@celigo/api-specs 0.2.204 → 0.2.206

package/dist/connection.yml

@@ -1185,7 +1185,9 @@ paths:
         - |-
           Soft-deletes the connection into the recycle bin (restorable for 30 days). Check
           `GET /v1/connections/{_id}/dependencies` first — a connection still referenced by flows,
-          exports, imports, or a borrowing connection is rejected with 422.
+          exports, imports, a borrowing connection, or MCP servers (a tool override, or a
+          `connections[]` entry that requires end-user credentials) is rejected with 422
+          `dependencies_not_deleted`.
   /v1/connections/{_id}/ping:
     get:
       x-internal: false

package/dist/httpconnector.yml

@@ -204,6 +204,19 @@ paths:
             type: string
             format: objectId
           description: HTTP Connector ID.
+        - in: query
+          name: returnEverything
+          required: false
+          schema:
+            type: boolean
+          description: |-
+            When true, the response adds `httpConnectorResources` and
+            `httpConnectorEndpoints`: the connector's resources and the endpoints
+            under them, in one call. Only the exact value `true` fills them. Any
+            other non-empty value, including `false`, adds both arrays empty, and an
+            absent or empty parameter leaves them out. The `true` response is
+            streamed without a `Content-Length` header, and for a connector with
+            many endpoints it can exceed 1 MB.
       responses:
         '200':
           description: HTTP Connector retrieved successfully.
@@ -1951,6 +1964,649 @@ components:
             - '2023-05-20T11:45:32Z'
       required:
         - _id
+    ResourceField:
+      type: object
+      description: One field of the resource's records, optionally with nested child fields.
+      required:
+        - id
+      properties:
+        id:
+          type: string
+          description: Field identifier as it appears in the record.
+          examples:
+            - id
+        label:
+          type: string
+          description: Display label for the field.
+          examples:
+            - ID
+        description:
+          type: string
+          description: Help text describing the field.
+          examples:
+            - Record identifier
+        dataType:
+          type: string
+          description: Data type label for the field, stored as given.
+          examples:
+            - string
+        metadata:
+          type: object
+          additionalProperties: true
+          description: Free-form metadata for the field.
+        resourceFields:
+          type: array
+          description: Child fields of an object or array field. Absent when the field is scalar.
+          items:
+            type: object
+            additionalProperties: true
+            description: Nested field with the same shape as its parent.
+    ResourceSupportedBySection:
+      type: object
+      description: |-
+        Conditions, pre-configured field values, required user inputs, and
+        fields to clear for one resource type (export or import) created from
+        this resource.
+      properties:
+        conditions:
+          type: array
+          description: |-
+            Expression-based filters referenced by `_conditionIds` in
+            `preConfiguredFields` and `fieldsUserMustSet` to apply those entries
+            conditionally.
+          items:
+            type: object
+            properties:
+              _id:
+                type: string
+                format: objectId
+                readOnly: true
+                description: Identifier of this condition, referenced by `_conditionIds` in field entries.
+                examples:
+                  - 5f8d43a1b9e5a80011a35f2c
+              condition:
+                $ref: '#/components/schemas/Filter'
+        preConfiguredFields:
+          type: array
+          description: Fields set automatically on the generated export or import. Not editable by the user.
+          items:
+            type: object
+            properties:
+              path:
+                type: string
+                description: |-
+                  Dot-notation name of the setting in the connector's form. It is not always a literal
+                  path on the generated export or import: a form group such as `response` takes an
+                  object value (`{resourcePath: "customers"}`) that sets the step's
+                  `http.response.resourcePath`.
+                examples:
+                  - http.successMediaType
+                  - response
+              values:
+                type: array
+                description: Value(s) to assign. Typically a single-element array; entries may be any JSON type.
+                examples:
+                  - - json
+              _conditionIds:
+                type: array
+                description: Condition IDs that must be satisfied for this entry to apply. Always applies when absent.
+                items:
+                  type: string
+                  format: objectId
+                  examples:
+                    - 5f8d43a1b9e5a80011a35f2c
+        fieldsUserMustSet:
+          type: array
+          description: Fields the user must provide values for on the generated export or import.
+          items:
+            type: object
+            properties:
+              path:
+                type: string
+                description: |-
+                  Dot-notation name of the setting the connector's form asks for: a step field such as
+                  `ignoreExisting` or `type`, or `mapping.fields.generate.<field>`, a destination field
+                  the import's mapping must produce.
+                examples:
+                  - name
+                  - ignoreExisting
+                  - mapping.fields.generate.customer.email
+              values:
+                type: array
+                description: Optional suggested or constrained values. Entries may be any JSON type.
+                examples:
+                  - - delta
+                    - test
+              _conditionIds:
+                type: array
+                description: Condition IDs that must be satisfied for this entry to apply.
+                items:
+                  type: string
+                  format: objectId
+                  examples:
+                    - 5f8d43a1b9e5a80011a35f2c
+              helpURL:
+                type: string
+                description: URL to documentation for this field.
