late-sdk 0.0.671 → 0.0.673

data/openapi.yaml

@@ -543,6 +543,36 @@ components:
               error:
                 type: string
                 example: Not found
+    ResourceGroupForbidden:
+      description: >-
+        The API key is a restricted key (zrk_ prefix) and may not perform this
+        operation. Three cases. (1) The operation's resource group (see the
+        operation's x-resource-group) is disabled on the key: fix it by
+        creating a key with the group enabled in the dashboard API keys tab
+        and revoking the old one. (2) The operation is admin-plane
+        (x-resource-group admin-plane: API keys, invites, connected apps,
+        member identity), which is never grantable to restricted keys; the
+        error reads "Restricted API keys cannot manage API keys, invites, or
+        member identity." and the fix is a full-access key or the dashboard,
+        never a new restricted key. (3) On webhook subscription writes and
+        delivery-log reads, a named event maps to a resource group the key
+        does not hold (a no-messages key cannot subscribe to or replay
+        message.* events).
+      content:
+        application/json:
+          schema:
+            type: object
+            properties:
+              error:
+                type: string
+                example: "This API key has the 'messages' resource group disabled. GET /api/v1/inbox/conversations requires it. Create a key with 'messages' enabled in the dashboard API keys tab."
+              code:
+                type: string
+                enum: [insufficient_permissions, unclassified_resource]
+              required_group:
+                type: string
+                description: 'The resource group the key needs for this operation. Absent on admin-plane and unclassified-path denials.'
+                enum: [publishing, engagement, messages, contacts, analytics, ads, telephony, accounts, billing, webhooks]
     RateLimited:
       description: |
         The connected account's upstream platform quota is exhausted.
@@ -5781,6 +5811,19 @@ components:
           enum: [read-write, read]
           description: "'read-write' allows all operations, 'read' restricts to GET requests only"
           default: read-write
+        disabledResourceGroups:
+          type: array
+          items:
+            type: string
+            enum: [publishing, engagement, messages, contacts, analytics, ads, telephony, accounts, billing, webhooks]
+          description: >-
+            Resource groups this key can NOT access (opt-out denylist). Absent
+            or empty means legacy full access. A key with any group disabled is
+            a restricted key (zrk_ prefix) and can never manage API keys,
+            invites, or member identity. Each operation's group is published as
+            x-resource-group. With 'messages' disabled, the KEY cannot access
+            private messages; the ACCOUNT's pre-existing webhook subscriptions
+            are a separate grant surface.
     ConnectedApp:
       type: object
       description: |
@@ -8708,6 +8751,7 @@ paths:
   # ============================================
   /v1/tools/validate/post-length:
     post:
+      x-resource-group: "publishing"
       operationId: validatePostLength
       tags: [Validate]
       summary: Validate character count
@@ -8758,6 +8802,7 @@ paths:
 
   /v1/tools/validate/post:
     post:
+      x-resource-group: "publishing"
       operationId: validatePost
       tags: [Validate]
       summary: Validate post content
@@ -8845,6 +8890,7 @@ paths:
 
   /v1/tools/validate/media:
     post:
+      x-resource-group: "publishing"
       operationId: validateMedia
       tags: [Validate]
       summary: Validate media URL
@@ -8901,6 +8947,7 @@ paths:
 
   /v1/tools/validate/subreddit:
     get:
+      x-resource-group: "publishing"
       operationId: validateSubreddit
       tags: [Validate]
       summary: Check subreddit existence
@@ -8957,6 +9004,7 @@ paths:
   # ============================================
   /v1/analytics:
     get:
+      x-resource-group: "analytics"
       operationId: getAnalytics
       tags: [Analytics]
       summary: Get post analytics
@@ -9191,6 +9239,7 @@ paths:
 
   /v1/analytics/youtube/channel-insights:
     get:
+      x-resource-group: "analytics"
       operationId: getYouTubeChannelInsights
       tags: [Analytics]
       summary: Get YouTube channel insights
@@ -9274,6 +9323,7 @@ paths:
 
   /v1/analytics/linkedin/org-aggregate-analytics:
     get:
+      x-resource-group: "analytics"
       operationId: getLinkedInOrgAggregateAnalytics
       tags: [Analytics]
       summary: Get LinkedIn org analytics
@@ -9379,6 +9429,7 @@ paths:
 
   /v1/analytics/tiktok/account-insights:
     get:
+      x-resource-group: "analytics"
       operationId: getTikTokAccountInsights
       tags: [Analytics]
       summary: Get TikTok account-level insights
@@ -9461,6 +9512,7 @@ paths:
 
   /v1/analytics/youtube/daily-views:
     get:
+      x-resource-group: "analytics"
       operationId: getYouTubeDailyViews
       tags: [Analytics]
       summary: Get YouTube daily views
@@ -9597,6 +9649,7 @@ paths:
 
   /v1/analytics/youtube/video-retention:
     get:
+      x-resource-group: "analytics"
       operationId: getYouTubeVideoRetention
       tags: [Analytics]
       summary: Get YouTube video retention curve
@@ -9737,6 +9790,7 @@ paths:
 
   /v1/analytics/facebook/page-insights:
     get:
+      x-resource-group: "analytics"
       operationId: getFacebookPageInsights
       tags: [Analytics]
       summary: Get Facebook Page insights
@@ -9909,6 +9963,7 @@ paths:
 
   /v1/analytics/facebook/post-earnings:
     get:
+      x-resource-group: "analytics"
       operationId: getFacebookPostEarnings
       tags: [Analytics]
       summary: Get Facebook post monetization earnings
@@ -10014,6 +10069,7 @@ paths:
 
   /v1/analytics/instagram/account-insights:
     get:
+      x-resource-group: "analytics"
       operationId: getInstagramAccountInsights
       tags: [Analytics]
       summary: Get Instagram insights
@@ -10161,6 +10217,7 @@ paths:
 
   /v1/analytics/instagram/follower-history:
     get:
+      x-resource-group: "analytics"
       operationId: getInstagramFollowerHistory
       tags: [Analytics]
       summary: Get Instagram follower history
@@ -10220,6 +10277,7 @@ paths:
 
   /v1/analytics/instagram/demographics:
     get:
+      x-resource-group: "analytics"
       operationId: getInstagramDemographics
       tags: [Analytics]
       summary: Get Instagram demographics
@@ -10340,6 +10398,7 @@ paths:
 
   /v1/analytics/youtube/demographics:
     get:
+      x-resource-group: "analytics"
       operationId: getYouTubeDemographics
       tags: [Analytics]
       summary: Get YouTube demographics
@@ -10496,6 +10555,7 @@ paths:
 
   /v1/analytics/daily-metrics:
     get:
+      x-resource-group: "analytics"
       operationId: getDailyMetrics
       tags: [Analytics]
       summary: Get daily aggregated metrics
@@ -10626,6 +10686,7 @@ paths:
 
   /v1/analytics/best-time:
     get:
+      x-resource-group: "analytics"
       operationId: getBestTimeToPost
       tags: [Analytics]
       summary: Get best times to post
@@ -10699,6 +10760,7 @@ paths:
 
   /v1/analytics/content-decay:
     get:
+      x-resource-group: "analytics"
       operationId: getContentDecay
       tags: [Analytics]
       summary: Get content performance decay
@@ -10790,6 +10852,7 @@ paths:
 
   /v1/analytics/posting-frequency:
     get:
+      x-resource-group: "analytics"
       operationId: getPostingFrequency
       tags: [Analytics]
       summary: Get frequency vs engagement
@@ -10868,6 +10931,7 @@ paths:
 
   /v1/analytics/post-timeline:
     get:
+      x-resource-group: "analytics"
       operationId: getPostTimeline
       tags: [Analytics]
       summary: Get post analytics timeline
@@ -10982,6 +11046,7 @@ paths:
 
   /v1/analytics/googlebusiness/performance:
     get:
+      x-resource-group: "analytics"
       operationId: getGoogleBusinessPerformance
       tags: [Analytics]
       summary: Get GBP performance metrics
@@ -11106,6 +11171,7 @@ paths:
 
   /v1/analytics/googlebusiness/search-keywords:
     get:
+      x-resource-group: "analytics"
       operationId: getGoogleBusinessSearchKeywords
       tags: [Analytics]
       summary: Get GBP search keywords
@@ -11203,6 +11269,7 @@ paths:
   # at 365 days.
   /v1/analytics/inbox/volume:
     get:
+      x-resource-group: "analytics"
       operationId: getInboxVolume
       tags: [Inbox Analytics]
       summary: Get inbox messaging volume
@@ -11294,6 +11361,7 @@ paths:
 
   /v1/analytics/inbox/heatmap:
     get:
+      x-resource-group: "analytics"
       operationId: getInboxHeatmap
       tags: [Inbox Analytics]
       summary: Get day × hour heatmap
@@ -11368,6 +11436,7 @@ paths:
 
   /v1/analytics/inbox/source-breakdown:
     get:
+      x-resource-group: "analytics"
       operationId: getInboxSourceBreakdown
       tags: [Inbox Analytics]
       summary: Get inbox source breakdown
@@ -11443,6 +11512,7 @@ paths:
 
   /v1/analytics/inbox/response-time:
     get:
+      x-resource-group: "analytics"
       operationId: getInboxResponseTime
       tags: [Inbox Analytics]
       summary: Get inbox response-time stats
@@ -11525,6 +11595,7 @@ paths:
 
   /v1/analytics/inbox/top-accounts:
     get:
+      x-resource-group: "analytics"
       operationId: getInboxTopAccounts
       tags: [Inbox Analytics]
       summary: Get top accounts by inbox volume
@@ -11601,6 +11672,7 @@ paths:
 
   /v1/analytics/inbox/conversations:
     get:
+      x-resource-group: "messages"
       operationId: listInboxConversationAnalytics
       tags: [Inbox Analytics]
       summary: List conversation analytics
@@ -11706,6 +11778,7 @@ paths:
 
   /v1/analytics/inbox/conversations/{conversationId}:
     get:
+      x-resource-group: "messages"
       operationId: getInboxConversationAnalytics
       tags: [Inbox Analytics]
       summary: Get conversation analytics
@@ -11804,6 +11877,7 @@ paths:
 
   /v1/account-groups:
     get:
+      x-resource-group: "accounts"
       operationId: listAccountGroups
       tags: [Account Groups]
       summary: List groups
@@ -11851,6 +11925,7 @@ paths:
                           - "64e1f0a9e2b5af0012ab34cf"
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "accounts"
       operationId: createAccountGroup
       tags: [Account Groups]
       summary: Create group
@@ -11911,6 +11986,7 @@ paths:
         '409': { description: Group name already exists }
   /v1/account-groups/{groupId}:
     put:
+      x-resource-group: "accounts"
       operationId: updateAccountGroup
       tags: [Account Groups]
       summary: Update group
@@ -11962,6 +12038,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
         '409': { description: Group name already exists }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteAccountGroup
       tags: [Account Groups]
       summary: Delete group
@@ -11987,6 +12064,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
   /v1/media/presign:
     post:
+      x-resource-group: "publishing"
       operationId: getMediaPresignedUrl
       tags: [Media]
       summary: Get upload URL
@@ -12067,6 +12145,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
   /v1/reddit/search:
     get:
+      x-resource-group: "engagement"
       operationId: searchReddit
       tags: [Reddit Search]
       summary: Search posts
@@ -12142,6 +12221,7 @@ paths:
         '429': { $ref: '#/components/responses/RateLimited' }
   /v1/reddit/feed:
     get:
+      x-resource-group: "engagement"
       operationId: getRedditFeed
       tags: [Reddit Search]
       summary: Get subreddit feed
@@ -12229,6 +12309,7 @@ paths:
         '429': { $ref: '#/components/responses/RateLimited' }
   /v1/billing:
     get:
+      x-resource-group: "billing"
       operationId: getBilling
       tags: [Usage]
       summary: Account billing snapshot (plan, cycle, balance, caps, status)
@@ -12253,6 +12334,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
   /v1/billing/x-pricing:
     get:
+      x-resource-group: "billing"
       operationId: getXApiPricing
       tags: [Usage]
       summary: Get X/Twitter API pricing table
@@ -12314,6 +12396,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
   /v1/usage:
     get:
+      x-resource-group: "billing"
       operationId: getUsage
       tags: [Usage]
       summary: Usage snapshot (default) or billed-spend metering (with params)
@@ -12396,6 +12479,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
   /v1/usage-stats:
     get:
+      x-resource-group: "billing"
       operationId: getUsageStats
       tags: [Usage]
       summary: Get plan and usage snapshot (plan, limits, payment status)
@@ -12494,6 +12578,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
   /v1/usage/calls:
     get:
+      x-resource-group: "billing"
       operationId: getCallsUsage
       tags: [Usage]
       summary: Calling usage and cost
@@ -12554,6 +12639,7 @@ paths:
 
   /v1/usage/sms:
     get:
+      x-resource-group: "billing"
       operationId: getSmsUsage
       tags: [Usage]
       summary: SMS usage (volumes)
@@ -12605,6 +12691,7 @@ paths:
 
   /v1/posts:
     get:
+      x-resource-group: "publishing"
       operationId: listPosts
       tags: [Posts]
       summary: List posts
@@ -12745,6 +12832,7 @@ paths:
         '400': { $ref: '#/components/responses/BadRequest' }
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "publishing"
       operationId: createPost
       tags: [Posts]
       summary: Create post
@@ -13185,6 +13273,7 @@ paths:
               schema: { type: integer }
   /v1/posts/sync-external:
     post:
+      x-resource-group: "publishing"
       operationId: syncExternalPosts
       tags: [Analytics]
       summary: Sync an external post
@@ -13264,6 +13353,7 @@ paths:
                 $ref: '#/components/schemas/ErrorResponse'
   /v1/posts/{postId}:
     get:
+      x-resource-group: "publishing"
       operationId: getPost
       tags: [Posts]
       summary: Get post
@@ -13387,6 +13477,7 @@ paths:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
         '404': { $ref: '#/components/responses/NotFound' }
     put:
+      x-resource-group: "publishing"
       operationId: updatePost
       tags: [Posts]
       summary: Update post
@@ -13505,6 +13596,7 @@ paths:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
         '404': { $ref: '#/components/responses/NotFound' }
     delete:
+      x-resource-group: "publishing"
       operationId: deletePost
       tags: [Posts]
       summary: Delete post
@@ -13537,6 +13629,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
   /v1/posts/bulk-upload:
     post:
+      x-resource-group: "publishing"
       operationId: bulkUploadPosts
       tags: [Posts]
       summary: Bulk upload from CSV
@@ -13625,6 +13718,7 @@ paths:
                     type: object
   /v1/posts/{postId}/retry:
     post:
+      x-resource-group: "publishing"
       operationId: retryPost
       tags: [Posts]
       summary: Retry failed post
@@ -13699,6 +13793,7 @@ paths:
                     type: object
   /v1/posts/{postId}/unpublish:
     post:
+      x-resource-group: "publishing"
       operationId: unpublishPost
       tags: [Posts]
       summary: Unpublish post
@@ -13763,6 +13858,7 @@ paths:
           description: Platform API deletion failed
   /v1/posts/{postId}/edit:
     post:
+      x-resource-group: "publishing"
       operationId: editPost
       tags: [Posts]
       summary: Edit published post
@@ -13853,6 +13949,7 @@ paths:
           description: Platform API edit failed for a reason the platform did not classify.
   /v1/posts/{postId}/update-metadata:
     post:
+      x-resource-group: "publishing"
       operationId: updatePostMetadata
       tags: [Posts]
       summary: Update post metadata
@@ -13981,6 +14078,7 @@ paths:
           description: Platform API update failed
   /v1/users:
     get:
+      x-resource-group: "accounts"
       operationId: listUsers
       tags: [Users]
       summary: List users
@@ -14030,6 +14128,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
   /v1/users/{userId}:
     get:
+      x-resource-group: "accounts"
       operationId: getUser
       tags: [Users]
       summary: Get user
@@ -14072,6 +14171,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
   /v1/profiles:
     get:
+      x-resource-group: "accounts"
       operationId: listProfiles
       tags: [Profiles]
       summary: List profiles
@@ -14121,6 +14221,7 @@ paths:
         '400': { $ref: '#/components/responses/BadRequest' }
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "accounts"
       operationId: createProfile
       tags: [Profiles]
       summary: Create profile
@@ -14173,6 +14274,7 @@ paths:
         '422': { $ref: '#/components/responses/IdempotencyKeyReused' }
   /v1/profiles/{profileId}:
     get:
+      x-resource-group: "accounts"
       operationId: getProfile
       tags: [Profiles]
       summary: Get profile
@@ -14201,6 +14303,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     put:
+      x-resource-group: "accounts"
       operationId: updateProfile
       tags: [Profiles]
       summary: Update profile
@@ -14247,6 +14350,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
         '409': { description: "A profile with this name already exists (code: profile_name_conflict)." }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteProfile
       tags: [Profiles]
       summary: Delete profile
@@ -14275,6 +14379,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
   /v1/accounts:
     get:
+      x-resource-group: "accounts"
       operationId: listAccounts
       tags: [Accounts]
       summary: List accounts
@@ -14341,6 +14446,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
   /v1/accounts/follower-stats:
     get:
+      x-resource-group: "analytics"
       operationId: getFollowerStats
       tags: [Accounts, Analytics]
       summary: Get follower stats
@@ -14409,6 +14515,7 @@ paths:
                   requiresAddon: { type: boolean, example: true }
   /v1/accounts/{accountId}:
     put:
+      x-resource-group: "accounts"
       operationId: updateAccount
       tags: [Accounts]
       summary: Update account
@@ -14493,6 +14600,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     patch:
+      x-resource-group: "accounts"
       operationId: moveAccountToProfile
       tags: [Accounts]
       summary: Move account to another profile
@@ -14539,6 +14647,7 @@ paths:
         '403': { description: API key does not have access to the source account or target profile }
         '404': { description: Account or target profile not found }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteAccount
       tags: [Accounts]
       summary: Disconnect account
@@ -14563,6 +14672,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
   /v1/accounts/health:
     get:
+      x-resource-group: "accounts"
       operationId: getAllAccountsHealth
       tags: [Accounts]
       summary: Check accounts health
@@ -14648,6 +14758,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
   /v1/accounts/{accountId}/whatsapp/register:
     post:
+      x-resource-group: "accounts"
       operationId: registerWhatsAppNumber
       tags: [WhatsApp]
       summary: Register a connected WhatsApp number on the Cloud API
@@ -14697,6 +14808,7 @@ paths:
           description: 'Meta rejected the registration (e.g. PIN mismatch), or the number cannot be registered through the API.'
   /v1/accounts/{accountId}/health:
     get:
+      x-resource-group: "accounts"
       operationId: getAccountHealth
       tags: [Accounts]
       summary: Check account health
@@ -14801,6 +14913,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
   /v1/accounts/{accountId}/tiktok/creator-info:
     get:
+      x-resource-group: "accounts"
       operationId: getTikTokCreatorInfo
       tags: [Accounts]
       summary: Get TikTok creator info
@@ -14909,6 +15022,7 @@ paths:
                 error: "TikTok creator has reached the daily posting limit. Please try again later."
   /v1/auth/verify:
     get:
+      x-resource-group: "public"
       operationId: verifyCredential
       tags: [API Keys]
       summary: Verify credential
@@ -14937,6 +15051,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
   /v1/api-keys:
     get:
+      x-resource-group: "admin-plane"
       operationId: listApiKeys
       tags: [API Keys]
       summary: List keys
@@ -14974,7 +15089,9 @@ paths:
                         color: "#ffeda0"
                     permission: "read"
         '401': { $ref: '#/components/responses/Unauthorized' }
+        '403': { $ref: '#/components/responses/ResourceGroupForbidden' }
     post:
+      x-resource-group: "admin-plane"
       operationId: createApiKey
       tags: [API Keys]
       summary: Create key
@@ -15005,11 +15122,25 @@ paths:
                   enum: [read-write, read]
                   description: "'read-write' allows all operations (default), 'read' restricts to GET requests only"
                   default: read-write
+                disabledResourceGroups:
+                  type: array
+                  items:
+                    type: string
+                    enum: [publishing, engagement, messages, contacts, analytics, ads, telephony, accounts, billing, webhooks]
+                  description: >-
+                    Resource groups to DISABLE on this key (opt-out denylist).
+                    Omit for a legacy full-access key. A key with any group
+                    disabled mints with the zrk_ prefix, gets 403 with
+                    code=insufficient_permissions and required_group on
+                    operations in disabled groups (each operation's group is
+                    published as x-resource-group), and can never manage API
+                    keys, invites, or member identity. With 'messages'
+                    disabled, the KEY cannot access private messages; the
+                    ACCOUNT's pre-existing webhook subscriptions are a
+                    separate grant surface.
             example:
-              name: "Analytics Read-Only Key"
-              scope: "profiles"
-              profileIds: ["6507a1b2c3d4e5f6a7b8c9d0"]
-              permission: "read"
+              name: "No Private Messages Key"
+              disabledResourceGroups: ["messages", "contacts", "webhooks"]
       responses:
         '201':
           description: Created
@@ -15024,21 +15155,21 @@ paths:
                 message: "API key created successfully"
                 apiKey:
                   id: "6507a1b2c3d4e5f6a7b8c9d0"
-                  name: "Analytics Read-Only Key"
-                  keyPreview: "sk_12345678...90abcdef"
-                  key: "sk_1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef"
+                  name: "No Private Messages Key"
+                  keyPreview: "zrk_12345678...90abcdef"
+                  key: "zrk_1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef"
                   expiresAt: null
                   createdAt: "2024-01-15T10:30:00Z"
-                  scope: "profiles"
-                  profileIds:
-                    - _id: "6507a1b2c3d4e5f6a7b8c9d0"
-                      name: "Main Brand"
-                      color: "#ffeda0"
-                  permission: "read"
+                  scope: "full"
+                  profileIds: []
+                  permission: "read-write"
+                  disabledResourceGroups: ["messages", "contacts", "webhooks"]
         '400': { description: "Invalid request (missing name, invalid scope/permission, or missing profileIds when scope is 'profiles')" }
         '401': { $ref: '#/components/responses/Unauthorized' }
+        '403': { $ref: '#/components/responses/ResourceGroupForbidden' }
   /v1/api-keys/{keyId}:
     delete:
+      x-resource-group: "admin-plane"
       operationId: deleteApiKey
       tags: [API Keys]
       summary: Delete key
@@ -15060,10 +15191,12 @@ paths:
               example:
                 message: "API key deleted successfully"
         '401': { $ref: '#/components/responses/Unauthorized' }
+        '403': { $ref: '#/components/responses/ResourceGroupForbidden' }
         '404': { $ref: '#/components/responses/NotFound' }
 
