deploy

README.md

@@ -0,0 +1,11 @@
+# workos-openapi-agent
+
+Generated A2APack agent for WorkOS.
+
+- Source OpenAPI: https://raw.githubusercontent.com/workos/openapi-spec/main/spec/open-api-spec.yaml
+- Generated operations: 193
+- Main skill: `auto`
+- Routing mode: DeepAgents subagents across 23 route groups
+
+The generated code is intentionally editable. Tune prompts, operation
+grouping, auth names, and safety policy before publishing serious agents.

a2a.yaml

@@ -0,0 +1,13 @@
+name: workos-openapi-agent
+version: '1.0'
+entrypoint: agent:WorkosOpenapiAgent
+description: Enterprise auth and directory platform API for SSO, SCIM, orgs, audit
+  logs, and user management.
+runtime:
+  resources:
+    cpu: 200m
+    memory: 512Mi
+  egress:
+    allow_hosts:
+    - api.workos.com
+    deny_internet_by_default: true

requirements.txt

@@ -0,0 +1,7 @@
+# a2a-pack is installed by the platform base image.
+deepagents>=0.5.0
+langchain>=0.3
+langchain-openai>=0.2
+langchain-core>=0.3
+langgraph>=0.6
+httpx>=0.27

skills/api-keys/SKILL.md

@@ -0,0 +1,41 @@
+---
+name: api-keys-routes
+description: Handle 3 OpenAPI operation(s) under /api_keys for the api keys route group.
+---
+
+# api keys API Routes
+
+Handle 3 OpenAPI operation(s) under /api_keys for the api keys route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### api_keys_controller_validate_api_key
+
+- Operation ID: `api_keys_controller_validate_api_key`
+- Route: `POST /api_keys/validations`
+- Mode: WRITE
+- Summary: Validate API key
+- Body: JSON request body accepted.
+
+### api_keys_controller_delete
+
+- Operation ID: `api_keys_controller_delete`
+- Route: `DELETE /api_keys/{id}`
+- Mode: WRITE
+- Summary: Delete an API key
+- Parameters:
+  - `id` in `path` required
+
+### api_keys_controller_expire
+
+- Operation ID: `api_keys_controller_expire`
+- Route: `POST /api_keys/{id}/expire`
+- Mode: WRITE
+- Summary: Expire an API key
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.

skills/audit-logs/SKILL.md

@@ -0,0 +1,76 @@
+---
+name: audit-logs-routes
+description: Handle 6 OpenAPI operation(s) under /audit_logs for the audit logs route group.
+---
+
+# audit logs API Routes
+
+Handle 6 OpenAPI operation(s) under /audit_logs for the audit logs route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### audit_log_validators_controller_list
+
+- Operation ID: `audit_log_validators_controller_list`
+- Route: `GET /audit_logs/actions`
+- Mode: READ
+- Summary: List Actions
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### audit_log_validator_versions_controller_create
+
+- Operation ID: `audit_log_validator_versions_controller_create`
+- Route: `POST /audit_logs/actions/{actionName}/schemas`
+- Mode: WRITE
+- Summary: Create Schema
+- Parameters:
+  - `actionName` in `path` required
+- Body: JSON request body accepted.
+
+### audit_log_validator_versions_controller_schemas
+
+- Operation ID: `audit_log_validator_versions_controller_schemas`
+- Route: `GET /audit_logs/actions/{actionName}/schemas`
+- Mode: READ
+- Summary: List Schemas
+- Parameters:
+  - `actionName` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### audit_log_events_controller_create
+
+- Operation ID: `audit_log_events_controller_create`
+- Route: `POST /audit_logs/events`
+- Mode: WRITE
+- Summary: Create Event
+- Parameters:
+  - `idempotency-key` in `header`
+- Body: JSON request body accepted.
+
+### audit_log_exports_controller_exports
+
+- Operation ID: `audit_log_exports_controller_exports`
+- Route: `POST /audit_logs/exports`
+- Mode: WRITE
+- Summary: Create Export
+- Body: JSON request body accepted.
+
+### audit_log_exports_controller_export
+
+- Operation ID: `audit_log_exports_controller_export`
+- Route: `GET /audit_logs/exports/{auditLogExportId}`
+- Mode: READ
+- Summary: Get Export
+- Parameters:
+  - `auditLogExportId` in `path` required

skills/auth/SKILL.md

@@ -0,0 +1,60 @@
+---
+name: auth-routes
+description: Handle 5 OpenAPI operation(s) under /auth for the auth route group.
+---
+
+# auth API Routes
+
+Handle 5 OpenAPI operation(s) under /auth for the auth route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### authentication_challenges_controller_verify
+
+- Operation ID: `authentication_challenges_controller_verify`
+- Route: `POST /auth/challenges/{id}/verify`
+- Mode: WRITE
+- Summary: Verify Challenge
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### authentication_factors_controller_create
+
+- Operation ID: `authentication_factors_controller_create`
+- Route: `POST /auth/factors/enroll`
+- Mode: WRITE
+- Summary: Enroll Factor
+- Body: JSON request body accepted.
+
+### authentication_factors_controller_get
+
+- Operation ID: `authentication_factors_controller_get`
+- Route: `GET /auth/factors/{id}`
+- Mode: READ
+- Summary: Get Factor
+- Parameters:
+  - `id` in `path` required
+
+### authentication_factors_controller_delete
+
+- Operation ID: `authentication_factors_controller_delete`
+- Route: `DELETE /auth/factors/{id}`
+- Mode: WRITE
+- Summary: Delete Factor
+- Parameters:
+  - `id` in `path` required
+
+### authentication_factors_controller_challenge
+
+- Operation ID: `authentication_factors_controller_challenge`
+- Route: `POST /auth/factors/{id}/challenge`
+- Mode: WRITE
+- Summary: Challenge Factor
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.

skills/authkit/SKILL.md

@@ -0,0 +1,22 @@
+---
+name: authkit-routes
+description: Handle 1 OpenAPI operation(s) under /authkit/oauth2/complete for the authkit route group.
+---
+
+# authkit API Routes
+
+Handle 1 OpenAPI operation(s) under /authkit/oauth2/complete for the authkit route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### external_auth_controller_complete_login
+
+- Operation ID: `external_auth_controller_complete_login`
+- Route: `POST /authkit/oauth2/complete`
+- Mode: WRITE
+- Summary: Complete external authentication
+- Body: JSON request body accepted.

