Permissions

Create a CRM contact in the current workspace.

Search contacts by name, email, company, or free-text query.

Create a company account in the CRM module.

Search company accounts by name, domain, or free-text query.

Create a CRM lead before it is converted into a contact, company, or deal.

List leads by status, source, search text, or custom field.

Convert a lead into contact, company, and optionally deal records.

Create a custom deal stage for the workspace pipeline.

List workspace deal stages, including custom stages.

Create a deal associated with a company or contact.

Move an existing deal to a new pipeline stage. Deprecated in favor of update_deal.

Update deal stage, amount, or currency.

Create an invoice with product or service line items.

List invoices by status, customer, deal, or custom field.

Record a payment against an invoice.

Create a basic chart-of-accounts account.

List chart-of-accounts records.

Create a balanced accounting journal entry.

List accounting journal entries.

Create a task for a user, agent, contact, company, or deal.

List tasks by status, assignee, due date, or related resource.

Mark a task complete in the current workspace. Deprecated in favor of update_task.

Update a task status, including canceling or reopening it.

Record a workspace activity such as a note, call, email, meeting, or agent action.

Search activity records by text, type, date, or related resource.

Read the change history of one record: who changed it, what action was taken, from which credential, and when, newest first. Covers every record type the platform audits — contacts, deals, tickets, tasks, entries, notes, tracking plans and the rest — identified by target_type and target_id. History outlives the record, so an archived one still reads. Two limits worth knowing: entries record what changed, not what the value was before, and an empty list means nothing was recorded for that target — which also happens if target_type or target_id is wrong, since no record lookup is performed.

Record a durable, attributed note against a contact, company or deal. Unlike the free-text notes field on those records — a single blob that each write overwrites — a note keeps its own author, timestamp and history, so several can accumulate against one subject. A note must name a subject so it can be reached from the record it concerns.

List notes recorded against contacts, companies or deals, newest first. Filter by subject to read one record's history. An empty list means no note has been recorded for that filter, which is a real answer rather than a failure.

Revise a note's text, heading, subject or custom fields. At least one field must change.

Archive a note. The note stops appearing in reads but is retained, so this is reversible by an operator rather than a destructive delete.

Create a support queue or inbox with default assignment and SLA targets.

List support queues by status, search text, or custom field.

Create a support ticket linked to customers, CRM records, invoices, and SLA targets.

List support tickets by status, priority, queue, owner, customer links, search text, or custom field.

Update support ticket status, priority, queue, assignment, tags, category, SLA targets, or custom fields.

Add an inbound, outbound, or internal message to a support ticket conversation.

List conversation messages for a support ticket.

Add an internal note or pinned comment to a support ticket.

List internal comments and notes for a support ticket.

Create a CMS collection that defines a content type for entries.

Create a website or marketing site managed by the CMS.

List CMS-managed websites.

Create a CMS entry in a collection.

Search CMS entries by collection, status, title, or free-text query.

Move a CMS entry between draft, review, published, and archived states. Deprecated in favor of update_entry.

Update a CMS entry title, fields, or publishing status and create a revision.

Create a marketing campaign for website, blog, email, social, or paid channels.

List marketing campaigns by status, channel, or custom field.

Create a social, blog, email, or website marketing post linked to an optional campaign or CMS entry.

List marketing posts by channel, status, campaign, or custom field.

Register workspace asset metadata and create a signed upload URL.

Mark an uploaded workspace asset as available after the client uploads the object to the signed URL.

Search workspace asset metadata by text, type, status, or linked resource.

Retrieve asset metadata with a signed download URL.

Archive an asset in the current workspace without deleting its metadata.

Define an analytics event in the workspace tracking plan, including the property keys it expects and the validation rules validate_event applies to payloads.

List analytics event definitions in the workspace tracking plan.

Define a reusable analytics property for the tracking plan.

