","description":"User type: \\"new\\" or \\"active\\" (default: active)"},"interval":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval: -300000 (real-time), -3600000 (hourly), 1 (daily), 7 (weekly), or 30 (monthly)"},"conversionWindowSeconds":{"type":"string","required":false,"visibility":"user-or-llm","description":"Conversion window in seconds (default: 2592000, i.e. 30 days)"},"groupBy":{"type":"string","required":false,"visibility":"user-or-llm","description":"Property to group by (limit: one; prefix custom properties with \\"gp:\\")"},"limit":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum number of group-by values (default: 100, max: 1000)"},"segment":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON segment definition(s) applied to the query"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_get_active_users":{"id":"amplitude_get_active_users","name":"Amplitude Get Active Users","description":"Get active or new user counts over a date range from the Dashboard REST API.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"start":{"type":"string","required":true,"visibility":"user-or-llm","description":"Start date in YYYYMMDD format"},"end":{"type":"string","required":true,"visibility":"user-or-llm","description":"End date in YYYYMMDD format"},"metric":{"type":"string","required":false,"visibility":"user-or-llm","description":"Metric type: \\"active\\" or \\"new\\" (default: active)"},"interval":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval: 1 (daily), 7 (weekly), or 30 (monthly)"},"groupBy":{"type":"string","required":false,"visibility":"user-or-llm","description":"Property name to group by"},"segment":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON segment definition(s) applied to the query"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_get_revenue":{"id":"amplitude_get_revenue","name":"Amplitude Get Revenue","description":"Get revenue LTV data including ARPU, ARPPU, total revenue, and paying user counts.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"start":{"type":"string","required":true,"visibility":"user-or-llm","description":"Start date in YYYYMMDD format"},"end":{"type":"string","required":true,"visibility":"user-or-llm","description":"End date in YYYYMMDD format"},"metric":{"type":"string","required":false,"visibility":"user-or-llm","description":"Metric: 0 (ARPU), 1 (ARPPU), 2 (Total Revenue), 3 (Paying Users)"},"interval":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval: 1 (daily), 7 (weekly), or 30 (monthly)"},"groupBy":{"type":"string","required":false,"visibility":"user-or-llm","description":"Property name to group by (limit: one)"},"segment":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON segment definition(s) applied to the query"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_group_identify":{"id":"amplitude_group_identify","name":"Amplitude Group Identify","description":"Set group-level properties in Amplitude. Supports $set, $setOnce, $add, $append, $unset operations.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"groupType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Group classification (e.g., \\"company\\", \\"org_id\\")"},"groupValue":{"type":"string","required":true,"visibility":"user-or-llm","description":"Specific group identifier (e.g., \\"Acme Corp\\")"},"groupProperties":{"type":"string","required":true,"visibility":"user-or-llm","description":"JSON object of group properties. Use operations like $set, $setOnce, $add, $append, $unset."},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_identify_user":{"id":"amplitude_identify_user","name":"Amplitude Identify User","description":"Set user properties in Amplitude using the Identify API. Supports $set, $setOnce, $add, $append, $unset operations.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"userId":{"type":"string","required":false,"visibility":"user-or-llm","description":"User ID (required if no device_id)"},"deviceId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Device ID (required if no user_id)"},"userProperties":{"type":"string","required":true,"visibility":"user-or-llm","description":"JSON object of user properties. Use operations like $set, $setOnce, $add, $append, $unset."},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_list_events":{"id":"amplitude_list_events","name":"Amplitude List Events","description":"List all event types in the Amplitude project with their weekly totals and unique counts.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_realtime_active_users":{"id":"amplitude_realtime_active_users","name":"Amplitude Real-time Active Users","description":"Get real-time active user counts at 5-minute granularity for the last 2 days.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_retention":{"id":"amplitude_retention","name":"Amplitude Retention","description":"Measure how many users return to perform an action after a starting action.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"startEvent":{"type":"string","required":true,"visibility":"user-or-llm","description":"JSON starting event object, e.g. {\\"event_type\\":\\"_new\\"} or {\\"event_type\\":\\"_active\\"}"},"returnEvent":{"type":"string","required":true,"visibility":"user-or-llm","description":"JSON returning event object, e.g. {\\"event_type\\":\\"_all\\"} or {\\"event_type\\":\\"_active\\"}"},"start":{"type":"string","required":true,"visibility":"user-or-llm","description":"Start date in YYYYMMDD format"},"end":{"type":"string","required":true,"visibility":"user-or-llm","description":"End date in YYYYMMDD format"},"retentionMode":{"type":"string","required":false,"visibility":"user-or-llm","description":"Retention type: \\"bracket\\", \\"rolling\\", or \\"n-day\\" (default: n-day)"},"retentionBrackets":{"type":"string","required":false,"visibility":"user-or-llm","description":"Required when Retention Mode is \\"bracket\\". Day ranges, e.g. [[0,4]]"},"interval":{"type":"string","required":false,"visibility":"user-or-llm","description":"Time interval: 1 (daily), 7 (weekly), or 30 (monthly)"},"groupBy":{"type":"string","required":false,"visibility":"user-or-llm","description":"Property to group by (limit: one; prefix custom properties with \\"gp:\\")"},"segment":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON segment definition(s) applied to the query"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_send_event":{"id":"amplitude_send_event","name":"Amplitude Send Event","description":"Track an event in Amplitude using the HTTP V2 API.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"userId":{"type":"string","required":false,"visibility":"user-or-llm","description":"User ID (required if no device_id)"},"deviceId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Device ID (required if no user_id)"},"eventType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the event (e.g., \\"page_view\\", \\"purchase\\")"},"eventProperties":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON object of custom event properties"},"userProperties":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON object of user properties to set (supports $set, $setOnce, $add, $append, $unset)"},"time":{"type":"string","required":false,"visibility":"user-or-llm","description":"Event timestamp in milliseconds since epoch"},"sessionId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Session start time in milliseconds since epoch"},"insertId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Unique ID for deduplication (within 7-day window)"},"appVersion":{"type":"string","required":false,"visibility":"user-or-llm","description":"Application version string"},"platform":{"type":"string","required":false,"visibility":"user-or-llm","description":"Platform (e.g., \\"Web\\", \\"iOS\\", \\"Android\\")"},"country":{"type":"string","required":false,"visibility":"user-or-llm","description":"Two-letter country code"},"language":{"type":"string","required":false,"visibility":"user-or-llm","description":"Language code (e.g., \\"en\\")"},"ip":{"type":"string","required":false,"visibility":"user-or-llm","description":"IP address for geo-location"},"price":{"type":"string","required":false,"visibility":"user-or-llm","description":"Price of the item purchased"},"quantity":{"type":"string","required":false,"visibility":"user-or-llm","description":"Quantity of items purchased"},"revenue":{"type":"string","required":false,"visibility":"user-or-llm","description":"Revenue amount"},"productId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Product identifier"},"revenueType":{"type":"string","required":false,"visibility":"user-or-llm","description":"Revenue type (e.g., \\"purchase\\", \\"refund\\")"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_user_activity":{"id":"amplitude_user_activity","name":"Amplitude User Activity","description":"Get the event stream for a specific user by their Amplitude ID.