   /v1/me/connected-apps:
     get:
+      x-resource-group: "admin-plane"
       operationId: listConnectedApps
       tags: [Connected Apps]
       summary: List connected apps
@@ -15071,9 +15204,10 @@ paths:
         Returns the OAuth clients (AI assistants and MCP connectors) the authenticated
         user has authorized and that still hold a live token.
 
-        Requires a session or a full-scope API key. A profile-scoped API key or an
-        OAuth access token is rejected with 403: an app must not be able to enumerate
-        its sibling authorizations.
+        Requires a session or a full-access API key. A profile-scoped API key, a
+        restricted (zrk_) API key, or an OAuth access token is rejected with 403: an
+        app must not be able to enumerate its sibling authorizations, and connected-app
+        management is admin-plane.
       responses:
         '200':
           description: Connected apps
@@ -15095,13 +15229,10 @@ paths:
                     lastUsedAt: "2026-07-30T18:02:11Z"
                     tokenCount: 2
         '401': { $ref: '#/components/responses/Unauthorized' }
-        '403':
-          description: 'The calling credential may not manage OAuth authorizations (profile-scoped API key or OAuth access token). Error code: insufficient_permissions.'
-          content:
-            application/json:
-              schema: { $ref: '#/components/schemas/ErrorResponse' }
+        '403': { $ref: '#/components/responses/ResourceGroupForbidden' }
   /v1/me/connected-apps/{clientId}:
     delete:
+      x-resource-group: "admin-plane"
       operationId: revokeConnectedApp
       tags: [Connected Apps]
       summary: Revoke connected app
@@ -15112,6 +15243,9 @@ paths:
 
         Idempotent while the authorization is still on record: revoking an app that
         was already revoked returns 200 with `revokedTokens: 0`.
+
+        Requires a session or a full-access API key. A profile-scoped API key, a
+        restricted (zrk_) API key, or an OAuth access token is rejected with 403.
       parameters:
         - name: clientId
           in: path
@@ -15137,11 +15271,7 @@ paths:
                 invalidatedCodes: 0
         '400': { $ref: '#/components/responses/BadRequest' }
         '401': { $ref: '#/components/responses/Unauthorized' }
-        '403':
-          description: 'The calling credential may not manage OAuth authorizations (profile-scoped API key or OAuth access token). Error code: insufficient_permissions.'
-          content:
-            application/json:
-              schema: { $ref: '#/components/schemas/ErrorResponse' }
+        '403': { $ref: '#/components/responses/ResourceGroupForbidden' }
         '404':
           description: 'The authenticated user has never authorized this client. Error code: oauth_client_not_found.'
           content:
@@ -15150,12 +15280,16 @@ paths:
 
   /v1/invite/tokens:
     post:
+      x-resource-group: "admin-plane"
       operationId: createInviteToken
       tags: [Invites]
       summary: Create invite token
       description: |
         Generate a secure invite link to grant team members access to your profiles.
         Invites expire after 7 days and are single-use.
+
+        Returns 403 when a requested profile is not found or not owned, or when
+        called with a restricted (zrk_) API key: invite management is admin-plane.
       requestBody:
         required: true
         content:
@@ -15212,10 +15346,11 @@ paths:
                 inviteUrl: "https://zernio.com/invite/inv_abc123def456ghi789"
         '400': { description: Invalid request }
         '401': { $ref: '#/components/responses/Unauthorized' }
-        '403': { description: One or more profiles not found or not owned }
+        '403': { $ref: '#/components/responses/ResourceGroupForbidden' }
 
   /v1/connect/{platform}:
     get:
+      x-resource-group: "accounts"
       operationId: getConnectUrl
       tags: [Connect]
       summary: Get OAuth connect URL
@@ -15272,6 +15407,7 @@ paths:
         '404':
           description: Profile not found
     post:
+      x-resource-group: "accounts"
       operationId: handleOAuthCallback
       tags: [Connect]
       summary: Complete OAuth callback
@@ -15302,6 +15438,7 @@ paths:
 
   /v1/connect/{platform}/ads:
     get:
+      x-resource-group: "accounts"
       operationId: connectAds
       tags: [Connect]
       summary: Connect ads for a platform
@@ -15439,6 +15576,7 @@ paths:
 
   /v1/connect/tiktok-ads:
     patch:
+      x-resource-group: "accounts"
       operationId: configureTikTokAdsBrandIdentity
       tags: [Connect]
       summary: Set TikTok brand identity
@@ -15509,6 +15647,7 @@ paths:
 
   /v1/connect/facebook/select-page:
     get:
+      x-resource-group: "accounts"
       operationId: listFacebookPages
       tags: [Connect]
       summary: List Facebook pages
@@ -15565,6 +15704,7 @@ paths:
                 properties:
                   error: { type: string }
     post:
+      x-resource-group: "accounts"
       operationId: selectFacebookPage
       tags: [Connect]
       summary: Select Facebook page
@@ -15670,6 +15810,7 @@ paths:
 
   /v1/connect/googlebusiness/locations:
     get:
+      x-resource-group: "accounts"
       operationId: listGoogleBusinessLocations
       tags: [Connect]
       summary: List GBP locations
@@ -15763,6 +15904,7 @@ paths:
 
   /v1/connect/googlebusiness/select-location:
     post:
+      x-resource-group: "accounts"
       operationId: selectGoogleBusinessLocation
       tags: [Connect]
       summary: Select GBP location
@@ -15857,6 +15999,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-reviews:
     get:
+      x-resource-group: "engagement"
       operationId: getGoogleBusinessReviews
       tags: [GMB Reviews]
       summary: Get reviews
@@ -15995,6 +16138,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-verifications:
     get:
+      x-resource-group: "accounts"
       operationId: getGoogleBusinessVerifications
       tags: [GMB Verifications]
       summary: Get verification state
@@ -16074,6 +16218,7 @@ paths:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
         '404': { $ref: '#/components/responses/NotFound' }
     post:
+      x-resource-group: "accounts"
       operationId: startGoogleBusinessVerification
       tags: [GMB Verifications]
       summary: Start a verification
@@ -16145,6 +16290,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-verifications/options:
     post:
+      x-resource-group: "accounts"
       operationId: fetchGoogleBusinessVerificationOptions
       tags: [GMB Verifications]
       summary: Fetch verification options
@@ -16209,6 +16355,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-verifications/{verificationId}/complete:
     post:
+      x-resource-group: "accounts"
       operationId: completeGoogleBusinessVerification
       tags: [GMB Verifications]
       summary: Complete a verification
@@ -16276,6 +16423,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-food-menus:
     get:
+      x-resource-group: "accounts"
       operationId: getGoogleBusinessFoodMenus
       tags: [GMB Food Menus]
       summary: Get food menus
@@ -16359,6 +16507,7 @@ paths:
             application/json:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
     put:
+      x-resource-group: "accounts"
       operationId: updateGoogleBusinessFoodMenus
       tags: [GMB Food Menus]
       summary: Update food menus
@@ -16451,6 +16600,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-location-details:
     get:
+      x-resource-group: "accounts"
       operationId: getGoogleBusinessLocationDetails
       tags: [GMB Location Details]
       summary: Get location details
@@ -16631,6 +16781,7 @@ paths:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
         '404': { $ref: '#/components/responses/NotFound' }
     put:
+      x-resource-group: "accounts"
       operationId: updateGoogleBusinessLocationDetails
       tags: [GMB Location Details]
       summary: Update location details
@@ -16826,6 +16977,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-media:
     get:
+      x-resource-group: "accounts"
       operationId: listGoogleBusinessMedia
       tags: [GMB Media]
       summary: List media
@@ -16891,6 +17043,7 @@ paths:
             application/json:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
     post:
+      x-resource-group: "accounts"
       operationId: createGoogleBusinessMedia
       tags: [GMB Media]
       summary: Upload photo
@@ -16951,6 +17104,7 @@ paths:
             application/json:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteGoogleBusinessMedia
       tags: [GMB Media]
       summary: Delete photo
@@ -16995,6 +17149,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-attribute-metadata:
     get:
+      x-resource-group: "accounts"
       operationId: getGmbAttributeMetadata
       tags: [GMB Attributes]
       summary: Get attribute metadata
@@ -17134,6 +17289,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-attributes:
     get:
+      x-resource-group: "accounts"
       operationId: getGoogleBusinessAttributes
       tags: [GMB Attributes]
       summary: Get attributes
@@ -17200,6 +17356,7 @@ paths:
             application/json:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
     put:
+      x-resource-group: "accounts"
       operationId: updateGoogleBusinessAttributes
       tags: [GMB Attributes]
       summary: Update attributes
@@ -17287,6 +17444,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-place-actions:
     get:
+      x-resource-group: "accounts"
       operationId: listGoogleBusinessPlaceActions
       tags: [GMB Place Actions]
       summary: List action links
@@ -17353,6 +17511,7 @@ paths:
             application/json:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
     post:
+      x-resource-group: "accounts"
       operationId: createGoogleBusinessPlaceAction
       tags: [GMB Place Actions]
       summary: Create action link
@@ -17410,6 +17569,7 @@ paths:
             application/json:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteGoogleBusinessPlaceAction
       tags: [GMB Place Actions]
       summary: Delete action link
@@ -17452,6 +17612,7 @@ paths:
             application/json:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
     patch:
+      x-resource-group: "accounts"
       operationId: updateGoogleBusinessPlaceAction
       tags: [GMB Place Actions]
       summary: Update action link
@@ -17516,6 +17677,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-services:
     get:
+      x-resource-group: "accounts"
       operationId: getGoogleBusinessServices
       tags: [GMB Services]
       summary: Get services
@@ -17580,6 +17742,7 @@ paths:
             application/json:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
     put:
+      x-resource-group: "accounts"
       operationId: updateGoogleBusinessServices
       tags: [GMB Services]
       summary: Replace services
@@ -17665,6 +17828,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-reviews/batch:
     post:
+      x-resource-group: "engagement"
       operationId: batchGetGoogleBusinessReviews
       tags: [GMB Reviews]
       summary: Batch get reviews
@@ -17749,6 +17913,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-reviews/{reviewId}/reply:
     post:
+      x-resource-group: "engagement"
       operationId: replyToGoogleBusinessReview
       tags: [GMB Reviews]
       summary: Reply to a review
@@ -17820,6 +17985,7 @@ paths:
             application/json:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
     delete:
+      x-resource-group: "engagement"
       operationId: deleteGoogleBusinessReviewReply
       tags: [GMB Reviews]
       summary: Delete a review reply
@@ -17874,6 +18040,7 @@ paths:
 
   /v1/connect/pending-data:
     get:
+      x-resource-group: "public"
       operationId: getPendingOAuthData
       tags: [Connect]
       summary: Get pending OAuth data
@@ -17963,6 +18130,7 @@ paths:
 
   /v1/connect/linkedin/organizations:
     get:
+      x-resource-group: "public"
       operationId: listLinkedInOrganizations
       tags: [Connect]
       summary: List LinkedIn orgs
@@ -18026,6 +18194,7 @@ paths:
 
   /v1/connect/linkedin/select-organization:
     post:
+      x-resource-group: "accounts"
       operationId: selectLinkedInOrganization
       tags: [Connect]
       summary: Select LinkedIn org
@@ -18146,6 +18315,7 @@ paths:
 
   /v1/connect/pinterest/select-board:
     get:
+      x-resource-group: "accounts"
       operationId: listPinterestBoardsForSelection
       tags: [Connect]
       summary: List Pinterest boards
@@ -18198,6 +18368,7 @@ paths:
         '403': { description: No access to profile }
         '500': { description: Failed to fetch boards }
     post:
+      x-resource-group: "accounts"
       operationId: selectPinterestBoard
       tags: [Connect]
       summary: Select Pinterest board
@@ -18303,6 +18474,7 @@ paths:
 
   /v1/connect/snapchat/select-profile:
     get:
+      x-resource-group: "accounts"
       operationId: listSnapchatProfiles
       tags: [Connect]
       summary: List Snapchat profiles
@@ -18358,6 +18530,7 @@ paths:
         '403': { description: No access to profile }
         '500': { description: Failed to fetch public profiles }
     post:
+      x-resource-group: "accounts"
       operationId: selectSnapchatProfile
       tags: [Connect]
       summary: Select Snapchat profile
@@ -18486,6 +18659,7 @@ paths:
 
   /v1/connect/bluesky/credentials:
     post:
+      x-resource-group: "accounts"
       operationId: connectBlueskyCredentials
       tags: [Connect]
       summary: Connect Bluesky account
@@ -18543,6 +18717,7 @@ paths:
 
   /v1/connect/openai-ads/credentials:
     post:
+      x-resource-group: "accounts"
       operationId: connectOpenAIAdsCredentials
       tags: [Connect]
       summary: Connect an OpenAI Ads account
@@ -18600,6 +18775,7 @@ paths:
 
   /v1/connect/whatsapp/credentials:
     post:
+      x-resource-group: "accounts"
       operationId: connectWhatsAppCredentials
       tags: [Connect]
       summary: Connect WhatsApp via credentials
@@ -18690,6 +18866,7 @@ paths:
 
   /v1/connect/whatsapp/select-phone-number:
     get:
+      x-resource-group: "accounts"
       operationId: listWhatsAppPhoneNumbers
       tags: [Connect]
       summary: List numbers for selection
@@ -18763,6 +18940,7 @@ paths:
             application/json:
               schema: { $ref: '#/components/schemas/ErrorResponse' }
     post:
+      x-resource-group: "accounts"
       operationId: completeWhatsAppPhoneSelection
       tags: [Connect]
       summary: Complete number selection
@@ -18848,6 +19026,7 @@ paths:
 