+                examples:
+                  - https://docs.celigo.com/hc/en-us
+              labelOverride:
+                type: string
+                description: Custom label shown in the UI instead of the default.
+                examples:
+                  - Record name
+        fieldsToUnset:
+          type: array
+          description: Dot-notation paths to clear on the generated export or import.
+          items:
+            type: string
+            examples:
+              - http.paging
+    ResourceSupportedBy:
+      type: object
+      description: |-
+        Defaults the connector framework applies when a user builds an export or
+        an import on one of this resource's endpoints. Each section
+        pre-configures fields, lists the fields the user must still fill in, and
+        clears fields that do not apply.
+      properties:
+        export:
+          $ref: '#/components/schemas/ResourceSupportedBySection'
+        import:
+          allOf:
+            - $ref: '#/components/schemas/ResourceSupportedBySection'
+            - type: object
+              properties:
+                pathParameterToIdentifyExisting:
+                  type: string
+                  description: |-
+                    Path parameter whose value identifies the existing record on
+                    an update or upsert import. Needed only when the endpoint has
+                    more than one path parameter.
+                  examples:
+                    - id
+                lookupToIdentifyExisting:
+                  type: object
+                  description: |-
+                    Lookup the import runs to find out whether a record already
+                    exists before deciding between create and update. Both
+                    fields go together — sending one without the other is
+                    rejected.
+                  properties:
+                    _httpConnectorEndpointId:
+                      type: string
+                      format: objectId
+                      x-celigo-refModel: httpconnectorendpoints
+                      description: |-
+                        HTTP Connector Endpoint that performs the lookup. Must be
+                        an existing endpoint.
+                      examples:
+                        - 63987132784a39b73aae63ea
+                    extract:
+                      type: string
+                      description: Path in the lookup response to read the existing record's identifier from.
+                      examples:
+                        - data.0.id
+    HTTPConnectorResourceBase:
+      type: object
+      description: Writable fields shared by the request and response schemas.
+      properties:
+        name:
+          type: string
+          description: Human-readable name of the API resource this grouping represents (for example "Account", "Contact", "Order").
+          examples:
+            - Account
+        published:
+          type: boolean
+          default: false
+          description: |-
+            When true, the resource is visible to users of the connector's
+            published catalog. Only resources whose owner may publish HTTP
+            connectors appear to other accounts.
+        _httpConnectorId:
+          type: string
+          format: objectId
+          x-celigo-refModel: httpconnectors
+          description: |-
+            HTTP Connector this resource belongs to. Must be a connector owned by
+            the caller's account.
+          examples:
+            - 63987132784a39b73aae63cd
+        _httpConnectorApiId:
+          type: string
+          format: objectId
+          description: |-
+            API group (an entry of the connector's `apis[]`) this resource belongs
+            to. Set only for grouped connectors; flat connectors scope resources by
+            `_versionIds` instead.
+          examples:
+            - 63987132784a39b73aae63d0
+        _versionIds:
+          type: array
+          description: |-
+            Connector (or API group) versions this resource is available in. Each
+            id must be one of the connector's `versions[]._id` values.
+          items:
+            type: string
+            format: objectId
+          examples:
+            - - 63987132784a39b73aae63ce
+        _parentResourceId:
+          type: string
+          format: objectId
+          x-celigo-refModel: httpconnectorresources
+          description: |-
+            Parent resource when this resource is nested under another one (for
+            example "Order line" under "Order"). Omit for top-level resources;
+            cannot be combined with `isRoot: true`.
+          examples:
+            - 63987132784a39b73aae63e7
+        isRoot:
+          type: boolean
+          default: false
+          description: |-
+            When true, marks the resource as the root of a resource hierarchy.
+            Rejected together with `_parentResourceId`.
+        metadata:
+          type: object
+          additionalProperties: true
+          description: Free-form metadata stored with the resource, for example Data Intelligence attributes.
+          examples:
+            - note: Primary sales object
+        resourceFields:
+          type: array
+          description: |-
+            Field catalog of the records this resource returns, used by tooling to
+            describe the API's payloads. Fields nest through their own
+            `resourceFields`.
+          items:
+            $ref: '#/components/schemas/ResourceField'
+        supportedBy:
+          $ref: '#/components/schemas/ResourceSupportedBy'
+    HTTPConnectorResource:
+      type: object
+      required:
+        - _id
+        - _httpConnectorId
+        - name
+        - published
+        - createdAt
+        - lastModified
+      description: |-
+        HTTP Connector Resource as returned by `GET /v1/httpconnectorresources`,
+        `GET /v1/httpconnectorresources/{_id}`, and the nested
+        `GET /v1/httpconnectors/{_httpConnectorId}/{_id}` — all three return the
+        same object. Optional fields that were never set are absent.
