Skip to main content
GET
List a connection's tables

Behavior

The response is the one list envelope, with every registered table of the connection the person may read in a single page, sorted by name. A table whose requirement the person’s access policy does not grant is not listed: without the accounting dataset, no accounting table appears, exactly as reading one answers 403 CAPABILITY_DENIED. Each entry in data names the table (the name to read it by), the fully qualified source object, the system it belongs to (ams360 for the system of record’s replica, warehouse for a curated warehouse table), its owner (policy, account, claim or none), the requirement it is read under, its match filter and whether that filter is required, and its columns. Each column carries its field class, its state (served or proven when a collection field serves it, estate_only when only this surface reads it) and feeds, the collection fields it serves. The listing reads no rows. {id} is one of your organization’s connection ids, or sandbox for the sandbox seat’s view of it. Any other id answers 404 NOT_VISIBLE_OR_ABSENT. This route is for lineage, operators and proofs. Product code reads collections under /records. See Source tables.

Authorizations

Authorization
string
header
required

Send the key as Authorization: Bearer <key>. Two kinds of key exist.

Organization keys are issued in the portal (Settings, then API keys), each bound to one environment, shaped nx_<environment slug>_<64 hex>. They carry no capabilities and pass every capability check, with one exception: routes under /records, /actions, /operations, /api/v1/engines/{id}/opportunities, /api/v1/graph and /api/v1/catalog/documents accept an organization key only when its environment is live, and refuse any other with 403 scoped_key_required. Revocation takes effect within 60 seconds.

Scoped keys are issued by Nexio on request, shaped nxsk_v1_<24 hex key id>_<43 character secret>. Each is bound to one org, one environment, a set of engines and a set of capabilities. A malformed, unknown or revoked nxsk_ key fails with 401 and is never retried as an organization key. Revocation takes effect on the next request. A scoped key without a route's capability gets 403 insufficient_capability; a scoped key not bound to the engine gets 403 engine_binding_forbidden.

Key-grantable capabilities: engines:read, runs:write, runs:read, runs:defensibility:read, runs:test, catalog:read, catalog:documents:read, webhooks:manage, conversations:use, conversations:export, records:read, records:opportunities:run, actions:write, actions:read, graph:read, records:analyze.

Routes that accept organization keys only (every scoped key gets 403 insufficient_capability): environment management, engine create, update, configuration and publish, and conversation instance authoring. Each operation description names the capability a scoped key needs.

Headers

Nexio-Act-As
string

The person the request is for, as your identity provider's stable user id. Unset keeps the org-wide posture the key alone grants. The retired X-Nexio-* identity headers are refused on this route with 400 INVALID_ARGUMENT, reason LEGACY_HEADER.

Nexio-Act-As-Email
string

The acting person's verified sign-in email, lowercased. Ignored without Nexio-Act-As.

Nexio-Assertion
string

The signed assertion over the identity headers (v1..).

Nexio-Request-Id
string

A caller-chosen request id, echoed in the Nexio-Request-Id response header.

Nexio-Timeout
string

The caller's remaining budget for this request, in whole milliseconds (1 to 10 digits, greater than zero), relative to receipt. The engine stops work at the shorter of this and the route's own budget, and answers 504 request_timeout when it expires. A value above the route budget is capped to it; a malformed value is ignored.

Path Parameters

id
string
required

The connection: one of the organization's connection ids, or sandbox for the sandbox seat's view of it. Any other id answers 404 NOT_VISIBLE_OR_ABSENT.

Response

OK

data
object[] | null
required

Every registered table, sorted by name.

page
object
required
request_id
string
required

The request id, as echoed in the Nexio-Request-Id response header.

source
object
required
unreachable
object[] | null
required

Parts of the answer no source could fill, each with its reason. Empty when every part was filled.

warnings
object[] | null
required

Adjustments the platform made to the request (a coerced limit, a dropped facet).

facets
object

Present only for the facets the request named in facets=.

total
object

Present only when the request sent include_total=true.

Last modified on October 7, 2026