   /v1/connect/telegram:
     get:
+      x-resource-group: "accounts"
       operationId: getTelegramConnectStatus
       tags: [Connect]
       summary: Generate Telegram code
@@ -18903,6 +19082,7 @@ paths:
         '404': { description: Profile not found }
         '500': { description: Internal error }
     post:
+      x-resource-group: "accounts"
       operationId: initiateTelegramConnect
       tags: [Connect]
       summary: Connect Telegram directly
@@ -18957,6 +19137,7 @@ paths:
         '404': { description: Profile not found }
         '500': { description: Internal error }
     patch:
+      x-resource-group: "accounts"
       operationId: completeTelegramConnect
       tags: [Connect]
       summary: Check Telegram status
@@ -19032,6 +19213,7 @@ paths:
 
   /v1/accounts/{accountId}/facebook-page:
     get:
+      x-resource-group: "accounts"
       operationId: getFacebookPages
       tags: [Connect]
       summary: List Facebook pages
@@ -19086,6 +19268,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Account not found }
     put:
+      x-resource-group: "accounts"
       operationId: updateFacebookPage
       tags: [Connect]
       summary: Update Facebook page
@@ -19131,6 +19314,7 @@ paths:
 
   /v1/accounts/{accountId}/linkedin-organizations:
     get:
+      x-resource-group: "accounts"
       operationId: getLinkedInOrganizations
       tags: [Connect]
       summary: List LinkedIn orgs
@@ -19172,6 +19356,7 @@ paths:
 
   /v1/accounts/{accountId}/linkedin-aggregate-analytics:
     get:
+      x-resource-group: "analytics"
       operationId: getLinkedInAggregateAnalytics
       tags: [Analytics]
       summary: Get LinkedIn aggregate stats
@@ -19382,6 +19567,7 @@ paths:
 
   /v1/accounts/{accountId}/linkedin-post-analytics:
     get:
+      x-resource-group: "analytics"
       operationId: getLinkedInPostAnalytics
       tags: [Analytics]
       summary: Get LinkedIn post stats
@@ -19498,6 +19684,7 @@ paths:
 
   /v1/accounts/{accountId}/linkedin-post-reactions:
     get:
+      x-resource-group: "analytics"
       operationId: getLinkedInPostReactions
       tags: [Analytics]
       summary: Get LinkedIn post reactions
@@ -19600,6 +19787,7 @@ paths:
 
   /v1/accounts/{accountId}/linkedin-organization:
     put:
+      x-resource-group: "accounts"
       operationId: updateLinkedInOrganization
       tags: [Connect]
       summary: Switch LinkedIn account type
@@ -19647,6 +19835,7 @@ paths:
 
   /v1/accounts/{accountId}/linkedin-mentions:
     get:
+      x-resource-group: "accounts"
       operationId: getLinkedInMentions
       tags: [LinkedIn Mentions]
       summary: Resolve LinkedIn mention
@@ -19804,6 +19993,7 @@ paths:
 
   /v1/accounts/{accountId}/instagram/stories:
     get:
+      x-resource-group: "analytics"
       operationId: listInstagramStories
       tags: [Instagram]
       summary: List active Instagram stories
@@ -19851,6 +20041,7 @@ paths:
 
   /v1/accounts/{accountId}/instagram/publishing-limit:
     get:
+      x-resource-group: "accounts"
       operationId: getInstagramPublishingLimit
       tags: [Instagram]
       summary: Get Instagram publishing limit
@@ -19890,6 +20081,7 @@ paths:
 
   /v1/accounts/{accountId}/instagram/stories/{storyId}/insights:
     get:
+      x-resource-group: "analytics"
       operationId: getInstagramStoryInsights
       tags: [Instagram]
       summary: Get Instagram story insights
@@ -19959,6 +20151,7 @@ paths:
 
   /v1/accounts/{accountId}/pinterest-boards:
     get:
+      x-resource-group: "accounts"
       operationId: getPinterestBoards
       tags: [Connect]
       summary: List Pinterest boards
@@ -19999,6 +20192,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Account not found }
     put:
+      x-resource-group: "accounts"
       operationId: updatePinterestBoards
       tags: [Connect]
       summary: Set default Pinterest board
@@ -20043,6 +20237,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Account not found }
     post:
+      x-resource-group: "accounts"
       operationId: createPinterestBoard
       tags: [Connect]
       summary: Create Pinterest board
@@ -20104,6 +20299,7 @@ paths:
 
   /v1/accounts/{accountId}/youtube-playlists:
     get:
+      x-resource-group: "accounts"
       operationId: getYoutubePlaylists
       tags: [Connect]
       summary: List YouTube playlists
@@ -20153,6 +20349,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Account not found }
     put:
+      x-resource-group: "accounts"
       operationId: updateYoutubeDefaultPlaylist
       tags: [Connect]
       summary: Set default YouTube playlist
@@ -20192,6 +20389,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-locations:
     get:
+      x-resource-group: "accounts"
       operationId: getGmbLocations
       tags: [Connect]
       summary: List GBP locations
@@ -20262,6 +20460,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Account not found }
     put:
+      x-resource-group: "accounts"
       operationId: updateGmbLocation
       tags: [Connect]
       summary: Update GBP location
@@ -20319,6 +20518,7 @@ paths:
 
   /v1/accounts/{accountId}/gmb-locations/assign:
     post:
+      x-resource-group: "accounts"
       operationId: assignGoogleBusinessLocation
       tags: [Connect]
       summary: Assign GBP location to another profile
@@ -20400,6 +20600,7 @@ paths:
 
   /v1/accounts/{accountId}/facebook-post-reactions:
     get:
+      x-resource-group: "analytics"
       operationId: getFacebookPostReactions
       tags: [Analytics]
       summary: Get Facebook post reactions
@@ -20462,6 +20663,7 @@ paths:
 
   /v1/accounts/{accountId}/reddit-subreddits:
     get:
+      x-resource-group: "accounts"
       operationId: getRedditSubreddits
       tags: [Connect]
       summary: List Reddit subreddits
@@ -20510,6 +20712,7 @@ paths:
         '404': { description: Account not found }
 
     put:
+      x-resource-group: "accounts"
       operationId: updateRedditSubreddits
       tags: [Connect]
       summary: Set default subreddit
@@ -20547,6 +20750,7 @@ paths:
 
   /v1/accounts/{accountId}/reddit-subreddits/{subreddit}/rules:
     get:
+      x-resource-group: "accounts"
       operationId: getSubredditRules
       tags: [Connect]
       summary: Get subreddit rules
@@ -20609,6 +20813,7 @@ paths:
 
   /v1/accounts/{accountId}/reddit-vote:
     post:
+      x-resource-group: "engagement"
       operationId: voteRedditThing
       tags: [Connect]
       summary: Vote on a Reddit post or comment
@@ -20664,6 +20869,7 @@ paths:
 
   /v1/accounts/{accountId}/reddit-flairs:
     get:
+      x-resource-group: "accounts"
       operationId: getRedditFlairs
       tags: [Connect]
       summary: List subreddit flairs
@@ -20709,6 +20915,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Account not found }
     post:
+      x-resource-group: "accounts"
       operationId: setRedditPostFlair
       tags: [Connect]
       summary: Set Reddit post flair
@@ -20760,6 +20967,7 @@ paths:
 
   /v1/accounts/{accountId}/slack-settings:
     get:
+      x-resource-group: "accounts"
       operationId: getSlackSettings
       tags: [Accounts]
       summary: Get Slack account settings
@@ -20794,6 +21002,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Account not found }
     patch:
+      x-resource-group: "accounts"
       operationId: updateSlackSettings
       tags: [Accounts]
       summary: Update Slack account settings
@@ -20821,6 +21030,7 @@ paths:
 
   /v1/accounts/{accountId}/discord-settings:
     get:
+      x-resource-group: "accounts"
       operationId: getDiscordSettings
       tags: [Discord]
       summary: Get Discord account settings
@@ -20870,6 +21080,7 @@ paths:
         '404': { description: Account not found }
 
     patch:
+      x-resource-group: "accounts"
       operationId: updateDiscordSettings
       tags: [Discord]
       summary: Update Discord settings
@@ -20939,6 +21150,7 @@ paths:
 
   /v1/accounts/{accountId}/discord-channels:
     get:
+      x-resource-group: "accounts"
       operationId: getDiscordChannels
       tags: [Discord]
       summary: List Discord guild channels
@@ -20981,6 +21193,7 @@ paths:
 
   /v1/accounts/{accountId}/slack-members:
     get:
+      x-resource-group: "contacts"
       operationId: listSlackMembers
       tags: [Slack]
       summary: List Slack workspace members
@@ -21028,6 +21241,7 @@ paths:
 
   /v1/discord/dms:
     post:
+      x-resource-group: "messages"
       operationId: sendDiscordDirectMessage
       tags: [Discord]
       summary: Send a Discord Direct Message
@@ -21136,6 +21350,7 @@ paths:
 
   /v1/discord/guilds/{guildId}/roles:
     get:
+      x-resource-group: "engagement"
       operationId: listDiscordGuildRoles
       tags: [Discord]
       summary: List Discord guild roles
@@ -21179,6 +21394,7 @@ paths:
         '403': { description: Discord refused the request (bot lacks View Channels permission in the guild). }
         '502': { description: Discord was unreachable or returned an unclassified error. }
     post:
+      x-resource-group: "engagement"
       operationId: createDiscordGuildRole
       tags: [Discord]
       summary: Create a Discord guild role
@@ -21230,6 +21446,7 @@ paths:
 
   /v1/discord/guilds/{guildId}/roles/{roleId}:
     patch:
+      x-resource-group: "engagement"
       operationId: editDiscordGuildRole
       tags: [Discord]
       summary: Edit a Discord guild role
@@ -21274,6 +21491,7 @@ paths:
         '403': { description: "Discord refused the action (bot lacks Manage Roles, or the target role sits at or above the bot's highest role)." }
         '502': { description: Discord was unreachable or returned an unclassified error. }
     delete:
+      x-resource-group: "engagement"
       operationId: deleteDiscordGuildRole
       tags: [Discord]
       summary: Delete a Discord guild role
@@ -21305,6 +21523,7 @@ paths:
 
   /v1/discord/guilds/{guildId}/members:
     get:
+      x-resource-group: "contacts"
       operationId: listDiscordGuildMembers
       tags: [Discord]
       summary: List Discord guild members
@@ -21344,6 +21563,7 @@ paths:
 
   /v1/discord/guilds/{guildId}/members/search:
     get:
+      x-resource-group: "contacts"
       operationId: searchDiscordGuildMembers
       tags: [Discord]
       summary: Search Discord guild members
@@ -21375,6 +21595,7 @@ paths:
 
   /v1/discord/guilds/{guildId}/members/{userId}:
     get:
+      x-resource-group: "contacts"
       operationId: getDiscordGuildMember
       tags: [Discord]
       summary: Get a Discord guild member
@@ -21402,6 +21623,7 @@ paths:
 
   /v1/discord/guilds/{guildId}/members/{userId}/roles/{roleId}:
     put:
+      x-resource-group: "contacts"
       operationId: addDiscordMemberRole
       tags: [Discord]
       summary: Assign a role to a guild member
@@ -21440,6 +21662,7 @@ paths:
         '502': { description: Discord was unreachable or returned an unclassified error. }
 
     delete:
+      x-resource-group: "contacts"
       operationId: removeDiscordMemberRole
       tags: [Discord]
       summary: Remove a role from a guild member
@@ -21474,6 +21697,7 @@ paths:
 
   /v1/discord/channels/{channelId}/messages/{messageId}:
     delete:
+      x-resource-group: "engagement"
       operationId: deleteDiscordMessage
       tags: [Discord]
       summary: Delete a Discord channel message
@@ -21508,6 +21732,7 @@ paths:
 
   /v1/discord/channels/{channelId}/messages/{messageId}/crosspost:
     post:
+      x-resource-group: "engagement"
       operationId: crosspostDiscordMessage
       tags: [Discord]
       summary: Crosspost Discord message
@@ -21541,6 +21766,7 @@ paths:
 
   /v1/discord/channels/{channelId}/threads:
     post:
+      x-resource-group: "engagement"
       operationId: createDiscordThread
       tags: [Discord]
       summary: Create a Discord public thread
@@ -21595,6 +21821,7 @@ paths:
 
   /v1/discord/channels/{channelId}/pins:
     get:
+      x-resource-group: "engagement"
       operationId: listDiscordPinnedMessages
       tags: [Discord]
       summary: List pinned messages
@@ -21636,6 +21863,7 @@ paths:
 
   /v1/discord/channels/{channelId}/pins/{messageId}:
     put:
+      x-resource-group: "engagement"
       operationId: pinDiscordMessage
       tags: [Discord]
       summary: Pin a Discord message
@@ -21671,6 +21899,7 @@ paths:
         '502': { description: Bot lacks MANAGE_MESSAGES in the channel. }
 
     delete:
+      x-resource-group: "engagement"
       operationId: unpinDiscordMessage
       tags: [Discord]
       summary: Unpin a Discord message
@@ -21700,6 +21929,7 @@ paths:
 
   /v1/discord/guilds/{guildId}/events:
     get:
+      x-resource-group: "engagement"
       operationId: listDiscordScheduledEvents
       tags: [Discord]
       summary: List Discord scheduled events
@@ -21732,6 +21962,7 @@ paths:
         '502': { description: Bot lacks access to the guild's events. }
 
     post:
+      x-resource-group: "engagement"
       operationId: createDiscordScheduledEvent
       tags: [Discord]
       summary: Create a Discord scheduled event
@@ -21816,6 +22047,7 @@ paths:
 
   /v1/discord/guilds/{guildId}/events/{eventId}:
     get:
+      x-resource-group: "engagement"
       operationId: getDiscordScheduledEvent
       tags: [Discord]
       summary: Get a Discord scheduled event
@@ -21836,6 +22068,7 @@ paths:
         '404': { description: Event or Discord account not found. }
 
     patch:
+      x-resource-group: "engagement"
       operationId: updateDiscordScheduledEvent
       tags: [Discord]
       summary: Update a Discord scheduled event
@@ -21884,6 +22117,7 @@ paths:
         '502': { description: Discord was unreachable or returned an unclassified error. }
 
     delete:
+      x-resource-group: "engagement"
       operationId: deleteDiscordScheduledEvent
       tags: [Discord]
       summary: Delete a Discord scheduled event
@@ -21910,6 +22144,7 @@ paths:
 
   /v1/queue/slots:
     get:
+      x-resource-group: "publishing"
       operationId: listQueueSlots
       tags: [Queue]
       summary: List schedules
@@ -21989,6 +22224,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Profile not found }
     post:
+      x-resource-group: "publishing"
       operationId: createQueueSlot
       tags: [Queue]
       summary: Create schedule
@@ -22041,6 +22277,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Profile not found }
     put:
+      x-resource-group: "publishing"
       operationId: updateQueueSlot
       tags: [Queue]
       summary: Update schedule
@@ -22113,6 +22350,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Profile not found }
     delete:
+      x-resource-group: "publishing"
       operationId: deleteQueueSlot
       tags: [Queue]
       summary: Delete schedule
@@ -22145,6 +22383,7 @@ paths:
         '404': { description: Profile or queue not found }
   /v1/queue/preview:
     get:
+      x-resource-group: "publishing"
       operationId: previewQueue
       tags: [Queue]
       summary: Preview upcoming slots
@@ -22187,6 +22426,7 @@ paths:
         '404': { description: Profile or queue schedule not found }
   /v1/queue/next-slot:
     get:
+      x-resource-group: "publishing"
       operationId: getNextQueueSlot
       tags: [Queue]
       summary: Get next available slot
@@ -22224,6 +22464,7 @@ paths:
   # ============================================
   /v1/webhooks/settings:
     get:
+      x-resource-group: "webhooks"
       operationId: getWebhookSettings
       tags: [Webhooks]
       summary: List webhooks
@@ -22259,6 +22500,7 @@ paths:
                     failureCount: 0
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "webhooks"
       operationId: createWebhookSettings
       tags: [Webhooks]
       summary: Create webhook
@@ -22268,6 +22510,11 @@ paths:
         `name`, `url` and `events` are required. `url` must be a valid URL and `events` must contain at least one event. Whitespace is trimmed from `url` before validation.
 
         Webhooks are automatically disabled after 10 consecutive delivery failures.
+
+        A restricted (zrk_) API key can only subscribe to events whose resource group
+        the key holds; an event outside the key's groups is rejected with 403. Note
+        that the KEY cannot access private messages; the ACCOUNT's pre-existing
+        webhook subscriptions are a separate grant surface.
       security:
         - bearerAuth: []
       requestBody:
@@ -22331,7 +22578,9 @@ paths:
                     $ref: '#/components/schemas/Webhook'
         '400': { description: Validation error or maximum webhooks reached }
         '401': { $ref: '#/components/responses/Unauthorized' }
+        '403': { $ref: '#/components/responses/ResourceGroupForbidden' }
     put:
+      x-resource-group: "webhooks"
       operationId: updateWebhookSettings
       tags: [Webhooks]
       summary: Update webhook
@@ -22341,6 +22590,9 @@ paths:
         When provided, `name` must be 1-50 characters, `url` must be a valid URL, and `events` must contain at least one event. Whitespace is trimmed from `url` before validation.
 