skills/authorization/SKILL.md

@@ -0,0 +1,516 @@
+---
+name: authorization-routes
+description: Handle 45 OpenAPI operation(s) under /authorization for the authorization route group.
+---
+
+# authorization API Routes
+
+Handle 45 OpenAPI operation(s) under /authorization for the authorization route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### authorization_group_role_assignments_controller_list
+
+- Operation ID: `authorization_group_role_assignments_controller_list`
+- Route: `GET /authorization/groups/{group_id}/role_assignments`
+- Mode: READ
+- Summary: List role assignments for a group
+- Parameters:
+  - `group_id` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### authorization_group_role_assignments_controller_create
+
+- Operation ID: `authorization_group_role_assignments_controller_create`
+- Route: `POST /authorization/groups/{group_id}/role_assignments`
+- Mode: WRITE
+- Summary: Assign a role to a group
+- Parameters:
+  - `group_id` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_group_role_assignments_controller_replace_group_role_assignments
+
+- Operation ID: `authorization_group_role_assignments_controller_replace_group_role_assignments`
+- Route: `PUT /authorization/groups/{group_id}/role_assignments`
+- Mode: WRITE
+- Summary: Replace all role assignments for a group
+- Parameters:
+  - `group_id` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_group_role_assignments_controller_remove_group_role_assignments
+
+- Operation ID: `authorization_group_role_assignments_controller_remove_group_role_assignments`
+- Route: `DELETE /authorization/groups/{group_id}/role_assignments`
+- Mode: WRITE
+- Summary: Remove group role assignments by criteria
+- Parameters:
+  - `group_id` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_group_role_assignments_controller_get
+
+- Operation ID: `authorization_group_role_assignments_controller_get`
+- Route: `GET /authorization/groups/{group_id}/role_assignments/{role_assignment_id}`
+- Mode: READ
+- Summary: Get a group role assignment
+- Parameters:
+  - `group_id` in `path` required
+  - `role_assignment_id` in `path` required
+
+### authorization_group_role_assignments_controller_remove_group_role_assignment
+
+- Operation ID: `authorization_group_role_assignments_controller_remove_group_role_assignment`
+- Route: `DELETE /authorization/groups/{group_id}/role_assignments/{role_assignment_id}`
+- Mode: WRITE
+- Summary: Remove a group role assignment
+- Parameters:
+  - `group_id` in `path` required
+  - `role_assignment_id` in `path` required
+
+### authorization_controller_check
+
+- Operation ID: `authorization_controller_check`
+- Route: `POST /authorization/organization_memberships/{organization_membership_id}/check`
+- Mode: WRITE
+- Summary: Check authorization
+- Parameters:
+  - `organization_membership_id` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_controller_list_resources_for_membership
+
+- Operation ID: `authorization_controller_list_resources_for_membership`
+- Route: `GET /authorization/organization_memberships/{organization_membership_id}/resources`
+- Mode: READ
+- Summary: List resources for organization membership
+- Parameters:
+  - `organization_membership_id` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `permission_slug` in `query` required
+  - `parent_resource_id` in `query`
+  - `parent_resource_type_slug` in `query`
+  - `parent_resource_external_id` in `query`
+
+### authorization_controller_list_effective_permissions
+
+- Operation ID: `authorization_controller_list_effective_permissions`
+- Route: `GET /authorization/organization_memberships/{organization_membership_id}/resources/{resource_id}/permissions`
+- Mode: READ
+- Summary: List effective permissions for an organization membership on a resource
+- Parameters:
+  - `organization_membership_id` in `path` required
+  - `resource_id` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### authorization_controller_list_effective_permissions_by_external_id
+
+- Operation ID: `authorization_controller_list_effective_permissions_by_external_id`
+- Route: `GET /authorization/organization_memberships/{organization_membership_id}/resources/{resource_type_slug}/{external_id}/permissions`
+- Mode: READ
+- Summary: List effective permissions for an organization membership on a resource by external ID
+- Parameters:
+  - `organization_membership_id` in `path` required
+  - `resource_type_slug` in `path` required
+  - `external_id` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### authorization_role_assignments_controller_list_role_assignments
+
+- Operation ID: `authorization_role_assignments_controller_list_role_assignments`
+- Route: `GET /authorization/organization_memberships/{organization_membership_id}/role_assignments`
+- Mode: READ
+- Summary: List role assignments
+- Parameters:
+  - `organization_membership_id` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `resource_id` in `query`
+  - `resource_external_id` in `query`
+  - `resource_type_slug` in `query`
+
+### authorization_role_assignments_controller_assign_role
+
+- Operation ID: `authorization_role_assignments_controller_assign_role`
+- Route: `POST /authorization/organization_memberships/{organization_membership_id}/role_assignments`
+- Mode: WRITE
+- Summary: Assign a role
+- Parameters:
+  - `organization_membership_id` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_role_assignments_controller_remove_role_by_criteria
+
+- Operation ID: `authorization_role_assignments_controller_remove_role_by_criteria`
+- Route: `DELETE /authorization/organization_memberships/{organization_membership_id}/role_assignments`
+- Mode: WRITE
+- Summary: Remove a role assignment
+- Parameters:
+  - `organization_membership_id` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_role_assignments_controller_remove_role_by_id
+
+- Operation ID: `authorization_role_assignments_controller_remove_role_by_id`
+- Route: `DELETE /authorization/organization_memberships/{organization_membership_id}/role_assignments/{role_assignment_id}`
+- Mode: WRITE
+- Summary: Remove a role assignment by ID
+- Parameters:
+  - `organization_membership_id` in `path` required
+  - `role_assignment_id` in `path` required
+
+### authorization_organization_roles_controller_create
+
+- Operation ID: `authorization_organization_roles_controller_create`
+- Route: `POST /authorization/organizations/{organizationId}/roles`
+- Mode: WRITE
+- Summary: Create a custom role
+- Parameters:
+  - `organizationId` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_organization_roles_controller_list
+
+- Operation ID: `authorization_organization_roles_controller_list`
+- Route: `GET /authorization/organizations/{organizationId}/roles`
+- Mode: READ
+- Summary: List custom roles
+- Parameters:
+  - `organizationId` in `path` required
+
+### authorization_organization_roles_controller_get
+
+- Operation ID: `authorization_organization_roles_controller_get`
+- Route: `GET /authorization/organizations/{organizationId}/roles/{slug}`
+- Mode: READ
+- Summary: Get a custom role
+- Parameters:
+  - `organizationId` in `path` required
+  - `slug` in `path` required
+
+### authorization_organization_roles_controller_update
+
+- Operation ID: `authorization_organization_roles_controller_update`
+- Route: `PATCH /authorization/organizations/{organizationId}/roles/{slug}`
+- Mode: WRITE
+- Summary: Update a custom role
+- Parameters:
+  - `organizationId` in `path` required
+  - `slug` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_organization_roles_controller_delete
+
+- Operation ID: `authorization_organization_roles_controller_delete`
+- Route: `DELETE /authorization/organizations/{organizationId}/roles/{slug}`
+- Mode: WRITE
+- Summary: Delete a custom role
+- Parameters:
+  - `organizationId` in `path` required
+  - `slug` in `path` required
+
+### authorization_organization_role_permissions_controller_set_permissions
+
+- Operation ID: `authorization_organization_role_permissions_controller_set_permissions`
+- Route: `PUT /authorization/organizations/{organizationId}/roles/{slug}/permissions`
+- Mode: WRITE
+- Summary: Set permissions for a custom role
+- Parameters:
+  - `organizationId` in `path` required
+  - `slug` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_organization_role_permissions_controller_add_permission
+
+- Operation ID: `authorization_organization_role_permissions_controller_add_permission`
+- Route: `POST /authorization/organizations/{organizationId}/roles/{slug}/permissions`
+- Mode: WRITE
+- Summary: Add a permission to a custom role
+- Parameters:
+  - `organizationId` in `path` required
+  - `slug` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_organization_role_permissions_controller_remove_permission
+
+- Operation ID: `authorization_organization_role_permissions_controller_remove_permission`
+- Route: `DELETE /authorization/organizations/{organizationId}/roles/{slug}/permissions/{permissionSlug}`
+- Mode: WRITE
+- Summary: Remove a permission from a custom role
+- Parameters:
+  - `organizationId` in `path` required
+  - `slug` in `path` required
+  - `permissionSlug` in `path` required
+
+### authorization_resources_by_external_id_controller_get_by_external_id
+
+- Operation ID: `authorization_resources_by_external_id_controller_get_by_external_id`
+- Route: `GET /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}`
+- Mode: READ
+- Summary: Get a resource by external ID
+- Parameters:
+  - `organization_id` in `path` required
+  - `resource_type_slug` in `path` required
+  - `external_id` in `path` required
+
+### authorization_resources_by_external_id_controller_update_by_external_id
+
+- Operation ID: `authorization_resources_by_external_id_controller_update_by_external_id`
+- Route: `PATCH /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}`
+- Mode: WRITE
+- Summary: Update a resource by external ID
+- Parameters:
+  - `organization_id` in `path` required
+  - `resource_type_slug` in `path` required
+  - `external_id` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_resources_by_external_id_controller_delete_by_external_id
+
+- Operation ID: `authorization_resources_by_external_id_controller_delete_by_external_id`
+- Route: `DELETE /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}`
+- Mode: WRITE
+- Summary: Delete an authorization resource by external ID
+- Parameters:
+  - `organization_id` in `path` required
+  - `resource_type_slug` in `path` required
+  - `external_id` in `path` required
+  - `cascade_delete` in `query`
+
+### authorization_resources_by_external_id_controller_list_organization_memberships_
+
+- Operation ID: `authorization_resources_by_external_id_controller_list_organization_memberships_`
+- Route: `GET /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}/organization_memberships`
+- Mode: READ
+- Summary: List memberships for a resource by external ID
+- Parameters:
+  - `organization_id` in `path` required
+  - `resource_type_slug` in `path` required
+  - `external_id` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `permission_slug` in `query` required
+  - `assignment` in `query`
+
+### authorization_role_assignments_controller_list_role_assignments_for_resource_by_
+
+- Operation ID: `authorization_role_assignments_controller_list_role_assignments_for_resource_by_`
+- Route: `GET /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}/role_assignments`
+- Mode: READ
+- Summary: List role assignments for a resource by external ID
+- Parameters:
+  - `organization_id` in `path` required
+  - `resource_type_slug` in `path` required
+  - `external_id` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `role_slug` in `query`
+
+### authorization_permissions_controller_list
+
+- Operation ID: `authorization_permissions_controller_list`
+- Route: `GET /authorization/permissions`
+- Mode: READ
+- Summary: List permissions
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### authorization_permissions_controller_create
+
+- Operation ID: `authorization_permissions_controller_create`
+- Route: `POST /authorization/permissions`
+- Mode: WRITE
+- Summary: Create a permission
+- Body: JSON request body accepted.
+
+### authorization_permissions_controller_find
+
+- Operation ID: `authorization_permissions_controller_find`
+- Route: `GET /authorization/permissions/{slug}`
+- Mode: READ
+- Summary: Get a permission
+- Parameters:
+  - `slug` in `path` required
+
+### authorization_permissions_controller_update
+
+- Operation ID: `authorization_permissions_controller_update`
+- Route: `PATCH /authorization/permissions/{slug}`
+- Mode: WRITE
+- Summary: Update a permission
+- Parameters:
+  - `slug` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_permissions_controller_delete
+
+- Operation ID: `authorization_permissions_controller_delete`
+- Route: `DELETE /authorization/permissions/{slug}`
+- Mode: WRITE
+- Summary: Delete a permission
+- Parameters:
+  - `slug` in `path` required
+
+### authorization_resources_controller_list
+
+- Operation ID: `authorization_resources_controller_list`
+- Route: `GET /authorization/resources`
+- Mode: READ
+- Summary: List resources
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `organization_id` in `query`
+  - `resource_type_slug` in `query`
+  - `resource_external_id` in `query`
+  - `parent_resource_id` in `query`
+  - `parent_resource_type_slug` in `query`
+  - `parent_external_id` in `query`
+
+### authorization_resources_controller_create
+
+- Operation ID: `authorization_resources_controller_create`
+- Route: `POST /authorization/resources`
+- Mode: WRITE
+- Summary: Create an authorization resource
+- Body: JSON request body accepted.
+
+### authorization_resources_controller_find_by_id
+
+- Operation ID: `authorization_resources_controller_find_by_id`
+- Route: `GET /authorization/resources/{resource_id}`
+- Mode: READ
+- Summary: Get a resource
+- Parameters:
+  - `resource_id` in `path` required
+
+### authorization_resources_controller_update
+
+- Operation ID: `authorization_resources_controller_update`
+- Route: `PATCH /authorization/resources/{resource_id}`
+- Mode: WRITE
+- Summary: Update a resource
+- Parameters:
+  - `resource_id` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_resources_controller_delete
+
+- Operation ID: `authorization_resources_controller_delete`
+- Route: `DELETE /authorization/resources/{resource_id}`
+- Mode: WRITE
+- Summary: Delete an authorization resource
+- Parameters:
+  - `resource_id` in `path` required
+  - `cascade_delete` in `query`
+
+### authorization_resources_controller_list_organization_memberships_for_resource
+
+- Operation ID: `authorization_resources_controller_list_organization_memberships_for_resource`
+- Route: `GET /authorization/resources/{resource_id}/organization_memberships`
+- Mode: READ
+- Summary: List organization memberships for resource
+- Parameters:
+  - `resource_id` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `permission_slug` in `query` required
+  - `assignment` in `query`
+
+### authorization_role_assignments_controller_list_role_assignments_for_resource
+
+- Operation ID: `authorization_role_assignments_controller_list_role_assignments_for_resource`
+- Route: `GET /authorization/resources/{resource_id}/role_assignments`
+- Mode: READ
+- Summary: List role assignments for a resource
+- Parameters:
+  - `resource_id` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `role_slug` in `query`
+
+### authorization_roles_controller_create
+
+- Operation ID: `authorization_roles_controller_create`
+- Route: `POST /authorization/roles`
+- Mode: WRITE
+- Summary: Create an environment role
+- Body: JSON request body accepted.
+
+### authorization_roles_controller_list
+
+- Operation ID: `authorization_roles_controller_list`
+- Route: `GET /authorization/roles`
+- Mode: READ
+- Summary: List environment roles
+
+### authorization_roles_controller_get
+
+- Operation ID: `authorization_roles_controller_get`
+- Route: `GET /authorization/roles/{slug}`
+- Mode: READ
+- Summary: Get an environment role
+- Parameters:
+  - `slug` in `path` required
+
+### authorization_roles_controller_update
+
+- Operation ID: `authorization_roles_controller_update`
+- Route: `PATCH /authorization/roles/{slug}`
+- Mode: WRITE
+- Summary: Update an environment role
+- Parameters:
+  - `slug` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_role_permissions_controller_set_permissions
+
+- Operation ID: `authorization_role_permissions_controller_set_permissions`
+- Route: `PUT /authorization/roles/{slug}/permissions`
+- Mode: WRITE
+- Summary: Set permissions for an environment role
+- Parameters:
+  - `slug` in `path` required
+- Body: JSON request body accepted.
+
+### authorization_role_permissions_controller_add_permission
+
+- Operation ID: `authorization_role_permissions_controller_add_permission`
+- Route: `POST /authorization/roles/{slug}/permissions`
+- Mode: WRITE
+- Summary: Add a permission to an environment role
+- Parameters:
+  - `slug` in `path` required
+- Body: JSON request body accepted.

