Developers
Set your API contextPick a region and space ID once. Every sample fills in your base URL.
Where do I find these?

In Coevera: open your space's API application and choose Show Access. It shows the space ID and the base URL, whose host starts with your region.

From the API: if you know the space ID, the discovery endpoint GET /api/discovery/spaces/{space_id} returns its region and base URLs, without credentials.

Only the region and space ID are kept, in this browser. Never paste a key or password here.

More in the quickstart

REST APIProjects, targets, forecasts and reportsReports

Reports

Read-only: list and get Reports.

The summaries on this page are generated from the specification; written descriptions come with the next releases of the reference.

MethodPathOperation
GET/entities/ReportsList Reports
GET/entities/Reports/{id}Get Report

Reports is read-only: the API offers its read operations only.

GET List Reports

Returns the Reports the API application can read, one page at a time. In the list envelope, total counts every match and page_info pages through them.

Query parameters

NameTypeDescription
include-deletedbooleanInclude soft-deleted records. Lists only; get-by-id refuses it.
firstintegerPage size. Default 30, maximum 100; a larger value is refused with HTTP 400, code 117.
lastintegerReturn the last N records of the result; together with first, the last N of the first M. Maximum 100.
beforestringCursor from page_info.start_cursor, to page backwards. URL-encode it.
afterstringCursor from page_info.end_cursor of the previous page. URL-encode it: cursors are base64, and a raw + becomes a space.
expandstringRelated records to return inline instead of their URIs, comma-separated; dots reach nested relations, as in account_relations.account.
order-bystringFields to sort by, comma-separated. A leading - sorts descending, as in -modified; dotted paths sort by related fields.
filterobjectfilter[field]=value. Separate several values with a raw comma (OR), as in filter[name]=north,south. Encode a comma that belongs to a value as %2C. URLSearchParams and Python requests encode every comma, so build the filter part of the query string yourself. Dotted paths filter on related records, as in filter[owner.email]. Encode a + in a value as %2B: query values are form-decoded, so a raw + becomes a space.
filter-opobjectfilter-op[field]=operator, one per field: eq (the default), ieq, not-eq, not-ieq, contains, icontains, starts, istarts, ends, iends, gt, gte, lt, lte, between, null, not-null, empty and not-empty. null, not-null, empty and not-empty take no filter value; gt, gte, lt and lte take exactly one.
load-onlystringFields to return, comma-separated (raw or encoded commas both work here); dots select nested fields, as in owner.id. All fields are returned without it. Lists only: get-by-id refuses it with HTTP 400, code 118.

Responses

200 Page of Report records.: success, total, page_info, data 400 Bad request 401 Not authenticated 429 Rate limited 500 Server error

GET /entities/Reports
curl 'https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/Reports?first=10&filter%5Bname%5D=north&filter-op%5Bname%5D=icontains' \
  --user "$COEVERA_API_KEY:$COEVERA_API_SECRET"
fetch('https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/Reports?first=10&filter%5Bname%5D=north&filter-op%5Bname%5D=icontains', {
  headers: {
    Authorization: "Basic " + btoa(`${process.env.COEVERA_API_KEY}:${process.env.COEVERA_API_SECRET}`)
  }
})
import os

import requests

response = requests.get(
    "https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/Reports",
    params={
      "first": "10",
      "filter[name]": "north",
      "filter-op[name]": "icontains"
    },
    auth=(os.environ["COEVERA_API_KEY"], os.environ["COEVERA_API_SECRET"])
)

GET Get Report

Returns one record by id. expand returns related records inline instead of their URIs.

Path parameters

NameTypeDescription
idstring (uuid)Id of the Report record to retrieve. Required

Query parameters

NameTypeDescription
expandstringRelated records to return inline instead of their URIs, comma-separated; dots reach nested relations. The only parameter this call accepts.