Validate an event payload against its definition in the workspace tracking plan. Checks the expected property keys and the event's stored validation rules. The result reports which rule kinds were evaluated and names any that were stored but not applied, so a valid result is not mistaken for an unchecked one.

Create a tracking plan to group the event and property definitions that belong to one product surface or release. Events and properties reference a plan by tracking_plan_id; a plan is the grouping, not the owner, so archiving it leaves their definitions intact.

List tracking plans in the workspace. An empty list means none has been defined, which is a real answer rather than a failure.

Rename a tracking plan, revise its description, or move it between draft, active and archived. At least one field must change.

Archive a tracking plan. Events and properties that reference it keep their definitions and their reference; the plan simply stops appearing in reads.

List subscribable integration and webhook event types.

Register a workspace-specific integration event type.

Create a signed webhook endpoint subscription.

List workspace webhook endpoint subscriptions.

Update webhook endpoint configuration or lifecycle state.

Queue a signed test delivery for a webhook endpoint.

List webhook delivery attempts and retry state.

List Product Analytics and BI dashboards in the current workspace.

Create a local, provider-neutral BI dashboard definition.

List BI reports, optionally filtered by dashboard or dataset.

Create a local BI report definition linked to optional dashboard and dataset records.

List local BI dataset definitions.

Create a provider-neutral dataset definition using local/mock metadata.

List workspace BI metric definitions.

Create a workspace BI metric expression.

Run a BI query or built-in workspace dataset and optionally persist the query definition.

Ask a business question of governed workspace data. Retrieves matching governed metrics from the workspace semantic index, compiles deterministic SQL from the approved metric expression, and returns the answer with its lineage. When no metric matches the question closely enough, reports that instead of answering with the nearest one.

Create a BI export artifact for a query or report.

Update editable BI object metadata within the current workspace.

Archive a BI object in the current workspace. Export artifacts are expired.

List execution planes available for Data Agents dataset builds, previews, backfills, and offline jobs.

Create a governed execution plane configuration for agent-driven analytics workloads.

Update status, capacity, runtime configuration, or capabilities for a Data Agents execution plane.

List governed Data Agents dataset versions in the current workspace.

Create a governed dataset version that can be traced to BI datasets, pipelines, manifests, lineage, and agent decisions.

List dataset storage manifests produced by Data Agents pipelines or jobs.

Create a storage manifest for a governed dataset version.

List Data Agent execution jobs for dataset refreshes, backfills, compaction, and knowledgebase workflows.

Get a Data Agent execution job with audit timeline, worker log entries, retry state, payload, output refs, and related governed object ids.

Create a durable execution job for a Data Agent workflow before local, queued, or managed dispatch.

Update status, attempts, output references, or error details for a Data Agent execution job.

Create a queued Data Agent execution job from workflow object IDs and return managed dispatch metadata without invoking external compute yet.

List lineage edges connecting source systems, datasets, metrics, reports, insights, recommendations, and knowledge artifacts.

Create a lineage edge for a Data Agents source, transform, metric, report, decision, insight, recommendation, or artifact.

List auditable Data Agents decisions and approval states.

Create an auditable agent decision for a dataset, metric, report, pipeline, insight, or recommendation.

Update approval, execution, error, or metadata state for a Data Agents decision.

List operational insights generated from governed datasets, reports, metrics, decisions, or source objects.

Create an operational insight tied to governed data, metrics, reports, decisions, and evidence.

List recommendations generated from Data Agents insights and decisions.

Create an operational recommendation tied to a Data Agents insight, decision, proposed action, task, activity, or notification.

Update approval, execution, linked action, error, or metadata state for a Data Agents recommendation.

List source objects used to generate governed datasets, decisions, insights, and recommendations.

Create a source object reference for governed datasets, decisions, insights, or recommendations.

List knowledge artifacts generated from governed data, decisions, and source evidence.

Create a knowledge artifact reference generated from governed datasets or agent decisions.

