openapi: 3.2.0 info: description: The One API. Universal API integration platform for AI agents and applications. license: name: '' title: One Organizations API version: 5.35.0 tags: - description: Programmatically manage organizations, their members, invitations, AuthKit configuration, and API keys with a service-account API key name: Organizations paths: /v1/management/organizations/setup: post: description: Create a new organization and mint a service-account API key for it in a single call. Accepts any regular API key or a session cookie; the returned key is what subsequent /v1/management/* calls for this organization use. operationId: setup_organization requestBody: content: application/json: schema: $ref: '#/components/schemas/SetupOrganizationParams' required: true responses: '200': content: application/json: schema: $ref: '#/components/schemas/SetupOrganizationResponse' description: Organization created with a new service-account API key security: - X-One-Secret: [] summary: Setup Organization tags: - Organizations /v1/management/organizations/{org_id}: delete: description: Soft-delete an organization. The caller must authenticate with the organization's service-account key. Fails with 409 if any projects exist in the organization or if any org-level connections are active — those must be cleaned up first. As part of the cascade, every active org-scoped API key (including the service-account key itself) is revoked. operationId: delete_organization parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/OrganizationView' description: Organization soft-deleted; all org-scoped keys revoked '404': description: Organization not found '409': description: Organization has projects or active org-level connections security: - X-One-Secret: [] summary: Delete Organization tags: - Organizations get: description: Fetch settings for an organization, including its members and projects. operationId: get_organization parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/OrganizationSettingsView' description: Organization settings with embedded members and projects security: - X-One-Secret: [] summary: Get Organization tags: - Organizations put: description: Update the name or description of an organization. operationId: update_organization_settings parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string requestBody: content: application/json: example: description: Updated tenant description name: Acme Corp schema: $ref: '#/components/schemas/UpdateOrganizationSettingsParams' required: true responses: '200': content: application/json: schema: $ref: '#/components/schemas/OrganizationSettingsView' description: Updated organization settings security: - X-One-Secret: [] summary: Update Organization Settings tags: - Organizations /v1/management/organizations/{org_id}/authkit: put: description: Create or update the Embeddable Auth (OAuth provider) configuration at the organization level. operationId: upsert_organization_authkit parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string requestBody: content: application/json: schema: $ref: '#/components/schemas/UpsertOrganizationAuthKitParams' required: true responses: '200': content: application/json: schema: $ref: '#/components/schemas/ConnectedPlatformView' description: Embeddable Auth row created or updated security: - X-One-Secret: [] summary: Configure Organization Embeddable Auth tags: - Organizations /v1/management/organizations/{org_id}/invitations: get: description: Return a paginated list of pending invitations for this organization. operationId: list_organization_invitations parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/Paginated_InvitationView' description: Paginated list of invitations security: - X-One-Secret: [] summary: List Organization Invitations tags: - Organizations post: description: Invite someone to join this organization by email. operationId: create_organization_invitation parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string requestBody: content: application/json: schema: $ref: '#/components/schemas/CreateInvitationParams' required: true responses: '200': content: application/json: schema: $ref: '#/components/schemas/InvitationView' description: Invitation created, or matching active invitation returned security: - X-One-Secret: [] summary: Create Organization Invitation tags: - Organizations /v1/management/organizations/{org_id}/invitations/{invitation_id}: delete: description: Cancel a pending organization or project invitation under this org. operationId: revoke_organization_invitation parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string - description: Invitation ID in: path name: invitation_id required: true schema: type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/InvitationView' description: Invitation revoked security: - X-One-Secret: [] summary: Revoke Organization Invitation tags: - Organizations /v1/management/organizations/{org_id}/invitations/{invitation_id}/resend: post: description: Rotate the token on a pending invitation and resend the invitation email. operationId: resend_organization_invitation parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string - description: Invitation ID in: path name: invitation_id required: true schema: type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/InvitationView' description: Invitation resent with a freshly rotated token security: - X-One-Secret: [] summary: Resend Organization Invitation tags: - Organizations /v1/management/organizations/{org_id}/keys: get: description: Return a paginated list of API keys scoped to this organization, filtered to the environment of the calling service-account key. The list includes the organization's service-account key alongside any keys minted via Create Organization Key. operationId: list_organization_keys parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/Paginated_OrganizationEventAccessView' description: Paginated list of organization-scoped API keys security: - X-One-Secret: [] summary: List Organization Keys tags: - Organizations post: description: Mint an additional API key scoped to this organization. operationId: create_organization_key parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string requestBody: content: application/json: schema: $ref: '#/components/schemas/CreateOrganizationKeyParams' required: true responses: '200': content: application/json: schema: $ref: '#/components/schemas/OrganizationEventAccessView' description: Organization-scoped API key created security: - X-One-Secret: [] summary: Create Organization Key tags: - Organizations /v1/management/organizations/{org_id}/keys/{key_id}: delete: description: Revoke an organization-scoped API key created via Create Organization Key. The organization's service-account key cannot be deleted through this endpoint; revoke it by deleting the organization itself. The caller must authenticate with the organization's service-account key — other organization keys are not accepted. operationId: delete_organization_key parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string - description: Event access key ID in: path name: key_id required: true schema: format: int32 type: integer responses: '200': description: Organization-scoped key revoked '403': description: Target key is a service-account key and cannot be deleted via this endpoint '404': description: Key not found in this organization security: - X-One-Secret: [] summary: Delete Organization Key tags: - Organizations /v1/management/organizations/{org_id}/keys/{key_id}/configure: put: description: Replace the passthrough access rules on an organization-scoped API key. The configured `methods` and `rules` are evaluated ONLY when the key is used to call the passthrough API — they do NOT gate first-party endpoints such as /v1/connections/* CRUD, webhooks, vault, etc., which continue to be authorized by the key's role and tenancy. Use this endpoint to narrow which external-platform calls the key can proxy. operationId: configure_organization_key parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string - description: Event access key ID in: path name: key_id required: true schema: format: int32 type: integer requestBody: content: application/json: example: methods: - GET - POST rules: - actionIds: - act_01HXXXXXXXXXXXXXXXXXXXXXXX connectionKey: live::gmail::default methods: - GET type: connection schema: $ref: '#/components/schemas/ConfigureAccessParams' required: true responses: '200': description: Access rules replaced on the target key '404': description: Key not found in this organization security: - X-One-Secret: [] summary: Configure Organization Key Access tags: - Organizations /v1/management/organizations/{org_id}/members: get: description: Return a paginated list of users who belong to this organization. operationId: list_organization_members parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/Paginated_ManagementOrganizationMemberView' description: Paginated list of organization members security: - X-One-Secret: [] summary: List Organization Members tags: - Organizations put: description: Change the role assigned to a user in this organization. operationId: update_organization_member_role parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string requestBody: content: application/json: schema: $ref: '#/components/schemas/UpdateMemberRoleParams' required: true responses: '200': content: application/json: schema: $ref: '#/components/schemas/ManagementOrganizationMemberView' description: Updated member security: - X-One-Secret: [] summary: Update Organization Member Role tags: - Organizations /v1/management/organizations/{org_id}/members/{user_id}: delete: description: Remove a user from the organization. The underlying user account stays intact. operationId: remove_organization_member parameters: - description: Organization ID in: path name: org_id required: true schema: format: uuid type: string - description: User ID of the member to remove in: path name: