Skip to main content
GET
List a table's rows

Behavior

The response is the one list envelope: data holds one object per row, each with row_key (the row’s opaque, stable identity) and source_columns (every registered column as text, keyed <OBJECT>.<COLUMN>, with NULL values left out), beside page, source, unreachable, warnings and request_id. The table’s registration decides the filters it takes. List a connection’s tables shows them for every table.
  • Owner filter. A table whose owner is policy, account or claim is read one owner at a time: send policy_id, account_id or claim_id as an instance key. A missing owner filter answers 400 INVALID_ARGUMENT, reason FILTER_REQUIRED; another owner’s filter answers reason FILTER_NOT_TAKEN. A table whose owner is none is read whole and takes no owner filter.
  • Match filter. A table with a match column takes one filter named after that column, lower case, such as cocode= or custid=. Where the listing marks the filter as required, a read without it answers reason FILTER_REQUIRED. There is no generic match= parameter: it is refused with 400 INVALID_ARGUMENT, reason FILTER_NOT_TAKEN, and the detail names the table’s own match filter.
  • Paging. limit defaults to 25; a value above 200 is coerced to 200 with a LIMIT_COERCED warning. Follow page.next with cursor; the cursor fixes the table and its filters. A cursor the read can no longer continue from answers reason CURSOR_EXPIRED, as on every Records list: start again from the first page.
The person’s authority applies before any read. An owner record outside the person’s scope answers 404 NOT_VISIBLE_OR_ABSENT, the same as an unregistered table or a connection that is not your organization’s. A table whose requirement the person’s access policy does not grant, such as an accounting table without the accounting dataset, answers 403 CAPABILITY_DENIED, reason DATASET_DENIED. Direct identifiers are served only on a read narrowed to one owner. Send the person the request is for in Nexio-Act-As and Nexio-Act-As-Email, and the signed Nexio-Assertion when your organization enforces it. This route is for lineage, operators and proofs. Product code reads collections under /records. See Source tables.

Authorizations

Authorization
string
header
required

Send the key as Authorization: Bearer <key>. Two kinds of key exist.

Organization keys are issued in the portal (Settings, then API keys), each bound to one environment, shaped nx_<environment slug>_<64 hex>. They carry no capabilities and pass every capability check, with one exception: routes under /records, /actions, /operations, /api/v1/engines/{id}/opportunities, /api/v1/graph and /api/v1/catalog/documents accept an organization key only when its environment is live, and refuse any other with 403 scoped_key_required. Revocation takes effect within 60 seconds.

Scoped keys are issued by Nexio on request, shaped nxsk_v1_<24 hex key id>_<43 character secret>. Each is bound to one org, one environment, a set of engines and a set of capabilities. A malformed, unknown or revoked nxsk_ key fails with 401 and is never retried as an organization key. Revocation takes effect on the next request. A scoped key without a route's capability gets 403 insufficient_capability; a scoped key not bound to the engine gets 403 engine_binding_forbidden.

Key-grantable capabilities: engines:read, runs:write, runs:read, runs:defensibility:read, runs:test, catalog:read, catalog:documents:read, webhooks:manage, conversations:use, conversations:export, records:read, records:opportunities:run, actions:write, actions:read, graph:read, records:analyze.

Routes that accept organization keys only (every scoped key gets 403 insufficient_capability): environment management, engine create, update, configuration and publish, and conversation instance authoring. Each operation description names the capability a scoped key needs.

Headers

Nexio-Act-As
string

The person the request is for, as your identity provider's stable user id. Unset keeps the org-wide posture the key alone grants. The retired X-Nexio-* identity headers are refused on this route with 400 INVALID_ARGUMENT, reason LEGACY_HEADER.

Nexio-Act-As-Email
string

The acting person's verified sign-in email, lowercased. Ignored without Nexio-Act-As.

Nexio-Assertion
string

The signed assertion over the identity headers (v1..).

Nexio-Request-Id
string

A caller-chosen request id, echoed in the Nexio-Request-Id response header.

Nexio-Timeout
string

The caller's remaining budget for this request, in whole milliseconds (1 to 10 digits, greater than zero), relative to receipt. The engine stops work at the shorter of this and the route's own budget, and answers 504 request_timeout when it expires. A value above the route budget is capped to it; a malformed value is ignored.

Path Parameters

id
string
required

The connection: one of the organization's connection ids, or sandbox for the sandbox seat's view of it. Any other id answers 404 NOT_VISIBLE_OR_ABSENT.

table
string
required

The table: the system of record's own object name as the registry spells it, lower case. An AMS360 table is its name without the AFW_ prefix (company, custcontact, 146schedequip). An unregistered table answers 404 NOT_VISIBLE_OR_ABSENT.