+      allOf:
+        - $ref: '#/components/schemas/HTTPConnectorResourceBase'
+        - type: object
+          properties:
+            _id:
+              type: string
+              format: objectId
+              readOnly: true
+              x-celigo-refModel: httpconnectorresources
+              description: |-
+                Unique identifier for the resource. Doubles as the
+                `_httpConnectorResourceId` path parameter of the HTTP Connector
+                Endpoints API.
+              examples:
+                - 63987132784a39b73aae63e7
+            createdAt:
+              type: string
+              format: date-time
+              readOnly: true
+              description: Timestamp when the resource was created.
+              examples:
+                - '2023-01-17T09:51:53.665Z'
+            lastModified:
+              type: string
+              format: date-time
+              readOnly: true
+              description: Timestamp when the resource was last updated. Changes on every PUT.
+              examples:
+                - '2024-05-23T07:00:31.350Z'
+    HTTPConnectorEndpointBase:
+      type: object
+      description: Writable fields shared by the request and response schemas.
+      properties:
+        name:
+          type: string
+          description: Human-readable name for this endpoint, shown when users pick an operation.
+          maxLength: 255
+          examples:
+            - List
+        description:
+          type: string
+          description: Help text describing what the endpoint does. Absent when never set.
+          maxLength: 10240
+          examples:
+            - Returns all answers for a question.
+        published:
+          type: boolean
+          default: false
+          description: |-
+            When true, this endpoint is visible in the connector's published
+            catalog. Kept as stored when omitted on PUT.
+        isBlob:
+          type: boolean
+          default: false
+          description: When true, this endpoint transfers binary (blob) content instead of records. Kept as stored when omitted on PUT.
+        isMappingRequired:
+          type: boolean
+          default: false
+          description: When true, users must configure field mappings before an import built on this endpoint can run.
+        _httpConnectorResourceIds:
+          type: array
+          minItems: 1
+          description: |-
+            HTTP Connector Resources this endpoint is listed under. Each id must
+            be a resource owned by the caller's account; the endpoint appears in
+            the nested listing of every resource named here.
+          items:
+            type: string
+            format: objectId
+            x-celigo-refModel: httpconnectorresources
+            examples:
+              - 63987132784a39b73aae63e7
+        method:
+          type: string
+          enum:
+            - GET
+            - PUT
+            - POST
+            - PATCH
+            - DELETE
+            - HEAD
+          x-enumDescriptions:
+            GET: Retrieve data from the endpoint.
+            PUT: Replace data at the endpoint.
+            POST: Submit data to the endpoint.
+            PATCH: Partially update data at the endpoint.
+            DELETE: Remove data at the endpoint.
+            HEAD: Probe the endpoint without transferring a response body.
+          description: |-
+            HTTP method for this endpoint. Required on save; lowercase input is
+            uppercased automatically.
+        relativeURI:
+          type: string
+          description: Relative URI template for this endpoint
+          examples:
+            - /api/public/answer/?page={{{export.http.paging.page}}}
+        mergePostBodyToPagingPostBody:
+          type: boolean
+          description: When true, merges the postBody into pagingPostBody for paginated requests.
+          default: false
+        queryParameters:
+          type: array
+          description: Query parameter definitions
+          items:
+            type: object
+            properties:
+              name:
+                type: string
+                description: Parameter name as it appears in the request query string.
+                examples:
+                  - question_id
+              label:
+                type: string
+                description: Label shown to users in the UI for this parameter. Defaults to `name` when omitted.
+                examples:
+                  - Question ID
+              description:
+                type: string
+                description: Help text shown to users explaining what this parameter does.
+                examples:
+                  - Include only answers for a question with the specified ID.
+              required:
+                type: boolean
+                description: When true, the user must supply a value for this parameter.
+              dataType:
+                type: string
+                enum:
+                  - input
+                  - date
+                  - select
+                  - multiselect
+                  - array
+                  - number
+                default: input
+                x-enumDescriptions:
+                  input: Free-form text input field.
+                  date: Date picker input field.
+                  select: Single-value dropdown selection.
+                  multiselect: Multi-value dropdown selection.
+                  array: Array of values.
+                  number: Numeric input field.
+                description: UI input type used to collect the parameter value. A free-form text input when omitted.
+              values:
+                type: array
+                description: Predefined values offered when `dataType` is `select` or `multiselect`.
+                items:
+                  type: string
+                  examples:
+                    - open
+            required:
+              - name
+        pathParameters:
+          type: array
+          description: Path parameter definitions
+          items:
+            type: object
+            properties:
+              name:
+                type: string
+                description: Parameter name as it appears in the `relativeURI` template.
+                examples:
+                  - id
+              label:
+                type: string
+                description: Label shown to users in the UI for this parameter. Defaults to `name` when omitted.
+                examples:
+                  - Answer ID
+              description:
+                type: string
+                description: Help text shown to users explaining what this parameter does.
+                examples:
+                  - Identifier of the answer to retrieve.
+              required:
+                type: boolean
+                description: When true, the user must supply a value for this parameter.