user_id required: true schema: format: uuid type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/RemoveMemberResponse' description: Member removed security: - X-One-Secret: [] summary: Remove Organization Member tags: - Organizations components: schemas: OrganizationSettingsView: properties: additionalAiAgentSeats: format: int32 type: integer createdAt: format: date-time type: string createdBy: format: uuid type: string description: type: - string - 'null' id: format: uuid type: string members: items: $ref: '#/components/schemas/OrganizationMemberView' type: array name: type: string ownerId: format: uuid type: string pid: type: string projects: items: $ref: '#/components/schemas/ProjectView' type: array slug: type: string updatedAt: format: date-time type: string required: - id - name - pid - slug - createdBy - ownerId - createdAt - updatedAt - additionalAiAgentSeats - members - projects type: object ProjectView: properties: additionalAiAgentSeats: format: int32 type: integer createdAt: format: date-time type: string createdBy: format: uuid type: string description: type: - string - 'null' id: format: uuid type: string name: type: string organizationId: format: uuid type: string ownerId: format: uuid type: string pid: type: string slug: type: string updatedAt: format: date-time type: string required: - id - organizationId - name - pid - slug - createdBy - ownerId - createdAt - updatedAt - additionalAiAgentSeats type: object ConnectionType: enum: - api - databasesql - databasenosql - filesystem - stream - custom type: string OrganizationView: properties: additionalAiAgentSeats: format: int32 type: integer createdAt: format: date-time type: string createdBy: format: uuid type: string description: type: - string - 'null' id: format: uuid type: string name: type: string ownerId: format: uuid type: string pid: type: string rejectReason: type: - string - 'null' rejectedAt: format: date-time type: - string - 'null' slug: type: string updatedAt: format: date-time type: string verifiedAt: format: date-time type: - string - 'null' required: - id - name - pid - slug - createdBy - ownerId - createdAt - updatedAt - additionalAiAgentSeats type: object ConnectedPlatformId: description: Prefixed ID with 'conn_plf' prefix (e.g., 'conn_plf_1C'), also accepts raw integer type: string SecretKeyEnvironment: enum: - test - live type: string Paginated_InvitationView: properties: page: format: int64 minimum: 0 type: integer pages: format: int64 minimum: 0 type: integer rows: items: properties: email: type: string id: type: string organizationId: format: uuid type: string projectId: format: uuid type: - string - 'null' status: type: string required: - id - organizationId - email - status type: object type: array total: format: int64 minimum: 0 type: integer required: - rows - total - pages - page type: object SetupOrganizationResponse: description: Response body for `POST /v1/management/organizations/setup`. properties: key: $ref: '#/components/schemas/OrganizationEventAccessView' description: 'The freshly minted service-account key scoped to the new organization. The `accessKey` field is the only point at which the full secret is exposed.' organization: $ref: '#/components/schemas/OrganizationView' description: The newly created organization. required: - organization - key type: object OrganizationEventAccessView: description: Organization-scoped event access view for API keys properties: accessKey: type: string active: type: boolean changeLog: $ref: '#/components/schemas/ChangeLog' connectionType: $ref: '#/components/schemas/ConnectionType' createdAt: format: date-time type: string default: type: boolean deleted: type: boolean environment: $ref: '#/components/schemas/SecretKeyEnvironment' id: $ref: '#/components/schemas/EventAccessId' key: type: string keyPreview: type: - string - 'null' name: type: - string - 'null' organizationId: format: uuid type: - string - 'null' tags: items: type: string type: array throughput: format: int32 type: - integer - 'null' updatedAt: format: date-time type: string userId: format: uuid type: string version: type: string required: - id - userId - key - connectionType - accessKey - environment - default - createdAt - updatedAt - version - deleted - changeLog - tags - active type: object ChangeLog: type: object NonEmptyString: type: string InvitationView: properties: email: type: string id: type: string organizationId: format: uuid type: string projectId: format: uuid type: - string - 'null' status: type: string required: - id - organizationId - email - status type: object AccessRule: description: 'A single access-control rule applied to a connection. Today the only variant is `Connection`, which targets a connection by its public connection key. The serde tag `type` lets future variants (e.g. platform-wide rules) coexist without changing the wire shape.' oneOf: - description: 'Restricts the key to a specific connection. The connection must already exist within the same scope (org or project) as the key