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"amplitudeId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Amplitude internal user ID"},"offset":{"type":"string","required":false,"visibility":"user-or-llm","description":"Offset for pagination (default 0)"},"limit":{"type":"string","required":false,"visibility":"user-or-llm","description":"Maximum number of events to return (default 1000, max 1000)"},"direction":{"type":"string","required":false,"visibility":"user-or-llm","description":"Sort direction: \\"latest\\" or \\"earliest\\" (default: latest)"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"amplitude_user_profile":{"id":"amplitude_user_profile","name":"Amplitude User Profile","description":"Get a user profile including properties, cohort memberships, and computed properties. Not available for EU data-residency projects.","version":"1.0.0","params":{"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"userId":{"type":"string","required":false,"visibility":"user-or-llm","description":"External user ID (required if no device_id)"},"deviceId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Device ID (required if no user_id)"},"getAmpProps":{"type":"string","required":false,"visibility":"user-or-llm","description":"Include Amplitude user properties (true/false, default: false)"},"getCohortIds":{"type":"string","required":false,"visibility":"user-or-llm","description":"Include cohort IDs the user belongs to (true/false, default: false)"},"getComputations":{"type":"string","required":false,"visibility":"user-or-llm","description":"Include computed user properties (true/false, default: false)"}},"hostedApiKey":"none"},"amplitude_user_search":{"id":"amplitude_user_search","name":"Amplitude User Search","description":"Search for a user by User ID, Device ID, or Amplitude ID using the Dashboard REST API.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude API Key"},"secretKey":{"type":"string","required":true,"visibility":"user-only","description":"Amplitude Secret Key"},"user":{"type":"string","required":true,"visibility":"user-or-llm","description":"User ID, Device ID, or Amplitude ID to search for"},"dataResidency":{"type":"string","required":false,"visibility":"user-or-llm","description":"Data residency region: \\"us\\" (default) or \\"eu\\""}},"hostedApiKey":"none"},"apify_get_dataset_items":{"id":"apify_get_dataset_items","name":"APIFY Get Dataset Items","description":"Retrieve items stored in an APIFY dataset","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"APIFY API token from console.apify.com/account#/integrations"},"datasetId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Dataset ID to read items from. Example: \\"9RnD3Pql2vGZkc5H5\\""},"itemLimit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Max items to return (1-250000). Default: all items. Example: 500"},"offset":{"type":"number","required":false,"visibility":"user-or-llm","description":"Number of items to skip at the start. Default: 0"},"fields":{"type":"string","required":false,"visibility":"user-or-llm","description":"Comma-separated list of fields to include. Example: \\"title,url,price\\""}},"hostedApiKey":"none"},"apify_get_run":{"id":"apify_get_run","name":"APIFY Get Run","description":"Get the status and details of an APIFY actor run","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"APIFY API token from console.apify.com/account#/integrations"},"runId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Actor run ID to fetch. Example: \\"HG7ML7M8z78YcAPEB\\""}},"hostedApiKey":"none"},"apify_run_actor_async":{"id":"apify_run_actor_async","name":"APIFY Run Actor (Async)","description":"Run an APIFY actor asynchronously with polling for long-running tasks","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"APIFY API token from console.apify.com/account#/integrations"},"actorId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Actor ID or username/actor-name. Examples: \\"apify/web-scraper\\", \\"janedoe/my-actor\\", \\"moJRLRc85AitArpNN\\""},"input":{"type":"string","required":false,"visibility":"user-or-llm","description":"Actor input as JSON string. Example: {\\"startUrls\\": [{\\"url\\": \\"https://example.com\\"}], \\"maxPages\\": 10}"},"waitForFinish":{"type":"number","required":false,"visibility":"user-or-llm","description":"Initial wait time in seconds (0-60) before polling starts. Example: 30"},"itemLimit":{"type":"number","required":false,"default":100,"visibility":"user-or-llm","description":"Max dataset items to fetch (1-250000). Default: 100. Example: 500"},"memory":{"type":"number","required":false,"visibility":"user-or-llm","description":"Memory in megabytes allocated for the actor run (128-32768). Example: 1024 for 1GB, 2048 for 2GB"},"timeout":{"type":"number","required":false,"visibility":"user-or-llm","description":"Timeout in seconds for the actor run. Example: 300 for 5 minutes, 3600 for 1 hour"},"build":{"type":"string","required":false,"visibility":"user-or-llm","description":"Actor build to run. Examples: \\"latest\\", \\"beta\\", \\"1.2.3\\", \\"build-tag-name\\""}},"hostedApiKey":"none"},"apify_run_actor_sync":{"id":"apify_run_actor_sync","name":"APIFY Run Actor (Sync)","description":"Run an APIFY actor synchronously and get results (max 5 minutes)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"APIFY API token from console.apify.com/account#/integrations"},"actorId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Actor ID or username/actor-name. Examples: \\"apify/web-scraper\\", \\"janedoe/my-actor\\", \\"moJRLRc85AitArpNN\\""},"input":{"type":"string","required":false,"visibility":"user-or-llm","description":"Actor input as JSON string. Example: {\\"startUrls\\": [{\\"url\\": \\"https://example.com\\"}], \\"maxPages\\": 10}"},"memory":{"type":"number","required":false,"visibility":"user-or-llm","description":"Memory in megabytes allocated for the actor run (128-32768). Example: 1024 for 1GB, 2048 for 2GB"},"timeout":{"type":"number","required":false,"visibility":"user-or-llm","description":"Timeout in seconds for the actor run. Example: 300 for 5 minutes, 3600 for 1 hour"},"build":{"type":"string","required":false,"visibility":"user-or-llm","description":"Actor build to run. Examples: \\"latest\\", \\"beta\\", \\"1.2.3\\", \\"build-tag-name\\""}},"hostedApiKey":"none"},"apify_run_task":{"id":"apify_run_task","name":"APIFY Run Task","description":"Run a saved APIFY actor task synchronously and get dataset items (max 5 minutes)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"APIFY API token from console.apify.com/account#/integrations"},"taskId":{"type":"string","required":true,"visibility":"user-or-llm","description":"Task ID or username/task-name. Examples: \\"janedoe/my-task\\", \\"moJRLRc85AitArpNN\\""},"input":{"type":"string","required":false,"visibility":"user-or-llm","description":"JSON string that overrides the task\'s saved input. Example: {\\"startUrls\\": [{\\"url\\": \\"https://example.com\\"}]}"},"itemLimit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Max dataset items to return (1-250000). Example: 500"},"memory":{"type":"number","required":false,"visibility":"user-or-llm","description":"Memory in megabytes allocated for the run (128-32768). Example: 1024 for 1GB"},"timeout":{"type":"number","required":false,"visibility":"user-or-llm","description":"Timeout in seconds for the run. Example: 300 for 5 minutes"},"build":{"type":"string","required":false,"visibility":"user-or-llm","description":"Actor build to run. Examples: \\"latest\\", \\"beta\\", \\"1.2.3\\""}},"hostedApiKey":"none"},"apollo_account_bulk_create":{"id":"apollo_account_bulk_create","name":"Apollo Bulk Create Accounts","description":"Create up to 100 accounts at once in your Apollo database. Set run_dedupe=true to deduplicate by domain, organization_id, and name. Master key required.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"accounts":{"type":"array","required":true,"visibility":"user-or-llm","description":"Array of accounts to create (max 100). Each account should include a name, and may optionally include domain, phone, phone_status_cd, raw_address, owner_id, linkedin_url, facebook_url, twitter_url, salesforce_id, and hubspot_id."},"append_label_names":{"type":"array","required":false,"visibility":"user-only","description":"Array of label names to add to ALL accounts in this request"},"run_dedupe":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"When true, performs aggressive deduplication by domain, organization_id, and name (defaults to false)"}},"hostedApiKey":"none"},"apollo_account_bulk_update":{"id":"apollo_account_bulk_update","name":"Apollo Bulk Update Accounts","description":"Update up to 1000 existing accounts at once in your Apollo database (higher limit than contacts!). Each account must include an id field. Master key required.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"account_ids":{"type":"array","required":false,"visibility":"user-or-llm","description":"Array of account IDs to update with the same values (max 1000). Use with name/owner_id for uniform updates. Use either this OR account_attributes."},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"When using account_ids, apply this name to all accounts"},"owner_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"When using account_ids, apply this owner to all accounts"},"account_stage_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"When using account_ids, apply this account stage to all accounts"},"account_attributes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Array of account objects with individual updates (each must include id). Example: [{\\"id\\": \\"acc1\\", \\"name\\": \\"Acme\\", \\"owner_id\\": \\"u1\\", \\"account_stage_id\\": \\"s1\\", \\"typed_custom_fields\\": {\\"field_id\\": \\"value\\"}}]"},"async":{"type":"boolean","required":false,"visibility":"user-only","description":"When true, processes the update asynchronously. Only supported when using account_ids; returns 422 if used with account_attributes."