Pattern: ^[a-z0-9_]+$

Query Parameters

policy_id
string

The policy id, as an instance key. Required on a table whose owner is policy; refused on any other.

account_id
string

The account id, as an instance key. Required on a table whose owner is account; refused on any other.

claim_id
string

The claim id, as an instance key. Required on a table whose owner is claim; refused on any other.

attachid
string

Rows whose ATTACHID equals this value, on a table whose match column is ATTACHID (journalmemo, payee).

attrcode
string

Rows whose ATTRCODE equals this value, on a table whose match column is ATTRCODE (prstring).

bankcode
string

Rows whose BANKCODE equals this value, on a table whose match column is BANKCODE (bankaccount, bankrecstatement, cashdisbursment and 3 more).

brokercode
string

Rows whose BROKERCODE equals this value, on a table whose match column is BROKERCODE (broker).

brsid
string

Rows whose BRSID equals this value, on a table whose match column is BRSID (bankreccleared).

chargecode
string

Rows whose CHARGECODE equals this value, on a table whose match column is CHARGECODE (commissionie).

checklistname
string

Rows whose CHECKLISTNAME equals this value, on a table whose match column is CHECKLISTNAME (agencychecklist).

cocode
string

Rows whose COCODE equals this value, on a table whose match column is COCODE (agent, aptinsurer, benefitcarrier and 13 more).

cpnplistid
string

Rows whose CPNPLISTID equals this value, on a table whose match column is CPNPLISTID (targetlistbpol, targetlistcustomer, targetlistlob and 3 more).

crhid
string

Rows whose CRHID equals this value, on a table whose match column is CRHID (cashreceiptdeposit).

custid
string

Rows whose CUSTID equals this value, on a table whose match column is CUSTID (generalledgertransaction, onaccountinvoice, pendingcheckglt).

dbdhid
string

Rows whose DBDHID equals this value, on a table whose match column is DBDHID (directbilldownloaddetail).

dbehid
string

Rows whose DBEHID equals this value, on a table whose match column is DBEHID (directbillentrycommission, directbillentrycommissionbuabreakout, directbillentrydetail).

dbshid
string

Rows whose DBSHID equals this value, on a table whose match column is DBSHID (directbillstmtdetail).

elfformtypeid
string

Rows whose ELFFORMTYPEID equals this value, on a table whose match column is ELFFORMTYPEID (elfformversion).

empcode
string

Rows whose EMPCODE equals this value, on a table whose match column is EMPCODE (benefitemployee, emplicense, employee and 1 more).

entityid
string

Rows whose ENTITYID equals this value, on a table whose match column is ENTITYID (refgroup).

gjid
string

Rows whose GJID equals this value, on a table whose match column is GJID (generaljournalrelation).

gldivcode
string

Rows whose GLDIVCODE equals this value, on a table whose match column is GLDIVCODE (directbilldownloadheader, directbillentryheader, directbillstmtheader and 3 more).

invid
string

Rows whose INVID equals this value, on a table whose match column is INVID (directbillstmtautorec, invoicebatch, invoicebillingevent and 7 more).

istid
string

Rows whose ISTID equals this value, on a table whose match column is ISTID (invoicesplitallocation).

lldid
string

Rows whose LLDID equals this value, on a table whose match column is LLDID (leadlistdefdetail).

planid
string

Rows whose PLANID equals this value, on a table whose match column is PLANID (equineage, equinebreed, equinecovuse and 8 more).

polid
string

Rows whose POLID equals this value, on a table whose match column is POLID (invoicesplittemplate).

pshid
string

Rows whose PSHID equals this value, on a table whose match column is PSHID (paystatementdetail).

queid
string

Rows whose QUEID equals this value, on a table whose match column is QUEID (queidquestions).

relationshiptypeid
string

Rows whose RELATIONSHIPTYPEID equals this value, on a table whose match column is RELATIONSHIPTYPEID (relationship).

rlhid
string

Rows whose RLHID equals this value, on a table whose match column is RLHID (renewallistcc).

ttshid
string

Rows whose TTSHID equals this value, on a table whose match column is TTSHID (trusttransferstatementdetail).

vendorcode
string

Rows whose VENDORCODE equals this value, on a table whose match column is VENDORCODE (vendor, vendorinvoice, vendorinvoicetemplate).

vinvid
string

Rows whose VINVID equals this value, on a table whose match column is VINVID (vendorinvoicetransaction, vendorpayment).

match
string

Not a filter: refused with 400 INVALID_ARGUMENT, reason FILTER_NOT_TAKEN. A table's match filter is named after its column (cocode, brokercode), as the listing shows it under filter.

limit
integer<int64>

Page size. Defaults to 25; a value above 200 is coerced to 200 with a LIMIT_COERCED warning.

Required range: x >= 1
cursor
string

The opaque page.next of the previous page. The table and its filters are fixed inside it.

Response

OK

data
object[] | null
required

One page of the collection, in the requested sort order.

page
object
required
request_id
string
required

The request id, as echoed in the Nexio-Request-Id response header.

source
object
required
unreachable
object[] | null
required

Parts of the answer no source could fill, each with its reason. Empty when every part was filled.

warnings
object[] | null
required

Adjustments the platform made to the request (a coerced limit, a dropped facet).

facets
object

Present only for the facets the request named in facets=.

total
object

Present only when the request sent include_total=true.

Last modified on October 7, 2026