being configured; unresolved keys are rejected by the server.' properties: actionIds: description: 'Optional list of action IDs that further narrow the rule. When set, only these actions on the referenced connection are reachable; when omitted, all actions on the connection are permitted.' items: type: string type: - array - 'null' connectionKey: description: 'Public-facing key of the connection this rule targets, for example `live::gmail::default`.' type: string methods: description: 'HTTP methods allowed against this connection, overriding the request-level global list. Omitted inherits that list, or (in a consent grant) permits every method — except that an `action_ids`-scoped rule never confers connection-record management, only the listed actions.' items: $ref: '#/components/schemas/Method' type: - array - 'null' type: enum: - connection type: string required: - connectionKey - type type: object RemoveMemberResponse: properties: message: type: string organizationId: format: uuid type: string projectId: format: uuid type: - string - 'null' userId: format: uuid type: string required: - message - userId - organizationId type: object UpsertOrganizationAuthKitParams: additionalProperties: false description: 'Request body for `PUT /v1/management/organizations/{org_id}/authkit`.' properties: active: description: 'Whether this OAuth configuration is enabled. When `false` the platform is hidden from the Embeddable Auth picker for end users in this scope and environment, even if credentials are present.' type: boolean clientId: oneOf: - type: 'null' - $ref: '#/components/schemas/NonEmptyString' description: 'OAuth 2.0 client ID issued by the platform''s developer console for your OAuth app. Required when `useDefaultOauthCreds` is false or omitted. Ignored when `useDefaultOauthCreds` is true.' clientSecret: oneOf: - type: 'null' - $ref: '#/components/schemas/NonEmptyString' description: 'OAuth 2.0 client secret paired with `clientId`. Stored encrypted at rest and never returned in responses. Required when `useDefaultOauthCreds` is false or omitted. Ignored when `useDefaultOauthCreds` is true.' connectionDefinitionId: $ref: '#/components/schemas/ConnectionDefinitionId' environment: $ref: '#/components/schemas/SecretKeyEnvironment' description: 'Which environment (`test` or `live`) this configuration applies to. Each environment has its own row, so a test OAuth app and a live OAuth app can coexist for the same platform.' guide: description: 'Optional URL shown behind the "View connection guide" link in the Embeddable Auth component for this platform. Typically a page in your docs explaining how end users should obtain whatever the platform requires (account, workspace, etc.) before connecting. Must be an absolute `http://` or `https://` URL; other schemes (`javascript:`, `data:`, `file:`, …) are rejected to prevent stored-XSS / phishing on dashboards and the AuthKit widget that render this value as a clickable link.' type: - string - 'null' scopes: description: 'Space-separated list of OAuth scopes to request from the platform (RFC 6749 §3.3 format, e.g. `"read:user offline_access"`). Applied to both the authorization-URL `scope` parameter and the client-credentials token exchange. Leave unset to use the platform''s default scope set.' type: - string - 'null' useDefaultOauthCreds: description: 'When `true`, use Pica''s managed OAuth app for this platform instead of supplying your own `clientId` and `clientSecret`.' type: - boolean - 'null' required: - connectionDefinitionId - environment - active type: object EventAccessId: description: Prefixed ID with 'evt_ac' prefix (e.g., 'evt_ac_1C'), also accepts raw integer type: string UpdateOrganizationSettingsParams: additionalProperties: false description: 'Body for `PUT /v1/management/organizations/{org_id}`. Both fields are optional individually; omitted fields are left unchanged. The schema-level `example` is here so the generated docs render a usable curl body instead of `{}`.' example: description: Updated tenant description name: Acme Corp properties: description: type: - string - 'null' name: type: - string - 'null' type: object Paginated_OrganizationEventAccessView: properties: page: format: int64 minimum: 0 type: integer pages: format: int64 minimum: 0 type: integer rows: items: description: Organization-scoped event access view for API keys properties: accessKey: type: string active: type: boolean changeLog: $ref: '#/components/schemas/ChangeLog' connectionType: $ref: '#/components/schemas/ConnectionType' createdAt: format: date-time type: string default: type: boolean deleted: type: boolean environment: $ref: '#/components/schemas/SecretKeyEnvironment' id: $ref: '#/components/schemas/EventAccessId' key: type: string keyPreview: type: - string - 'null' name: type: - string - 'null' organizationId: format: uuid type: - string - 'null' tags: items: type: string type: array throughput: format: int32 type: - integer - 'null' updatedAt: format: date-time type: string userId: format: uuid type: string version: type: string required: - id - userId - key - connectionType - accessKey - environment - default - createdAt - updatedAt - version - deleted - changeLog - tags - active type: object type: array total: format: int64 minimum: 0 type: integer required: - rows - total - pages - page type: object SetupOrganizationParams: additionalProperties: false description: 'Request body for `POST /v1/management/organizations/setup`. Creates an organization and mints its first service-account API key in one call. The organization itself is environment-agnostic; the new key inherits its environment from the calling credential (the secret-key the caller used, or the session''s `x-pica-environment` header).' properties: description: description: Optional organization description. type: - string - 'null' keyName: description: 'Optional label for the new key (shown in the dashboard''s API keys list). When omitted, the key is unnamed.' type: - string - 'null' name: description: Human-readable organization name. type: string required: - name type: object OrganizationMemberView: properties: id: format: int32 type: integer joinedAt: format: date-time type: string roleId: format: int32 type: integer roleKey: type: string roleName: type: string userEmail: type: string userFirstName: type: string userId: format: uuid type: string userLastName: type: string userUsername: type: string required: - id - userId - roleId - roleKey - roleName - userEmail - userFirstName - userLastName - userUsername - joinedAt type: object Paginated_ManagementOrganizationMemberView: properties: page: format: int64 minimum: 0 type: integer pages: format: int64 minimum: 0 type: integer rows: items: description: 'Org-member row returned from the management API. Like the dashboard''s `OrganizationMemberView` minus the internal `id` and `roleId` surrogate keys (no management endpoint consumes them; they''re an enumeration sidechannel and an `id` vs `userId` footgun). The dashboard view is unchanged.' properties: joinedAt: format: date-time type: string roleKey: type: string roleName: type: string userEmail: type: string userFirstName: type: string userId: format: uuid type: string userLastName: type: string userUsername: type: string required: - userId - roleKey - roleName - userEmail - userFirstName - userLastName - userUsername - joinedAt type: object type: array total: format: int64 minimum: 0 type: integer required: - rows - total - pages - page type: object ConnectedPlatformView: properties: activatedAt: format: date-time type: - string - 'null' active: type: boolean clientIdDisplay: type: - string - 'null' clientSecretDisplay: type: - string - 'null' connectionDefId: $ref: '#/components/schemas/ConnectionDefinitionId' createdAt: format: date-time type: string environment: $ref: '#/components/schemas/SecretKeyEnvironment' guide: type: - string - 'null' id: $ref: '#/components/schemas/ConnectedPlatformId' image: type: string scopes: type: - string - 'null' secretId: format: uuid type: - string - 'null' tags: items: type: string type: array title: type: string type: type: string useDefaultOauthCreds: type: boolean required: - id - connectionDefId - type - title - image - environment - createdAt - tags - active - useDefaultOauthCreds type: object ManagementOrganizationMemberView: description: 'Org-member row returned from the management API. Like the dashboard''s `OrganizationMemberView` minus the internal `id` and `roleId` surrogate keys (no management endpoint consumes them; they''re an enumeration sidechannel and an `id` vs `userId` footgun). The dashboard view is unchanged.' properties: joinedAt: format: date-time type: string roleKey: type: string roleName: type: string userEmail: type: string userFirstName: type: string userId: format: uuid type: string userLastName: type: string userUsername: type: string required: - userId - roleKey - roleName - userEmail - userFirstName - userLastName - userUsername - joinedAt type: object RoleHierarchy: description: Role hierarchy enum representing the different organizational roles enum: - Member - Manager - Admin type: string ConnectionDefinitionId: description: Prefixed ID with 'conn_def' prefix (e.g., 'conn_def_1C'), also accepts raw integer type: string ConfigureAccessParams: additionalProperties: false description: 'Body for the configure-key endpoints. Replaces (not merges) the access rules on an API key; at least one of `methods` or `rules` must be present. **Scope: passthrough only.