+              dataType:
+                type: string
+                enum:
+                  - input
+                  - date
+                  - select
+                  - multiselect
+                  - array
+                  - number
+                default: input
+                x-enumDescriptions:
+                  input: Free-form text input field.
+                  date: Date picker input field.
+                  select: Single-value dropdown selection.
+                  multiselect: Multi-value dropdown selection.
+                  array: Array of values.
+                  number: Numeric input field.
+                description: UI input type used to collect the parameter value. A free-form text input when omitted.
+              values:
+                type: array
+                description: Predefined values offered when `dataType` is `select` or `multiselect`.
+                items:
+                  type: string
+                  examples:
+                    - open
+            required:
+              - name
+        resourceFields:
+          type: array
+          description: Resource field definitions for this endpoint
+          items:
+            type: object
+            properties:
+              type:
+                type: string
+                enum:
+                  - inclusion
+                  - exclusion
+                x-enumDescriptions:
+                  inclusion: Only the listed fields are included in the resource.
+                  exclusion: All fields except the listed ones are included in the resource.
+                description: Whether `fields` lists the fields to include or to exclude.
+              fields:
+                type: array
+                description: Field names the inclusion or exclusion rule applies to.
+                items:
+                  type: string
+                  examples:
+                    - question_id
+              _httpConnectorResourceId:
+                type: string
+                format: objectId
+                description: HTTP Connector Resource these field rules apply to.
+                examples:
+                  - 63987132784a39b73aae63e7
+            required:
+              - type
+              - fields
+              - _httpConnectorResourceId
+        supportedBy:
+          type: object
+          description: |-
+            How the connector framework turns this endpoint into an export or an
+            import: which one it becomes, the fields it pre-configures, and the
+            fields the user must still fill in. Each entry's `path` names a setting
+            in the connector's form, which is not always a literal path on the
+            generated export or import.
+          x-celigo-ai-guidance:
+            - |-
+              Read against the published Shopify connector on 2026-10-21: the list-customers export
+              endpoint presets `response` to `{resourcePath: "customers"}` and also presets `delta`,
+              and asks for `type` (`delta` or `test`); the create-customer import endpoint asks for
+              `ignoreExisting` and for `mapping.fields.generate.customer.email`, `…first_name` and
+              `…last_name`.
+            - |-
+              Copy a path that is already a field of the step (`type`, `ignoreExisting`,
+              `http.response.resourcePath`). Set a form group such as `response` through the step
+              fields its value names (`{resourcePath: "customers"}` is `http.response.resourcePath`).
+              Treat `mapping.fields.generate.<field>` as a destination field the import's mapping must
+              produce, not a property to set.
+          required:
+            - type
+          properties:
+            type:
+              type: string
+              enum:
+                - import
+                - export
+              x-enumDescriptions:
+                import: This endpoint is used as an import (writes data to the target system).
+                export: This endpoint is used as an export (reads data from the target system).
+              description: |-
+                Whether this endpoint is consumed as an import or an export. Also
+                the value the nested listing's `supportedByType` filter matches.
+            conditions:
+              type: array
+              description: Expression-based filters that control when entries in `preConfiguredFields` and `fieldsUserMustSet` apply.
+              items:
+                type: object
+                additionalProperties: true
+            preConfiguredFields:
+              type: array
+              description: Fields automatically set to predefined values on the generated export or import. Not editable by the user.
+              items:
+                type: object
+                additionalProperties: true
+            fieldsUserMustSet:
+              type: array
+              description: Fields the user must provide values for on the generated export or import.
+              items:
+                type: object
+                additionalProperties: true
+            fieldsToUnset:
+              type: array
+              description: Dot-notation paths of fields to remove from the generated export or import configuration.
+              items:
+                type: string
+                examples:
+                  - http.paging.method
+            pathParameterToIdentifyExisting:
+              type: string
+              description: Path parameter whose value identifies an existing record in the target application.
+              examples:
+                - id
+            lookupToIdentifyExisting:
+              type: object
+              description: Lookup used to determine whether a record already exists in the target application.
+              properties:
+                _httpConnectorEndpointId:
+                  type: string
+                  format: objectId
+                  description: HTTP Connector Endpoint used to perform the lookup.
+                  x-celigo-refModel: httpconnectorendpoints
+                  examples:
+                    - 63987132784a39b73aae63ea
+                extract:
+                  type: string
+                  description: Path in the lookup response from which to extract the existing record's identifier.
+                  examples:
+                    - results.0.id
+    HTTPConnectorEndpoint:
+      type: object
+      required:
+        - _id
+        - name
+        - method
+        - relativeURI
+        - published
+        - isBlob
+        - isMappingRequired
+        - mergePostBodyToPagingPostBody
+        - _httpConnectorResourceIds
+        - createdAt
+        - lastModified
+      description: |-
+        HTTP Connector Endpoint as returned by `GET /v1/httpconnectorendpoints`,
+        `GET /v1/httpconnectorendpoints/{_id}`, and the nested
+        `GET /v1/httpconnectors/{_httpConnectorId}/{_httpConnectorResourceId}/{_id}`
+        — all three return the same object. Optional fields that were never set
+        are absent.