         Webhooks are automatically disabled after 10 consecutive delivery failures.
+
+        A restricted (zrk_) API key can only set `events` to events whose resource
+        group the key holds; an event outside the key's groups is rejected with 403.
       security:
         - bearerAuth: []
       requestBody:
@@ -22407,8 +22659,10 @@ paths:
                     $ref: '#/components/schemas/Webhook'
         '400': { description: Validation error or missing webhook ID }
         '401': { $ref: '#/components/responses/Unauthorized' }
+        '403': { $ref: '#/components/responses/ResourceGroupForbidden' }
         '404': { description: Webhook not found }
     delete:
+      x-resource-group: "webhooks"
       operationId: deleteWebhookSettings
       tags: [Webhooks]
       summary: Delete webhook
@@ -22436,6 +22690,7 @@ paths:
 
   /v1/webhooks/logs:
     get:
+      x-resource-group: "webhooks"
       operationId: getWebhookLogs
       tags: [Webhooks]
       summary: List webhook delivery logs
@@ -22443,6 +22698,10 @@ paths:
         Retrieve recorded webhook delivery attempts for the authenticated user, most recent first.
         Logs are retained for 30 days. Supports filtering by status, event type, webhook ID, and event ID,
         plus offset-based pagination.
+
+        For a restricted (zrk_) API key, rows for events outside the key's resource
+        groups are omitted (`pagination.total` may over-count), and an `event` filter
+        naming such an event is rejected with 403.
       security:
         - bearerAuth: []
       parameters:
@@ -22521,9 +22780,11 @@ paths:
                         description: Whether more logs are available beyond this page
         '400': { description: Invalid query parameter }
         '401': { $ref: '#/components/responses/Unauthorized' }
+        '403': { $ref: '#/components/responses/ResourceGroupForbidden' }
 
   /v1/webhooks/test:
     post:
+      x-resource-group: "webhooks"
       operationId: testWebhook
       tags: [Webhooks]
       summary: Send test webhook
@@ -22576,6 +22837,7 @@ paths:
 
   /v1/logs:
     get:
+      x-resource-group: "publishing"
       operationId: listLogs
       tags: [Logs]
       summary: List activity logs
@@ -22768,6 +23030,7 @@ paths:
   # Unified Inbox Endpoints
   /v1/inbox/conversations:
     get:
+      x-resource-group: "messages"
       operationId: listInboxConversations
       summary: List conversations
       description: |
@@ -22973,6 +23236,7 @@ paths:
         '403':
           description: Inbox addon required
     post:
+      x-resource-group: "messages"
       operationId: createInboxConversation
       summary: Create conversation
       description: |
@@ -23151,6 +23415,7 @@ paths:
           description: X API rate limit exceeded
   /v1/inbox/conversations/search:
     get:
+      x-resource-group: "messages"
       operationId: searchInboxConversations
       summary: Search conversations
       description: |
@@ -23267,6 +23532,7 @@ paths:
           description: Inbox addon required
   /v1/inbox/conversations/{conversationId}:
     get:
+      x-resource-group: "messages"
       operationId: getInboxConversation
       summary: Get conversation
       description: Retrieve details and metadata for a specific conversation. Requires accountId query parameter.
@@ -23403,6 +23669,7 @@ paths:
         '404':
           description: Conversation not found
     put:
+      x-resource-group: "messages"
       operationId: updateInboxConversation
       summary: Update conversation status
       description: Archive or activate a conversation. Requires accountId in request body.
@@ -23449,6 +23716,7 @@ paths:
 
   /v1/inbox/conversations/{conversationId}/messages:
     get:
+      x-resource-group: "messages"
       operationId: getInboxConversationMessages
       summary: List messages
       description: |
@@ -23645,6 +23913,7 @@ paths:
         '403':
           description: Inbox addon required
     post:
+      x-resource-group: "messages"
       operationId: sendInboxMessage
       summary: Send message
       description: |
@@ -24202,6 +24471,7 @@ paths:
 
   /v1/whatsapp/media/{mediaId}:
     get:
+      x-resource-group: "messages"
       operationId: getWhatsAppMedia
       tags: [WhatsApp]
       summary: Download WhatsApp media
@@ -24245,6 +24515,7 @@ paths:
 
   /v1/inbox/conversations/{conversationId}/messages/{messageId}:
     patch:
+      x-resource-group: "messages"
       operationId: editInboxMessage
       summary: Edit message
       description: |
@@ -24307,6 +24578,7 @@ paths:
         '403':
           description: Inbox addon required
     delete:
+      x-resource-group: "messages"
       operationId: deleteInboxMessage
       summary: Delete message
       description: |
@@ -24353,6 +24625,7 @@ paths:
 
   /v1/inbox/conversations/{conversationId}/typing:
     post:
+      x-resource-group: "messages"
       operationId: sendTypingIndicator
       summary: Send typing indicator
       description: |
@@ -24399,6 +24672,7 @@ paths:
 
   /v1/inbox/conversations/{conversationId}/read:
     post:
+      x-resource-group: "messages"
       operationId: markConversationRead
       summary: Mark a conversation as read
       description: |
@@ -24448,6 +24722,7 @@ paths:
 
   /v1/inbox/conversations/{conversationId}/messages/{messageId}/reactions:
     post:
+      x-resource-group: "messages"
       operationId: addMessageReaction
       summary: Add reaction
       description: |
@@ -24495,6 +24770,7 @@ paths:
         '404':
           description: Account or conversation not found
     delete:
+      x-resource-group: "messages"
       operationId: removeMessageReaction
       summary: Remove reaction
       description: |
@@ -24539,6 +24815,7 @@ paths:
 
   /v1/media/upload-direct:
     post:
+      x-resource-group: "publishing"
       operationId: uploadMediaDirect
       summary: Upload media file
       description: |
@@ -24585,6 +24862,7 @@ paths:
 
   /v1/accounts/{accountId}/messenger-menu:
     get:
+      x-resource-group: "accounts"
       operationId: getMessengerMenu
       summary: Get FB persistent menu
       description: Get the persistent menu configuration for a Facebook Messenger account.
@@ -24608,6 +24886,7 @@ paths:
           description: Not a Facebook account
         '401': { $ref: '#/components/responses/Unauthorized' }
     put:
+      x-resource-group: "accounts"
       operationId: setMessengerMenu
       summary: Set FB persistent menu
       description: Set the persistent menu for a Facebook Messenger account. Max 3 top-level items, max 5 nested items.
@@ -24637,6 +24916,7 @@ paths:
           description: Invalid request
         '401': { $ref: '#/components/responses/Unauthorized' }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteMessengerMenu
       description: Removes the persistent menu from Facebook Messenger conversations for this account.
       summary: Delete FB persistent menu
@@ -24655,6 +24935,7 @@ paths:
 
   /v1/accounts/{accountId}/instagram-ice-breakers:
     get:
+      x-resource-group: "accounts"
       operationId: getInstagramIceBreakers
       summary: Get IG ice breakers
       description: Get the ice breaker configuration for an Instagram account.
@@ -24678,6 +24959,7 @@ paths:
           description: Not an Instagram account
         '401': { $ref: '#/components/responses/Unauthorized' }
     put:
+      x-resource-group: "accounts"
       operationId: setInstagramIceBreakers
       summary: Set IG ice breakers
       description: Set ice breakers for an Instagram account. Max 4 ice breakers, question max 80 chars.
@@ -24713,6 +24995,7 @@ paths:
           description: Invalid request
         '401': { $ref: '#/components/responses/Unauthorized' }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteInstagramIceBreakers
       description: Removes the ice breaker questions from an Instagram account's Messenger experience.
       summary: Delete IG ice breakers
@@ -24731,6 +25014,7 @@ paths:
 
   /v1/accounts/{accountId}/telegram-commands:
     get:
+      x-resource-group: "accounts"
       operationId: getTelegramCommands
       summary: Get TG bot commands
       description: Get the bot commands configuration for a Telegram account.
@@ -24760,6 +25044,7 @@ paths:
           description: Not a Telegram account
         '401': { $ref: '#/components/responses/Unauthorized' }
     put:
+      x-resource-group: "accounts"
       operationId: setTelegramCommands
       summary: Set TG bot commands
       description: Set bot commands for a Telegram account.
@@ -24794,6 +25079,7 @@ paths:
           description: Invalid request
         '401': { $ref: '#/components/responses/Unauthorized' }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteTelegramCommands
       description: Clears all bot commands configured for a Telegram bot account.
       summary: Delete TG bot commands
@@ -24812,6 +25098,7 @@ paths:
 
   /v1/inbox/comments:
     get:
+      x-resource-group: "engagement"
       operationId: listInboxComments
       summary: List commented posts
       description: |
@@ -24924,6 +25211,7 @@ paths:
 
   /v1/inbox/comments/{postId}:
     get:
+      x-resource-group: "engagement"
       operationId: getInboxPostComments
       summary: Get post comments
       description: Fetch comments for a specific post. Requires accountId query parameter.
@@ -25057,6 +25345,7 @@ paths:
         '502':
           description: 'Upstream platform error (code platform_api_error, type platform_error)'
     post:
+      x-resource-group: "engagement"
       operationId: replyToInboxPost
       summary: Reply to comment
       description: Post a reply to a post or specific comment. Requires accountId in request body.
@@ -25110,6 +25399,7 @@ paths:
         '502':
           description: 'Upstream platform error (code platform_api_error, type platform_error)'
     delete:
+      x-resource-group: "engagement"
       operationId: deleteInboxComment
       summary: Delete comment
       description: |
@@ -25161,6 +25451,7 @@ paths:
 
   /v1/inbox/comments/{postId}/{commentId}:
     patch:
+      x-resource-group: "engagement"
       operationId: editInboxComment
       summary: Edit comment
       description: |
@@ -25220,6 +25511,7 @@ paths:
 
   /v1/inbox/comments/{postId}/{commentId}/moderation:
     post:
+      x-resource-group: "engagement"
       operationId: setCommentModeration
       summary: Set comment moderation status
       description: |
@@ -25288,6 +25580,7 @@ paths:
 
   /v1/inbox/comments/{postId}/{commentId}/hide:
     post:
+      x-resource-group: "engagement"
       operationId: hideInboxComment
       summary: Hide comment
       description: |
@@ -25332,6 +25625,7 @@ paths:
         '403':
           description: Inbox addon required
     delete:
+      x-resource-group: "engagement"
       operationId: unhideInboxComment
       summary: Unhide comment
       description: |
@@ -25371,6 +25665,7 @@ paths:
 
   /v1/inbox/comments/{postId}/{commentId}/like:
     post:
+      x-resource-group: "engagement"
       operationId: likeInboxComment
       summary: Like comment
       description: |
@@ -25416,6 +25711,7 @@ paths:
         '403':
           description: Inbox addon required
     delete:
+      x-resource-group: "engagement"
       operationId: unlikeInboxComment
       summary: Unlike comment
       description: |
@@ -25460,6 +25756,7 @@ paths:
 
   /v1/inbox/comments/{postId}/{commentId}/private-reply:
     post:
+      x-resource-group: "messages"
       operationId: sendPrivateReplyToComment
       summary: Send private reply
       description: |
@@ -25635,6 +25932,7 @@ paths:
 
   /v1/twitter/retweet:
     post:
+      x-resource-group: "engagement"
       operationId: retweetPost
       summary: Retweet a post
       description: |
@@ -25666,8 +25964,10 @@ paths:
                   platform: { type: string, example: twitter }
         '400': { description: Bad request or platform limitation }
         '401': { $ref: '#/components/responses/Unauthorized' }
+        '403': { description: 'X rejected the request (e.g. suspended account, missing OAuth scope)' }
         '404': { description: Account not found }
     delete:
+      x-resource-group: "engagement"
       operationId: undoRetweet
       summary: Undo retweet
       description: |
@@ -25698,10 +25998,12 @@ paths:
                   platform: { type: string, example: twitter }
         '400': { description: Bad request }
         '401': { $ref: '#/components/responses/Unauthorized' }
+        '403': { description: 'X rejected the request (e.g. suspended account, missing OAuth scope)' }
         '404': { description: Account not found }
 
   /v1/twitter/bookmark:
     post:
+      x-resource-group: "engagement"
       operationId: bookmarkPost
       summary: Bookmark a tweet
       description: |
@@ -25734,8 +26036,10 @@ paths:
                   platform: { type: string, example: twitter }
         '400': { description: Bad request or platform limitation }
         '401': { $ref: '#/components/responses/Unauthorized' }
+        '403': { description: 'X rejected the request (e.g. suspended account, missing OAuth scope)' }
         '404': { description: Account not found }
     delete:
+      x-resource-group: "engagement"
       operationId: removeBookmark
       summary: Remove bookmark
       description: |
@@ -25766,10 +26070,12 @@ paths:
                   platform: { type: string, example: twitter }
         '400': { description: Bad request }
         '401': { $ref: '#/components/responses/Unauthorized' }
+        '403': { description: 'X rejected the request (e.g. suspended account, missing OAuth scope)' }
         '404': { description: Account not found }
 
   /v1/twitter/follow:
     post:
+      x-resource-group: "engagement"
       operationId: followUser
       summary: Follow a user
       description: |
@@ -25803,8 +26109,10 @@ paths:
                   platform: { type: string, example: twitter }
         '400': { description: Bad request or platform limitation }
         '401': { $ref: '#/components/responses/Unauthorized' }
+        '403': { description: 'X rejected the request (e.g. suspended account, missing OAuth scope)' }
         '404': { description: Account not found }
     delete:
+      x-resource-group: "engagement"
       operationId: unfollowUser
       summary: Unfollow a user
       description: |
@@ -25835,10 +26143,12 @@ paths:
                   platform: { type: string, example: twitter }
         '400': { description: Bad request }
         '401': { $ref: '#/components/responses/Unauthorized' }
+        '403': { description: 'X rejected the request (e.g. suspended account, missing OAuth scope)' }
         '404': { description: Account not found }
 
   /v1/twitter/search:
     get:
+      x-resource-group: "engagement"
       operationId: searchTweets
       summary: Search recent tweets
       description: |
@@ -25944,6 +26254,7 @@ paths:
 
   /v1/twitter/tweet:
     get:
+      x-resource-group: "engagement"
       operationId: getTweet
       summary: Look up a tweet
       description: |
@@ -26008,6 +26319,7 @@ paths:
 
   /v1/inbox/mentions:
     get:
+      x-resource-group: "engagement"
       operationId: listInboxMentions
       summary: List mentions
       description: |
@@ -26107,6 +26419,7 @@ paths:
 
   /v1/inbox/mentions/reply:
     post:
+      x-resource-group: "engagement"
       operationId: replyToMention
       summary: Reply to a mention
       description: |
@@ -26169,6 +26482,7 @@ paths:
 
   /v1/inbox/reviews:
     get:
+      x-resource-group: "engagement"
       operationId: listInboxReviews
       summary: List reviews
       description: |
@@ -26292,6 +26606,7 @@ paths:
 
   /v1/inbox/reviews/{reviewId}/reply:
     post:
+      x-resource-group: "engagement"
       operationId: replyToInboxReview
       summary: Reply to review
       description: Post a reply to a review. Requires accountId in request body.
@@ -26333,6 +26648,7 @@ paths:
         '403':
           description: Inbox addon required
     delete:
+      x-resource-group: "engagement"
       operationId: deleteInboxReviewReply
       summary: Delete review reply
       description: Delete a reply to a review (Google Business only). Requires accountId in request body.
@@ -26377,6 +26693,7 @@ paths:
 
   /v1/whatsapp/templates:
     get:
+      x-resource-group: "accounts"
       operationId: getWhatsAppTemplates
       tags: [WhatsApp]
       summary: List templates
@@ -26419,6 +26736,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: WhatsApp account not found }
     post:
+      x-resource-group: "accounts"
       operationId: createWhatsAppTemplate
       tags: [WhatsApp]
       summary: Create template
@@ -26557,6 +26875,7 @@ paths:
 
   /v1/whatsapp/templates/{templateName}:
     get:
+      x-resource-group: "accounts"
       operationId: getWhatsAppTemplate
       tags: [WhatsApp]
       summary: Get template
@@ -26603,6 +26922,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
         '502': { description: Meta rejected the request or was unreachable. Meta 4xx statuses are forwarded as-is. }
     patch:
+      x-resource-group: "accounts"
       operationId: updateWhatsAppTemplate
       tags: [WhatsApp]
       summary: Update template
@@ -26668,6 +26988,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
         '502': { description: Meta rejected the update or was unreachable. Meta 4xx statuses are forwarded as-is. }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteWhatsAppTemplate
       tags: [WhatsApp]
       summary: Delete template
@@ -26712,6 +27033,7 @@ paths:
 
   /v1/whatsapp/calling:
     get:
+      x-resource-group: "accounts"
       operationId: getWhatsAppCallingConfig
       tags: [WhatsApp Calling]
       summary: Get calling config for an account
@@ -26759,6 +27081,7 @@ paths:
 
   /v1/whatsapp/phone-numbers/{id}/calling:
     post:
+      x-resource-group: "telephony"
       operationId: enableWhatsAppCallingLegacy
       deprecated: true
       tags: [WhatsApp Calling]
@@ -26814,6 +27137,7 @@ paths:
         '404': { description: WhatsApp phone number not found }
         '422': { description: "Not eligible to enable calling: not on usage-based billing, or the number's messaging limit is below Meta's ~2,000-daily-recipient threshold (TIER_250). Warm the number up to raise the limit." }
     patch:
+      x-resource-group: "telephony"
       operationId: updateWhatsAppCallingLegacy
       deprecated: true
       tags: [WhatsApp Calling]
@@ -26856,6 +27180,7 @@ paths:
         '404': { description: WhatsApp phone number not found }
         '422': { description: Calling must be enabled before settings can be updated }
     delete:
+      x-resource-group: "telephony"
       operationId: disableWhatsAppCallingLegacy
       deprecated: true
       tags: [WhatsApp Calling]
@@ -26880,6 +27205,7 @@ paths:
 
   /v1/whatsapp/call-permissions:
     get:
+      x-resource-group: "contacts"
       operationId: getWhatsAppCallPermissions
       tags: [WhatsApp Calling]
       summary: Check call permission
@@ -26918,6 +27244,7 @@ paths:
 
   /v1/whatsapp/calls:
     post:
+      x-resource-group: "messages"
       operationId: initiateWhatsAppCall
       tags: [WhatsApp Calling]
       summary: Initiate outbound call
@@ -26993,6 +27320,7 @@ paths:
         '422': { description: "Calling not enabled, BIC country blocked, or missing Meta SIP credentials" }
         '502': { description: Telnyx-side originate failed; the Call doc has been marked failed. }
     get:
+      x-resource-group: "messages"
       operationId: listWhatsAppCalls
       tags: [WhatsApp Calling]
       summary: List call history for an account
@@ -27051,6 +27379,7 @@ paths:
 