** `methods` and `rules` are evaluated only when the key calls the passthrough API (the proxy to the external platform). They do NOT gate first-party endpoints (`/v1/connections/*` CRUD, webhooks, vault, …), which stay authorized by the key''s role and tenancy.' properties: methods: description: 'Global allow-list for passthrough calls only. Matched against the **semantic CRUD method** (`Get`/`Post`/…) on the targeted action definition, NOT the incoming request''s HTTP method. Per-connection `rules` can override it. `null`/omitted leaves it unset (every semantic method allowed globally).' items: $ref: '#/components/schemas/Method' type: - array - 'null' rules: description: 'Per-connection rules for passthrough calls only. When present, the passthrough API can only reach the connections these rules reference. Each rule targets a connection by `connectionKey` and may override the global `methods` or narrow via `actionIds`. See the `AccessRule` schema.' items: $ref: '#/components/schemas/AccessRule' type: - array - 'null' type: object Method: enum: - OPTIONS - GET - POST - PUT - DELETE - HEAD - TRACE - CONNECT - PATCH type: string CreateOrganizationKeyParams: additionalProperties: false description: 'Body for `POST /v1/management/organizations/{org_id}/keys`. Mints an additional regular organization-scoped API key. Same reasoning as [`CreateProjectKeyParams`]: `connectionType` is fixed to `api` internally, and the environment is inherited from the calling credential.' properties: name: description: 'Optional label for the new key (shown in the dashboard''s API keys list). When omitted, the key is unnamed.' type: - string - 'null' type: object CreateInvitationParams: additionalProperties: false description: Body for invitation-create endpoints (org and project). properties: email: type: string expiresAt: description: Optional expiration in ISO 8601 / RFC 3339 format. format: date-time type: - string - 'null' roleKey: oneOf: - type: 'null' - $ref: '#/components/schemas/RoleHierarchy' description: 'Optional role for the invitee. Wire format matches the enum variant exactly (`Member`, `Manager`, `Admin`). Defaults to `Member` when omitted.' required: - email type: object UpdateMemberRoleParams: additionalProperties: false description: Body for member role-update endpoints (org and project). properties: roleKey: $ref: '#/components/schemas/RoleHierarchy' description: 'Target role. Wire format matches the enum variant exactly (`Member`, `Manager`, `Admin`).' userId: format: uuid type: string required: - userId - roleKey type: object securitySchemes: Bearer: scheme: bearer type: http OAuth2: flows: authorizationCode: authorizationUrl: https://api.withone.ai/oauth/authorize scopes: org:ai_skills:read: Read organization AI skills org:ai_skills:write: Create, update, and delete organization AI skills org:authkit:read: Read organization AuthKit resources org:authkit:write: Create, update, and delete organization AuthKit resources org:connections:read: Read organization connections org:connections:write: Create, update, and delete organization connections org:projects:read: Read organization projects org:projects:write: Create, update, and delete organization projects org:secrets:read: Read organization secrets org:secrets:write: Create, update, and delete organization secrets org:workflows:executions:read: Read organization workflow executions org:workflows:executions:write: Create, update, and delete organization workflow executions org:workflows:read: Read organization workflows org:workflows:write: Create, update, and delete organization workflows project:ai_skills:read: Read project AI skills project:ai_skills:write: Create, update, and delete project AI skills project:authkit:read: Read project AuthKit resources project:authkit:write: Create, update, and delete project AuthKit resources project:connections:read: Read project connections project:connections:write: Create, update, and delete project connections project:secrets:read: Read project secrets project:secrets:write: Create, update, and delete project secrets project:workflows:executions:read: Read project workflow executions project:workflows:executions:write: Create, update, and delete project workflow executions project:workflows:read: Read project workflows project:workflows:write: Create, update, and delete project workflows user:ai_skills:read: Read your personal AI skills user:ai_skills:write: Create, update, and delete your personal AI skills user:authkit:read: Read your personal AuthKit resources user:authkit:write: Create, update, and delete your personal AuthKit resources user:connections:read: Read your personal connections user:connections:write: Create, update, and delete your personal connections user:secrets:read: Read your personal secrets user:secrets:write: Create, update, and delete your personal secrets user:workflows:executions:read: Read your personal workflow executions user:workflows:executions:write: Create, update, and delete your personal workflow executions user:workflows:read: Read your personal workflows user:workflows:write: Create, update, and delete your personal workflows tokenUrl: https://api.withone.ai/oauth/token type: oauth2 Session: in: cookie name: withone type: apiKey X-One-Connection-Key: in: header name: X-One-Connection-Key type: apiKey X-One-Secret: in: header name: X-One-Secret type: apiKey X-Pica-Connection-Key: in: header name: X-One-Connection-Key type: apiKey X-Pica-Secret: in: header name: X-One-Secret type: apiKey