+      allOf:
+        - $ref: '#/components/schemas/HTTPConnectorEndpointBase'
+        - $ref: '#/components/schemas/ResourceResponse'
+        - type: object
+          properties:
+            metadata:
+              type: object
+              description: |-
+                Endpoint metadata used by Data Intelligence tooling. Absent when
+                never set; Data Intelligence attributes can only be stored on a
+                published endpoint.
+              properties:
+                di:
+                  type: object
+                  description: Data Intelligence attributes for this endpoint.
+                  properties:
+                    isListEndpoint:
+                      type: boolean
+                      description: When true, the endpoint returns a list of records rather than a single record.
+                    responseFields:
+                      type: array
+                      description: Fields Data Intelligence expects in this endpoint's response records.
+                      items:
+                        type: object
+                        properties:
+                          id:
+                            type: string
+                            description: Field path within a response record.
+                            examples:
+                              - email
+                          dataType:
+                            type: string
+                            description: Data type of the field.
+                            examples:
+                              - string
     HTTPConnector:
       type: object
       required:
@@ -2009,6 +2665,25 @@ components:
               readOnly: true
               examples:
                 - 2
+            httpConnectorResources:
+              type: array
+              readOnly: true
+              description: |-
+                Only present on GET /v1/httpconnectors/{_id} with a non-empty
+                `returnEverything`, and empty unless it is exactly `true`. The
+                connector's resources, sorted by `_id`: the same set
+                `GET /v1/httpconnectors/{_httpConnectorId}/httpconnectorresources` lists.
+              items:
+                $ref: '#/components/schemas/HTTPConnectorResource'
+            httpConnectorEndpoints:
+              type: array
+              readOnly: true
+              description: |-
+                Only present on GET /v1/httpconnectors/{_id} with a non-empty
+                `returnEverything`, and empty unless it is exactly `true`. The
+                endpoints of the returned resources, grouped in resource order.
+              items:
+                $ref: '#/components/schemas/HTTPConnectorEndpoint'
             metadata:
               type: object
               readOnly: true

package/dist/mcp-server.yml

@@ -20,7 +20,7 @@ info:
       - Carries **permission sets** ("Capability Sets" in the UI) — named bundles of its tools, APIs, prompts, and resources granted to end users via `pset:<_id>` capability strings on end-user, group, and role resource grants
       - Carries optional **traffic limits** (`policies[]`) — a server-level rate limit, a per-user rate limit for OAuth end users, and a usage quota — enforced before a tool runs; a rejected call gets HTTP 429 with `Retry-After`
       - Can proxy **upstream MCP servers** (`upstreamMcpConnections[]`, attached through `mcp`-type connections) and whitelist which of their tools, prompts, and resources it exposes
-      - Lists the **connections** its tools run through (`connections[]`) and flags the ones each end user must supply their own credentials for (`requiresEndUserCredentials`)
+      - Lists the **connections** each end user must supply their own credentials for (`connections[]`); only entries with `requiresEndUserCredentials: true` are kept
       - Can be pinned to a **network policy** (`_networkPolicyId`) that restricts which IP ranges may reach it
 servers:
   - url: https://api.integrator.io
@@ -2468,17 +2468,23 @@ components:
     ServerConnection:
       type: object
       description: |-
-        One connection the server's tools use, with the flag that decides whether
-        each end user must supply their own credentials for it. Connections named
-        here and in `tools[].overrides.connections[]` together form the set that
-        `GET /v1/mcpservers/{_id}/connections` lists.
+        One connection each end user must supply their own credentials for.
+        Connections named here and in `tools[].overrides.connections[]`
+        together form the set that `GET /v1/mcpservers/{_id}/connections` lists.
       x-celigo-ai-guidance:
         - |-
           Reference a live connection owned by this account: an unknown id fails
           with 422 "resource_not_found" and the same connection listed twice with
-          422 "resource_invalid".
+          422 "resource_invalid" — even on an entry sent with the flag false, which
+          is then dropped.
+        - |-
+          A stored entry makes the connection a dependency of the server:
+          DELETE /v1/connections/{_id} fails with 422 "dependencies_not_deleted"
+          ("mcpserver <id> must be deleted before you can delete connection <id>")
+          until a PUT removes the entry or clears its flag.
       required:
         - _connectionId
+        - requiresEndUserCredentials
       properties:
         _connectionId:
           type: string
@@ -2493,14 +2499,15 @@ components:
             - 6ab1ebb94db5688fd8c7189f
         requiresEndUserCredentials:
           type: boolean
-          default: false
           description: |-
             When true, each end user must supply their own values for the fields
             the connection's `endUserProvidedFields` names (through the MCP setup
             page) before calling tools that use it; those values are stored as a
-            per-user `mcpChild` connection. The platform contract is that clearing
-            the flag, or dropping the connection from every server that set it,
-            invalidates the end users' `mcpChild` connections for it.