}},"hostedApiKey":"none"},"apollo_account_create":{"id":"apollo_account_create","name":"Apollo Create Account","description":"Create a new account (company) in your Apollo database","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Company name (e.g., \\"Acme Corporation\\")"},"domain":{"type":"string","required":false,"visibility":"user-or-llm","description":"Company domain without www. prefix (e.g., \\"acme.com\\")"},"phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Primary phone number for the account"},"owner_id":{"type":"string","required":false,"visibility":"user-only","description":"Apollo user ID of the account owner"},"account_stage_id":{"type":"string","required":false,"visibility":"user-only","description":"Apollo ID for the account stage to assign this account to"},"raw_address":{"type":"string","required":false,"visibility":"user-or-llm","description":"Corporate location (e.g., \\"San Francisco, CA, USA\\")"},"typed_custom_fields":{"type":"json","required":false,"visibility":"user-only","description":"Custom field values as { custom_field_id: value } map"}},"hostedApiKey":"none"},"apollo_account_search":{"id":"apollo_account_search","name":"Apollo Search Accounts","description":"Search your team\'s accounts in Apollo. Display limit: 50,000 records (100 records per page, 500 pages max). Use filters to narrow results. Master key required.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"q_organization_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter accounts by organization name (partial-match search)"},"account_stage_ids":{"type":"array","required":false,"visibility":"user-only","description":"Filter by account stage IDs"},"account_label_ids":{"type":"array","required":false,"visibility":"user-only","description":"Filter by account label IDs"},"sort_by_field":{"type":"string","required":false,"visibility":"user-or-llm","description":"Sort field: \\"account_last_activity_date\\", \\"account_created_at\\", or \\"account_updated_at\\""},"sort_ascending":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Sort ascending when true. Defaults to descending."},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, max 100 (e.g., 25, 50, 100)"}},"hostedApiKey":"none"},"apollo_account_update":{"id":"apollo_account_update","name":"Apollo Update Account","description":"Update an existing account in your Apollo database","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"account_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the account to update (e.g., \\"acc_abc123\\")"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Company name (e.g., \\"Acme Corporation\\")"},"domain":{"type":"string","required":false,"visibility":"user-or-llm","description":"Company domain (e.g., \\"acme.com\\")"},"phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Company phone number"},"owner_id":{"type":"string","required":false,"visibility":"user-only","description":"Apollo user ID of the account owner"},"account_stage_id":{"type":"string","required":false,"visibility":"user-only","description":"Apollo ID for the account stage to assign this account to"},"raw_address":{"type":"string","required":false,"visibility":"user-or-llm","description":"Corporate location (e.g., \\"San Francisco, CA, USA\\")"},"typed_custom_fields":{"type":"json","required":false,"visibility":"user-only","description":"Custom field values as { custom_field_id: value } map"}},"hostedApiKey":"none"},"apollo_contact_bulk_create":{"id":"apollo_contact_bulk_create","name":"Apollo Bulk Create Contacts","description":"Create up to 100 contacts at once in your Apollo database. Supports deduplication to prevent creating duplicate contacts. Master key required.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"contacts":{"type":"array","required":true,"visibility":"user-or-llm","description":"Array of contacts to create (max 100). Each contact may include first_name, last_name, email, title, organization_name, account_id, owner_id, contact_stage_id, linkedin_url, phone (single string) or phone_numbers (array of {raw_number, position}), contact_emails, typed_custom_fields, and CRM IDs (salesforce_contact_id, hubspot_id, team_id) for cross-system matching"},"append_label_names":{"type":"array","required":false,"visibility":"user-or-llm","description":"Label names to add to all contacts in this request (e.g., [\\"Hot Lead\\"])"},"run_dedupe":{"type":"boolean","required":false,"visibility":"user-only","description":"Enable deduplication to prevent creating duplicate contacts. When true, existing contacts are returned without modification"}},"hostedApiKey":"none"},"apollo_contact_bulk_update":{"id":"apollo_contact_bulk_update","name":"Apollo Bulk Update Contacts","description":"Update up to 100 existing contacts at once in your Apollo database. Each contact must include an id field. Master key required.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"contact_ids":{"type":"array","required":false,"visibility":"user-or-llm","description":"Array of contact IDs to update. Must be paired with an object-form contact_attributes specifying the fields to apply uniformly to all listed contacts."},"contact_attributes":{"type":"json","required":false,"visibility":"user-or-llm","description":"Required. Either an array of per-contact updates (each with id) — used standalone — or a single object of attributes to apply to all contact_ids. Supported fields: owner_id, email, organization_name, title, first_name, last_name, account_id, present_raw_address, linkedin_url, typed_custom_fields"},"async":{"type":"boolean","required":false,"visibility":"user-only","description":"Force asynchronous processing. Automatically enabled for >100 contacts"}},"hostedApiKey":"none"},"apollo_contact_create":{"id":"apollo_contact_create","name":"Apollo Create Contact","description":"Create a new contact in your Apollo database","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"first_name":{"type":"string","required":true,"visibility":"user-or-llm","description":"First name of the contact"},"last_name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Last name of the contact"},"email":{"type":"string","required":false,"visibility":"user-or-llm","description":"Email address of the contact"},"title":{"type":"string","required":false,"visibility":"user-or-llm","description":"Job title (e.g., \\"VP of Sales\\", \\"Software Engineer\\")"},"account_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"Apollo account ID to associate with (e.g., \\"acc_abc123\\")"},"owner_id":{"type":"string","required":false,"visibility":"user-only","description":"User ID of the contact owner (accepted by Apollo but not officially documented for POST /contacts)"},"organization_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Name of the contact\'s employer (e.g., \\"Apollo\\")"},"website_url":{"type":"string","required":false,"visibility":"user-or-llm","description":"Corporate website URL (e.g., \\"https://www.apollo.io/\\")"},"label_names":{"type":"array","required":false,"visibility":"user-or-llm","description":"Lists/labels to add the contact to (e.g., [\\"Prospects\\"])"},"contact_stage_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"Apollo ID for the contact stage"},"present_raw_address":{"type":"string","required":false,"visibility":"user-or-llm","description":"Personal location for the contact (e.g., \\"Atlanta, United States\\")"},"direct_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Primary phone number"},"corporate_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Work/office phone number"},"mobile_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Mobile phone number"},"home_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Home phone number"},"other_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Alternative phone number"},"typed_custom_fields":{"type":"json","required":false,"visibility":"user-or-llm","description":"Custom field values keyed by custom field ID"},"run_dedupe":{"type":"boolean","required":false,"visibility":"user-only","description":"When true, Apollo deduplicates against existing contacts"}},"hostedApiKey":"none"},"apollo_contact_search":{"id":"apollo_contact_search","name":"Apollo Search Contacts","description":"Search your team\'s contacts in Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"q_keywords":{"type":"string","required":false,"visibility":"user-or-llm","description":"Keywords to search for"},"contact_stage_ids":{"type":"array","required":false,"visibility":"user-only","description":"Filter by contact stage IDs"},"contact_label_ids":{"type":"array","required":false,"visibility":"user-only","description":"Filter by Apollo label IDs (lists)"},"sort_by_field":{"type":"string","required":false,"visibility":"user-only","description":"Sort field: contact_last_activity_date, contact_email_last_opened_at, contact_email_last_clicked_at, contact_created_at, or contact_updated_at"},"sort_ascending":{"type":"boolean","required":false,"visibility":"user-only","description":"When true, sort ascending. Must be used together with sort_by_field"},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, max 100 (e.g., 