Responses

200 The Report record.: success, data 400 Bad request 401 Not authenticated 404 Not found 429 Rate limited 500 Server error

GET /entities/Reports/{id}
curl 'https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/Reports/e8000000-0000-4000-a000-000000000001?expand=owner' \
  --user "$COEVERA_API_KEY:$COEVERA_API_SECRET"
fetch('https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/Reports/e8000000-0000-4000-a000-000000000001?expand=owner', {
  headers: {
    Authorization: "Basic " + btoa(`${process.env.COEVERA_API_KEY}:${process.env.COEVERA_API_SECRET}`)
  }
})
import os

import requests

response = requests.get(
    "https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/Reports/e8000000-0000-4000-a000-000000000001",
    params={
      "expand": "owner"
    },
    auth=(os.environ["COEVERA_API_KEY"], os.environ["COEVERA_API_SECRET"])
)

Report fields

FieldTypeNotes
iduuidRead-only Unique identifier of entity.
is_delete_protectedbooleanRead-only True when the record is protected against deletion because it must always exist in the space.
is_deletedbooleanRead-only Specifies if the entity is considered deleted.
modifieddate-timeRead-only Last modification time.
createddate-timeRead-only Creation time.
owneruri → ClientsRead-only User who owns the report or dashboard.
reports_folderuri → ReportFoldersRead-only Report folder this report is filed under (default folder when empty).
sync_entityuri → ProfilesRead-only Specific record this report is synchronized to.
access_linkstringRead-only Public access token used in shareable report URLs.
ai_conversationobjectRead-only AI assistant conversation associated with the report (e.g.
descriptionstringRead-only Free-text description shown alongside the report.
namestringRead-only Name of the entity and its default text representation.
owner_iduuid → ClientsRead-only Id of the owning user.
reports_folder_iduuid → ReportFoldersRead-only Id of the parent report folder.
settingsobjectRead-only Report definition (entity, columns, filters, charts, structure).
Show all 25 fields
FieldTypeNotes
share_modeintegerRead-only Who besides the owner can access the report: nobody (Private, the default), the users and sales units in sharing_clients and sharing_units (Standard), or all …0 Standard · 1 Private · 2 AllView · 3 AllEdit
share_mode_paramsstringRead-only Legacy additional sharing options; kept with the record but no longer applied.1 · 2
sync_enabledbooleanRead-only When true, name and settings are kept in sync with the linked screen profile; when false, the report is detached from profile sync.
sync_entity_iduuid → ProfilesRead-only Id of the synchronized record.
typeintegerRead-only Kind of report: a table or pivot report, a dashboard, an opportunity forecast, or an advanced report built from several linked tables.0 TableReport · 1 DashboardReport · 2 ForecastReport · 3 AdvancedReport
revisionintegerRead-only Revision when entity was lastly changed.
scheduleuri → ReportSchedulesRead-only The calling user's scheduled email delivery of this report; empty when none is set.
is_favoritebooleanRead-only True when the current user has marked this report as a favorite (see ClientFavorite).
sharing_unitsarray of uri → ReportSharingSalesUnitRelationsRead-only Sales units granted shared access to this report (custom share mode).
sharing_clientsarray of uri → ReportSharingClientRelationsRead-only Users granted shared access to this report (custom share mode).

Custom fields appear in your space's live spec: fetch it with your credentials.

Errors

Every error body has success: false, http_status, code, name and message. Branch on code: the status alone does not tell a missing permission from a bad parameter. All codes: error codes; how to handle them: Errors.

HTTPWhen
400Bad request: a bad or unknown parameter (codes 117, 118), a missing permission (code 50), conflicting data (code 2002) or any other API error. The REST API answers 400 where others answer 403 or 409; check code.
401Not authenticated: missing or wrong credentials, a credential of another space, or an expired token (code 401, ERROR_UNAUTHORIZED).
404No such record or entity (code 143 ERROR_NO_ENTITY, or 2006 ERROR_UNKNOWN_TYPE).
429Too many requests (code 182). Wait for the seconds in Retry-After, then retry.
500Unexpected server error (code 1000, ERROR_UNKNOWN).