+            per-user `mcpChild` connection. Only `true` is stored — an entry sent
+            with `false` is dropped on save, so clearing the flag removes the
+            entry. The platform contract is that clearing the flag, or dropping
+            the connection from every server that set it, invalidates the end
+            users' `mcpChild` connections for it.
           examples:
             - true
     Annotations:
@@ -3716,6 +3723,20 @@ components:
           description: |-
             Connection of type `mcp` that holds the upstream server URL and
             credentials. Each connection can be attached to a server once.
+            When the upstream server rejects a proxied `tools/call`, `prompts/get`,
+            or `resources/read`, the MCP client gets a JSON-RPC error with HTTP
+            status 200: -32008 `Upstream server denied access` for an upstream 403,
+            -32004 `Upstream rate limit exceeded` for a 429, and for a 401 either
+            -32007 `Upstream connection requires re-authorization` or -32603. A
+            `token` or `custom` connection answers -32007. An `oauth` connection
+            first refreshes its token and retries once: -32007 when the connection
+            can't be refreshed (for example, it holds no refresh token), when the
+            token endpoint rejects the grant (for example, with 400), or when the
+            retry is still 401; -32603 when the refresh fails any other way, such
+            as the token endpoint answering 5xx. -32007, -32008, and -32004 carry
+            this id in
+            `error.data._connectionId`; -32603, which an upstream 5xx also answers,
+            carries no `error.data`.
           examples:
             - 6a6655fce52f3c30d0a53926
         alias:
@@ -4140,13 +4161,17 @@ components:
             - Order Processing Server
         relativeURI:
           type: string
-          maxLength: 131072
+          maxLength: 128
           pattern: ^\/[a-zA-Z0-9_\-]+$
           description: |-
             URI path segment for the MCP server endpoint. Must be unique per account —
             duplicates are rejected with 422 `mcp_server_duplicate_relative_uri`. Only letters,
             numbers, dashes, and underscores after the leading slash (the server's error message
-            also claims colons and dots are allowed, but they are rejected in practice). Creation
+            also claims colons and dots are allowed, but they are rejected in practice). The
+            length limit counts the leading slash; a longer value is rejected with 422
+            `mcp_server_relative_uri_too_long`. `/registry`, `/oidc`, and `/portal`, in any letter
+            case, are reserved for platform endpoints under the account alias and are rejected
+            with 422 `mcp_server_reserved_relative_uri`. PUT applies both checks too. Creation
             also requires the account to have an account alias set (422
             `mcp_server_account_alias_required` otherwise).
           x-celigo-ai-guidance:
@@ -4188,11 +4213,19 @@ components:
         connections:
           type: array
           description: |-
-            Connections the server's tools run through, each flagged for whether
-            end users must supply their own credentials. Always returned — an
-            empty array when none is listed — and cleared when omitted on PUT.
-            Together with `tools[].overrides.connections[]` this is the set
+            Connections each end user must supply their own credentials for. Only
+            entries with `requiresEndUserCredentials: true` are kept — any other
+            entry is validated, then dropped on save. Always returned (an empty
+            array when none is listed) and cleared when omitted on PUT; together
+            with `tools[].overrides.connections[]` it forms the set
             `GET /v1/mcpservers/{_id}/connections` reports.
+          x-celigo-ai-guidance:
+            - |-
+              List a connection here only to make each end user supply their own credentials
+              for it, with requiresEndUserCredentials set to true. A connection the tools run on
+              the account's own credentials needs no entry: an entry sent with the flag false
+              still gets 201/200, but it is absent from the response and from every later
+              GET — do not resend it.
           items:
             $ref: '#/components/schemas/ServerConnection'
         tools:
@@ -11196,7 +11229,13 @@ components:
           type:
             - string
             - 'null'
-          description: Category of the failure. Null when the request succeeded or was blocked.
+          description: |-
+            Category of the failure. Null when the request succeeded or was blocked.
+            For a proxied request, `authentication` when the upstream connection needs
+            re-authorization (JSON-RPC -32007) or the upstream server denied access
+            (-32008), `rateLimit` when it answered HTTP 429 (-32004), `upstreamError`
+            for another upstream failure such as a 5xx (-32603), and `internal` when an
+            `oauth` connection's token refresh failed (-32603).
           examples:
             - null
         traceId:

package/dist/sync.yml

@@ -654,6 +654,17 @@ paths:
             type: string
             examples:
               - WyJBY2NvdW50IiwiNmE1NTk3MGM1Zjk0OThhMTc1OGEwYWQzIl0
+        - name: enable
+          in: query
+          required: false
+          description: |-
+            When true, returns only enabled datasets; when false, only disabled ones. Omit to
+            return both. Only the lowercase strings `true` and `false` are accepted; any other
+            value fails with `400 invalid_query_param`.