Propose a governed dataset version, record the agent decision, and optionally attach source lineage in one workflow.

Approve, reject, or otherwise review an agent decision with audit metadata.

Publish an insight from governed data and optionally create its first operational recommendation.

Mark a recommendation as executed or failed and link the operational action it produced.

Draft an AgentGrid-recorded LLM review, insight, and pending recommendation from a succeeded Data Agent execution job.

List AgentGrid assistant runs with model, token, credit, cost, and status metadata.

Record an AgentGrid assistant run for audit, metering, and troubleshooting.

List tool calls recorded for AgentGrid runs.

Record an AgentGrid tool call for audit and metering.

List retrieval hits used by Slab5 assistants and Data Agent reviewers.

Record a retrieval hit used by a Slab5 assistant or Data Agent reviewer.

List AgentGrid model, retrieval, and tool-call cost events.

Record a model, retrieval, or tool cost event for AgentGrid usage visibility.

List reusable AgentGrid agent definitions for the current workspace.

Create a stable reusable AgentGrid agent definition.

Update reusable AgentGrid agent definition metadata or published version.

List immutable versions for a reusable AgentGrid agent definition.

Create an immutable version for a reusable AgentGrid agent definition.

List stable AgentGrid workflow definitions.

Create a stable logical workflow record for AgentGrid.

Update workflow metadata, status, or the published workflow version pointer.

Find semantically similar AgentGrid workflows and reusable workflow templates for a plain-language automation request.

Refresh the semantic discovery index for workspace AgentGrid workflows and reusable workflow templates.

List immutable versions for AgentGrid workflows.

Create an immutable AgentGrid workflow version containing the trigger, schemas, graph, policy, permissions, and billing contract.

List assistant or workflow sessions recorded by AgentGrid.

Create an AgentGrid assistant or workflow session container.

Update an AgentGrid assistant or workflow session status and summary metadata.

List ordered messages, tool calls, retrieval events, and memory references in an AgentGrid session.

Append a message, tool call, retrieval event, or memory reference to an AgentGrid session.

List workspace-scoped assistant memory records stored by Slab5.

Create a Slab5-owned memory record for an assistant, workflow, or workspace.

Update or archive a Slab5-owned assistant memory record.

List search-index bindings for Slab5 assistant memory records.

Create an OpenAI vector store or other search-index binding for a memory record.

Update search-index metadata for a Slab5 assistant memory record.

Return safe workspace metadata summaries for the Workspace Assistant without exposing raw customer-owned content.

Run the billable Workspace Assistant against safe workspace metadata and summaries, recording AgentGrid logs, retrieval/tool records, cost events, and credit usage.

Create a ChatKit-ready Slab5 Guide support session descriptor backed by Slab5-owned knowledge.

Create the governed BI dataset, execution plane, dataset proposal, knowledge artifact, insight, and recommendation for a content performance knowledgebase workflow.

Return workspace metadata, enabled modules, and high-level usage context.

list projects.

create project.

update project.

list project boards.

create project board.

update project board.

list project board columns.

create project board column.

update project board column.

list project tasks.

create project task.

update project task.

list products.

create product.

update product.

list product roadmap items.

create product roadmap item.

update product roadmap item.

list product releases.

create product release.

update product release.

list calendars.

create calendar.

update calendar.

list calendar events.

create calendar event.

update calendar event.

list notifications.

create notification.

update notification.

list notification rules.

create notification rule.

update notification rule.

list notification preferences.

update notification preference.

list notification subscriptions.

create notification subscription.

List managed RAG-in-a-box vector collections in the current workspace.

Create or ensure a managed RAG-in-a-box vector collection for custom developer data.

Embed and upsert custom text documents into a managed vector collection.

Run semantic search over a managed RAG-in-a-box vector collection.

Delete one or more custom documents from a managed vector collection.

Archive a managed RAG-in-a-box vector collection so it is hidden from active collection lists.

update notification subscription.