Developers
Set your API contextPick a region and space ID once. Every sample fills in your base URL.
Where do I find these?

In Coevera: open your space's API application and choose Show Access. It shows the space ID and the base URL, whose host starts with your region.

From the API: if you know the space ID, the discovery endpoint GET /api/discovery/spaces/{space_id} returns its region and base URLs, without credentials.

Only the region and space ID are kept, in this browser. Never paste a key or password here.

More in the quickstart

GraphQLRepositoriesapiAccess

entities.apiAccess

Read api access records with the apiAccess repository, and change them with the api access mutations. Same records as the REST ApiAccesses entity.

Queries

Fields of entities { apiAccess { … } }.

KindFieldReturns
QUERYgetById(entityId: ID!)
Returns the record with the given id, or null when there is none. Deleted records are returned as well.
ApiAccessEntity
QUERYgetByIds(entityIds: [ID!]!)
Returns the records with the given ids; ids without a record are left out. Deleted records are returned as well.
[ApiAccessEntity!]!
QUERYgetAll(limit: Int, offset: Int, filter: ApiAccessFilterInput, orderBy: [ApiAccessOrderByInput!], includeDeleted: Boolean)
Returns the records that match the filter, paged with limit and offset.
[ApiAccessEntity!]!
QUERYgetByCriteria(filter: ApiAccessFilterInput, orderBy: [ApiAccessOrderByInput!], includeDeleted: Boolean, before: String, after: String, first: Int, last: Int)
Returns the records that match the filter as a cursor-paginated connection.
ApiAccessEntityConnection
QUERYgetChangedFieldsSinceRevision(id: UUID!, revision: Int!)
Returns the ids of the fields of a record that changed after the given revision. Returns an empty list for entities without change tracking.
[UUID!]!
QUERYgetAllForAdmin(limit: Int, offset: Int, filter: ApiAccessFilterInput, orderBy: [ApiAccessOrderByInput!], includeDeleted: Boolean)
Returns API accesses of the space for administration, leaving out accesses of hidden applications.
[ApiAccessEntity!]!

Mutations

KindMutationDoesReturns
MUTATIONcopyApiAccess(input: CopyApiAccessInput!)Copy a record GraphQL onlyCopyApiAccessPayload

Types

The types this repository uses, each with its fields and their descriptions. Types several repositories share, such as PageInfo and the filter fields, are in the types index.

ApiAccessEntity object 14 fields: isDeleteProtected, id, isDeleted, …

API credentials that an integration uses to access the space, with the parts of the API they may read or write.

FieldTypeDescription
isDeleteProtectedBoolean!True when the record is protected against deletion because it must always exist in the space. Deleting a record that is not protected can still fail on other checks. Read-only.
idID!Unique identifier of entity. Must match with Application id.
isDeletedBooleanSpecifies if the entity is considered deleted.
modifiedDateTimeLast modification time.
createdDateTimeCreation time.
emailStringContact email associated with this API access. Used for credential change notifications.
isActiveBooleanWhether this API access can authenticate. Set to false to disable the credentials without deleting the record; existing tokens stop working immediately.
lastUsedDateTimeTimestamp of the most recent successful authentication using this API access. Updated automatically on each use; empty for credentials that have never been used.
permissionsApiAccessPermissionsPer-section access permissions (records, administration, misc) granted to this API access. Determines which entities and operations the credentials can read or write.
typeApiAccessTypeEnum!Authentication type of this API access (e.g. standard API key vs. OAuth client). Set automatically on create and cannot be changed.
nameStringName for the api access.
usernameStringFormerly API Access.
plainPasswordStringFormerly API Password. Only available during create or for migrated legacy access. Otherwise, it is null.
instancePermissions[EntityPermsEnum!]! (1 args)Permissions the current user has on this record, out of the requested ones.
ApiAccessEntityConnection object pageInfo: PageInfo!, edges: [ApiAccessEntityEdge]!, totalCount: Int

Paginated list of ApiAccess records.

