compliance:inventory:read.
Integrations
GET /{workspace_id}/integrations
Returns one paginated list with a kind discriminator covering six connection types.
The “Kinds” column below uses the short names.
People are counted, never listed. The
per_user_connection_count field excludes abandoned attempts and revoked grants, so it’s current access rather than history, and a user who reconnected counts once. Members’ own tool connections are counts only, never identities.
A member-owned MCP server is the exception. It names its owner by platform ID, the same identity Apps publishes for an app’s owner. One member can hold an active connection and superseded records at the same time, which is why the per-status counts can overlap.
URLs are reduced to host and path because both are customer-typed, so a credential can land in a query string, and this API doesn’t return key material.
Agents
GET /{workspace_id}/agents
Returns one row per AI agent: standalone agents, which are apps of type user_agent, and agents embedded inside apps. Standalone agents also appear in Apps, so agent identity and posture are there. This endpoint adds the agent’s lifecycle and channel vocabulary, plus the model and anonymous-access flag for agents embedded in apps.
An agent belongs to the workspace it was created in, like any app, so a personal Super Agent sits in its owner’s own workspace rather than this one.
The
configured and active fields are both null today, and the same seven channel types are listed for every agent. Neither is stored per agent and channel, and live state would need a call per provider on every scan. Read them as unknown. This endpoint doesn’t tell you which channels an agent is actually reachable on.
A standalone Super Agent is listed whether or not agent configuration has been saved for it, because the app is the agent. Its model and allow_anonymous_access are null. The model is resolved per request from the model picker and the workspace’s policy, so no stored value describes what it runs. Anonymous access is governed by the app’s visibility_effective and auth fields in Apps.