25, 50, 100)"}},"hostedApiKey":"none"},"apollo_contact_update":{"id":"apollo_contact_update","name":"Apollo Update Contact","description":"Update an existing contact in your Apollo database","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"contact_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the contact to update (e.g., \\"con_abc123\\")"},"first_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"First name of the contact"},"last_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Last name of the contact"},"email":{"type":"string","required":false,"visibility":"user-or-llm","description":"Email address"},"title":{"type":"string","required":false,"visibility":"user-or-llm","description":"Job title (e.g., \\"VP of Sales\\", \\"Software Engineer\\")"},"account_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"Apollo account ID (e.g., \\"acc_abc123\\")"},"owner_id":{"type":"string","required":false,"visibility":"user-only","description":"User ID of the contact owner (accepted by Apollo but not officially documented for PATCH /contacts/{id})"},"organization_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Name of the contact\'s employer (e.g., \\"Apollo\\")"},"website_url":{"type":"string","required":false,"visibility":"user-or-llm","description":"Corporate website URL (e.g., \\"https://www.apollo.io/\\")"},"label_names":{"type":"array","required":false,"visibility":"user-or-llm","description":"Lists/labels to add the contact to (e.g., [\\"Prospects\\"])"},"contact_stage_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"Apollo ID for the contact stage"},"present_raw_address":{"type":"string","required":false,"visibility":"user-or-llm","description":"Personal location for the contact (e.g., \\"Atlanta, United States\\")"},"direct_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Primary phone number"},"corporate_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Work/office phone number"},"mobile_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Mobile phone number"},"home_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Home phone number"},"other_phone":{"type":"string","required":false,"visibility":"user-or-llm","description":"Alternative phone number"},"typed_custom_fields":{"type":"json","required":false,"visibility":"user-or-llm","description":"Custom field values keyed by custom field ID"}},"hostedApiKey":"none"},"apollo_email_accounts":{"id":"apollo_email_accounts","name":"Apollo Get Email Accounts","description":"Get list of team\'s linked email accounts in Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"}},"hostedApiKey":"none"},"apollo_opportunity_create":{"id":"apollo_opportunity_create","name":"Apollo Create Opportunity","description":"Create a new deal for an account in your Apollo database (master key required)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the opportunity/deal (e.g., \\"Enterprise License - Q1\\")"},"account_id":{"type":"string","required":false,"visibility":"user-or-llm","description":"ID of the account this opportunity belongs to (e.g., \\"acc_abc123\\")"},"amount":{"type":"string","required":false,"visibility":"user-or-llm","description":"Monetary value as a plain number string with no commas or currency symbols"},"opportunity_stage_id":{"type":"string","required":false,"visibility":"user-only","description":"ID of the opportunity stage"},"owner_id":{"type":"string","required":false,"visibility":"user-only","description":"User ID of the opportunity owner"},"closed_date":{"type":"string","required":false,"visibility":"user-or-llm","description":"Expected close date in YYYY-MM-DD format"},"typed_custom_fields":{"type":"json","required":false,"visibility":"user-only","description":"Custom field values as { custom_field_id: value } map"}},"hostedApiKey":"none"},"apollo_opportunity_get":{"id":"apollo_opportunity_get","name":"Apollo Get Opportunity","description":"Retrieve complete details of a specific deal/opportunity by ID","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"opportunity_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the opportunity to retrieve (e.g., \\"opp_abc123\\")"}},"hostedApiKey":"none"},"apollo_opportunity_search":{"id":"apollo_opportunity_search","name":"Apollo Search Opportunities","description":"Search and list all deals/opportunities in your team\'s Apollo account","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"sort_by_field":{"type":"string","required":false,"visibility":"user-or-llm","description":"Sort field: \\"amount\\", \\"is_closed\\", or \\"is_won\\""},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, max 100 (e.g., 25, 50, 100)"}},"hostedApiKey":"none"},"apollo_opportunity_update":{"id":"apollo_opportunity_update","name":"Apollo Update Opportunity","description":"Update an existing deal/opportunity in your Apollo database","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"opportunity_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the opportunity to update (e.g., \\"opp_abc123\\")"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Name of the opportunity/deal (e.g., \\"Enterprise License - Q1\\")"},"amount":{"type":"string","required":false,"visibility":"user-or-llm","description":"Monetary value as a plain number string with no commas or currency symbols"},"opportunity_stage_id":{"type":"string","required":false,"visibility":"user-only","description":"ID of the opportunity stage"},"owner_id":{"type":"string","required":false,"visibility":"user-only","description":"User ID of the opportunity owner"},"closed_date":{"type":"string","required":false,"visibility":"user-or-llm","description":"Expected close date in YYYY-MM-DD format"},"typed_custom_fields":{"type":"json","required":false,"visibility":"user-only","description":"Custom field values as { custom_field_id: value } map"}},"hostedApiKey":"none"},"apollo_organization_bulk_enrich":{"id":"apollo_organization_bulk_enrich","name":"Apollo Bulk Organization Enrichment","description":"Enrich data for up to 10 organizations at once using Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"domains":{"type":"array","required":true,"visibility":"user-or-llm","description":"Array of company domains to enrich (max 10, no www. or @, e.g., [\\"apollo.io\\", \\"stripe.com\\"])"}},"hostedApiKey":"none"},"apollo_organization_enrich":{"id":"apollo_organization_enrich","name":"Apollo Organization Enrichment","description":"Enrich data for a single organization using Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"domain":{"type":"string","required":true,"visibility":"user-or-llm","description":"Company domain (e.g., \\"apollo.io\\", \\"acme.com\\")"}},"hostedApiKey":"none"},"apollo_organization_search":{"id":"apollo_organization_search","name":"Apollo Organization Search","description":"Search Apollo\'s database for companies using filters","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"organization_locations":{"type":"array","required":false,"visibility":"user-or-llm","description":"Company HQ locations (cities, US states, or countries)"},"organization_not_locations":{"type":"array","required":false,"visibility":"user-or-llm","description":"Exclude companies whose HQ is in these locations"},"organization_num_employees_ranges":{"type":"array","required":false,"visibility":"user-or-llm","description":"Employee count ranges as \\"min,max\\" strings (e.g., [\\"1,10\\", \\"250,500\\", \\"10000,20000\\"])"},"q_organization_keyword_tags":{"type":"array","required":false,"visibility":"user-or-llm","description":"Industry or keyword tags"},"q_organization_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Organization name to search for (e.g., \\"Acme\\", \\"TechCorp\\")"},"organization_ids":{"type":"array","required":false,"visibility":"user-or-llm","description":"Apollo organization IDs to include (e.g., [\\"5e66b6381e05b4008c8331b8\\"])"},"q_organization_domains_list":{"type":"array","required":false,"visibility":"user-or-llm","description":"Domain names to filter by (no www. or @, up to 1,000)"},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, max 100 (e.g., 25, 50, 100)"}},"hostedApiKey":"none"},"apollo_people_bulk_enrich":{"id":"apollo_people_bulk_enrich","name":"Apollo Bulk People Enrichment","description":"Enrich data for up to 10 people at once using Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"people":{"type":"array","required":true,"visibility":"user-or-llm","description":"Array of people to enrich (max 10)"},"reveal_personal_emails":{"type":"boolean","required":false,"visibility":"user-only","description":"Reveal personal email addresses (uses credits)"},"reveal_phone_number":{"type":"boolean","required":false,"visibility":"user-only","description":"Reveal phone numbers (uses credits, requires webhook_url)"},"webhook_url":{"type":"string","required":false,"visibility":"user-only","description":"Webhook URL for async phone number delivery (required when reveal_phone_number is true)"}},"hostedApiKey":"none"},"apollo_people_enrich":{"id":"apollo_people_enrich","name":"Apollo People Enrichment","description":"Enrich data for a single person using Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"first_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"First name of the person"},"last_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Last name of the person"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Full