workspace argument, the subdomain of a connected workspace. Left out,
it runs against the workspace the connection was set up with. ListWorkspaces reports the values
you can pass.
What a tool returns depends on the credential behind the connection. Over
OAuth, listings are filtered to the permissions of the
person who approved it and an article they cannot open is refused; an
API key reaches the whole workspace. A tool
that creates, updates, or deletes is also refused when the OAuth connection was approved without the
Create and update or Delete permission.
Articles
Article tools address an article by its slug, its permalink identifier (
a-XXXXXXXX) or its UUID.
GetPublicArticle also needs the workspace subdomain, and it never exposes drafts or the author’s
email address. It has no page in the API reference, which is why it is not linked above.
search and fetch are the two tools the
ChatGPT connector specification requires, so they
overlap with SearchArticles and GetArticle rather than adding anything new. They have no
separate REST endpoint, which is why they are not linked above.Unlisted links
An unlisted link is an article’s secret share URL, which lets anyone holding it read the article
without signing in. Treat the URL as sensitive.
Categories
Authors
Recommendations
Team members
The team member tools also check the connected person’s NeetoKB role: it must allow managing
members, and changing a member’s role needs the manage-roles permission as well. These are role
permissions inside NeetoKB, separate from the Create and update and Delete permissions
ticked when approving the connection. An API key skips role checks.
Workspace
An OAuth grant covers every workspace ticked on the Authorize access screen, which can be more
than one. An API key covers the workspace it was generated in.