skills/client/SKILL.md

@@ -0,0 +1,22 @@
+---
+name: client-routes
+description: Handle 1 OpenAPI operation(s) under /client/token for the client route group.
+---
+
+# client API Routes
+
+Handle 1 OpenAPI operation(s) under /client/token for the client route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### client_api_token_controller_issue_client_api_token
+
+- Operation ID: `client_api_token_controller_issue_client_api_token`
+- Route: `POST /client/token`
+- Mode: WRITE
+- Summary: Generate a Client API token
+- Body: JSON request body accepted.

skills/connect/SKILL.md

@@ -0,0 +1,91 @@
+---
+name: connect-routes
+description: Handle 8 OpenAPI operation(s) under /connect for the connect route group.
+---
+
+# connect API Routes
+
+Handle 8 OpenAPI operation(s) under /connect for the connect route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### applications_controller_list
+
+- Operation ID: `applications_controller_list`
+- Route: `GET /connect/applications`
+- Mode: READ
+- Summary: List Connect Applications
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `organization_id` in `query`
+
+### applications_controller_create
+
+- Operation ID: `applications_controller_create`
+- Route: `POST /connect/applications`
+- Mode: WRITE
+- Summary: Create a Connect Application
+- Body: JSON request body accepted.
+
+### applications_controller_find
+
+- Operation ID: `applications_controller_find`
+- Route: `GET /connect/applications/{id}`
+- Mode: READ
+- Summary: Get a Connect Application
+- Parameters:
+  - `id` in `path` required
+
+### applications_controller_update
+
+- Operation ID: `applications_controller_update`
+- Route: `PUT /connect/applications/{id}`
+- Mode: WRITE
+- Summary: Update a Connect Application
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### applications_controller_delete
+
+- Operation ID: `applications_controller_delete`
+- Route: `DELETE /connect/applications/{id}`
+- Mode: WRITE
+- Summary: Delete a Connect Application
+- Parameters:
+  - `id` in `path` required
+
+### application_credentials_controller_list
+
+- Operation ID: `application_credentials_controller_list`
+- Route: `GET /connect/applications/{id}/client_secrets`
+- Mode: READ
+- Summary: List Client Secrets for a Connect Application
+- Parameters:
+  - `id` in `path` required
+
+### application_credentials_controller_create
+
+- Operation ID: `application_credentials_controller_create`
+- Route: `POST /connect/applications/{id}/client_secrets`
+- Mode: WRITE
+- Summary: Create a new client secret for a Connect Application
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### application_credentials_controller_delete
+
+- Operation ID: `application_credentials_controller_delete`
+- Route: `DELETE /connect/client_secrets/{id}`
+- Mode: WRITE
+- Summary: Delete a Client Secret
+- Parameters:
+  - `id` in `path` required