name of the person (alternative to first_name/last_name)"},"id":{"type":"string","required":false,"visibility":"user-or-llm","description":"Apollo ID for the person"},"hashed_email":{"type":"string","required":false,"visibility":"user-or-llm","description":"MD5 or SHA-256 hashed email"},"email":{"type":"string","required":false,"visibility":"user-or-llm","description":"Email address of the person"},"organization_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Company name where the person works"},"domain":{"type":"string","required":false,"visibility":"user-or-llm","description":"Company domain (e.g., \\"apollo.io\\", \\"acme.com\\")"},"linkedin_url":{"type":"string","required":false,"visibility":"user-or-llm","description":"LinkedIn profile URL"},"reveal_personal_emails":{"type":"boolean","required":false,"visibility":"user-only","description":"Reveal personal email addresses (uses credits)"},"reveal_phone_number":{"type":"boolean","required":false,"visibility":"user-only","description":"Reveal phone numbers (uses credits, requires webhook_url)"},"webhook_url":{"type":"string","required":false,"visibility":"user-only","description":"Webhook URL for async phone number delivery (required when reveal_phone_number is true)"}},"hostedApiKey":"none"},"apollo_people_search":{"id":"apollo_people_search","name":"Apollo People Search","description":"Search Apollo\'s database for people using demographic filters","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key"},"person_titles":{"type":"array","required":false,"visibility":"user-or-llm","description":"Job titles to search for (e.g., [\\"CEO\\", \\"VP of Sales\\"])"},"include_similar_titles":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Whether to return people with job titles similar to person_titles"},"person_locations":{"type":"array","required":false,"visibility":"user-or-llm","description":"Locations to search in (e.g., [\\"San Francisco, CA\\", \\"New York, NY\\"])"},"person_seniorities":{"type":"array","required":false,"visibility":"user-or-llm","description":"Seniority levels (one of: owner, founder, c_suite, partner, vp, head, director, manager, senior, entry, intern)"},"organization_ids":{"type":"array","required":false,"visibility":"user-or-llm","description":"Apollo organization IDs to filter by (e.g., [\\"5e66b6381e05b4008c8331b8\\"])"},"organization_names":{"type":"array","required":false,"visibility":"user-or-llm","description":"Company names to search within (legacy filter)"},"organization_locations":{"type":"array","required":false,"visibility":"user-or-llm","description":"Headquarters locations of the people\'s current employer (e.g., [\'texas\', \'tokyo\', \'spain\'])"},"q_organization_domains_list":{"type":"array","required":false,"visibility":"user-or-llm","description":"Employer domain names (e.g., [\\"apollo.io\\", \\"microsoft.com\\"]) — up to 1,000, no www. or @"},"organization_num_employees_ranges":{"type":"array","required":false,"visibility":"user-or-llm","description":"Employee count ranges for the person\'s current employer. Each entry is \\"min,max\\" (e.g., [\\"1,10\\", \\"250,500\\", \\"10000,20000\\"])"},"contact_email_status":{"type":"array","required":false,"visibility":"user-or-llm","description":"Email statuses to filter by: \\"verified\\", \\"unverified\\", \\"likely to engage\\", \\"unavailable\\""},"q_keywords":{"type":"string","required":false,"visibility":"user-or-llm","description":"Keywords to search for"},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination, default 1 (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, default 25, max 100 (e.g., 25, 50, 100)"}},"hostedApiKey":"none"},"apollo_sequence_add_contacts":{"id":"apollo_sequence_add_contacts","name":"Apollo Add Contacts to Sequence","description":"Add contacts to an Apollo sequence","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"sequence_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the sequence to add contacts to (e.g., \\"seq_abc123\\")"},"contact_ids":{"type":"array","required":false,"visibility":"user-or-llm","description":"Array of contact IDs to add to the sequence (e.g., [\\"con_abc123\\", \\"con_def456\\"]). Either contact_ids or label_names must be provided."},"label_names":{"type":"array","required":false,"visibility":"user-or-llm","description":"Array of label names to identify contacts to add to the sequence. Either contact_ids or label_names must be provided."},"send_email_from_email_account_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the email account to send from. Use the Get Email Accounts operation to look this up."},"send_email_from_email_address":{"type":"string","required":false,"visibility":"user-only","description":"Specific email address to send from within the email account."},"sequence_no_email":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts even if they have no email address"},"sequence_unverified_email":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts with unverified email addresses"},"sequence_job_change":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts who recently changed jobs"},"sequence_active_in_other_campaigns":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts active in other campaigns"},"sequence_finished_in_other_campaigns":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts who finished other campaigns"},"sequence_same_company_in_same_campaign":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts even if others from the same company are in the sequence"},"contacts_without_ownership_permission":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts without ownership permission"},"add_if_in_queue":{"type":"boolean","required":false,"visibility":"user-only","description":"Add contacts even if they are in the queue"},"contact_verification_skipped":{"type":"boolean","required":false,"visibility":"user-only","description":"Skip contact verification when adding"},"user_id":{"type":"string","required":false,"visibility":"user-only","description":"ID of the user performing the action"},"status":{"type":"string","required":false,"visibility":"user-only","description":"Initial status for added contacts: \\"active\\" or \\"paused\\""},"auto_unpause_at":{"type":"string","required":false,"visibility":"user-only","description":"ISO 8601 datetime to automatically unpause contacts"}},"hostedApiKey":"none"},"apollo_sequence_search":{"id":"apollo_sequence_search","name":"Apollo Search Sequences","description":"Search for sequences/campaigns in your team\'s Apollo account (master key required)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"q_name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Search sequences by name (e.g., \\"Outbound Q1\\", \\"Follow-up\\")"},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, max 100 (e.g., 25, 50, 100)"}},"hostedApiKey":"none"},"apollo_task_create":{"id":"apollo_task_create","name":"Apollo Create Task","description":"Create one or more tasks in Apollo (one task per contact_id, master key required)","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"user_id":{"type":"string","required":true,"visibility":"user-or-llm","description":"ID of the Apollo user the task is assigned to"},"contact_ids":{"type":"array","required":true,"visibility":"user-or-llm","description":"Array of contact IDs. One task is created per contact."},"priority":{"type":"string","required":false,"visibility":"user-or-llm","description":"Task priority: \\"high\\", \\"medium\\", or \\"low\\" (defaults to \\"medium\\")"},"due_at":{"type":"string","required":true,"visibility":"user-or-llm","description":"Due date/time in ISO 8601 format (e.g., \\"2024-12-31T23:59:59Z\\")"},"type":{"type":"string","required":true,"visibility":"user-or-llm","description":"Task type: \\"call\\", \\"outreach_manual_email\\", \\"linkedin_step_connect\\", \\"linkedin_step_message\\", \\"linkedin_step_view_profile\\", \\"linkedin_step_interact_post\\", or \\"action_item\\""},"status":{"type":"string","required":true,"visibility":"user-or-llm","description":"Task status: \\"scheduled\\", \\"completed\\", or \\"skipped\\""},"note":{"type":"string","required":false,"visibility":"user-or-llm","description":"Free-form note providing context for the task"}},"hostedApiKey":"none"},"apollo_task_search":{"id":"apollo_task_search","name":"Apollo Search Tasks","description":"Search for tasks in Apollo","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Apollo API key (master key required)"},"sort_by_field":{"type":"string","required":false,"visibility":"user-or-llm","description":"Sort field: \\"task_due_at\\" or \\"task_priority\\""},"open_factor_names":{"type":"array","required":false,"visibility":"user-or-llm","description":"Filter by status. Common values: [\\"task_types\\"] for open tasks, [\\"task_completed_at\\"] for completed tasks."