workspace argument, the subdomain of a connected workspace. Left out, it runs against the workspace the connection was set up with. ListWorkspaces reports the values you can pass.
What a tool returns depends on the credential. Over OAuth, lists come back filtered to the permissions of the person who approved the connection, and a record they cannot open is refused rather than returned; an API key reaches the whole workspace. A tool that creates, updates, or deletes is also refused when the connection was not granted the Create and update or Delete permission.
Workspaces
ListWorkspaces has no REST endpoint, which is why it is not linked.
An OAuth grant covers every workspace ticked on the Authorize access screen, which can be more
than one. An API key covers the workspace it was generated in.
Articles
Article tools address an article by its slug, its permalink identifier (
a-XXXXXXXX) or its UUID.
GetPublicArticle also needs the workspace subdomain, and it never exposes drafts or the author’s
email address. It has no page in the API reference, which is why it is not linked above.
search and fetch are the two tools the
ChatGPT connector specification requires, so they
overlap with SearchArticles and GetArticle rather than adding anything new. They have no
separate REST endpoint, which is why they are not linked above.Trash
Schedules
Article SEO
Revisions
Attachments
Unlisted links
An unlisted link is an article’s secret share URL, which lets anyone holding it read the article
without signing in. Treat the URL as sensitive.
Categories
Tags
Authors
Recommendations
Redirections
Navigation links
Reports
The report tools take
duration, and start_date and end_date for a custom period. The Clear tools cannot be undone and return the number of rows deleted.
Team members
The team member tools also check the connected person’s NeetoKB role: it must allow managing
members, and changing a member’s role needs the manage-roles permission as well. These are role
permissions inside NeetoKB, separate from the Create and update and Delete permissions
ticked when approving the connection. An API key skips role checks.
Settings
GetMyPreferences and UpdateMyPreferences need a signed-in user, so they are refused over an API key.
Themes
Built-in themes cannot be changed. Clone one first.