   /v1/whatsapp/calls/{id}:
     get:
+      x-resource-group: "messages"
       operationId: getWhatsAppCall
       tags: [WhatsApp Calling]
       summary: Get a single call
@@ -27074,6 +27403,7 @@ paths:
 
   /v1/whatsapp/calls/{id}/recording:
     get:
+      x-resource-group: "messages"
       operationId: getWhatsAppCallRecording
       tags: [WhatsApp Calling]
       summary: Get a call recording
@@ -27106,6 +27436,7 @@ paths:
 
   /v1/whatsapp/calls/estimate:
     get:
+      x-resource-group: "messages"
       operationId: getWhatsAppCallEstimate
       tags: [WhatsApp Calling]
       summary: Estimate per-minute cost
@@ -27143,6 +27474,7 @@ paths:
 
   /v1/calls:
     get:
+      x-resource-group: "messages"
       operationId: listCalls
       tags: [Calls]
       summary: List all calls (unified history)
@@ -27192,6 +27524,7 @@ paths:
 
   /v1/calls/{id}:
     get:
+      x-resource-group: "messages"
       operationId: getCall
       tags: [Calls]
       summary: Get a call (any channel)
@@ -27226,6 +27559,7 @@ paths:
 
   /v1/calls/{id}/recording:
     get:
+      x-resource-group: "messages"
       operationId: getCallRecording
       tags: [Calls]
       summary: Get a call recording
@@ -27258,6 +27592,7 @@ paths:
 
   /v1/voice/calls:
     post:
+      x-resource-group: "messages"
       operationId: createVoiceCall
       tags: [Voice]
       summary: Place an outbound phone call
@@ -27321,6 +27656,7 @@ paths:
         '429': { description: Outbound call limit reached (per rolling hour). }
         '502': { description: Carrier-side originate failed; the call has been marked failed. }
     get:
+      x-resource-group: "messages"
       operationId: listVoiceCalls
       tags: [Voice]
       summary: List phone calls
@@ -27354,6 +27690,7 @@ paths:
 
   /v1/voice/calls/{id}:
     get:
+      x-resource-group: "messages"
       operationId: getVoiceCall
       tags: [Voice]
       summary: Get a phone call
@@ -27377,6 +27714,7 @@ paths:
 
   /v1/voice/calls/{id}/end:
     post:
+      x-resource-group: "messages"
       operationId: endVoiceCall
       tags: [Voice]
       summary: Hang up a live call
@@ -27406,6 +27744,7 @@ paths:
 
   /v1/voice/calls/{id}/recording:
     get:
+      x-resource-group: "messages"
       operationId: getVoiceCallRecording
       tags: [Voice]
       summary: Get a call recording
@@ -27435,6 +27774,7 @@ paths:
 
   /v1/voice/calls/{id}/transfer:
     post:
+      x-resource-group: "messages"
       operationId: transferVoiceCall
       tags: [Voice]
       summary: Blind-transfer a live call
@@ -27473,6 +27813,7 @@ paths:
 
   /v1/voice/calls/estimate:
     get:
+      x-resource-group: "messages"
       operationId: getVoiceCallEstimate
       tags: [Voice]
       summary: Estimate call cost
@@ -27516,6 +27857,7 @@ paths:
 
   /v1/voice/calls/web:
     post:
+      x-resource-group: "messages"
       operationId: createVoiceWebSession
       tags: [Voice]
       summary: Mint a browser softphone session
@@ -27547,6 +27889,7 @@ paths:
 
   /v1/voice/calls/web/dial:
     post:
+      x-resource-group: "messages"
       operationId: dialVoiceWebCall
       tags: [Voice]
       summary: Dial from the browser softphone
@@ -27593,6 +27936,7 @@ paths:
 
   /v1/sms/messages:
     post:
+      x-resource-group: "messages"
       operationId: sendSms
       tags: [SMS]
       summary: Send an SMS/MMS
@@ -27652,6 +27996,7 @@ paths:
 
   /v1/sms/lookup:
     get:
+      x-resource-group: "telephony"
       operationId: lookupSmsNumber
       tags: [SMS]
       summary: Look up carrier + line type
@@ -27682,6 +28027,7 @@ paths:
 
   /v1/sms/opt-outs:
     get:
+      x-resource-group: "contacts"
       operationId: listSmsOptOuts
       tags: [SMS]
       summary: List SMS opt-outs
@@ -27719,6 +28065,7 @@ paths:
 
   /v1/sms/sender-ids:
     post:
+      x-resource-group: "telephony"
       operationId: createSmsSenderId
       tags: [SMS]
       summary: Create an alphanumeric sender ID
@@ -27766,6 +28113,7 @@ paths:
         '403': { description: 'Workspace is not on usage-based billing, or already holds the maximum of 1,000 active sender IDs (code `sender_id_limit_reached`; raisable via support).' }
         '422': { description: 'Sender ID rejected: it appears to impersonate a protected brand or institution.' }
     get:
+      x-resource-group: "telephony"
       operationId: listSmsSenderIds
       tags: [SMS]
       summary: List alphanumeric sender IDs
@@ -27806,6 +28154,7 @@ paths:
 
   /v1/sms/sender-ids/limit-request:
     post:
+      x-resource-group: "telephony"
       operationId: requestSmsSenderIdLimitIncrease
       tags: [SMS]
       summary: Request a higher sender ID daily limit
@@ -27842,6 +28191,7 @@ paths:
 
   /v1/sms/sender-ids/{id}:
     delete:
+      x-resource-group: "telephony"
       operationId: deleteSmsSenderId
       tags: [SMS]
       summary: Delete an alphanumeric sender ID
@@ -27867,6 +28217,7 @@ paths:
 
   /v1/sms/registrations:
     post:
+      x-resource-group: "telephony"
       operationId: startSmsRegistration
       tags: [SMS]
       summary: Start a carrier registration
@@ -28016,6 +28367,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '422': { description: Carrier registry rejected a field; `param` names it when known. }
     get:
+      x-resource-group: "telephony"
       operationId: listSmsRegistrations
       tags: [SMS]
       summary: List carrier registrations
@@ -28065,6 +28417,7 @@ paths:
 
   /v1/sms/registrations/preflight:
     post:
+      x-resource-group: "telephony"
       operationId: preflightSmsRegistration
       tags: [SMS]
       summary: Pre-check a carrier registration
@@ -28119,6 +28472,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
   /v1/sms/registrations/{id}:
     delete:
+      x-resource-group: "telephony"
       operationId: deactivateSmsRegistration
       tags: [SMS]
       summary: Deactivate a brand/campaign registration
@@ -28147,6 +28501,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Registration not found }
     get:
+      x-resource-group: "telephony"
       operationId: getSmsRegistration
       tags: [SMS]
       summary: Get a carrier registration
@@ -28187,6 +28542,7 @@ paths:
 
   /v1/sms/registrations/{id}/verify-otp:
     post:
+      x-resource-group: "telephony"
       operationId: verifySmsRegistrationOtp
       tags: [SMS]
       summary: Submit the sole-prop OTP
@@ -28222,6 +28578,7 @@ paths:
 
   /v1/sms/registrations/{id}/resend-otp:
     post:
+      x-resource-group: "telephony"
       operationId: resendSmsRegistrationOtp
       tags: [SMS]
       summary: Re-send the sole-prop OTP
@@ -28250,6 +28607,7 @@ paths:
 
   /v1/sms/registrations/{id}/appeal:
     post:
+      x-resource-group: "telephony"
       operationId: appealSmsRegistration
       tags: [SMS]
       summary: Appeal a rejected campaign
@@ -28296,6 +28654,7 @@ paths:
 
   /v1/sms/registrations/{id}/respond:
     post:
+      x-resource-group: "telephony"
       operationId: respondToSmsRegistrationReview
       tags: [SMS]
       summary: Reply to a change request
@@ -28340,6 +28699,7 @@ paths:
 
   /v1/sms/opt-in-proof:
     post:
+      x-resource-group: "contacts"
       operationId: uploadSmsOptInProofFile
       tags: [SMS]
       summary: Upload opt-in form proof
@@ -28375,6 +28735,7 @@ paths:
 
   /v1/sms/registrations/{id}/opt-in-proof:
     post:
+      x-resource-group: "contacts"
       operationId: uploadSmsOptInProof
       tags: [SMS]
       summary: Upload opt-in form proof for an appeal
@@ -28413,6 +28774,7 @@ paths:
 
   /v1/sms/registrations/share:
     post:
+      x-resource-group: "telephony"
       operationId: shareSmsRegistration
       tags: [SMS]
       summary: Create a registration share link
@@ -28448,6 +28810,7 @@ paths:
 
   /v1/whatsapp/template-library:
     get:
+      x-resource-group: "accounts"
       operationId: getWhatsAppLibraryTemplate
       tags: [WhatsApp Templates]
       summary: Look up a library template
@@ -28495,6 +28858,7 @@ paths:
 
   /v1/whatsapp/business-profile:
     get:
+      x-resource-group: "accounts"
       operationId: getWhatsAppBusinessProfile
       tags: [WhatsApp]
       summary: Get business profile
@@ -28535,6 +28899,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: WhatsApp account not found }
     post:
+      x-resource-group: "accounts"
       operationId: updateWhatsAppBusinessProfile
       tags: [WhatsApp]
       summary: Update business profile
@@ -28606,6 +28971,7 @@ paths:
 
   /v1/whatsapp/business-profile/photo:
     post:
+      x-resource-group: "accounts"
       operationId: uploadWhatsAppProfilePhoto
       tags: [WhatsApp]
       summary: Upload profile picture
@@ -28664,6 +29030,7 @@ paths:
 
   /v1/whatsapp/business-profile/display-name:
     get:
+      x-resource-group: "accounts"
       operationId: getWhatsAppDisplayName
       tags: [WhatsApp]
       summary: Get display name status
@@ -28701,6 +29068,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: WhatsApp account not found or accountId is not a valid ObjectId }
     post:
+      x-resource-group: "accounts"
       operationId: updateWhatsAppDisplayName
       tags: [WhatsApp]
       summary: Request display name change
@@ -28750,6 +29118,7 @@ paths:
 
   /v1/whatsapp/business-profile/username:
     get:
+      x-resource-group: "accounts"
       operationId: getWhatsappBusinessUsername
       tags: [WhatsApp]
       summary: Get business username
@@ -28784,6 +29153,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: WhatsApp account not found }
     post:
+      x-resource-group: "accounts"
       operationId: setWhatsappBusinessUsername
       tags: [WhatsApp]
       summary: Set business username
@@ -28849,6 +29219,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: WhatsApp account not found }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteWhatsappBusinessUsername
       tags: [WhatsApp]
       summary: Delete business username
@@ -28886,6 +29257,7 @@ paths:
 
   /v1/whatsapp/business-profile/username/suggestions:
     get:
+      x-resource-group: "accounts"
       operationId: getWhatsappBusinessUsernameSuggestions
       tags: [WhatsApp]
       summary: Get username suggestions
@@ -28922,6 +29294,7 @@ paths:
 
   /v1/whatsapp/number-info:
     get:
+      x-resource-group: "contacts"
       operationId: getWhatsAppNumberInfo
       tags: [WhatsApp Phone Numbers]
       summary: Get number status
@@ -28970,6 +29343,7 @@ paths:
 
   /v1/whatsapp/block-users/status:
     get:
+      x-resource-group: "contacts"
       operationId: getWhatsAppBlockStatus
       tags: [WhatsApp]
       summary: Check if a user is blocked
@@ -28998,6 +29372,7 @@ paths:
 
   /v1/whatsapp/block-users:
     get:
+      x-resource-group: "contacts"
       operationId: getWhatsAppBlockedUsers
       tags: [WhatsApp]
       summary: List blocked users
@@ -29029,6 +29404,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: WhatsApp account not found }
     post:
+      x-resource-group: "contacts"
       operationId: blockWhatsAppUsers
       tags: [WhatsApp]
       summary: Block users
@@ -29087,6 +29463,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: WhatsApp account not found }
     delete:
+      x-resource-group: "contacts"
       operationId: unblockWhatsAppUsers
       tags: [WhatsApp]
       summary: Unblock users
@@ -29140,6 +29517,7 @@ paths:
 
   /v1/whatsapp/dataset:
     get:
+      x-resource-group: "accounts"
       operationId: getWhatsAppDataset
       tags: [WhatsApp]
       summary: Get CTWA conversions dataset
@@ -29167,6 +29545,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: WhatsApp account not found }
     post:
+      x-resource-group: "accounts"
       operationId: createWhatsAppDataset
       tags: [WhatsApp]
       summary: Provision CTWA dataset
@@ -29228,6 +29607,7 @@ paths:
 
   /v1/phone-numbers:
     get:
+      x-resource-group: "telephony"
       operationId: listPhoneNumbers
       tags: [Phone Numbers]
       summary: List phone numbers
@@ -29327,6 +29707,7 @@ paths:
 
   /v1/phone-numbers/{id}:
     get:
+      x-resource-group: "telephony"
       operationId: getPhoneNumber
       tags: [Phone Numbers]
       summary: Get phone number
@@ -29372,6 +29753,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     delete:
+      x-resource-group: "telephony"
       operationId: releasePhoneNumber
       tags: [Phone Numbers]
       summary: Release phone number
@@ -29412,6 +29794,7 @@ paths:
 
   /v1/phone-numbers/purchase:
     post:
+      x-resource-group: "telephony"
       operationId: purchasePhoneNumber
       tags: [Phone Numbers]
       summary: Purchase phone number
@@ -29597,6 +29980,7 @@ paths:
 
   /v1/phone-numbers/countries:
     get:
+      x-resource-group: "telephony"
       operationId: listPhoneNumberCountries
       tags: [Phone Numbers]
       summary: List offerable number countries
@@ -29653,6 +30037,7 @@ paths:
 
   /v1/phone-numbers/available:
     get:
+      x-resource-group: "telephony"
       operationId: searchAvailablePhoneNumbers
       tags: [Phone Numbers]
       summary: Search available numbers
@@ -29695,6 +30080,7 @@ paths:
 
   /v1/phone-numbers/availability:
     get:
+      x-resource-group: "telephony"
       operationId: checkPhoneNumberAvailability
       tags: [Phone Numbers]
       summary: Check country availability
@@ -29756,6 +30142,7 @@ paths:
 
   /v1/whatsapp/phone-numbers:
     get:
+      x-resource-group: "telephony"
       operationId: getWhatsAppPhoneNumbers
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -29860,6 +30247,7 @@ paths:
 
   /v1/whatsapp/phone-numbers/purchase:
     post:
+      x-resource-group: "telephony"
       operationId: purchaseWhatsAppPhoneNumber
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -29987,6 +30375,7 @@ paths:
 
   /v1/whatsapp/phone-numbers/countries:
     get:
+      x-resource-group: "telephony"
       operationId: listWhatsAppNumberCountries
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -30023,6 +30412,7 @@ paths:
 
   /v1/whatsapp/phone-numbers/available:
     get:
+      x-resource-group: "telephony"
       operationId: searchAvailableWhatsAppNumbers
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -30064,6 +30454,7 @@ paths:
 
   /v1/whatsapp/phone-numbers/availability:
     get:
+      x-resource-group: "telephony"
       operationId: checkWhatsAppNumberAvailability
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -30129,6 +30520,7 @@ paths:
 
   /v1/phone-numbers/kyc:
     get:
+      x-resource-group: "telephony"
       operationId: getPhoneNumberKycForm
       tags: [Phone Numbers]
       summary: Get KYC form spec
@@ -30196,6 +30588,7 @@ paths:
         '400': { description: Country not available }
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "telephony"
       operationId: submitPhoneNumberKyc
       tags: [Phone Numbers]
       summary: Submit KYC
@@ -30301,6 +30694,7 @@ paths:
 
   /v1/phone-numbers/kyc/document/{documentId}:
     get:
+      x-resource-group: "telephony"
       operationId: viewPhoneNumberKycDocument
       tags: [Phone Numbers]
       summary: View a KYC document on file
@@ -30329,6 +30723,7 @@ paths:
 
   /v1/phone-numbers/kyc/upload-document:
     post:
+      x-resource-group: "telephony"
       operationId: uploadPhoneNumberKycDocument
       tags: [Phone Numbers]
       summary: Upload a KYC document
@@ -30362,6 +30757,7 @@ paths:
 
   /v1/phone-numbers/kyc/validate-address:
     post:
+      x-resource-group: "telephony"
       operationId: validatePhoneNumberKycAddress
       tags: [Phone Numbers]
       summary: Pre-validate KYC address
@@ -30431,6 +30827,7 @@ paths:
 
   /v1/phone-numbers/kyc/share:
     post:
+      x-resource-group: "telephony"
       operationId: createPhoneNumberKycLink
       tags: [Phone Numbers]
       summary: Create a hosted KYC link
@@ -30491,6 +30888,7 @@ paths:
 
   /v1/phone-numbers/port-in:
     post:
+      x-resource-group: "telephony"
       operationId: createPhoneNumberPortIn
       tags: [Phone Numbers]
       summary: Port numbers in
@@ -30602,6 +31000,7 @@ paths:
         '409': { description: "A number is already provisioned, or already in an in-flight port" }
         '422': { description: "A number is not portable (reason included), numbers span multiple non-US/CA countries, or every split order failed to submit" }
     get:
+      x-resource-group: "telephony"
       operationId: listPhoneNumberPortIns
       tags: [Phone Numbers]
       summary: List port-in orders
@@ -30638,6 +31037,7 @@ paths:
 
   /v1/phone-numbers/port-in/check:
     post:
+      x-resource-group: "telephony"
       operationId: checkPhoneNumberPortability
       tags: [Phone Numbers]
       summary: Check portability
@@ -30686,6 +31086,7 @@ paths:
 
   /v1/phone-numbers/port-in/documents:
     post:
+      x-resource-group: "telephony"
       operationId: uploadPhoneNumberPortInDocument
       tags: [Phone Numbers]
       summary: Upload a porting document
@@ -30723,6 +31124,7 @@ paths:
 
   /v1/phone-numbers/port-in/requirements:
     get:
+      x-resource-group: "telephony"
       operationId: getPhoneNumberPortInRequirements
       tags: [Phone Numbers]
       summary: Country porting requirements
@@ -30766,6 +31168,7 @@ paths:
 