},"page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Page number for pagination (e.g., 1, 2, 3)"},"per_page":{"type":"number","required":false,"visibility":"user-or-llm","description":"Results per page, max 100 (e.g., 25, 50, 100)"}},"hostedApiKey":"none"},"appconfig_create_application":{"id":"appconfig_create_application","name":"AppConfig Create Application","description":"Create an application in AWS AppConfig","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the application to create"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"Description of the application"}},"hostedApiKey":"none"},"appconfig_create_configuration_profile":{"id":"appconfig_create_configuration_profile","name":"AppConfig Create Configuration Profile","description":"Create a configuration profile in an AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID to create the configuration profile in"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the configuration profile"},"locationUri":{"type":"string","required":true,"visibility":"user-or-llm","description":"Where the configuration is stored. Use \\"hosted\\" for AppConfig-hosted configurations, or an SSM/S3 URI"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"Description of the configuration profile"},"retrievalRoleArn":{"type":"string","required":false,"visibility":"user-or-llm","description":"ARN of an IAM role to retrieve the configuration (required for non-hosted URIs)"},"type":{"type":"string","required":false,"visibility":"user-or-llm","description":"Profile type: AWS.Freeform (default) or AWS.AppConfig.FeatureFlags"}},"hostedApiKey":"none"},"appconfig_create_environment":{"id":"appconfig_create_environment","name":"AppConfig Create Environment","description":"Create an environment for an AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID to create the environment in"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the environment to create"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"Description of the environment"}},"hostedApiKey":"none"},"appconfig_create_hosted_configuration_version":{"id":"appconfig_create_hosted_configuration_version","name":"AppConfig Create Hosted Configuration Version","description":"Create a new hosted configuration version for an AppConfig configuration profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to add the version to"},"content":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration content (e.g., a JSON or YAML document)"},"contentType":{"type":"string","required":true,"visibility":"user-or-llm","description":"Content type of the configuration (e.g., application/json, text/plain)"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"Description of the configuration version"},"latestVersionNumber":{"type":"number","required":false,"visibility":"user-or-llm","description":"The version number of the latest version, used for optimistic concurrency"},"versionLabel":{"type":"string","required":false,"visibility":"user-or-llm","description":"A user-defined label for the configuration version"}},"hostedApiKey":"none"},"appconfig_delete_application":{"id":"appconfig_delete_application","name":"AppConfig Delete Application","description":"Delete an AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID to delete"}},"hostedApiKey":"none"},"appconfig_delete_configuration_profile":{"id":"appconfig_delete_configuration_profile","name":"AppConfig Delete Configuration Profile","description":"Delete an AWS AppConfig configuration profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to delete"}},"hostedApiKey":"none"},"appconfig_delete_environment":{"id":"appconfig_delete_environment","name":"AppConfig Delete Environment","description":"Delete an AWS AppConfig environment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the environment"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID to delete"}},"hostedApiKey":"none"},"appconfig_delete_hosted_configuration_version":{"id":"appconfig_delete_hosted_configuration_version","name":"AppConfig Delete Hosted Configuration Version","description":"Delete a specific hosted configuration version from an AppConfig profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID that owns the version"},"versionNumber":{"type":"number","required":true,"visibility":"user-or-llm","description":"The version number to delete"}},"hostedApiKey":"none"},"appconfig_get_application":{"id":"appconfig_get_application","name":"AppConfig Get Application","description":"Get details about a single AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID to retrieve"}},"hostedApiKey":"none"},"appconfig_get_configuration":{"id":"appconfig_get_configuration","name":"AppConfig Get Configuration","description":"Retrieve the latest deployed configuration for an AppConfig application, environment, and profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID or name to retrieve configuration for"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID or name to retrieve configuration for"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID or name to retrieve"}},"hostedApiKey":"none"},"appconfig_get_configuration_profile":{"id":"appconfig_get_configuration_profile","name":"AppConfig Get Configuration Profile","description":"Get details about a single AWS AppConfig configuration profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to retrieve"}},"hostedApiKey":"none"},"appconfig_get_deployment":{"id":"appconfig_get_deployment","name":"AppConfig Get Deployment","description":"Get details about a specific AWS AppConfig deployment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID of the deployment"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID of the deployment"},"deploymentNumber":{"type":"number","required":true,"visibility":"user-or-llm","description":"The sequence number of the deployment"}},"hostedApiKey":"none"},"appconfig_get_environment":{"id":"appconfig_get_environment","name":"AppConfig Get Environment","description":"Get details about a single AWS AppConfig environment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the environment"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID to retrieve"}},"hostedApiKey":"none"},"appconfig_get_hosted_configuration_version":{"id":"appconfig_get_hosted_configuration_version","name":"AppConfig Get Hosted Configuration Version","description":"Retrieve a specific hosted configuration version from an AppConfig profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to read the version from"},"versionNumber":{"type":"number","required":true,"visibility":"user-or-llm","description":"The version number to retrieve"}},"hostedApiKey":"none"},"appconfig_list_applications":{"id":"appconfig_list_applications","name":"AppConfig List Applications","description":"List applications in AWS AppConfig","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"maxResults":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of applications to return (1-50)"},"nextToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token from a previous response"}},"hostedApiKey":"none"},"appconfig_list_configuration_profiles":{"id":"appconfig_list_configuration_profiles","name":"AppConfig List Configuration Profiles","description":"List configuration profiles for an AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profiles"},"maxResults":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of configuration profiles to return (1-50)"},"nextToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token from a previous response"}},"hostedApiKey":"none"},"appconfig_list_deployment_strategies":{"id":"appconfig_list_deployment_strategies","name":"AppConfig List Deployment Strategies","description":"List deployment strategies available in AWS AppConfig","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"maxResults":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of deployment strategies to return (1-50)"},"nextToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token from a previous response"}},"hostedApiKey":"none"},"appconfig_list_deployments":{"id":"appconfig_list_deployments","name":"AppConfig List Deployments","description":"List deployments for an AWS AppConfig environment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID of the deployments"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID of the deployments"},"maxResults":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of deployments to return (1-50)"},"nextToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token from a previous response"}},"hostedApiKey":"none"},"appconfig_list_environments":{"id":"appconfig_list_environments","name":"AppConfig List Environments","description":"List environments for an AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the environments"},"maxResults":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of environments to return (1-50)"},"nextToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token from a previous response"}},"hostedApiKey":"none"},"appconfig_list_hosted_configuration_versions":{"id":"appconfig_list_hosted_configuration_versions","name":"AppConfig List Hosted Configuration Versions","description":"List hosted configuration versions for an AWS AppConfig configuration profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to list versions for"},"maxResults":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of versions to return (1-50)"},"nextToken":{"type":"string","required":false,"visibility":"user-or-llm","description":"Pagination token from a previous response"}},"hostedApiKey":"none"},"appconfig_start_deployment":{"id":"appconfig_start_deployment","name":"AppConfig Start Deployment","description":"Start deploying a configuration version to an AWS AppConfig environment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID to deploy in"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID to deploy