FieldTypeDescription
pageInfoPageInfo!Pagination data for this connection.
edges[ApiAccessEntityEdge]!Contains the nodes in this connection.
totalCountIntTotal number of items in the connection.
ApiAccessEntityEdge object node: ApiAccessEntity, cursor: String!

A Relay edge containing a ApiAccessEntity and its cursor.

FieldTypeDescription
nodeApiAccessEntityThe item at the end of the edge
cursorString!A cursor for use in pagination
ApiAccessFilterInput input AND, OR, NOT, globalSearchQuery, one condition per field

Filter conditions for ApiAccess records. Conditions on different fields are combined with AND; use OR, AND and NOT for other combinations.

Input fieldTypeDescription
OR[ApiAccessFilterInput!]Matches records that meet at least one of the listed filters.
AND[ApiAccessFilterInput!]Matches records that meet all of the listed filters.
NOTApiAccessFilterInputMatches records that do not meet this filter.
globalSearchQueryStringSearch term matched against the fields that the global search covers for this entity.
idEntityFilterStringFieldUnique identifier of entity. Must match with Application id.
isDeletedBooleanSpecifies if the entity is considered deleted.
modifiedEntityFilterDateTimeFieldLast modification time.
createdEntityFilterDateTimeFieldCreation time.
emailEntityFilterStringFieldContact email associated with this API access. Used for credential change notifications.
isActiveBooleanWhether this API access can authenticate. Set to false to disable the credentials without deleting the record; existing tokens stop working immediately.
lastUsedEntityFilterDateTimeFieldTimestamp of the most recent successful authentication using this API access. Updated automatically on each use; empty for credentials that have never been used.
typeApiAccessTypeEnumFilterInputAuthentication type of this API access (e.g. standard API key vs. OAuth client). Set automatically on create and cannot be changed.
ApiAccessOrderByInput input Asc or Desc per field

Sorting of ApiAccess records. Set exactly one field in each item; list several items to sort by more fields, in order of priority.

Input fieldTypeDescription
idOrderByEnumUnique identifier of entity. Must match with Application id.
isDeletedOrderByEnumSpecifies if the entity is considered deleted.
modifiedOrderByEnumLast modification time.
createdOrderByEnumCreation time.
emailOrderByEnumContact email associated with this API access. Used for credential change notifications.
isActiveOrderByEnumWhether this API access can authenticate. Set to false to disable the credentials without deleting the record; existing tokens stop working immediately.
lastUsedOrderByEnumTimestamp of the most recent successful authentication using this API access. Updated automatically on each use; empty for credentials that have never been used.
typeOrderByEnumAuthentication type of this API access (e.g. standard API key vs. OAuth client). Set automatically on create and cannot be changed.
ApiAccessTypeEnumFilterInput input eq: [ApiAccessTypeEnum!], NOT: ApiAccessTypeEnumFilterInput

Conditions on an enumeration field. Several conditions given together must all match.

Input fieldTypeDescription
eq[ApiAccessTypeEnum!]Matches any of the listed values.
NOTApiAccessTypeEnumFilterInputMatches values that do not meet this condition.
CopyApiAccessInput input id: ID!, clientMutationId: String

Parameters of the copyApiAccess mutation.

Input fieldTypeDescription
idID!Identifier of the ApiAccessEntity to perform the action on.
clientMutationIdStringOptional client-supplied identifier passed on a mutation input and echoed back unchanged on its payload, so a client can correlate the response with its request (Relay convention).
CopyApiAccessPayload object result: ApiAccessEntity, clientMutationId: String

Result of the copyApiAccess mutation.

FieldTypeDescription
resultApiAccessEntityThe new API access.
clientMutationIdStringOptional client-supplied identifier passed on a mutation input and echoed back unchanged on its payload, so a client can correlate the response with its request (Relay convention).
ApiAccessPermissionAdministrationTab object 9 fields: unitsAndRoles, pipelines, currencies, …

Access levels an API access grants to administration areas, such as users, pipelines, fields and products.