   /v1/phone-numbers/port-in/{id}/requirements:
     get:
+      x-resource-group: "telephony"
       operationId: getPhoneNumberPortInOrderRequirements
       tags: [Phone Numbers]
       summary: A port-in order's pending requirements
@@ -30807,6 +31210,7 @@ paths:
 
   /v1/phone-numbers/port-in/{id}:
     delete:
+      x-resource-group: "telephony"
       operationId: cancelPhoneNumberPortIn
       tags: [Phone Numbers]
       summary: Cancel a port-in
@@ -30836,6 +31240,7 @@ paths:
 
   /v1/phone-numbers/kyc/review-packet:
     post:
+      x-resource-group: "telephony"
       operationId: reviewPhoneNumberKycPacket
       tags: [Phone Numbers]
       summary: Pre-review a KYC packet
@@ -30890,6 +31295,7 @@ paths:
 
   /v1/phone-numbers/{id}/remediate:
     get:
+      x-resource-group: "telephony"
       operationId: getPhoneNumberRemediation
       tags: [Phone Numbers]
       summary: Get declined requirements
@@ -30919,6 +31325,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Number not found }
     post:
+      x-resource-group: "telephony"
       operationId: remediatePhoneNumber
       tags: [Phone Numbers]
       summary: Resubmit a declined number
@@ -30963,6 +31370,7 @@ paths:
 
   /v1/phone-numbers/{id}/remediate/reply:
     post:
+      x-resource-group: "telephony"
       operationId: replyToPhoneNumberReviewer
       tags: [Phone Numbers]
       summary: Reply to the regulatory reviewer
@@ -31015,6 +31423,7 @@ paths:
 
   /v1/phone-numbers/{id}/remediate/respond:
     post:
+      x-resource-group: "telephony"
       operationId: respondToPhoneNumberReviewer
       tags: [Phone Numbers]
       summary: Respond to the regulatory reviewer (message + corrections)
@@ -31092,6 +31501,7 @@ paths:
 
   /v1/whatsapp/phone-numbers/kyc:
     get:
+      x-resource-group: "telephony"
       operationId: getWhatsAppNumberKycForm
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -31164,6 +31574,7 @@ paths:
         '400': { description: Country not available }
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "telephony"
       operationId: submitWhatsAppNumberKyc
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -31273,6 +31684,7 @@ paths:
 
   /v1/whatsapp/phone-numbers/kyc/upload-document:
     post:
+      x-resource-group: "telephony"
       operationId: uploadWhatsAppNumberKycDocument
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -31310,6 +31722,7 @@ paths:
 
   /v1/whatsapp/phone-numbers/kyc/validate-address:
     post:
+      x-resource-group: "telephony"
       operationId: validateWhatsAppNumberKycAddress
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -31383,6 +31796,7 @@ paths:
 
   /v1/whatsapp/phone-numbers/kyc/share:
     post:
+      x-resource-group: "telephony"
       operationId: createWhatsAppNumberKycLink
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -31447,6 +31861,7 @@ paths:
 
   /v1/whatsapp/phone-numbers/{id}/remediate:
     get:
+      x-resource-group: "telephony"
       operationId: getWhatsAppNumberRemediation
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -31480,6 +31895,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Number not found }
     post:
+      x-resource-group: "telephony"
       operationId: remediateWhatsAppNumber
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -31528,6 +31944,7 @@ paths:
 
   /v1/phone-numbers/{id}/voice:
     post:
+      x-resource-group: "telephony"
       operationId: enableVoiceOnNumber
       tags: [Voice]
       summary: Enable phone calling on a number
@@ -31617,6 +32034,7 @@ paths:
         '404': { description: Number not found }
         '422': { description: "This number is hosted by your own carrier (brought via WhatsApp embedded signup), so calls can't be enabled on it." }
     delete:
+      x-resource-group: "telephony"
       operationId: disableVoiceOnNumber
       tags: [Voice]
       summary: Disable phone calling on a number
@@ -31642,6 +32060,7 @@ paths:
 
   /v1/phone-numbers/{id}/sms:
     post:
+      x-resource-group: "telephony"
       operationId: enableSmsOnNumber
       tags: [SMS]
       summary: Enable SMS on a number
@@ -31698,6 +32117,7 @@ paths:
         '404': { description: Number not found }
         '422': { description: "This number is hosted by your own carrier (brought via WhatsApp embedded signup), so SMS can't be enabled on it." }
     delete:
+      x-resource-group: "telephony"
       operationId: disableSmsOnNumber
       tags: [SMS]
       summary: Disable SMS on a number
@@ -31725,6 +32145,7 @@ paths:
 
   /v1/phone-numbers/{id}/sms/reuse-registration:
     post:
+      x-resource-group: "telephony"
       operationId: reuseSmsRegistrationForNumber
       tags: [SMS]
       summary: Add number to SMS registration
@@ -31754,6 +32175,7 @@ paths:
 
   /v1/phone-numbers/{id}/whatsapp/calling:
     get:
+      x-resource-group: "telephony"
       operationId: getWhatsAppCalling
       tags: [WhatsApp Calling]
       summary: Get calling config for a number
@@ -31799,6 +32221,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Number not found }
     post:
+      x-resource-group: "telephony"
       operationId: enableWhatsAppCalling
       tags: [WhatsApp Calling]
       summary: Enable calling on a number
@@ -31850,6 +32273,7 @@ paths:
         '404': { description: Phone number not found }
         '422': { description: "Not eligible to enable calling: not on usage-based billing, or the number's messaging limit is below Meta's ~2,000-daily-recipient threshold (TIER_250). Warm the number up to raise the limit." }
     patch:
+      x-resource-group: "telephony"
       operationId: updateWhatsAppCalling
       tags: [WhatsApp Calling]
       summary: Update calling config
@@ -31888,6 +32312,7 @@ paths:
         '404': { description: Phone number not found }
         '422': { description: Calling must be enabled before settings can be updated }
     delete:
+      x-resource-group: "telephony"
       operationId: disableWhatsAppCalling
       tags: [WhatsApp Calling]
       summary: Disable calling on a number
@@ -31908,6 +32333,7 @@ paths:
 
   /v1/phone-numbers/{id}/whatsapp/caller-id-verification:
     post:
+      x-resource-group: "telephony"
       operationId: startWhatsAppCallerIdVerification
       tags: [WhatsApp Calling]
       summary: Start caller-ID verification for a customer-brought number
@@ -31948,6 +32374,7 @@ paths:
 
   /v1/phone-numbers/{id}/whatsapp/caller-id-verification/verify:
     post:
+      x-resource-group: "telephony"
       operationId: verifyWhatsAppCallerId
       tags: [WhatsApp Calling]
       summary: Confirm the caller-ID verification code
@@ -31984,6 +32411,7 @@ paths:
 
   /v1/whatsapp/phone-numbers/{phoneNumberId}:
     get:
+      x-resource-group: "telephony"
       operationId: getWhatsAppPhoneNumber
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -32033,6 +32461,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     delete:
+      x-resource-group: "telephony"
       operationId: releaseWhatsAppPhoneNumber
       deprecated: true
       tags: [WhatsApp Phone Numbers]
@@ -32091,6 +32520,7 @@ paths:
 
   /v1/whatsapp/sandbox/sessions:
     get:
+      x-resource-group: "messages"
       operationId: listWhatsAppSandboxSessions
       tags: [WhatsApp Sandbox]
       summary: List your sandbox sessions
@@ -32119,6 +32549,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '403': { description: Inbox addon required }
     post:
+      x-resource-group: "messages"
       operationId: createWhatsAppSandboxSession
       tags: [WhatsApp Sandbox]
       summary: Start a sandbox activation
@@ -32172,6 +32603,7 @@ paths:
 
   /v1/whatsapp/sandbox/sessions/{sessionId}:
     delete:
+      x-resource-group: "messages"
       operationId: deleteWhatsAppSandboxSession
       tags: [WhatsApp Sandbox]
       summary: Revoke a sandbox session
@@ -32208,6 +32640,7 @@ paths:
 
   /v1/whatsapp/wa-groups:
     get:
+      x-resource-group: "messages"
       operationId: listWhatsAppGroupChats
       tags: [WhatsApp]
       summary: List active groups
@@ -32249,6 +32682,7 @@ paths:
         '400': { $ref: '#/components/responses/BadRequest' }
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "messages"
       operationId: createWhatsAppGroupChat
       tags: [WhatsApp]
       summary: Create group
@@ -32292,6 +32726,7 @@ paths:
 
   /v1/whatsapp/wa-groups/{groupId}:
     get:
+      x-resource-group: "messages"
       operationId: getWhatsAppGroupChat
       tags: [WhatsApp]
       summary: Get group info
@@ -32335,6 +32770,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     post:
+      x-resource-group: "messages"
       operationId: updateWhatsAppGroupChat
       tags: [WhatsApp]
       summary: Update group settings
@@ -32371,6 +32807,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     delete:
+      x-resource-group: "messages"
       operationId: deleteWhatsAppGroupChat
       tags: [WhatsApp]
       summary: Delete group
@@ -32399,6 +32836,7 @@ paths:
 
   /v1/whatsapp/wa-groups/{groupId}/participants:
     post:
+      x-resource-group: "messages"
       operationId: addWhatsAppGroupParticipants
       tags: [WhatsApp]
       summary: Add participants
@@ -32437,6 +32875,7 @@ paths:
         '400': { $ref: '#/components/responses/BadRequest' }
         '401': { $ref: '#/components/responses/Unauthorized' }
     delete:
+      x-resource-group: "messages"
       operationId: removeWhatsAppGroupParticipants
       tags: [WhatsApp]
       summary: Remove participants
@@ -32476,6 +32915,7 @@ paths:
 
   /v1/whatsapp/wa-groups/{groupId}/invite-link:
     post:
+      x-resource-group: "messages"
       operationId: createWhatsAppGroupInviteLink
       tags: [WhatsApp]
       summary: Create invite link
@@ -32503,6 +32943,7 @@ paths:
 
   /v1/whatsapp/wa-groups/{groupId}/join-requests:
     get:
+      x-resource-group: "messages"
       operationId: listWhatsAppGroupJoinRequests
       tags: [WhatsApp]
       summary: List join requests
@@ -32534,6 +32975,7 @@ paths:
         '400': { $ref: '#/components/responses/BadRequest' }
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "messages"
       operationId: approveWhatsAppGroupJoinRequests
       tags: [WhatsApp]
       summary: Approve join requests
@@ -32571,6 +33013,7 @@ paths:
         '400': { $ref: '#/components/responses/BadRequest' }
         '401': { $ref: '#/components/responses/Unauthorized' }
     delete:
+      x-resource-group: "messages"
       operationId: rejectWhatsAppGroupJoinRequests
       tags: [WhatsApp]
       summary: Reject join requests
@@ -32612,6 +33055,7 @@ paths:
 
   /v1/whatsapp/flows:
     get:
+      x-resource-group: "accounts"
       operationId: listWhatsAppFlows
       tags: [WhatsApp Flows]
       summary: List flows
@@ -32654,6 +33098,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: WhatsApp account not found }
     post:
+      x-resource-group: "accounts"
       operationId: createWhatsAppFlow
       tags: [WhatsApp Flows]
       summary: Create flow
@@ -32714,6 +33159,7 @@ paths:
 
   /v1/whatsapp/flows/{flowId}:
     get:
+      x-resource-group: "accounts"
       operationId: getWhatsAppFlow
       tags: [WhatsApp Flows]
       summary: Get flow
@@ -32755,6 +33201,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: Flow or account not found }
     patch:
+      x-resource-group: "accounts"
       operationId: updateWhatsAppFlow
       tags: [WhatsApp Flows]
       summary: Update flow
@@ -32793,6 +33240,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: WhatsApp account or flow not found }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteWhatsAppFlow
       tags: [WhatsApp Flows]
       summary: Delete flow
@@ -32818,6 +33266,7 @@ paths:
 
   /v1/whatsapp/flows/{flowId}/json:
     get:
+      x-resource-group: "accounts"
       operationId: getWhatsAppFlowJson
       tags: [WhatsApp Flows]
       summary: Get flow JSON asset
@@ -32848,6 +33297,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: WhatsApp account not found }
     put:
+      x-resource-group: "accounts"
       operationId: uploadWhatsAppFlowJson
       tags: [WhatsApp Flows]
       summary: Upload flow JSON
@@ -32935,6 +33385,7 @@ paths:
 
   /v1/whatsapp/flows/{flowId}/preview:
     get:
+      x-resource-group: "accounts"
       operationId: getWhatsAppFlowPreview
       tags: [WhatsApp Flows]
       summary: Get flow preview URL
@@ -32963,6 +33414,7 @@ paths:
 
   /v1/whatsapp/flows/{flowId}/versions:
     get:
+      x-resource-group: "accounts"
       operationId: listWhatsAppFlowVersions
       tags: [WhatsApp Flows]
       summary: List flow versions
@@ -32999,6 +33451,7 @@ paths:
 
   /v1/whatsapp/flows/{flowId}/publish:
     post:
+      x-resource-group: "accounts"
       operationId: publishWhatsAppFlow
       tags: [WhatsApp Flows]
       summary: Publish flow
@@ -33034,6 +33487,7 @@ paths:
 
   /v1/whatsapp/flows/{flowId}/deprecate:
     post:
+      x-resource-group: "accounts"
       operationId: deprecateWhatsAppFlow
       tags: [WhatsApp Flows]
       summary: Deprecate flow
@@ -33068,6 +33522,7 @@ paths:
 
   /v1/whatsapp/flows/send:
     post:
+      x-resource-group: "messages"
       operationId: sendWhatsAppFlowMessage
       tags: [WhatsApp Flows]
       summary: Send flow message
@@ -33138,6 +33593,7 @@ paths:
 
   /v1/whatsapp/flow-responses:
     get:
+      x-resource-group: "messages"
       operationId: listWhatsAppFlowResponses
       tags: [WhatsApp Flows]
       summary: List flow responses
@@ -33181,6 +33637,7 @@ paths:
 
   /v1/contacts:
     get:
+      x-resource-group: "contacts"
       operationId: listContacts
       summary: List contacts
       description: List and search contacts for a profile. Supports filtering by tags, platform, subscription status, and full-text search.
@@ -33241,6 +33698,7 @@ paths:
         '400': { description: Invalid request }
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "contacts"
       operationId: createContact
       summary: Create contact
       description: Create a new contact. Optionally create a platform channel in the same request by providing accountId, platform, and platformIdentifier.
@@ -33301,6 +33759,7 @@ paths:
 
   /v1/contacts/{contactId}:
     get:
+      x-resource-group: "contacts"
       operationId: getContact
       summary: Get contact
       description: Returns a contact with all associated messaging channels.
@@ -33354,6 +33813,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     patch:
+      x-resource-group: "contacts"
       operationId: updateContact
       summary: Update contact
       description: Update one or more fields on a contact. Only provided fields are changed.
@@ -33400,6 +33860,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     delete:
+      x-resource-group: "contacts"
       operationId: deleteContact
       summary: Delete contact
       description: Permanently deletes a contact and all associated channels.
@@ -33414,6 +33875,7 @@ paths:
 
   /v1/contacts/{contactId}/channels:
     get:
+      x-resource-group: "contacts"
       operationId: getContactChannels
       summary: List channels for a contact
       description: Returns all messaging channels linked to a contact (e.g. Instagram DM, Telegram, WhatsApp).
@@ -33449,6 +33911,7 @@ paths:
 
   /v1/contacts/bulk:
     post:
+      x-resource-group: "contacts"
       operationId: bulkCreateContacts
       summary: Bulk create contacts
       description: 'Import up to 1000 contacts at a time. Skips duplicates, merging any new tags onto the existing contact. accountId is required whenever contacts carry a platformIdentifier (or a row-level accountId); platform is always derived from the resolved account, never used to decide whether channels are created, and a mismatched platform 404s as account not found. When accountId is set, each contact must carry a platformIdentifier; a row missing it is rejected individually (reported in errors[], HTTP 200), not a 400 for the whole import. On phone platforms (whatsapp, sms) the platformIdentifier is normalized to digits and a value that is not phone-shaped is rejected per contact and reported in errors[], not imported.'
@@ -33495,6 +33958,7 @@ paths:
 
   /v1/contacts/{contactId}/fields/{slug}:
     put:
+      x-resource-group: "contacts"
       operationId: setContactFieldValue
       summary: Set custom field value
       description: Set or overwrite a custom field value on a contact. The value type must match the field definition.
@@ -33516,6 +33980,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     delete:
+      x-resource-group: "contacts"
       operationId: clearContactFieldValue
       summary: Clear custom field value
       description: Remove a custom field value from a contact. The field definition is not affected.
@@ -33532,6 +33997,7 @@ paths:
 
   /v1/custom-fields:
     get:
+      x-resource-group: "accounts"
       operationId: listCustomFields
       summary: List custom field definitions
       description: Returns all custom field definitions. Optionally filter by profile.
@@ -33561,6 +34027,7 @@ paths:
         '400': { description: Invalid profileId format }
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "accounts"
       operationId: createCustomField
       summary: Create custom field
       description: Create a new custom field definition. Supported types are text, number, date, boolean, and select.
@@ -33602,6 +34069,7 @@ paths:
 
   /v1/custom-fields/{fieldId}:
     patch:
+      x-resource-group: "accounts"
       operationId: updateCustomField
       summary: Update custom field
       description: Update a custom field definition. The field type cannot be changed after creation.
@@ -33638,6 +34106,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteCustomField
       summary: Delete custom field
       description: Delete a custom field definition and remove its values from all contacts.
@@ -33654,6 +34123,7 @@ paths:
 
   /v1/broadcasts:
     get:
+      x-resource-group: "messages"
       operationId: listBroadcasts
       summary: List broadcasts
       description: Returns broadcasts with delivery stats. Filter by status, platform, or profile.
@@ -33705,6 +34175,7 @@ paths:
         '400': { description: Invalid request }
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "messages"
       operationId: createBroadcast
       summary: Create broadcast draft
       description: Create a broadcast in draft status. Add recipients and then send or schedule it.
@@ -33771,6 +34242,7 @@ paths:
 