to"},"deploymentStrategyId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The deployment strategy ID to use"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to deploy"},"configurationVersion":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration version to deploy"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"Description of the deployment"}},"hostedApiKey":"none"},"appconfig_stop_deployment":{"id":"appconfig_stop_deployment","name":"AppConfig Stop Deployment","description":"Stop an in-progress AWS AppConfig deployment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID of the deployment"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID of the deployment"},"deploymentNumber":{"type":"number","required":true,"visibility":"user-or-llm","description":"The sequence number of the deployment to stop"}},"hostedApiKey":"none"},"appconfig_update_application":{"id":"appconfig_update_application","name":"AppConfig Update Application","description":"Update the name or description of an AWS AppConfig application","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID to update"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"New name for the application"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"New description for the application"}},"hostedApiKey":"none"},"appconfig_update_configuration_profile":{"id":"appconfig_update_configuration_profile","name":"AppConfig Update Configuration Profile","description":"Update the name, description, or retrieval role of an AppConfig configuration profile","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the configuration profile"},"configurationProfileId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The configuration profile ID to update"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"New name for the configuration profile"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"New description for the configuration profile"},"retrievalRoleArn":{"type":"string","required":false,"visibility":"user-or-llm","description":"New ARN of the IAM role used to retrieve the configuration"}},"hostedApiKey":"none"},"appconfig_update_environment":{"id":"appconfig_update_environment","name":"AppConfig Update Environment","description":"Update the name or description of an AWS AppConfig environment","version":"1.0","params":{"region":{"type":"string","required":true,"visibility":"user-only","description":"AWS region (e.g., us-east-1)"},"accessKeyId":{"type":"string","required":true,"visibility":"user-only","description":"AWS access key ID"},"secretAccessKey":{"type":"string","required":true,"visibility":"user-only","description":"AWS secret access key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The application ID that owns the environment"},"environmentId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The environment ID to update"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"New name for the environment"},"description":{"type":"string","required":false,"visibility":"user-or-llm","description":"New description for the environment"}},"hostedApiKey":"none"},"arxiv_get_author_papers":{"id":"arxiv_get_author_papers","name":"ArXiv Get Author Papers","description":"Search for papers by a specific author on ArXiv.","version":"1.0.0","params":{"authorName":{"type":"string","required":true,"visibility":"user-or-llm","description":"Author name to search for"},"maxResults":{"type":"number","required":false,"visibility":"user-only","description":"Maximum number of results to return (default: 10, max: 2000)"}},"hostedApiKey":"none"},"arxiv_get_paper":{"id":"arxiv_get_paper","name":"ArXiv Get Paper","description":"Get detailed information about a specific ArXiv paper by its ID.","version":"1.0.0","params":{"paperId":{"type":"string","required":true,"visibility":"user-or-llm","description":"ArXiv paper ID (e.g., \\"1706.03762\\")"}},"hostedApiKey":"none"},"arxiv_search":{"id":"arxiv_search","name":"ArXiv Search","description":"Search for academic papers on ArXiv by keywords, authors, titles, or other fields.","version":"1.0.0","params":{"searchQuery":{"type":"string","required":true,"visibility":"user-or-llm","description":"The search query to execute"},"searchField":{"type":"string","required":false,"visibility":"user-only","description":"Field to search in: all, ti (title), au (author), abs (abstract), co (comment), jr (journal), cat (category), rn (report number)"},"maxResults":{"type":"number","required":false,"visibility":"user-only","description":"Maximum number of results to return (default: 10, max: 2000)"},"sortBy":{"type":"string","required":false,"visibility":"user-only","description":"Sort by: relevance, lastUpdatedDate, submittedDate (default: relevance)"},"sortOrder":{"type":"string","required":false,"visibility":"user-only","description":"Sort order: ascending, descending (default: descending)"}},"hostedApiKey":"none"},"asana_add_comment":{"id":"asana_add_comment","name":"Asana Add Comment","description":"Add a comment (story) to an Asana task","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"taskGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana task GID (numeric string)"},"text":{"type":"string","required":true,"visibility":"user-or-llm","description":"The text content of the comment"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_add_followers":{"id":"asana_add_followers","name":"Asana Add Followers","description":"Add one or more followers to an Asana task","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"taskGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"GID of the Asana task (numeric string)"},"followers":{"type":"array","required":true,"visibility":"user-or-llm","description":"Array of user GIDs to add as followers to the task"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_create_project":{"id":"asana_create_project","name":"Asana Create Project","description":"Create a new project in an Asana workspace","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"workspace":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana workspace GID (numeric string) where the project will be created"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the project"},"notes":{"type":"string","required":false,"visibility":"user-or-llm","description":"Notes or description for the project"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_create_section":{"id":"asana_create_section","name":"Asana Create Section","description":"Create a new section in an Asana project","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"projectGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"GID of the Asana project (numeric string) to add the section to"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the section"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_create_subtask":{"id":"asana_create_subtask","name":"Asana Create Subtask","description":"Create a subtask under an existing Asana task","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"taskGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"GID of the parent Asana task (numeric string)"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the subtask"},"notes":{"type":"string","required":false,"visibility":"user-or-llm","description":"Notes or description for the subtask"},"assignee":{"type":"string","required":false,"visibility":"user-or-llm","description":"User GID to assign the subtask to"},"due_on":{"type":"string","required":false,"visibility":"user-or-llm","description":"Due date in YYYY-MM-DD format"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_create_task":{"id":"asana_create_task","name":"Asana Create Task","description":"Create a new task in Asana","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"workspace":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana workspace GID (numeric string) where the task will be created"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"Name of the task"},"notes":{"type":"string","required":false,"visibility":"user-or-llm","description":"Notes or description for the task"},"assignee":{"type":"string","required":false,"visibility":"user-or-llm","description":"User GID to assign the task to"},"due_on":{"type":"string","required":false,"visibility":"user-or-llm","description":"Due date in YYYY-MM-DD format"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_delete_task":{"id":"asana_delete_task","name":"Asana Delete Task","description":"Delete an Asana task by its GID (moves it to the trash)","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"taskGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"GID of the Asana task to delete (numeric string)"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_get_project":{"id":"asana_get_project","name":"Asana Get Project","description":"Retrieve a single Asana project by its GID","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"projectGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana project GID (numeric string) to retrieve"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_get_projects":{"id":"asana_get_projects","name":"Asana Get Projects","description":"Retrieve all projects from an Asana workspace","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"workspace":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana workspace GID (numeric string) to retrieve projects from"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_get_task":{"id":"asana_get_task","name":"Asana Get Task","description":"Retrieve a single task by GID or get multiple tasks with filters","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"taskGid":{"type":"string","required":false,"visibility":"user-or-llm","description":"The globally unique identifier (GID) of the task. If not provided, will get multiple tasks."