skills/connections/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: connections-routes
+description: Handle 3 OpenAPI operation(s) under /connections for the connections route group.
+---
+
+# connections API Routes
+
+Handle 3 OpenAPI operation(s) under /connections for the connections route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### connections_controller_list
+
+- Operation ID: `connections_controller_list`
+- Route: `GET /connections`
+- Mode: READ
+- Summary: List Connections
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `connection_type` in `query`
+  - `domain` in `query`
+  - `organization_id` in `query`
+  - `search` in `query`
+
+### connections_controller_find
+
+- Operation ID: `connections_controller_find`
+- Route: `GET /connections/{id}`
+- Mode: READ
+- Summary: Get a Connection
+- Parameters:
+  - `id` in `path` required
+
+### connections_controller_delete
+
+- Operation ID: `connections_controller_delete`
+- Route: `DELETE /connections/{id}`
+- Mode: WRITE
+- Summary: Delete a Connection
+- Parameters:
+  - `id` in `path` required

skills/data-integrations/SKILL.md

@@ -0,0 +1,34 @@
+---
+name: data-integrations-routes
+description: Handle 2 OpenAPI operation(s) under /data-integrations/{slug} for the data integrations route group.
+---
+
+# data integrations API Routes
+
+Handle 2 OpenAPI operation(s) under /data-integrations/{slug} for the data integrations route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### data_integrations_controller_get_data_integration_authorize_url
+
+- Operation ID: `data_integrations_controller_get_data_integration_authorize_url`
+- Route: `POST /data-integrations/{slug}/authorize`
+- Mode: WRITE
+- Summary: Get authorization URL
+- Parameters:
+  - `slug` in `path` required
+- Body: JSON request body accepted.
+
+### data_integrations_controller_get_userland_user_token
+
+- Operation ID: `data_integrations_controller_get_userland_user_token`
+- Route: `POST /data-integrations/{slug}/token`
+- Mode: WRITE
+- Summary: Get an access token for a connected account
+- Parameters:
+  - `slug` in `path` required
+- Body: JSON request body accepted.

skills/directories/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: directories-routes
+description: Handle 3 OpenAPI operation(s) under /directories for the directories route group.
+---
+
+# directories API Routes
+
+Handle 3 OpenAPI operation(s) under /directories for the directories route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### directories_controller_list
+
+- Operation ID: `directories_controller_list`
+- Route: `GET /directories`
+- Mode: READ
+- Summary: List Directories
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `organization_id` in `query`
+  - `search` in `query`
+  - `domain` in `query`
+
+### directories_controller_find
+
+- Operation ID: `directories_controller_find`
+- Route: `GET /directories/{id}`
+- Mode: READ
+- Summary: Get a Directory
+- Parameters:
+  - `id` in `path` required
+
+### directories_controller_delete_directory
+
+- Operation ID: `directories_controller_delete_directory`
+- Route: `DELETE /directories/{id}`
+- Mode: WRITE
+- Summary: Delete a Directory
+- Parameters:
+  - `id` in `path` required

skills/directory-groups/SKILL.md

@@ -0,0 +1,37 @@
+---
+name: directory-groups-routes
+description: Handle 2 OpenAPI operation(s) under /directory_groups for the directory groups route group.
+---
+
+# directory groups API Routes
+
+Handle 2 OpenAPI operation(s) under /directory_groups for the directory groups route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### directory_groups_controller_list
+
+- Operation ID: `directory_groups_controller_list`
+- Route: `GET /directory_groups`
+- Mode: READ
+- Summary: List Directory Groups
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `directory` in `query`
+  - `user` in `query`
+
+### directory_groups_controller_find
+
+- Operation ID: `directory_groups_controller_find`
+- Route: `GET /directory_groups/{id}`
+- Mode: READ
+- Summary: Get a Directory Group
+- Parameters:
+  - `id` in `path` required

skills/directory-users/SKILL.md

@@ -0,0 +1,39 @@
+---
+name: directory-users-routes
+description: Handle 2 OpenAPI operation(s) under /directory_users for the directory users route group.
+---
+
+# directory users API Routes
+
+Handle 2 OpenAPI operation(s) under /directory_users for the directory users route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### directory_users_controller_list
+
+- Operation ID: `directory_users_controller_list`
+- Route: `GET /directory_users`
+- Mode: READ
+- Summary: List Directory Users
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `directory` in `query`
+  - `group` in `query`
+  - `idp_id` in `query`
+  - `email` in `query`
+
+### directory_users_controller_find
+
+- Operation ID: `directory_users_controller_find`
+- Route: `GET /directory_users/{id}`
+- Mode: READ
+- Summary: Get a Directory User
+- Parameters:
+  - `id` in `path` required

skills/events/SKILL.md

@@ -0,0 +1,30 @@
+---
+name: events-routes
+description: Handle 1 OpenAPI operation(s) under /events for the events route group.
+---
+
+# events API Routes
+
+Handle 1 OpenAPI operation(s) under /events for the events route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### events_controller_list
+
+- Operation ID: `events_controller_list`
+- Route: `GET /events`
+- Mode: READ
+- Summary: List events
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `events` in `query`
+  - `range_start` in `query`
+  - `range_end` in `query`
+  - `organization_id` in `query`

skills/feature-flags/SKILL.md

@@ -0,0 +1,73 @@
+---
+name: feature-flags-routes
+description: Handle 6 OpenAPI operation(s) under /feature-flags for the feature flags route group.
+---
+
+# feature flags API Routes
+
+Handle 6 OpenAPI operation(s) under /feature-flags for the feature flags route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### feature_flags_controller_list
+
+- Operation ID: `feature_flags_controller_list`
+- Route: `GET /feature-flags`
+- Mode: READ
+- Summary: List feature flags
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### feature_flags_controller_find_by_slug
+
+- Operation ID: `feature_flags_controller_find_by_slug`
+- Route: `GET /feature-flags/{slug}`
+- Mode: READ
+- Summary: Get a feature flag
+- Parameters:
+  - `slug` in `path` required
+
+### feature_flags_controller_disable_flag
+
+- Operation ID: `feature_flags_controller_disable_flag`
+- Route: `PUT /feature-flags/{slug}/disable`
+- Mode: WRITE
+- Summary: Disable a feature flag
+- Parameters:
+  - `slug` in `path` required
+
+### feature_flags_controller_enable_flag
+
+- Operation ID: `feature_flags_controller_enable_flag`
+- Route: `PUT /feature-flags/{slug}/enable`
+- Mode: WRITE
+- Summary: Enable a feature flag
+- Parameters:
+  - `slug` in `path` required
+
+### flag_targets_controller_create_target
+
+- Operation ID: `flag_targets_controller_create_target`
+- Route: `POST /feature-flags/{slug}/targets/{resourceId}`
+- Mode: WRITE
+- Summary: Add a feature flag target
+- Parameters:
+  - `resourceId` in `path` required
+  - `slug` in `path` required
+
+### flag_targets_controller_delete_target
+
+- Operation ID: `flag_targets_controller_delete_target`
+- Route: `DELETE /feature-flags/{slug}/targets/{resourceId}`
+- Mode: WRITE
+- Summary: Remove a feature flag target
+- Parameters:
+  - `resourceId` in `path` required
+  - `slug` in `path` required

skills/organization-domains/SKILL.md

@@ -0,0 +1,49 @@
+---
+name: organization-domains-routes
+description: Handle 4 OpenAPI operation(s) under /organization_domains for the organization domains route group.
+---
+
+# organization domains API Routes
+
+Handle 4 OpenAPI operation(s) under /organization_domains for the organization domains route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### organization_domains_controller_create
+
+- Operation ID: `organization_domains_controller_create`
+- Route: `POST /organization_domains`
+- Mode: WRITE
+- Summary: Create an Organization Domain
+- Body: JSON request body accepted.
+
+### organization_domains_controller_get
+
+- Operation ID: `organization_domains_controller_get`
+- Route: `GET /organization_domains/{id}`
+- Mode: READ
+- Summary: Get an Organization Domain
+- Parameters:
+  - `id` in `path` required
+
+### organization_domains_controller_delete
+
+- Operation ID: `organization_domains_controller_delete`
+- Route: `DELETE /organization_domains/{id}`
+- Mode: WRITE
+- Summary: Delete an Organization Domain
+- Parameters:
+  - `id` in `path` required
+
+### organization_domains_controller_verify
+
+- Operation ID: `organization_domains_controller_verify`
+- Route: `POST /organization_domains/{id}/verify`
+- Mode: WRITE
+- Summary: Verify an Organization Domain
+- Parameters:
+  - `id` in `path` required