   /v1/broadcasts/{broadcastId}:
     get:
+      x-resource-group: "messages"
       operationId: getBroadcast
       summary: Get broadcast details
       description: Returns a broadcast with its full configuration and delivery stats.
@@ -33811,6 +34283,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     patch:
+      x-resource-group: "messages"
       operationId: updateBroadcast
       summary: Update broadcast
       description: Update a broadcast's name, message, template, or segment filters. Only draft broadcasts can be updated.
@@ -33867,6 +34340,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     delete:
+      x-resource-group: "messages"
       operationId: deleteBroadcast
       summary: Delete broadcast
       description: Permanently delete a broadcast. Only drafts can be deleted.
@@ -33880,6 +34354,7 @@ paths:
 
   /v1/broadcasts/{broadcastId}/send:
     post:
+      x-resource-group: "messages"
       operationId: sendBroadcast
       summary: Send broadcast now
       description: Immediately start sending a draft broadcast to its recipients.
@@ -33905,6 +34380,7 @@ paths:
 
   /v1/broadcasts/{broadcastId}/schedule:
     post:
+      x-resource-group: "messages"
       operationId: scheduleBroadcast
       summary: Schedule broadcast for later
       description: Schedule a draft broadcast to be sent at a future date and time.
@@ -33941,6 +34417,7 @@ paths:
 
   /v1/broadcasts/{broadcastId}/cancel:
     post:
+      x-resource-group: "messages"
       operationId: cancelBroadcast
       summary: Cancel broadcast
       description: Cancel a scheduled or in-progress broadcast. Already-sent messages are not affected.
@@ -33967,6 +34444,7 @@ paths:
 
   /v1/broadcasts/{broadcastId}/recipients:
     get:
+      x-resource-group: "messages"
       operationId: listBroadcastRecipients
       summary: List broadcast recipients
       description: Returns recipients for a broadcast with individual delivery status. Filter by status.
@@ -34014,6 +34492,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     post:
+      x-resource-group: "messages"
       operationId: addBroadcastRecipients
       summary: Add recipients to a broadcast
       description: Add recipients by contact IDs, raw phone numbers, or from the broadcast's segment filters.
@@ -34049,6 +34528,7 @@ paths:
 
   /v1/workflows:
     get:
+      x-resource-group: "accounts"
       operationId: listWorkflows
       summary: List workflows
       description: Returns workflows with run stats. Filter by status or profile.
@@ -34093,6 +34573,7 @@ paths:
                       hasMore: { type: boolean }
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "accounts"
       operationId: createWorkflow
       summary: Create workflow
       description: >
@@ -34141,6 +34622,7 @@ paths:
 
   /v1/workflows/{workflowId}:
     get:
+      x-resource-group: "accounts"
       operationId: getWorkflow
       summary: Get workflow with graph
       description: Returns a workflow including its full node/edge graph and run stats.
@@ -34177,6 +34659,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     patch:
+      x-resource-group: "accounts"
       operationId: updateWorkflow
       summary: Update workflow
       description: >
@@ -34230,6 +34713,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     delete:
+      x-resource-group: "accounts"
       operationId: deleteWorkflow
       summary: Delete workflow
       description: Permanently delete a workflow and all of its executions.
@@ -34243,6 +34727,7 @@ paths:
 
   /v1/workflows/{workflowId}/activate:
     post:
+      x-resource-group: "accounts"
       operationId: activateWorkflow
       summary: Activate workflow
       description: Validate the graph is runnable and set the workflow live. Once active, matching inbound messages start executions. Idempotent.
@@ -34270,6 +34755,7 @@ paths:
 
   /v1/workflows/{workflowId}/pause:
     post:
+      x-resource-group: "accounts"
       operationId: pauseWorkflow
       summary: Pause workflow
       description: Stop matching new inbound messages. In-flight executions continue to completion. Idempotent.
@@ -34296,6 +34782,7 @@ paths:
 
   /v1/workflows/{workflowId}/executions:
     get:
+      x-resource-group: "messages"
       operationId: listWorkflowExecutions
       summary: List workflow runs
       description: Returns recent executions (runs) with their status, current node, and accumulated variables.
@@ -34347,6 +34834,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     post:
+      x-resource-group: "messages"
       operationId: triggerWorkflow
       summary: Manually start a workflow run
       description: >
@@ -34391,6 +34879,7 @@ paths:
 
   /v1/workflows/{workflowId}/executions/{executionId}/events:
     get:
+      x-resource-group: "messages"
       operationId: listWorkflowExecutionEvents
       summary: Get an execution's timeline
       description: >
@@ -34427,6 +34916,7 @@ paths:
 
   /v1/workflows/{workflowId}/duplicate:
     post:
+      x-resource-group: "accounts"
       operationId: duplicateWorkflow
       summary: Duplicate a workflow
       description: >
@@ -34465,6 +34955,7 @@ paths:
 
   /v1/workflows/{workflowId}/versions:
     get:
+      x-resource-group: "accounts"
       operationId: listWorkflowVersions
       summary: List a workflow's version history
       description: >
@@ -34502,6 +34993,7 @@ paths:
 
   /v1/workflows/{workflowId}/versions/{version}:
     get:
+      x-resource-group: "accounts"
       operationId: getWorkflowVersion
       summary: Get a specific workflow version
       description: Returns the full snapshot for a single historical version, including the graph.
@@ -34540,6 +35032,7 @@ paths:
 
   /v1/workflows/{workflowId}/versions/{version}/restore:
     post:
+      x-resource-group: "accounts"
       operationId: restoreWorkflowVersion
       summary: Restore a workflow version
       description: >
@@ -34577,6 +35070,7 @@ paths:
 
   /v1/sequences:
     get:
+      x-resource-group: "messages"
       operationId: listSequences
       summary: List sequences
       description: Returns sequences with enrollment stats. Filter by status, platform, or profile.
@@ -34625,6 +35119,7 @@ paths:
         '400': { description: Invalid request }
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "messages"
       operationId: createSequence
       summary: Create sequence
       description: Create a multi-step messaging sequence. Each step has a delay and a message or WhatsApp template.
@@ -34690,6 +35185,7 @@ paths:
 
   /v1/sequences/{sequenceId}:
     get:
+      x-resource-group: "messages"
       operationId: getSequence
       summary: Get sequence with steps
       description: Returns a sequence with all its steps and enrollment stats.
@@ -34734,6 +35230,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     patch:
+      x-resource-group: "messages"
       operationId: updateSequence
       summary: Update sequence
       description: Update a sequence's name, steps, or exit conditions. Steps can only be modified while the sequence is draft or paused.
@@ -34799,6 +35296,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     delete:
+      x-resource-group: "messages"
       operationId: deleteSequence
       summary: Delete sequence
       description: Permanently delete a sequence. Active enrollments are stopped.
@@ -34813,6 +35311,7 @@ paths:
 
   /v1/sequences/{sequenceId}/activate:
     post:
+      x-resource-group: "messages"
       operationId: activateSequence
       summary: Activate sequence
       description: Start a draft or paused sequence. The sequence must have at least one step.
@@ -34839,6 +35338,7 @@ paths:
 
   /v1/sequences/{sequenceId}/pause:
     post:
+      x-resource-group: "messages"
       operationId: pauseSequence
       summary: Pause sequence
       description: Pause an active sequence. Enrolled contacts stop receiving messages until the sequence is reactivated.
@@ -34865,6 +35365,7 @@ paths:
 
   /v1/sequences/{sequenceId}/enroll:
     post:
+      x-resource-group: "messages"
       operationId: enrollContacts
       summary: Enroll contacts in a sequence
       description: Enroll one or more contacts into a sequence. Contacts already enrolled are skipped.
@@ -34907,6 +35408,7 @@ paths:
 
   /v1/sequences/{sequenceId}/enroll/{contactId}:
     delete:
+      x-resource-group: "messages"
       operationId: unenrollContact
       summary: Unenroll contact
       description: Remove a contact from a sequence. No further messages will be sent to this contact.
@@ -34922,6 +35424,7 @@ paths:
 
   /v1/sequences/{sequenceId}/enrollments:
     get:
+      x-resource-group: "messages"
       operationId: listSequenceEnrollments
       summary: List enrollments for a sequence
       description: Returns enrolled contacts with their progress, status, and next scheduled step.
@@ -34974,6 +35477,7 @@ paths:
 
   /v1/comment-automations:
     get:
+      x-resource-group: "messages"
       operationId: listCommentAutomations
       tags: [Comment Automations]
       summary: List comment-to-DM automations
@@ -35032,6 +35536,7 @@ paths:
         '400': { description: Invalid request }
         '401': { $ref: '#/components/responses/Unauthorized' }
     post:
+      x-resource-group: "messages"
       operationId: createCommentAutomation
       tags: [Comment Automations]
       summary: Create comment-to-DM automation
@@ -35136,6 +35641,7 @@ paths:
 
   /v1/comment-automations/{automationId}:
     get:
+      x-resource-group: "messages"
       operationId: getCommentAutomation
       tags: [Comment Automations]
       summary: Get automation details
@@ -35198,6 +35704,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     patch:
+      x-resource-group: "messages"
       operationId: updateCommentAutomation
       tags: [Comment Automations]
       summary: Update automation settings
@@ -35267,6 +35774,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     delete:
+      x-resource-group: "messages"
       operationId: deleteCommentAutomation
       tags: [Comment Automations]
       summary: Delete automation
@@ -35282,6 +35790,7 @@ paths:
 
   /v1/comment-automations/{automationId}/logs:
     get:
+      x-resource-group: "messages"
       operationId: listCommentAutomationLogs
       tags: [Comment Automations]
       summary: List automation logs
@@ -35331,6 +35840,7 @@ paths:
 
   /v1/ads:
     get:
+      x-resource-group: "ads"
       operationId: listAds
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -35387,6 +35897,7 @@ paths:
 
   /v1/ads/keywords:
     get:
+      x-resource-group: "ads"
       operationId: listAdKeywords
       tags: ["Ad Campaigns"]
       x-platforms: ["google"]
@@ -35453,6 +35964,7 @@ paths:
 
   /v1/ads/campaigns:
     get:
+      x-resource-group: "ads"
       operationId: listAdCampaigns
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -35505,6 +36017,7 @@ paths:
           description: Ads access required. Legacy plans need the Ads add-on; included by default on usage-based plans.
 
     post:
+      x-resource-group: "ads"
       operationId: createAdCampaign
       tags: ["Ad Campaigns"]
       x-platforms: ["meta"]
@@ -35575,6 +36088,7 @@ paths:
 
   /v1/ads/campaigns/{campaignId}/status:
     put:
+      x-resource-group: "ads"
       operationId: updateAdCampaignStatus
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -35616,6 +36130,7 @@ paths:
 
   /v1/ads/campaigns/{campaignId}:
     put:
+      x-resource-group: "ads"
       operationId: updateAdCampaign
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -35690,6 +36205,7 @@ paths:
         '501': { description: Operation not supported on this platform }
 
     delete:
+      x-resource-group: "ads"
       operationId: deleteAdCampaign
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -35739,6 +36255,7 @@ paths:
 
   /v1/ads/campaigns/bulk-status:
     post:
+      x-resource-group: "ads"
       operationId: bulkUpdateAdCampaignStatus
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -35797,6 +36314,7 @@ paths:
 
   /v1/ads/campaigns/{campaignId}/duplicate:
     post:
+      x-resource-group: "ads"
       operationId: duplicateAdCampaign
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "tiktok", "linkedin"]
@@ -35893,6 +36411,7 @@ paths:
 
   /v1/ads/ad-sets/{adSetId}/duplicate:
     post:
+      x-resource-group: "ads"
       operationId: duplicateAdSet
       tags: ["Ad Campaigns"]
       x-platforms: ["meta"]
@@ -35953,6 +36472,7 @@ paths:
 
   /v1/ads/{adId}/duplicate:
     post:
+      x-resource-group: "ads"
       operationId: duplicateAd
       tags: ["Ad Campaigns"]
       x-platforms: ["meta"]
@@ -36007,6 +36527,7 @@ paths:
 
   /v1/ads/ad-sets/{adSetId}:
     get:
+      x-resource-group: "ads"
       operationId: getAdSetDetails
       tags: ["Ad Campaigns"]
       x-platforms: ["meta"]
@@ -36036,6 +36557,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '501': { description: Only supported on Meta (facebook/instagram) }
     put:
+      x-resource-group: "ads"
       operationId: updateAdSet
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "tiktok", "openai"]
@@ -36184,6 +36706,7 @@ paths:
 
   /v1/ads/ad-sets/{adSetId}/status:
     put:
+      x-resource-group: "ads"
       operationId: updateAdSetStatus
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "tiktok"]
@@ -36223,6 +36746,7 @@ paths:
 
   /v1/ads/tree:
     get:
+      x-resource-group: "ads"
       operationId: getAdTree
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -36286,6 +36810,7 @@ paths:
 
   /v1/ads/timeline:
     get:
+      x-resource-group: "ads"
       operationId: getAdsTimeline
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -36358,6 +36883,7 @@ paths:
 
   /v1/ads/{adId}:
     get:
+      x-resource-group: "ads"
       operationId: getAd
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -36393,6 +36919,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { $ref: '#/components/responses/NotFound' }
     put:
+      x-resource-group: "ads"
       operationId: updateAd
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -36478,6 +37005,7 @@ paths:
         '404': { $ref: '#/components/responses/NotFound' }
         '501': { description: "targeting or creative not supported on the platform (Meta + TikTok only)" }
     delete:
+      x-resource-group: "ads"
       operationId: deleteAd
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -36501,6 +37029,7 @@ paths:
 
   /v1/ads/{adId}/status:
     put:
+      x-resource-group: "ads"
       operationId: updateAdStatus
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -36546,6 +37075,7 @@ paths:
 
   /v1/ads/campaigns/{campaignId}/analytics:
     get:
+      x-resource-group: "ads"
       operationId: getCampaignAnalytics
       tags: ["Ad Insights"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -36630,6 +37160,7 @@ paths:
 
   /v1/ads/preview:
     post:
+      x-resource-group: "ads"
       operationId: generateAdPreviews
       tags: ["Ad Creatives"]
       x-platforms: ["meta"]
@@ -36684,6 +37215,7 @@ paths:
 
   /v1/ads/{adId}/preview:
     get:
+      x-resource-group: "ads"
       operationId: getAdPreviews
       tags: ["Ad Creatives"]
       x-platforms: ["meta"]
@@ -36720,6 +37252,7 @@ paths:
 
   /v1/ads/keywords/ideas:
     post:
+      x-resource-group: "ads"
       operationId: generateKeywordIdeas
       tags: ["Ad Insights"]
       x-platforms: ["google"]
@@ -36773,6 +37306,7 @@ paths:
 
   /v1/ads/keywords/historical-metrics:
     post:
+      x-resource-group: "ads"
       operationId: generateKeywordHistoricalMetrics
       tags: ["Ad Insights"]
       x-platforms: ["google"]
@@ -36820,6 +37354,7 @@ paths:
 
   /v1/ads/insights:
     get:
+      x-resource-group: "ads"
       operationId: queryAdInsights
       tags: ["Ad Insights"]
       x-platforms: ["meta", "google"]
@@ -36888,6 +37423,7 @@ paths:
 
   /v1/ads/insights/reports:
     post:
+      x-resource-group: "ads"
       operationId: createAdInsightsReport
       tags: ["Ad Insights"]
       x-platforms: ["meta"]
@@ -36951,6 +37487,7 @@ paths:
 
   /v1/ads/insights/reports/{reportRunId}:
     get:
+      x-resource-group: "ads"
       operationId: getAdInsightsReport
       tags: ["Ad Insights"]
       x-platforms: ["meta"]
@@ -36994,6 +37531,7 @@ paths:
 
   /v1/ads/{adId}/analytics:
     get:
+      x-resource-group: "ads"
       operationId: getAdAnalytics
       tags: ["Ad Insights"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -37075,6 +37613,7 @@ paths:
 
   /v1/ads/{adId}/tracking-tags:
     get:
+      x-resource-group: "ads"
       operationId: getAdTrackingTags
       tags: ["Tracking Tags"]
       x-platforms: ["meta"]
@@ -37115,6 +37654,7 @@ paths:
         '404': { description: "Ad not found" }
         '405': { description: "Platform has no click-URL tracking surface" }
     patch:
+      x-resource-group: "ads"
       operationId: updateAdTrackingTags
       tags: ["Tracking Tags"]
       x-platforms: ["meta"]
@@ -37173,6 +37713,7 @@ paths:
         '422': { description: "Meta creative cannot be rebuilt (e.g. placement-customized/asset-feed/dark creative)" }
   /v1/ads/{adId}/comments:
     get:
+      x-resource-group: "engagement"
       operationId: getAdComments
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -37272,6 +37813,7 @@ paths:
 
   /v1/ads/business-centers:
     get:
+      x-resource-group: "ads"
       operationId: listAdsBusinessCenters
       tags: ["Ad Accounts"]
       x-platforms: ["tiktok"]
@@ -37304,6 +37846,7 @@ paths:
 
   /v1/ads/activity:
     get:
+      x-resource-group: "ads"
       operationId: getAdsActivityLog
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -37346,6 +37889,7 @@ paths:
 
   /v1/ads/rf-predictions:
     post:
+      x-resource-group: "ads"
       operationId: createRfPrediction
       tags: ["Reach and Frequency"]
       x-platforms: ["meta"]
@@ -37399,6 +37943,7 @@ paths:
 
   /v1/ads/rf-predictions/{predictionId}:
     get:
+      x-resource-group: "ads"
       operationId: getRfPrediction
       tags: ["Reach and Frequency"]
       x-platforms: ["meta"]
@@ -37424,6 +37969,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '501': { description: Only supported on Meta (facebook/instagram) }
     delete:
+      x-resource-group: "ads"
       operationId: cancelRfReservation
       tags: ["Reach and Frequency"]
       x-platforms: ["meta"]
@@ -37444,6 +37990,7 @@ paths:
 