FieldTypeDescription
unitsAndRolesApiPermissionEnum!Access level to users, sales units and user roles, including the pipelines and record types each role may use.
pipelinesApiPermissionEnum!Access level to pipelines, lead processes, their steps and step checklists.
currenciesApiPermissionEnum!Access level to currencies and exchange rate lists.
productsAndPricesApiPermissionEnum!Access level to products, product categories and price lists.
commonListApiPermissionEnum!Access level to the common lists: account hierarchy, account and contact relation types, account roles, sales roles and tags.
fieldsAndFormsApiPermissionEnum!Access level to fields, forms, dropdown options, translations and record types, including online form types and health and scoring settings.
settingsApiPermissionEnum!Access level to the space settings and the company email addresses and phone numbers.
automationHubApiPermissionEnum!Access level to the Automation Hub apps and their categories, and to the apps enabled in the space. These are read-only, so Write grants Read.
securityApiPermissionEnum!Access level to the audit log.
ApiAccessPermissionMiscTab object 5 fields: reports, webhooks, data, …

Access levels an API access grants to reports, webhooks, documents and the remaining areas.

FieldTypeDescription
reportsApiPermissionEnum!Access level to reports, report folders, report schedules and forecasts.
webhooksApiPermissionEnum!Access level to webhooks and their events.
dataApiPermissionEnum!Access level for the Data area. Kept with the other levels, but no part of the API currently depends on it.
documentsApiPermissionEnum!Access level to files, document folders and document templates.
othersApiPermissionEnum!Access level to the remaining areas: automation processes, approvals, email sequences, online form submissions, notes, targets, saved screen views, solutions and change and event logs.
ApiAccessPermissionRecordsTab object 10 fields: accounts, contacts, leads, …

Access levels an API access grants to records, such as accounts, opportunities and custom entities.

FieldTypeDescription
accountsApiPermissionEnum!Access level to accounts, with their relations, sharing and statistics.
contactsApiPermissionEnum!Access level to contacts, with their account relations, sharing and statistics.
leadsApiPermissionEnum!Access level to leads.
opportunitiesApiPermissionEnum!Access level to opportunities, with their product lines, revenue schedules and recurrence, and to quotes.
tasksApiPermissionEnum!Access level to tasks, with their reminders and recurrence.
appointmentsApiPermissionEnum!Access level to appointments, with their invitees and reminders, and to appointment schedules.
emailsApiPermissionEnum!Access level to emails, email labels, email templates and unsubscribed email addresses.
messagesApiPermissionEnum!Access level to memos and their comments, chat conversations and text messages.
projectsApiPermissionEnum!Access level to projects and their objectives.
customEntities[CustomEntityApiAccessPermission!]!Access level to the records of each custom entity of the space; a custom entity without its own entry has Write access.
ApiAccessPermissions object records: ApiAccessPermissionRecordsTab!, administration: ApiAccessPermissionAdministrationTab!, misc: ApiAccessPermissionMiscTab!

Access levels an API access grants, grouped into records, administration and other areas.

FieldTypeDescription
recordsApiAccessPermissionRecordsTab!Access levels to records, such as accounts, opportunities and custom entities.
administrationApiAccessPermissionAdministrationTab!Access levels to administration areas, such as users and units, pipelines, fields and products.
miscApiAccessPermissionMiscTab!Access levels to reports, webhooks, documents and the remaining areas.
ApiAccessTypeEnum enum Basic, OAuth

How an API access authenticates.

ValueDescription
BasicAuthenticates with an access key and secret sent as HTTP Basic credentials.
OAuthAuthenticates as an OAuth 2 application.
ApiPermissionEnum enum Write, Read, Disabled

Level of access an API access grants to an area of the space.

ValueDescription
WriteRecords in the area can be read and changed.
ReadRecords in the area can be read but not changed.
DisabledThe area is not accessible.
CustomEntityApiAccessPermission object access: ApiPermissionEnum!, entityApiName: String!

Access level an API access grants to the records of one custom entity.

FieldTypeDescription
accessApiPermissionEnum!Access level to the records of the custom entity.
entityApiNameString!API name of the custom entity.