skills/organizations/SKILL.md

@@ -0,0 +1,247 @@
+---
+name: organizations-routes
+description: Handle 22 OpenAPI operation(s) under /organizations for the organizations route group.
+---
+
+# organizations API Routes
+
+Handle 22 OpenAPI operation(s) under /organizations for the organizations route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### organizations_controller_list
+
+- Operation ID: `organizations_controller_list`
+- Route: `GET /organizations`
+- Mode: READ
+- Summary: List Organizations
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `domains` in `query`
+  - `search` in `query`
+
+### organizations_controller_create
+
+- Operation ID: `organizations_controller_create`
+- Route: `POST /organizations`
+- Mode: WRITE
+- Summary: Create an Organization
+- Body: JSON request body accepted.
+
+### organizations_controller_get_by_external_id
+
+- Operation ID: `organizations_controller_get_by_external_id`
+- Route: `GET /organizations/external_id/{external_id}`
+- Mode: READ
+- Summary: Get an Organization by External ID
+- Parameters:
+  - `external_id` in `path` required
+
+### organizations_controller_find
+
+- Operation ID: `organizations_controller_find`
+- Route: `GET /organizations/{id}`
+- Mode: READ
+- Summary: Get an Organization
+- Parameters:
+  - `id` in `path` required
+
+### organizations_controller_update_organization
+
+- Operation ID: `organizations_controller_update_organization`
+- Route: `PUT /organizations/{id}`
+- Mode: WRITE
+- Summary: Update an Organization
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### organizations_controller_delete_organization
+
+- Operation ID: `organizations_controller_delete_organization`
+- Route: `DELETE /organizations/{id}`
+- Mode: WRITE
+- Summary: Delete an Organization
+- Parameters:
+  - `id` in `path` required
+
+### organizations_controller_get_audit_log_configuration
+
+- Operation ID: `organizations_controller_get_audit_log_configuration`
+- Route: `GET /organizations/{id}/audit_log_configuration`
+- Mode: READ
+- Summary: Get Audit Log Configuration
+- Parameters:
+  - `id` in `path` required
+
+### audit_logs_retention_controller_audit_logs_retention
+
+- Operation ID: `audit_logs_retention_controller_audit_logs_retention`
+- Route: `GET /organizations/{id}/audit_logs_retention`
+- Mode: READ
+- Summary: Get Retention
+- Parameters:
+  - `id` in `path` required
+
+### audit_logs_retention_controller_update_audit_logs_retention
+
+- Operation ID: `audit_logs_retention_controller_update_audit_logs_retention`
+- Route: `PUT /organizations/{id}/audit_logs_retention`
+- Mode: WRITE
+- Summary: Set Retention
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### organization_api_keys_controller_list
+
+- Operation ID: `organization_api_keys_controller_list`
+- Route: `GET /organizations/{organizationId}/api_keys`
+- Mode: READ
+- Summary: List API keys for an organization
+- Parameters:
+  - `organizationId` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### organization_api_keys_controller_create
+
+- Operation ID: `organization_api_keys_controller_create`
+- Route: `POST /organizations/{organizationId}/api_keys`
+- Mode: WRITE
+- Summary: Create an API key for an organization
+- Parameters:
+  - `organizationId` in `path` required
+- Body: JSON request body accepted.
+
+### provider_controller_list_for_organization
+
+- Operation ID: `provider_controller_list_for_organization`
+- Route: `GET /organizations/{organizationId}/data_integration_configurations`
+- Mode: READ
+- Summary: List providers for an organization
+- Parameters:
+  - `organizationId` in `path` required
+
+### provider_controller_configure
+
+- Operation ID: `provider_controller_configure`
+- Route: `PUT /organizations/{organizationId}/data_integration_configurations/{slug}`
+- Mode: WRITE
+- Summary: Configure a provider for an organization
+- Parameters:
+  - `organizationId` in `path` required
+  - `slug` in `path` required
+- Body: JSON request body accepted.
+
+### organization_feature_flags_controller_list
+
+- Operation ID: `organization_feature_flags_controller_list`
+- Route: `GET /organizations/{organizationId}/feature-flags`
+- Mode: READ
+- Summary: List enabled feature flags for an organization
+- Parameters:
+  - `organizationId` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### groups_controller_create
+
+- Operation ID: `groups_controller_create`
+- Route: `POST /organizations/{organizationId}/groups`
+- Mode: WRITE
+- Summary: Create a group
+- Parameters:
+  - `organizationId` in `path` required
+- Body: JSON request body accepted.
+
+### groups_controller_list
+
+- Operation ID: `groups_controller_list`
+- Route: `GET /organizations/{organizationId}/groups`
+- Mode: READ
+- Summary: List groups
+- Parameters:
+  - `organizationId` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### groups_controller_get
+
+- Operation ID: `groups_controller_get`
+- Route: `GET /organizations/{organizationId}/groups/{groupId}`
+- Mode: READ
+- Summary: Get a group
+- Parameters:
+  - `organizationId` in `path` required
+  - `groupId` in `path` required
+
+### groups_controller_update
+
+- Operation ID: `groups_controller_update`
+- Route: `PATCH /organizations/{organizationId}/groups/{groupId}`
+- Mode: WRITE
+- Summary: Update a group
+- Parameters:
+  - `organizationId` in `path` required
+  - `groupId` in `path` required
+- Body: JSON request body accepted.
+
+### groups_controller_delete
+
+- Operation ID: `groups_controller_delete`
+- Route: `DELETE /organizations/{organizationId}/groups/{groupId}`
+- Mode: WRITE
+- Summary: Delete a group
+- Parameters:
+  - `organizationId` in `path` required
+  - `groupId` in `path` required
+
+### group_memberships_controller_add_member
+
+- Operation ID: `group_memberships_controller_add_member`
+- Route: `POST /organizations/{organizationId}/groups/{groupId}/organization-memberships`
+- Mode: WRITE
+- Summary: Add a member to a Group
+- Parameters:
+  - `organizationId` in `path` required
+  - `groupId` in `path` required
+- Body: JSON request body accepted.
+
+### group_memberships_controller_list_members
+
+- Operation ID: `group_memberships_controller_list_members`
+- Route: `GET /organizations/{organizationId}/groups/{groupId}/organization-memberships`
+- Mode: READ
+- Summary: List Group members
+- Parameters:
+  - `organizationId` in `path` required
+  - `groupId` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### group_memberships_controller_remove_member
+
+- Operation ID: `group_memberships_controller_remove_member`
+- Route: `DELETE /organizations/{organizationId}/groups/{groupId}/organization-memberships/{omId}`
+- Mode: WRITE
+- Summary: Remove a member from a Group
+- Parameters:
+  - `organizationId` in `path` required
+  - `groupId` in `path` required
+  - `omId` in `path` required

skills/portal/SKILL.md

@@ -0,0 +1,22 @@
+---
+name: portal-routes
+description: Handle 1 OpenAPI operation(s) under /portal/generate_link for the portal route group.
+---
+
+# portal API Routes
+
+Handle 1 OpenAPI operation(s) under /portal/generate_link for the portal route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### portal_sessions_controller_create
+
+- Operation ID: `portal_sessions_controller_create`
+- Route: `POST /portal/generate_link`
+- Mode: WRITE
+- Summary: Generate a Portal Link
+- Body: JSON request body accepted.

