Schemas

Whether the local admin API requires an admin bearer token.

Whether this request is authenticated for local admin APIs.

The unique action identifier.

The provider service that owns the action.

The provider-scoped action name.

The action description.

Whether the provider service has an authenticated local connection.

The normalized JSON Schema for the action input.

The normalized JSON Schema for the action output.

Provider service identifier.

Human-readable provider name.

Broad task-oriented provider discovery scenario.

Supported authentication types.

Provider service identifier.

Full action id, usually ..

Provider service that owns the action.

Provider-scoped action name.

Action description.

Normalized JSON Schema for the action input.

Normalized JSON Schema for the action output.

Runtime execution status.

Stable local connection identifier.

Provider service identifier.

Named connection. Same fact as MCP connectionName; HTTP alias, connectionName, and x-oo-connector-alias are equivalent. Defaults to default.

Connection authentication type.

Human-readable account label.

Same value as displayName. Kept for existing /v1 clients.

Whether this is the default connection. Same fact as MCP default.

Granted scopes. Same fact as MCP profile.grantedScopes.

Stable local connection identifier.

Provider service identifier.

Connection authentication type.

Whether the provider is connected.

Whether the connection needs no stored secret.

Stable provider account identity safe for users and agents.

Error payload.

Connection auth type: no_auth, api_key, or custom_credential.

Optional local connection name. Defaults to default.

Credential values keyed by provider-declared field ids.

Provider service identifier.

Whether a local OAuth client config is configured.

Whether the console may use a connection-scoped OAuth client for this provider.

Callback URL to configure in the provider OAuth app.

Provider OAuth capability metadata.

Scopes the runtime will include in new authorization requests.

OAuth app client id.

OAuth app client secret. Optional only for public-client providers.

Non-empty provider-declared scope subset to request. Omit to use every provider default.

Additional OAuth client config values keyed by provider-declared field ids.

Sensitive OAuth client config values keyed by provider-declared field ids.

Runtime token identifier.

User-facing token label.

Action allow rules applied to this stored runtime token.

Action block rules applied to this stored runtime token.

Provider proxies explicitly granted to this token. An empty list grants no proxy access.

Stable connection IDs granted to this stored runtime token. An empty list is unrestricted connection access. IDs are opaque values returned by the connection APIs. Virtual no_auth connections do not require grants.

Creation timestamp.

Last successful use timestamp.

User-facing token label.

Optional action allow rules for the new token.

Optional action block rules for the new token.

Optional provider proxy grants for the new token. Omit or leave empty to deny proxy access.

Optional stable connection IDs granted to the new token. Omit or leave empty for unrestricted connection access. A non-empty list matches exact opaque IDs returned by the connection APIs. Virtual no_auth connections do not require grants.

Action allow rules for this token.

Action block rules for this token.

Provider proxies explicitly granted to this token. An empty list grants no proxy access.

Stable connection IDs granted to this stored token. An empty list is unrestricted connection access. A non-empty list matches exact opaque IDs returned by the connection APIs. Virtual no_auth connections do not require grants.

Action allow rules.

Action block rules.

Proxy service allow rules.

Proxy service block rules.

One complete action and proxy policy layer.

One complete action and proxy policy layer.

Last Runtime policy update timestamp, when configured.

First matching policy rule, when one matched.

Whether policy permits execution.

Policy denial message.

Opaque local transit file identifier.

URL that serves the uploaded file.

Uploaded file size in bytes.

Original uploaded filename.

Uploaded file MIME type.

Run identifier.

Provider service that owns the executed action.

Executed action id.

Runtime entry point that executed the run.

Start timestamp.

Completion timestamp.

Run duration in milliseconds.

Whether the run succeeded.

Provider account identity that the action used, when a connection was available.

Stable connection identifier used by the run.

Stored runtime token identifier used by the run.

Layered execution policy decision. code and message are present on denial.

Redacted action input summary.

Redacted action output summary.

Error code when the run failed.

Error message when the run failed.

Run entries for this page.

Cursor for the next page, when more runs are available.