curl --request GET \
--url https://api.usenexio.com/api/v1/graph \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.usenexio.com/api/v1/graph"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.usenexio.com/api/v1/graph', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"org": {
"id": "<string>"
},
"nodes": [
{
"kind": "connection",
"key": "<string>",
"label": "<string>",
"summary": "<string>",
"lane": "sources",
"counts": {},
"freshness": "<string>",
"status": "<string>",
"expandable": true
}
],
"edges": [
{
"id": "<string>",
"source": "<string>",
"target": "<string>",
"kind": "feeds",
"evidence": {
"statement": "<string>"
},
"observed": true
}
],
"findings": [
{
"key": "<string>",
"kind": "<string>",
"statement": "<string>",
"counts": {},
"nodeKeys": [
"<string>"
]
}
],
"generatedAt": "<string>"
}{
"code": "unauthorized",
"message": "Missing or invalid API key"
}{
"code": "<string>",
"message": "<string>",
"details": "<unknown>"
}{
"code": "rate_limited",
"message": "Rate limit exceeded"
}{
"code": "<string>",
"message": "<string>",
"details": "<unknown>"
}{
"code": "auth_unavailable",
"message": "API key authentication is temporarily unavailable"
}{
"code": "request_timeout",
"message": "Request timed out"
}Get the data graph
Read every node, link and finding in the organization’s data graph.
curl --request GET \
--url https://api.usenexio.com/api/v1/graph \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.usenexio.com/api/v1/graph"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.usenexio.com/api/v1/graph', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"org": {
"id": "<string>"
},
"nodes": [
{
"kind": "connection",
"key": "<string>",
"label": "<string>",
"summary": "<string>",
"lane": "sources",
"counts": {},
"freshness": "<string>",
"status": "<string>",
"expandable": true
}
],
"edges": [
{
"id": "<string>",
"source": "<string>",
"target": "<string>",
"kind": "feeds",
"evidence": {
"statement": "<string>"
},
"observed": true
}
],
"findings": [
{
"key": "<string>",
"kind": "<string>",
"statement": "<string>",
"counts": {},
"nodeKeys": [
"<string>"
]
}
],
"generatedAt": "<string>"
}{
"code": "unauthorized",
"message": "Missing or invalid API key"
}{
"code": "<string>",
"message": "<string>",
"details": "<unknown>"
}{
"code": "rate_limited",
"message": "Rate limit exceeded"
}{
"code": "<string>",
"message": "<string>",
"details": "<unknown>"
}{
"code": "auth_unavailable",
"message": "API key authentication is temporarily unavailable"
}{
"code": "request_timeout",
"message": "Request timed out"
}Authorizations
Send the key as Authorization: Bearer <key>. Two kinds of key exist.
Organization keys are issued in the portal (Settings, then API keys),
each bound to one environment, shaped nx_<environment slug>_<64 hex>. They carry
no capabilities and pass every capability check, with one exception:
routes under /api/v1/records, /api/v1/engines/{id}/opportunities,
/api/v1/graph and /api/v1/catalog/documents accept an
organization key only when its environment is live, and refuse any
other with 403 scoped_key_required. Revocation takes effect within 60
seconds.
Scoped keys are issued by Nexio on request, shaped
nxsk_v1_<24 hex key id>_<43 character secret>. Each is bound to one
org, one environment, a set of engines and a set of capabilities. A
malformed, unknown or revoked nxsk_ key fails with 401 and is never
retried as an organization key. Revocation takes effect on the next
request. A scoped key without a route's capability gets 403
insufficient_capability; a scoped key not bound to the engine gets 403
engine_binding_forbidden.
Key-grantable capabilities: engines:read, runs:write, runs:read,
runs:defensibility:read, runs:test, catalog:read,
catalog:documents:read, webhooks:manage, conversations:use,
conversations:export, records:read, records:opportunities:run,
actions:write, actions:read, graph:read, records:analyze.
Routes that accept organization keys only (every scoped key gets 403
insufficient_capability): environment management, engine create,
update, configuration and publish, and conversation instance
authoring. Each operation description names the capability a scoped
key needs.
Response
The whole graph.
Hide child attributes
Hide child attributes
connection, derivation <kind>:<id segments>.
sources for a connection, derivations for a derivation.
sources, derivations For a connection, its registry status. For a derivation, active (an active schedule), paused (only paused schedules) or failed (a retained run for a scheduled connection did not succeed).
Always false.
Hide child attributes
Hide child attributes
A connection feeds a derivation it holds a publication schedule for.
feeds Always false: every edge comes from a configured schedule.
Millisecond RFC 3339 with Z.