skills/radar/SKILL.md

@@ -0,0 +1,54 @@
+---
+name: radar-routes
+description: Handle 4 OpenAPI operation(s) under /radar for the radar route group.
+---
+
+# radar API Routes
+
+Handle 4 OpenAPI operation(s) under /radar for the radar route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### radar_standalone_controller_assess
+
+- Operation ID: `radar_standalone_controller_assess`
+- Route: `POST /radar/attempts`
+- Mode: WRITE
+- Summary: Create an attempt
+- Body: JSON request body accepted.
+
+### radar_standalone_controller_update_radar_attempt
+
+- Operation ID: `radar_standalone_controller_update_radar_attempt`
+- Route: `PUT /radar/attempts/{id}`
+- Mode: WRITE
+- Summary: Update a Radar attempt
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### radar_standalone_controller_update_radar_list
+
+- Operation ID: `radar_standalone_controller_update_radar_list`
+- Route: `POST /radar/lists/{type}/{action}`
+- Mode: WRITE
+- Summary: Add an entry to a Radar list
+- Parameters:
+  - `type` in `path` required
+  - `action` in `path` required
+- Body: JSON request body accepted.
+
+### radar_standalone_controller_delete_radar_list_entry
+
+- Operation ID: `radar_standalone_controller_delete_radar_list_entry`
+- Route: `DELETE /radar/lists/{type}/{action}`
+- Mode: WRITE
+- Summary: Remove an entry from a Radar list
+- Parameters:
+  - `type` in `path` required
+  - `action` in `path` required
+- Body: JSON request body accepted.

skills/sso/SKILL.md

@@ -0,0 +1,81 @@
+---
+name: sso-routes
+description: Handle 6 OpenAPI operation(s) under /sso for the sso route group.
+---
+
+# sso API Routes
+
+Handle 6 OpenAPI operation(s) under /sso for the sso route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### sso_controller_authorize
+
+- Operation ID: `sso_controller_authorize`
+- Route: `GET /sso/authorize`
+- Mode: READ
+- Summary: Initiate SSO
+- Parameters:
+  - `provider_scopes` in `query`
+  - `provider_query_params` in `query`
+  - `client_id` in `query` required
+  - `domain` in `query`
+  - `provider` in `query`
+  - `redirect_uri` in `query` required
+  - `response_type` in `query` required
+  - `state` in `query`
+  - `connection` in `query`
+  - `organization` in `query`
+  - `domain_hint` in `query`
+  - `login_hint` in `query`
+  - `nonce` in `query`
+
+### sso_controller_json_web_key_set
+
+- Operation ID: `sso_controller_json_web_key_set`
+- Route: `GET /sso/jwks/{clientId}`
+- Mode: READ
+- Summary: Get JWKS
+- Parameters:
+  - `clientId` in `path` required
+
+### sso_controller_logout
+
+- Operation ID: `sso_controller_logout`
+- Route: `GET /sso/logout`
+- Mode: READ
+- Summary: Logout Redirect
+- Parameters:
+  - `token` in `query` required
+
+### sso_controller_logout_authorize
+
+- Operation ID: `sso_controller_logout_authorize`
+- Route: `POST /sso/logout/authorize`
+- Mode: WRITE
+- Summary: Logout Authorize
+- Body: JSON request body accepted.
+
+### sso_controller_get_profile
+
+- Operation ID: `sso_controller_get_profile`
+- Route: `GET /sso/profile`
+- Mode: READ
+- Summary: Get a User Profile
+
+### sso_controller_token
+
+- Operation ID: `sso_controller_token`
+- Route: `POST /sso/token`
+- Mode: WRITE
+- Summary: Get a Profile and Token
+- Parameters:
+  - `client_id` in `query` required
+  - `client_secret` in `query` required
+  - `code` in `query` required
+  - `grant_type` in `query` required
+- Body: JSON request body accepted.