+          schema:
+            type: boolean
+            examples:
+              - true
         - $ref: '#/components/parameters/Include'
         - $ref: '#/components/parameters/Exclude'
       responses:
@@ -723,7 +734,24 @@ paths:
                           children: []
                       mismatchSyncConnection: true
         '204':
-          description: The sync has no datasets, or the sync does not exist.
+          description: |-
+            The sync has no datasets (none matching `enable`, when it is sent), or the sync
+            does not exist.
+        '400':
+          description: |-
+            `enable` is something other than `true` or `false` (`invalid_query_param`). The
+            value is checked before the sync is looked up.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+              examples:
+                invalid_enable:
+                  summary: enable=yes
+                  value:
+                    errors:
+                      - code: invalid_query_param
+                        message: The query parameter "enable" has invalid value.
         '401':
           $ref: '#/components/responses/401-unauthorized'
         '422':
@@ -2678,7 +2706,8 @@ paths:
         data warehouse a sync loads records into. A sync's destination application is the type of
         its destination connection (`rdbms.type` for warehouse connections), which must match one
         of the returned ids. Identifiers include `snowflake` (Snowflake), `nsaw` (NetSuite
-        Analytics Warehouse), `bigquery` (Google BigQuery), and `mssql` (Microsoft SQL Server).
+        Analytics Warehouse), `bigquery` (Google BigQuery), `mssql` (Microsoft SQL Server), and
+        `redshift` (Amazon Redshift).
       tags:
         - Syncs
       operationId: listSyncDestinations
@@ -2706,6 +2735,7 @@ paths:
                     - id: bigquery
                     - id: mssql
                     - id: nsaw
+                    - id: redshift
                     - id: snowflake
         '401':
           $ref: '#/components/responses/401-unauthorized'
@@ -2837,6 +2867,27 @@ paths:
                           description: Adaptor the export runs on (e.g. `SalesforceExport`).
                           examples:
                             - SalesforceExport
+                        exportDocProperties:
+                          type: object
+                          description: |-
+                            Extraction behavior read from the export resource. Use `exportType`
+                            rather than `type`, which is absent for exports that extract every record.
+                          required:
+                            - exportType
+                          properties:
+                            exportType:
+                              type: string
+                              enum:
+                                - all
+                                - delta
+                              description: |-
+                                Whether the export extracts every record or only changed records.
+                                `delta` when the export's `type` is `delta`; `all` otherwise.
+                              x-enumDescriptions:
+                                all: The export extracts every record on every run.
+                                delta: The export extracts only records changed since its previous run.
+                              examples:
+                                - delta
               examples:
                 default:
                   value:
@@ -2850,6 +2901,8 @@ paths:
                         _id: 6a3e7c54c2387aaa87881b80
                         type: delta
                         adaptorType: SalesforceExport
+                        exportDocProperties:
+                          exportType: delta
         '400':
           description: |-
             Bad request. The connection id is not a valid id, or `type` is not one of the
@@ -3465,6 +3518,28 @@ paths:
                           description: Number of enabled fields.
                           examples:
                             - 16
+                        exportDocProperties:
+                          type: object
+                          description: |-
+                            Extraction behavior read from the export resource itself, not from the
+                            saved dataset. Absent on entries whose export is no longer among the
+                            source connection's exports.
+                          required:
+                            - exportType
+                          properties:
+                            exportType:
+                              type: string
+                              enum:
+                                - all
+                                - delta
+                              description: |-
+                                Whether the export extracts every record or only changed records.
+                                `delta` when the export's `type` is `delta`; `all` otherwise.
+                              x-enumDescriptions:
+                                all: The export extracts every record on every run.
+                                delta: The export extracts only records changed since its previous run.
+                              examples:
+                                - delta
               examples:
                 merged:
                   summary: Saved and unsaved entries side by side
@@ -3499,6 +3574,8 @@ paths:
                         userActionRequired: false
                         totalFieldCount: 16
                         selectedFieldCount: 16
+                        exportDocProperties:
+                          exportType: delta
         '400':
           $ref: '#/components/responses/400-bad-request'
         '401':
@@ -3821,7 +3898,17 @@ components:
                 configured. Choose `ignore` to keep the replicated set fixed and add new
                 tables manually. A sync created through the API starts at `ignore`, and a PUT
                 that omits `driftPolicy` or sends an empty `dataset` object keeps the stored
-                value, so moving back from `automate` takes an explicit `ignore`.
+                value, so moving back from `automate` takes an explicit `ignore`. `automate` is
+                kept only for object-mode sources: Salesforce, NetSuite, NetSuite JDBC, and HTTP
+                connector connections whose connector, API and version match an entry in
+                `GET /v1/di/metadata/sources`. For any other source a POST or PUT stores `ignore`.
+              x-celigo-ai-guidance:
+                - |-
+                  On a source that is not object-mode (a plain HTTP connection, or an HTTP connector
+                  connection that matches no GET /v1/di/metadata/sources entry), a save with
+                  dataset.added automate still succeeds (201 on POST, 200 on PUT) but stores ignore.