   /v1/ads/rf-predictions/{predictionId}/reserve:
     post:
+      x-resource-group: "ads"
       operationId: reserveRfPrediction
       tags: ["Reach and Frequency"]
       x-platforms: ["meta"]
@@ -37482,6 +38029,7 @@ paths:
 
   /v1/ads/studies:
     get:
+      x-resource-group: "ads"
       operationId: listAdStudies
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -37520,6 +38068,7 @@ paths:
 
   /v1/ads/businesses:
     get:
+      x-resource-group: "ads"
       operationId: listMetaBusinesses
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -37556,6 +38105,7 @@ paths:
 
   /v1/ads/labels:
     get:
+      x-resource-group: "ads"
       operationId: listAdLabels
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -37592,6 +38142,7 @@ paths:
 
   /v1/ads/high-demand-periods:
     get:
+      x-resource-group: "ads"
       operationId: listHighDemandPeriods
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -37631,6 +38182,7 @@ paths:
 
   /v1/ads/creatives:
     get:
+      x-resource-group: "ads"
       operationId: listAdCreatives
       tags: ["Ad Creatives"]
       x-platforms: ["meta"]
@@ -37669,6 +38221,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '501': { description: Only supported on Meta (facebook/instagram) }
     post:
+      x-resource-group: "ads"
       operationId: createAdCreative
       tags: ["Ad Creatives"]
       x-platforms: ["meta"]
@@ -37733,6 +38286,7 @@ paths:
 
   /v1/ads/creatives/{creativeId}:
     get:
+      x-resource-group: "ads"
       operationId: getAdCreative
       tags: ["Ad Creatives"]
       x-platforms: ["meta"]
@@ -37759,6 +38313,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '501': { description: Only supported on Meta (facebook/instagram) }
     put:
+      x-resource-group: "ads"
       operationId: updateAdCreative
       tags: ["Ad Creatives"]
       x-platforms: ["meta"]
@@ -37796,6 +38351,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '501': { description: Only supported on Meta (facebook/instagram) }
     delete:
+      x-resource-group: "ads"
       operationId: deleteAdCreative
       tags: ["Ad Creatives"]
       x-platforms: ["meta"]
@@ -37824,6 +38380,7 @@ paths:
 
   /v1/ads/value-rule-sets:
     get:
+      x-resource-group: "ads"
       operationId: listValueRuleSets
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -37874,6 +38431,7 @@ paths:
         '501': { description: Only supported on Meta (facebook/instagram) }
 
     post:
+      x-resource-group: "ads"
       operationId: createValueRuleSet
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -37944,6 +38502,7 @@ paths:
 
   /v1/ads/value-rule-sets/{valueRuleSetId}:
     get:
+      x-resource-group: "ads"
       operationId: getValueRuleSet
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -37975,6 +38534,7 @@ paths:
         '501': { description: Only supported on Meta (facebook/instagram) }
 
     put:
+      x-resource-group: "ads"
       operationId: updateValueRuleSet
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -38035,6 +38595,7 @@ paths:
         '501': { description: Only supported on Meta (facebook/instagram) }
 
     delete:
+      x-resource-group: "ads"
       operationId: deleteValueRuleSet
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -38065,6 +38626,7 @@ paths:
 
   /v1/ads/accounts/finance:
     get:
+      x-resource-group: "ads"
       operationId: getAdAccountFinance
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -38102,6 +38664,7 @@ paths:
 
   /v1/ads/accounts:
     get:
+      x-resource-group: "ads"
       operationId: listAdAccounts
       tags: ["Ad Accounts"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -38176,6 +38739,7 @@ paths:
           description: Platform ads connection required (TikTok Ads, X Ads) or Instagram missing linked Facebook account
         '429': { $ref: '#/components/responses/RateLimited' }
     patch:
+      x-resource-group: "ads"
       operationId: updateAdAccount
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -38233,6 +38797,7 @@ paths:
 
   /v1/ads/dsa-defaults:
     get:
+      x-resource-group: "ads"
       operationId: getDsaDefaults
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -38268,6 +38833,7 @@ paths:
 
   /v1/ads/dsa-recommendations:
     get:
+      x-resource-group: "ads"
       operationId: getDsaRecommendations
       tags: ["Ad Accounts"]
       x-platforms: ["meta"]
@@ -38306,6 +38872,7 @@ paths:
 
   /v1/ads/boost:
     post:
+      x-resource-group: "ads"
       operationId: boostPost
       tags: ["Ad Campaigns"]
       x-platforms: ["meta"]
@@ -38561,6 +39128,7 @@ paths:
 
   /v1/ads/create:
     post:
+      x-resource-group: "ads"
       operationId: createStandaloneAd
       tags: ["Ad Campaigns"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -39444,6 +40012,7 @@ paths:
 
   /v1/ads/leads:
     get:
+      x-resource-group: "contacts"
       operationId: listLeads
       tags: ["Lead Gen"]
       x-platforms: ["meta", "linkedin"]
@@ -39502,6 +40071,7 @@ paths:
 
   /v1/ads/lead-forms:
     get:
+      x-resource-group: "ads"
       operationId: listLeadForms
       tags: ["Lead Gen"]
       x-platforms: ["meta", "linkedin"]
@@ -39531,6 +40101,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '403': { description: Ads add-on required. }
     post:
+      x-resource-group: "ads"
       operationId: createLeadForm
       tags: ["Lead Gen"]
       x-platforms: ["meta", "linkedin"]
@@ -39687,6 +40258,7 @@ paths:
 
   /v1/ads/lead-forms/{formId}:
     get:
+      x-resource-group: "ads"
       operationId: getLeadForm
       tags: ["Lead Gen"]
       x-platforms: ["meta", "linkedin"]
@@ -39703,6 +40275,7 @@ paths:
         '400': { $ref: '#/components/responses/BadRequest' }
         '401': { $ref: '#/components/responses/Unauthorized' }
     delete:
+      x-resource-group: "ads"
       operationId: archiveLeadForm
       tags: ["Lead Gen"]
       x-platforms: ["meta", "linkedin"]
@@ -39722,6 +40295,7 @@ paths:
 
   /v1/ads/lead-forms/{formId}/leads:
     get:
+      x-resource-group: "contacts"
       operationId: listFormLeads
       tags: ["Lead Gen"]
       x-platforms: ["meta"]
@@ -39761,6 +40335,7 @@ paths:
 
   /v1/ads/lead-forms/{formId}/test-leads:
     post:
+      x-resource-group: "contacts"
       operationId: createTestLead
       tags: ["Lead Gen"]
       x-platforms: ["meta"]
@@ -39800,6 +40375,7 @@ paths:
 
   /v1/ads/images:
     post:
+      x-resource-group: "ads"
       operationId: uploadAdImage
       tags: ["Ad Creatives"]
       x-platforms: ["meta"]
@@ -39842,6 +40418,7 @@ paths:
         '501': { description: Only supported on Meta (facebook/instagram) }
 
     get:
+      x-resource-group: "ads"
       operationId: listAdImages
       tags: ["Ad Creatives"]
       x-platforms: ["meta"]
@@ -39881,6 +40458,7 @@ paths:
 
   /v1/ads/interests:
     get:
+      x-resource-group: "ads"
       operationId: searchAdInterests
       deprecated: true
       tags: ["Ad Targeting"]
@@ -39918,6 +40496,7 @@ paths:
 
   /v1/ads/targeting/search:
     get:
+      x-resource-group: "ads"
       operationId: searchAdTargeting
       tags: ["Ad Targeting"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest"]
@@ -39980,6 +40559,7 @@ paths:
 
   /v1/ads/targeting/reach-estimate:
     post:
+      x-resource-group: "ads"
       operationId: estimateAdReach
       tags: ["Ad Targeting"]
       x-platforms: ["meta"]
@@ -40038,6 +40618,7 @@ paths:
 
   /v1/ads/targeting/bid-pricing:
     post:
+      x-resource-group: "ads"
       operationId: getLinkedInBidPricing
       tags: ["Ad Targeting"]
       x-platforms: ["linkedin"]
@@ -40109,6 +40690,7 @@ paths:
 
   /v1/ads/targeting/supply-forecast:
     post:
+      x-resource-group: "ads"
       operationId: getLinkedInSupplyForecast
       tags: ["Ad Targeting"]
       x-platforms: ["linkedin"]
@@ -40192,6 +40774,7 @@ paths:
 
   /v1/ads/catalogs:
     get:
+      x-resource-group: "ads"
       operationId: listAdCatalogs
       tags: ["Ad Creatives"]
       x-platforms: ["meta"]
@@ -40225,6 +40808,7 @@ paths:
           description: Ads access required. Legacy plans need the Ads add-on; included by default on usage-based plans.
   /v1/ads/catalogs/{catalogId}/product-sets:
     get:
+      x-resource-group: "ads"
       operationId: listAdCatalogProductSets
       tags: ["Ad Creatives"]
       x-platforms: ["meta"]
@@ -40257,6 +40841,7 @@ paths:
           description: Ads access required. Legacy plans need the Ads add-on; included by default on usage-based plans.
   /v1/ads/audiences:
     get:
+      x-resource-group: "ads"
       operationId: listAdAudiences
       tags: ["Ad Audiences"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -40300,6 +40885,7 @@ paths:
         '403':
           description: Ads access required. Legacy plans need the Ads add-on; included by default on usage-based plans.
     post:
+      x-resource-group: "ads"
       operationId: createAdAudience
       tags: ["Ad Audiences"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -40451,6 +41037,7 @@ paths:
 
   /v1/ads/audiences/{audienceId}:
     get:
+      x-resource-group: "ads"
       operationId: getAdAudience
       tags: ["Ad Audiences"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -40475,6 +41062,7 @@ paths:
           description: Ads access required. Legacy plans need the Ads add-on; included by default on usage-based plans.
         '404': { $ref: '#/components/responses/NotFound' }
     put:
+      x-resource-group: "ads"
       operationId: updateAdAudience
       tags: ["Ad Audiences"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -40525,6 +41113,7 @@ paths:
         '501':
           description: Platform audience updates are only supported on Meta
     delete:
+      x-resource-group: "ads"
       operationId: deleteAdAudience
       tags: ["Ad Audiences"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -40550,6 +41139,7 @@ paths:
 
   /v1/ads/audiences/{audienceId}/users:
     post:
+      x-resource-group: "ads"
       operationId: addUsersToAdAudience
       tags: ["Ad Audiences"]
       x-platforms: ["meta", "google", "tiktok", "linkedin", "pinterest", "x"]
@@ -40601,6 +41191,7 @@ paths:
 
   /v1/ads/conversions/quality:
     get:
+      x-resource-group: "ads"
       operationId: getConversionsQuality
       tags: [Conversions]
       x-platforms: ["meta"]
@@ -40643,6 +41234,7 @@ paths:
         '405': { description: "Platform does not expose Event Match Quality (non-Meta)." }
   /v1/ads/conversions:
     post:
+      x-resource-group: "ads"
       operationId: sendConversions
       tags: [Conversions]
       x-platforms: ["meta", "google", "tiktok", "linkedin"]
@@ -40793,6 +41385,7 @@ paths:
 
   /v1/ads/conversions/adjustments:
     post:
+      x-resource-group: "ads"
       operationId: adjustConversions
       tags: [Conversions]
       x-platforms: ["meta"]
@@ -40914,6 +41507,7 @@ paths:
 
   /v1/accounts/{accountId}/conversion-destinations:
     get:
+      x-resource-group: "ads"
       operationId: listConversionDestinations
       tags: [Conversions]
       x-platforms: ["meta", "google", "tiktok", "linkedin"]
@@ -40989,6 +41583,7 @@ paths:
           description: LinkedIn rate limit hit. Retry with backoff.
 
     post:
+      x-resource-group: "ads"
       operationId: createConversionDestination
       tags: [Conversions]
       x-platforms: ["meta", "google", "tiktok", "linkedin"]
@@ -41159,6 +41754,7 @@ paths:
 
   /v1/accounts/{accountId}/conversion-destinations/{destinationId}:
     get:
+      x-resource-group: "ads"
       operationId: getConversionDestination
       tags: [Conversions]
       x-platforms: ["meta", "google", "tiktok", "linkedin"]
@@ -41195,6 +41791,7 @@ paths:
         '429': { description: LinkedIn rate limit hit. Retry with backoff. }
 
     patch:
+      x-resource-group: "ads"
       operationId: updateConversionDestination
       tags: [Conversions]
       x-platforms: ["meta", "google", "tiktok", "linkedin"]
@@ -41270,6 +41867,7 @@ paths:
         '429': { description: LinkedIn rate limit hit. Retry with backoff. }
 
     delete:
+      x-resource-group: "ads"
       operationId: deleteConversionDestination
       tags: [Conversions]
       x-platforms: ["meta", "google", "tiktok", "linkedin"]
@@ -41303,6 +41901,7 @@ paths:
 
   /v1/accounts/{accountId}/conversion-destinations/{destinationId}/associations:
     get:
+      x-resource-group: "ads"
       operationId: listConversionAssociations
       tags: [Conversions]
       x-platforms: ["meta", "google", "tiktok", "linkedin"]
@@ -41346,6 +41945,7 @@ paths:
         '429': { description: LinkedIn rate limit hit. Retry with backoff. }
 
     post:
+      x-resource-group: "ads"
       operationId: addConversionAssociations
       tags: [Conversions]
       x-platforms: ["meta", "google", "tiktok", "linkedin"]
@@ -41407,6 +42007,7 @@ paths:
         '429': { description: LinkedIn rate limit hit. Retry with backoff. }
 
     delete:
+      x-resource-group: "ads"
       operationId: removeConversionAssociations
       tags: [Conversions]
       x-platforms: ["meta", "google", "tiktok", "linkedin"]
@@ -41461,6 +42062,7 @@ paths:
 
   /v1/accounts/{accountId}/conversion-destinations/{destinationId}/metrics:
     get:
+      x-resource-group: "ads"
       operationId: getConversionMetrics
       tags: [Conversions]
       x-platforms: ["meta", "google", "tiktok", "linkedin"]
@@ -41522,6 +42124,7 @@ paths:
 
   /v1/whatsapp/conversions:
     get:
+      x-resource-group: "ads"
       operationId: listWhatsAppConversions
       tags: [WhatsApp]
       summary: List conversion events
@@ -41586,6 +42189,7 @@ paths:
         '401': { $ref: '#/components/responses/Unauthorized' }
         '404': { description: WhatsApp account not found }
     post:
+      x-resource-group: "ads"
       operationId: sendWhatsAppConversion
       tags: [WhatsApp]
       summary: Send WhatsApp conversion event
@@ -41762,6 +42366,7 @@ paths:
 
   /v1/ads/messaging:
     post:
+      x-resource-group: "ads"
       operationId: createMessagingAd
       tags: ["Messaging Ads"]
       x-platforms: ["meta"]
@@ -41799,6 +42404,7 @@ paths:
 
   /v1/ads/call:
     post:
+      x-resource-group: "ads"
       operationId: createCallAd
       tags: ["Messaging Ads"]
       x-platforms: ["meta"]
@@ -41837,6 +42443,7 @@ paths:
 
   /v1/ads/ctwa:
     post:
+      x-resource-group: "ads"
       operationId: createCtwaAd
       tags: ["Messaging Ads"]
       x-platforms: ["meta"]
@@ -41901,6 +42508,7 @@ paths:
 
   /v1/accounts/{accountId}/tracking-tags:
     get:
+      x-resource-group: "ads"
       operationId: listTrackingTags
       tags: ["Tracking Tags"]
       x-platforms: ["meta"]
@@ -41944,6 +42552,7 @@ paths:
         '405': { description: Platform does not support listing tracking tags. }
 
     post:
+      x-resource-group: "ads"
       operationId: createTrackingTag
       tags: ["Tracking Tags"]
       x-platforms: ["meta"]
@@ -42009,6 +42618,7 @@ paths:
 
   /v1/accounts/{accountId}/tracking-tags/{tagId}:
     get:
+      x-resource-group: "ads"
       operationId: getTrackingTag
       tags: ["Tracking Tags"]
       x-platforms: ["meta"]
@@ -42040,6 +42650,7 @@ paths:
         '405': { description: Platform does not support fetching a tracking tag. }
 
     patch:
+      x-resource-group: "ads"
       operationId: updateTrackingTag
       tags: ["Tracking Tags"]
       x-platforms: ["meta"]
@@ -42106,6 +42717,7 @@ paths:
 
   /v1/accounts/{accountId}/tracking-tags/{tagId}/shared-accounts:
     get:
+      x-resource-group: "ads"
       operationId: listTrackingTagSharedAccounts
       tags: ["Tracking Tags"]
       x-platforms: ["meta"]
@@ -42134,6 +42746,7 @@ paths:
         '405': { description: Platform does not support shared accounts. }
 
     post:
+      x-resource-group: "ads"
       operationId: addTrackingTagSharedAccount
       tags: ["Tracking Tags"]
       x-platforms: ["meta"]
@@ -42175,6 +42788,7 @@ paths:
         '405': { description: Platform does not support shared accounts. }
 
     delete:
+      x-resource-group: "ads"
       operationId: removeTrackingTagSharedAccount
       tags: ["Tracking Tags"]
       x-platforms: ["meta"]
@@ -42199,6 +42813,7 @@ paths:
 
   /v1/accounts/{accountId}/tracking-tags/{tagId}/stats:
     get:
+      x-resource-group: "ads"
       operationId: getTrackingTagStats
       tags: ["Tracking Tags"]
       x-platforms: ["meta"]
@@ -42265,6 +42880,7 @@ paths:
 
   /v1/verify/verifications:
     post:
+      x-resource-group: "telephony"
       operationId: createVerification
       tags: [Verify]
       summary: Send a verification code
@@ -42322,6 +42938,7 @@ paths:
 
   /v1/verify/verifications/{verificationId}:
     get:
+      x-resource-group: "telephony"
       operationId: getVerification
       tags: [Verify]
       summary: Get a verification
@@ -42346,6 +42963,7 @@ paths:
 
   /v1/verify/verifications/{verificationId}/check:
     post:
+      x-resource-group: "telephony"
       operationId: checkVerification
       tags: [Verify]
       summary: Check a verification code