skills/user-management/SKILL.md

@@ -0,0 +1,540 @@
+---
+name: user-management-routes
+description: Handle 52 OpenAPI operation(s) under /user_management for the user management route group.
+---
+
+# user management API Routes
+
+Handle 52 OpenAPI operation(s) under /user_management for the user management route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### userland_sessions_controller_authenticate_0
+
+- Operation ID: `userland_sessions_controller_authenticate_0`
+- Route: `POST /user_management/authenticate`
+- Mode: WRITE
+- Summary: Authenticate
+- Body: JSON request body accepted.
+
+### userland_sso_controller_authorize
+
+- Operation ID: `userland_sso_controller_authorize`
+- Route: `GET /user_management/authorize`
+- Mode: READ
+- Summary: Get an authorization URL
+- Parameters:
+  - `code_challenge_method` in `query`
+  - `code_challenge` in `query`
+  - `domain_hint` in `query`
+  - `connection_id` in `query`
+  - `provider_query_params` in `query`
+  - `provider_scopes` in `query`
+  - `invitation_token` in `query`
+  - `screen_hint` in `query`
+  - `login_hint` in `query`
+  - `provider` in `query`
+  - `prompt` in `query`
+  - `state` in `query`
+  - `organization_id` in `query`
+  - `response_type` in `query` required
+  - `redirect_uri` in `query` required
+  - `client_id` in `query` required
+
+### userland_sso_controller_device_authorization
+
+- Operation ID: `userland_sso_controller_device_authorization`
+- Route: `POST /user_management/authorize/device`
+- Mode: WRITE
+- Summary: Get device authorization URL
+- Body: JSON request body accepted.
+
+### cors_origins_controller_create_cors_origin
+
+- Operation ID: `cors_origins_controller_create_cors_origin`
+- Route: `POST /user_management/cors_origins`
+- Mode: WRITE
+- Summary: Create a CORS origin
+- Body: JSON request body accepted.
+
+### userland_users_controller_get_email_verification
+
+- Operation ID: `userland_users_controller_get_email_verification`
+- Route: `GET /user_management/email_verification/{id}`
+- Mode: READ
+- Summary: Get an email verification code
+- Parameters:
+  - `id` in `path` required
+
+### userland_user_invites_controller_list
+
+- Operation ID: `userland_user_invites_controller_list`
+- Route: `GET /user_management/invitations`
+- Mode: READ
+- Summary: List invitations
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `organization_id` in `query`
+  - `email` in `query`
+
+### userland_user_invites_controller_create
+
+- Operation ID: `userland_user_invites_controller_create`
+- Route: `POST /user_management/invitations`
+- Mode: WRITE
+- Summary: Send an invitation
+- Body: JSON request body accepted.
+
+### userland_user_invites_controller_get_by_token
+
+- Operation ID: `userland_user_invites_controller_get_by_token`
+- Route: `GET /user_management/invitations/by_token/{token}`
+- Mode: READ
+- Summary: Find an invitation by token
+- Parameters:
+  - `token` in `path` required
+
+### userland_user_invites_controller_get
+
+- Operation ID: `userland_user_invites_controller_get`
+- Route: `GET /user_management/invitations/{id}`
+- Mode: READ
+- Summary: Get an invitation
+- Parameters:
+  - `id` in `path` required
+
+### userland_user_invites_controller_accept
+
+- Operation ID: `userland_user_invites_controller_accept`
+- Route: `POST /user_management/invitations/{id}/accept`
+- Mode: WRITE
+- Summary: Accept an invitation
+- Parameters:
+  - `id` in `path` required
+
+### userland_user_invites_controller_resend
+
+- Operation ID: `userland_user_invites_controller_resend`
+- Route: `POST /user_management/invitations/{id}/resend`
+- Mode: WRITE
+- Summary: Resend an invitation
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### userland_user_invites_controller_revoke
+
+- Operation ID: `userland_user_invites_controller_revoke`
+- Route: `POST /user_management/invitations/{id}/revoke`
+- Mode: WRITE
+- Summary: Revoke an invitation
+- Parameters:
+  - `id` in `path` required
+
+### jwt_templates_controller_get_jwt_template
+
+- Operation ID: `jwt_templates_controller_get_jwt_template`
+- Route: `GET /user_management/jwt_template`
+- Mode: READ
+- Summary: Get JWT template
+
+### jwt_templates_controller_update_jwt_template
+
+- Operation ID: `jwt_templates_controller_update_jwt_template`
+- Route: `PUT /user_management/jwt_template`
+- Mode: WRITE
+- Summary: Update JWT template
+- Body: JSON request body accepted.
+
+### userland_magic_auth_controller_send_magic_auth_code_and_return
+
+- Operation ID: `userland_magic_auth_controller_send_magic_auth_code_and_return`
+- Route: `POST /user_management/magic_auth`
+- Mode: WRITE
+- Summary: Create a Magic Auth code
+- Body: JSON request body accepted.
+
+### userland_magic_auth_controller_get
+
+- Operation ID: `userland_magic_auth_controller_get`
+- Route: `GET /user_management/magic_auth/{id}`
+- Mode: READ
+- Summary: Get Magic Auth code details
+- Parameters:
+  - `id` in `path` required
+
+### userland_user_organization_memberships_controller_list
+
+- Operation ID: `userland_user_organization_memberships_controller_list`
+- Route: `GET /user_management/organization_memberships`
+- Mode: READ
+- Summary: List organization memberships
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `organization_id` in `query`
+  - `statuses` in `query`
+  - `user_id` in `query`
+
+### userland_user_organization_memberships_controller_create
+
+- Operation ID: `userland_user_organization_memberships_controller_create`
+- Route: `POST /user_management/organization_memberships`
+- Mode: WRITE
+- Summary: Create an organization membership
+- Body: JSON request body accepted.
+
+### userland_user_organization_memberships_controller_get
+
+- Operation ID: `userland_user_organization_memberships_controller_get`
+- Route: `GET /user_management/organization_memberships/{id}`
+- Mode: READ
+- Summary: Get an organization membership
+- Parameters:
+  - `id` in `path` required
+
+### userland_user_organization_memberships_controller_delete
+
+- Operation ID: `userland_user_organization_memberships_controller_delete`
+- Route: `DELETE /user_management/organization_memberships/{id}`
+- Mode: WRITE
+- Summary: Delete an organization membership
+- Parameters:
+  - `id` in `path` required
+
+### userland_user_organization_memberships_controller_update
+
+- Operation ID: `userland_user_organization_memberships_controller_update`
+- Route: `PUT /user_management/organization_memberships/{id}`
+- Mode: WRITE
+- Summary: Update an organization membership
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### userland_user_organization_memberships_controller_deactivate
+
+- Operation ID: `userland_user_organization_memberships_controller_deactivate`
+- Route: `PUT /user_management/organization_memberships/{id}/deactivate`
+- Mode: WRITE
+- Summary: Deactivate an organization membership
+- Parameters:
+  - `id` in `path` required
+
+### userland_user_organization_memberships_controller_reactivate
+
+- Operation ID: `userland_user_organization_memberships_controller_reactivate`
+- Route: `PUT /user_management/organization_memberships/{id}/reactivate`
+- Mode: WRITE
+- Summary: Reactivate an organization membership
+- Parameters:
+  - `id` in `path` required
+
+### organization_membership_groups_controller_list_groups
+
+- Operation ID: `organization_membership_groups_controller_list_groups`
+- Route: `GET /user_management/organization_memberships/{omId}/groups`
+- Mode: READ
+- Summary: List groups
+- Parameters:
+  - `omId` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### userland_users_controller_create_password_reset_token
+
+- Operation ID: `userland_users_controller_create_password_reset_token`
+- Route: `POST /user_management/password_reset`
+- Mode: WRITE
+- Summary: Create a password reset token
+- Body: JSON request body accepted.
+
+### userland_users_controller_reset_password_0
+
+- Operation ID: `userland_users_controller_reset_password_0`
+- Route: `POST /user_management/password_reset/confirm`
+- Mode: WRITE
+- Summary: Reset the password
+- Body: JSON request body accepted.
+
+### userland_users_controller_get_password_reset
+
+- Operation ID: `userland_users_controller_get_password_reset`
+- Route: `GET /user_management/password_reset/{id}`
+- Mode: READ
+- Summary: Get a password reset token
+- Parameters:
+  - `id` in `path` required
+
+### redirect_uris_controller_create
+
+- Operation ID: `redirect_uris_controller_create`
+- Route: `POST /user_management/redirect_uris`
+- Mode: WRITE
+- Summary: Create a redirect URI
+- Body: JSON request body accepted.
+
+### userland_sessions_controller_logout
+
+- Operation ID: `userland_sessions_controller_logout`
+- Route: `GET /user_management/sessions/logout`
+- Mode: READ
+- Summary: Logout
+- Parameters:
+  - `session_id` in `query` required
+  - `return_to` in `query`
+
+### userland_sessions_controller_revoke_session
+
+- Operation ID: `userland_sessions_controller_revoke_session`
+- Route: `POST /user_management/sessions/revoke`
+- Mode: WRITE
+- Summary: Revoke Session
+- Body: JSON request body accepted.
+
+### userland_users_controller_list_0
+
+- Operation ID: `userland_users_controller_list_0`
+- Route: `GET /user_management/users`
+- Mode: READ
+- Summary: List users
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `organization` in `query`
+  - `organization_id` in `query`
+  - `email` in `query`
+
+### userland_users_controller_create_0
+
+- Operation ID: `userland_users_controller_create_0`
+- Route: `POST /user_management/users`
+- Mode: WRITE
+- Summary: Create a user
+- Body: JSON request body accepted.
+
+### userland_users_controller_get_by_external_id
+
+- Operation ID: `userland_users_controller_get_by_external_id`
+- Route: `GET /user_management/users/external_id/{external_id}`
+- Mode: READ
+- Summary: Get a user by external ID
+- Parameters:
+  - `external_id` in `path` required
+
+### userland_users_controller_update_0
+
+- Operation ID: `userland_users_controller_update_0`
+- Route: `PUT /user_management/users/{id}`
+- Mode: WRITE
+- Summary: Update a user
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### userland_users_controller_get_0
+
+- Operation ID: `userland_users_controller_get_0`
+- Route: `GET /user_management/users/{id}`
+- Mode: READ
+- Summary: Get a user
+- Parameters:
+  - `id` in `path` required
+
+### userland_users_controller_delete_0
+
+- Operation ID: `userland_users_controller_delete_0`
+- Route: `DELETE /user_management/users/{id}`
+- Mode: WRITE
+- Summary: Delete a user
+- Parameters:
+  - `id` in `path` required
+
+### userland_users_controller_confirm_email_change
+
+- Operation ID: `userland_users_controller_confirm_email_change`
+- Route: `POST /user_management/users/{id}/email_change/confirm`
+- Mode: WRITE
+- Summary: Confirm email change
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### userland_users_controller_send_email_change
+
+- Operation ID: `userland_users_controller_send_email_change`
+- Route: `POST /user_management/users/{id}/email_change/send`
+- Mode: WRITE
+- Summary: Send email change code
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### userland_users_controller_email_verification_0
+
+- Operation ID: `userland_users_controller_email_verification_0`
+- Route: `POST /user_management/users/{id}/email_verification/confirm`
+- Mode: WRITE
+- Summary: Verify email
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### userland_users_controller_send_verification_email_0
+
+- Operation ID: `userland_users_controller_send_verification_email_0`
+- Route: `POST /user_management/users/{id}/email_verification/send`
+- Mode: WRITE
+- Summary: Send verification email
+- Parameters:
+  - `id` in `path` required
+
+### userland_user_identities_controller_get
+
+- Operation ID: `userland_user_identities_controller_get`
+- Route: `GET /user_management/users/{id}/identities`
+- Mode: READ
+- Summary: Get user identities
+- Parameters:
+  - `id` in `path` required
+
+### userland_user_sessions_controller_list
+
+- Operation ID: `userland_user_sessions_controller_list`
+- Route: `GET /user_management/users/{id}/sessions`
+- Mode: READ
+- Summary: List sessions
+- Parameters:
+  - `id` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### user_api_keys_controller_list
+
+- Operation ID: `user_api_keys_controller_list`
+- Route: `GET /user_management/users/{userId}/api_keys`
+- Mode: READ
+- Summary: List API keys for a user
+- Parameters:
+  - `userId` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+  - `organization_id` in `query`
+
+### user_api_keys_controller_create
+
+- Operation ID: `user_api_keys_controller_create`
+- Route: `POST /user_management/users/{userId}/api_keys`
+- Mode: WRITE
+- Summary: Create an API key for a user
+- Parameters:
+  - `userId` in `path` required
+- Body: JSON request body accepted.
+
+### userland_user_feature_flags_controller_list
+
+- Operation ID: `userland_user_feature_flags_controller_list`
+- Route: `GET /user_management/users/{userId}/feature-flags`
+- Mode: READ
+- Summary: List enabled feature flags for a user
+- Parameters:
+  - `userId` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### authorized_applications_controller_list
+
+- Operation ID: `authorized_applications_controller_list`
+- Route: `GET /user_management/users/{user_id}/authorized_applications`
+- Mode: READ
+- Summary: List authorized applications
+- Parameters:
+  - `user_id` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### authorized_applications_controller_delete
+
+- Operation ID: `authorized_applications_controller_delete`
+- Route: `DELETE /user_management/users/{user_id}/authorized_applications/{application_id}`
+- Mode: WRITE
+- Summary: Delete an authorized application
+- Parameters:
+  - `application_id` in `path` required
+  - `user_id` in `path` required
+
+### data_integrations_user_management_controller_get_user_data_installation
+
+- Operation ID: `data_integrations_user_management_controller_get_user_data_installation`
+- Route: `GET /user_management/users/{user_id}/connected_accounts/{slug}`
+- Mode: READ
+- Summary: Get a connected account
+- Parameters:
+  - `user_id` in `path` required
+  - `slug` in `path` required
+  - `organization_id` in `query`
+
+### data_integrations_user_management_controller_delete_user_data_installation
+
+- Operation ID: `data_integrations_user_management_controller_delete_user_data_installation`
+- Route: `DELETE /user_management/users/{user_id}/connected_accounts/{slug}`
+- Mode: WRITE
+- Summary: Delete a connected account
+- Parameters:
+  - `user_id` in `path` required
+  - `slug` in `path` required
+  - `organization_id` in `query`
+
+### data_integrations_user_management_controller_get_user_data_integrations
+
+- Operation ID: `data_integrations_user_management_controller_get_user_data_integrations`
+- Route: `GET /user_management/users/{user_id}/data_providers`
+- Mode: READ
+- Summary: List providers for a user
+- Parameters:
+  - `user_id` in `path` required
+  - `organization_id` in `query`
+
+### userland_user_authentication_factors_controller_create_0
+
+- Operation ID: `userland_user_authentication_factors_controller_create_0`
+- Route: `POST /user_management/users/{userlandUserId}/auth_factors`
+- Mode: WRITE
+- Summary: Enroll an authentication factor
+- Parameters:
+  - `userlandUserId` in `path` required
+- Body: JSON request body accepted.
+
+### userland_user_authentication_factors_controller_list_0
+
+- Operation ID: `userland_user_authentication_factors_controller_list_0`
+- Route: `GET /user_management/users/{userlandUserId}/auth_factors`
+- Mode: READ
+- Summary: List authentication factors
+- Parameters:
+  - `userlandUserId` in `path` required
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`

