Optionaluser?: {Optionalintegration?: {Publicly accessible logo of the integrated app.
OptionalconnectorId?: stringOptionalconnectorVersion?: stringOptionaloAuthCallbackUri?: stringOptionalparameters?: anyOptionalarchivedAt?: stringOptionalhasMissingParameters?: booleanOptionalhasDocumentation?: booleanOptionalhasOperations?: booleanOptionaloperationsCount?: numberOptionalhasData?: booleanOptionaldataCollectionsCount?: numberOptionalhasEvents?: booleanOptionaleventsCount?: numberOptionalhasGlobalWebhooks?: booleanOptionalhasUdm?: booleanOptionalisTest?: booleanOptionalexternalAppId?: stringOptionalappUuid?: stringOptionalisDeactivated?: booleanOptionalauthType?: OptionaloptionsConfig?: Record<string, { disabled?: boolean; parameters?: Record<string, any> }>Per-auth-option configuration. Only returned with includeSecrets=true.
Optionaluuid?: stringOptionalkey?: stringOptionaldescription?: stringOptionalmeta?: Record<string, any>Optionalstate?: Optionalerrors?: ErrorDataSchema[]Optionalrevision?: stringOptionalcreatedAt?: stringOptionalupdatedAt?: stringOptionalisReadOnly?: booleanOptionalconnectorParameters?: unknownDecrypted connector parameters (e.g. OAuth app clientId/clientSecret/scopes for BYO-OAuth). Returned on single GET /connections/:id for any authenticated caller.
Deliberate access asymmetry with list GET /connections, which gates these fields behind
isWorkspaceManager + includeSecrets. Safe on single-GET post-CORE-586: connection docs no
longer inherit integration-level params, so connectorParameters is purely tenant-written
data. Kept off list responses for payload-bloat reasons, not security.
Optionalinput?: unknownDecrypted connection input (e.g. API key, form values the tenant provided). Returned on single GET /connections/:id for any authenticated caller — genuinely tenant-owned.
Optionaltype?: "connector" | "mcp"Discriminator for what backs the connection. Undefined = legacy connector-backed.
'mcp' connections have no connectorId and target an arbitrary MCP server URL.
User-readable name of the connection
Optionalkey?: stringStable, human-readable key for addressing this connection. Unique per tenant. Matches the convention used for all workspace element keys.
OptionalisTest?: booleanOptionalconnected?: booleanWhether the connection has been successfully authenticated and verified.
Optionaldisconnected?: booleanOptionalisDefunct?: booleanOptionalstate?: Optionalerrors?: ErrorDataSchema[]Validation or setup errors when state is not READY.
OptionalrequestError?: ErrorDataSchemaLast error from a runtime operation (credential refresh, connection test, API call). Cleared when the operation succeeds.
Optionalerror?: ErrorDataSchemaOptionalintegrationId?: stringId of an integration the connection is created with. Optional if connectorId is provided.
OptionalconnectorId?: stringId of a connector the connection is created with. Used for direct connector-based connections (without an integration).
OptionalexternalAppId?: stringId of an external app linked to this connection.
OptionalconnectorVersion?: stringVersion of the connector to use. Only applicable when connectorId is set.
OptionalauthOptionKey?: stringOptionallastActiveAt?: stringTimestamp when the connection was last active
OptionalnextCredentialsRefreshAt?: stringTimestamp when the connection credentials should be refreshed
OptionalnextRetryTimestamp?: stringTimestamp when the next connection retry should be attempted
OptionalretryAttempts?: numberNumber of retry attempts made for this connection
OptionalcanTest?: booleanWhether the connection can be tested
OptionalcanRefreshCredentials?: booleanWhether the connection credentials can be refreshed
OptionalarchivedAt?: stringOptionalisDeactivated?: booleanOptionalmeta?: Record<string, any>OptionalbuildingAgentSessionId?: stringOptionalclientAction?: {OptionaltenantId?: stringOptionalcursor
Generic pagination response class.