},"workspace":{"type":"string","required":false,"visibility":"user-or-llm","description":"Asana workspace GID (numeric string) to filter tasks (required when not using taskGid)"},"project":{"type":"string","required":false,"visibility":"user-or-llm","description":"Asana project GID (numeric string) to filter tasks"},"limit":{"type":"number","required":false,"visibility":"user-or-llm","description":"Maximum number of tasks to return (default: 50)"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_list_sections":{"id":"asana_list_sections","name":"Asana List Sections","description":"List all sections in an Asana project","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"projectGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"GID of the Asana project (numeric string) to list sections from"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_list_workspaces":{"id":"asana_list_workspaces","name":"Asana List Workspaces","description":"List all Asana workspaces and organizations the authenticated user belongs to","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_search_tasks":{"id":"asana_search_tasks","name":"Asana Search Tasks","description":"Search for tasks in an Asana workspace","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"workspace":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana workspace GID (numeric string) to search tasks in"},"text":{"type":"string","required":false,"visibility":"user-or-llm","description":"Text to search for in task names"},"assignee":{"type":"string","required":false,"visibility":"user-or-llm","description":"Filter tasks by assignee user GID"},"projects":{"type":"array","required":false,"visibility":"user-or-llm","description":"Array of Asana project GIDs (numeric strings) to filter tasks by"},"completed":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Filter by completion status"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"asana_update_task":{"id":"asana_update_task","name":"Asana Update Task","description":"Update an existing task in Asana","version":"1.0.0","params":{"accessToken":{"type":"string","required":true,"visibility":"hidden","description":"OAuth access token for Asana"},"taskGid":{"type":"string","required":true,"visibility":"user-or-llm","description":"Asana task GID (numeric string) of the task to update"},"name":{"type":"string","required":false,"visibility":"user-or-llm","description":"Updated name for the task"},"notes":{"type":"string","required":false,"visibility":"user-or-llm","description":"Updated notes or description for the task"},"assignee":{"type":"string","required":false,"visibility":"user-or-llm","description":"Updated assignee user GID"},"completed":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Mark task as completed or not completed"},"due_on":{"type":"string","required":false,"visibility":"user-or-llm","description":"Updated due date in YYYY-MM-DD format"}},"oauth":{"required":true,"provider":"asana"},"hostedApiKey":"none"},"ashby_add_candidate_tag":{"id":"ashby_add_candidate_tag","name":"Ashby Add Candidate Tag","description":"Adds a tag to a candidate in Ashby and returns the updated candidate.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"candidateId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the candidate to add the tag to"},"tagId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the tag to add"}},"hostedApiKey":"none"},"ashby_anonymize_candidate":{"id":"ashby_anonymize_candidate","name":"Ashby Anonymize Candidate","description":"Strips personally identifiable information from a candidate in Ashby. This does not delete the candidate - the record and its applications remain, with the PII removed. Ashby exposes no candidate deletion endpoint; true deletion is UI-only, restricted by role, and limited to a 10-day window. Requires the candidatesWrite permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"candidateId":{"type":"string","required":true,"visibility":"user-or-llm","description":"UUID of the candidate to anonymize"}},"hostedApiKey":"none"},"ashby_change_application_source":{"id":"ashby_change_application_source","name":"Ashby Change Application Source","description":"Changes the source attributed to an existing application, so programmatically created applications report correctly on the recruiting side. Requires the candidatesWrite permission.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"UUID of the application whose source should change"},"sourceId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the source to attribute the application to, as returned by List Sources. Omit only when unsetSource is true."},"unsetSource":{"type":"boolean","required":false,"visibility":"user-or-llm","description":"Set true to deliberately clear the application source. Required to unset, so that a missing or empty sourceId cannot wipe attribution by accident."}},"hostedApiKey":"none"},"ashby_change_application_stage":{"id":"ashby_change_application_stage","name":"Ashby Change Application Stage","description":"Moves an application to a different interview stage. Requires an archive reason when moving to an Archived stage.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"applicationId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the application to update the stage of"},"interviewStageId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the interview stage to move the application to"},"archiveReasonId":{"type":"string","required":false,"visibility":"user-or-llm","description":"Archive reason UUID. Required when moving to an Archived stage, ignored otherwise"}},"hostedApiKey":"none"},"ashby_create_application":{"id":"ashby_create_application","name":"Ashby Create Application","description":"Creates a new application for a candidate on a job. Optionally specify interview plan, stage, source, and credited user.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"candidateId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the candidate to consider for the job"},"jobId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the job to consider the candidate for"},"interviewPlanId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the interview plan to use (defaults to the job default plan)"},"interviewStageId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the interview stage to place the application in (defaults to first Lead stage)"},"sourceId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the source to set on the application"},"creditedToUserId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the user the application is credited to"},"createdAt":{"type":"string","required":false,"visibility":"user-or-llm","description":"ISO 8601 timestamp to set as the application creation date (defaults to now)"}},"hostedApiKey":"none"},"ashby_create_candidate":{"id":"ashby_create_candidate","name":"Ashby Create Candidate","description":"Creates a new candidate record in Ashby.","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"name":{"type":"string","required":true,"visibility":"user-or-llm","description":"The candidate full name"},"email":{"type":"string","required":false,"visibility":"user-or-llm","description":"Primary email address for the candidate"},"phoneNumber":{"type":"string","required":false,"visibility":"user-or-llm","description":"Primary phone number for the candidate"},"linkedInUrl":{"type":"string","required":false,"visibility":"user-or-llm","description":"LinkedIn profile URL"},"githubUrl":{"type":"string","required":false,"visibility":"user-or-llm","description":"GitHub profile URL"},"website":{"type":"string","required":false,"visibility":"user-or-llm","description":"Personal website URL"},"sourceId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the source to attribute the candidate to"},"creditedToUserId":{"type":"string","required":false,"visibility":"user-or-llm","description":"UUID of the Ashby user to credit with sourcing this candidate"},"createdAt":{"type":"string","required":false,"visibility":"user-or-llm","description":"Backdated creation timestamp in ISO 8601 (e.g. 2024-01-01T00:00:00Z). Defaults to now."},"alternateEmailAddresses":{"type":"json","required":false,"visibility":"user-or-llm","description":"Array of additional email address strings to add to the candidate, e.g. [\\"a@x.com\\",\\"b@y.com\\"]"}},"hostedApiKey":"none"},"ashby_create_note":{"id":"ashby_create_note","name":"Ashby Create Note","description":"Creates a note on a candidate in Ashby. Supports plain text and HTML content (bold, italic, underline, links, lists, code).","version":"1.0.0","params":{"apiKey":{"type":"string","required":true,"visibility":"user-only","description":"Ashby API Key"},"candidateId":{"type":"string","required":true,"visibility":"user-or-llm","description":"The UUID of the candidate to add the note to"},"note":{"type":"string","required":true,"visibility":"user-or-llm","description":"The note content. If noteType is text/html, supports: , , , ,