skills/vault/SKILL.md

@@ -0,0 +1,116 @@
+---
+name: vault-routes
+description: Handle 11 OpenAPI operation(s) under /vault/v1 for the vault route group.
+---
+
+# vault API Routes
+
+Handle 11 OpenAPI operation(s) under /vault/v1 for the vault route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### jump_wire_web_key_controller_create_data_key
+
+- Operation ID: `jump_wire_web_key_controller_create_data_key`
+- Route: `POST /vault/v1/keys/data-key`
+- Mode: WRITE
+- Summary: Create a data key
+- Body: JSON request body accepted.
+
+### jump_wire_web_key_controller_decrypt
+
+- Operation ID: `jump_wire_web_key_controller_decrypt`
+- Route: `POST /vault/v1/keys/decrypt`
+- Mode: WRITE
+- Summary: Decrypt a data key
+- Body: JSON request body accepted.
+
+### jump_wire_web_key_controller_rekey
+
+- Operation ID: `jump_wire_web_key_controller_rekey`
+- Route: `POST /vault/v1/keys/rekey`
+- Mode: WRITE
+- Summary: Re-encrypt a data key
+- Body: JSON request body accepted.
+
+### jump_wire_web_data_vault_controller_index
+
+- Operation ID: `jump_wire_web_data_vault_controller_index`
+- Route: `GET /vault/v1/kv`
+- Mode: READ
+- Summary: List objects
+- Parameters:
+  - `limit` in `query`
+  - `before` in `query`
+  - `after` in `query`
+  - `order` in `query`
+  - `search` in `query`
+  - `updatedAfter` in `query`
+
+### jump_wire_web_data_vault_controller_create
+
+- Operation ID: `jump_wire_web_data_vault_controller_create`
+- Route: `POST /vault/v1/kv`
+- Mode: WRITE
+- Summary: Create an object
+- Body: JSON request body accepted.
+
+### jump_wire_web_data_vault_controller_show_by_name
+
+- Operation ID: `jump_wire_web_data_vault_controller_show_by_name`
+- Route: `GET /vault/v1/kv/name/{name}`
+- Mode: READ
+- Summary: Read an object by name
+- Parameters:
+  - `name` in `path` required
+
+### jump_wire_web_data_vault_controller_delete
+
+- Operation ID: `jump_wire_web_data_vault_controller_delete`
+- Route: `DELETE /vault/v1/kv/{id}`
+- Mode: WRITE
+- Summary: Delete an object
+- Parameters:
+  - `id` in `path` required
+  - `version_check` in `query`
+
+### jump_wire_web_data_vault_controller_show_by_id
+
+- Operation ID: `jump_wire_web_data_vault_controller_show_by_id`
+- Route: `GET /vault/v1/kv/{id}`
+- Mode: READ
+- Summary: Read an object by ID
+- Parameters:
+  - `id` in `path` required
+
+### jump_wire_web_data_vault_controller_update
+
+- Operation ID: `jump_wire_web_data_vault_controller_update`
+- Route: `PUT /vault/v1/kv/{id}`
+- Mode: WRITE
+- Summary: Update an object
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### jump_wire_web_data_vault_controller_describe
+
+- Operation ID: `jump_wire_web_data_vault_controller_describe`
+- Route: `GET /vault/v1/kv/{id}/metadata`
+- Mode: READ
+- Summary: Describe an object
+- Parameters:
+  - `id` in `path` required
+
+### jump_wire_web_data_vault_controller_versions
+
+- Operation ID: `jump_wire_web_data_vault_controller_versions`
+- Route: `GET /vault/v1/kv/{id}/versions`
+- Mode: READ
+- Summary: List object versions
+- Parameters:
+  - `id` in `path` required

skills/webhook-endpoints/SKILL.md

@@ -0,0 +1,53 @@
+---
+name: webhook-endpoints-routes
+description: Handle 4 OpenAPI operation(s) under /webhook_endpoints for the webhook endpoints route group.
+---
+
+# webhook endpoints API Routes
+
+Handle 4 OpenAPI operation(s) under /webhook_endpoints for the webhook endpoints route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### webhook_endpoints_controller_list
+
+- Operation ID: `webhook_endpoints_controller_list`
+- Route: `GET /webhook_endpoints`
+- Mode: READ
+- Summary: List Webhook Endpoints
+- Parameters:
+  - `before` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `order` in `query`
+
+### webhook_endpoints_controller_create
+
+- Operation ID: `webhook_endpoints_controller_create`
+- Route: `POST /webhook_endpoints`
+- Mode: WRITE
+- Summary: Create a Webhook Endpoint
+- Body: JSON request body accepted.
+
+### webhook_endpoints_controller_update
+
+- Operation ID: `webhook_endpoints_controller_update`
+- Route: `PATCH /webhook_endpoints/{id}`
+- Mode: WRITE
+- Summary: Update a Webhook Endpoint
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### webhook_endpoints_controller_delete
+
+- Operation ID: `webhook_endpoints_controller_delete`
+- Route: `DELETE /webhook_endpoints/{id}`
+- Mode: WRITE
+- Summary: Delete a Webhook Endpoint
+- Parameters:
+  - `id` in `path` required

skills/widgets/SKILL.md

@@ -0,0 +1,22 @@
+---
+name: widgets-routes
+description: Handle 1 OpenAPI operation(s) under /widgets/token for the widgets route group.
+---
+
+# widgets API Routes
+
+Handle 1 OpenAPI operation(s) under /widgets/token for the widgets route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### widgets_public_controller_issue_widget_session_token
+
+- Operation ID: `widgets_public_controller_issue_widget_session_token`
+- Route: `POST /widgets/token`
+- Mode: WRITE
+- Summary: Generate a widget token
+- Body: JSON request body accepted.