+                  Read the sync back rather than assuming automate took, and tell the user new tables
+                  must be enabled by hand.
               x-enumDescriptions:
                 automate: Automatically add newly discovered tables to the sync and start replicating them.
                 ignore: Leave newly discovered tables out of the sync until a user enables them.
@@ -3963,7 +4050,7 @@ components:
               x-celigo-refModel: connections
               description: |-
                 Connection to the destination warehouse. Its application (`rdbms.type` such as
-                `snowflake`, `bigquery` or `mssql`, or a NetSuite Analytics Warehouse JDBC
+                `snowflake`, `bigquery`, `mssql` or `redshift`, or a NetSuite Analytics Warehouse JDBC
                 connection) is one of the ids returned by `GET /v1/di/metadata/destinations`.
               examples:
                 - 68d02dbe0839a514623c1d6d
@@ -4160,7 +4247,10 @@ components:
             dataset. A `database` and `schema` pair, in any letter case, can back only one sync,
             even across integrations (`422 duplicate_destination_host`, "Duplicate destination host found"). All syncs in
             an integration must target the same destination application type, and a sync's
-            destination type can't change once saved.
+            destination type can't change once saved. An Amazon Redshift destination is checked
+            on every save that sends `_connectionId`: a missing `database` or `schema` fails with
+            422 `invalid_destination_sync_config` ("Redshift database is required on sync
+            destination" / "Redshift schema is required on sync destination").
           x-celigo-ai-guidance:
             - |-
               Send the block complete or not at all. A partial block is rejected in the destination's
@@ -4174,9 +4264,9 @@ components:
               Saving a complete destination connects to the warehouse to create the schema
               (dataset) when it is missing. When the host resolves but the connection fails, or
               the credentials are unusable, the save fails with the connection's error — 422
-              `invalid_host` for SQL Server, `big_query_unexpected_error` for BigQuery — and no
-              sync document is created or updated; fix the connection rather than changing
-              database or schema names.
+              `invalid_host` for SQL Server, `big_query_unexpected_error` for BigQuery,
+              `redshift_auth_fail` for Amazon Redshift — and no sync document is created or
+              updated; fix the connection rather than changing database or schema names.
             - |-
               A destination host that doesn't resolve can leave the save without a response for
               more than 30 seconds, with nothing saved (seen on SQL Server and Snowflake
@@ -4204,7 +4294,7 @@ components:
               x-celigo-refModel: connections
               description: |-
                 Connection to the destination warehouse. Its application (`rdbms.type` such as
-                `snowflake`, `bigquery` or `mssql`, or a NetSuite Analytics Warehouse JDBC
+                `snowflake`, `bigquery`, `mssql` or `redshift`, or a NetSuite Analytics Warehouse JDBC
                 connection) must be one of the ids returned by `GET /v1/di/metadata/destinations`;
                 any other connection fails with `422 invalid_destination_type`.
               examples:
@@ -4214,7 +4304,8 @@ components:
               description: |-
                 Database in the destination warehouse the sync loads into; it must already exist.
                 For Google BigQuery this is the GCP project id the tables are created in
-                (`project.dataset.table`).
+                (`project.dataset.table`). For Amazon Redshift it must be an unquoted identifier,
+                under the same rule as `schema`.
               x-celigo-ui-override: For a BigQuery destination the Create Sync wizard shows no database picker and fills this field with the selected connection's rdbms.bigquery.projectId.
               examples:
                 - ANALYTICS_DB
@@ -4223,7 +4314,10 @@ components:
               description: |-
                 Schema within `database` where the sync creates and loads tables; created on save
                 when it does not exist. For Google BigQuery this is the dataset name, with case
-                preserved.
+                preserved. For Amazon Redshift it must start with a letter or underscore, contain
+                only letters, digits and underscores, stay within 127 bytes, and carry no leading
+                or trailing whitespace; anything else fails with 422 `invalid_destination_sync_config`
+                (for example "Redshift schema contains invalid identifier characters").
               x-celigo-ui-override: For a BigQuery destination the Create Sync wizard labels this field "dataset" and accepts only letters, digits and underscore (no $), starting with a letter or underscore, at most 1024 characters; Snowflake and NSAW validation is unchanged.
               examples:
                 - salesforce_raw

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celigo/api-specs",
-  "version": "0.2.204",
+  "version": "0.2.206",
   "private": false,
   "description": "Public OpenAPI bundles (dist/) and the celigo-cli lint schema pack (schemas.json).",
   "keywords": [

package/schemas.json

@@ -1,7 +1,7 @@
 {
 	"provenance": {
 		"repo": "celigo/integrator-api-specs",
-		"iasCommit": "bbd50898",
+		"iasCommit": "5f19db21",
 		"generatedAt": "2026-10-28"
 	},
 	"roots": {
@@ -8332,7 +8332,8 @@
 				"requiresEndUserCredentials": 8
 			},
 			"r": [
-				"_connectionId"
+				"_connectionId",
+				"requiresEndUserCredentials"
 			]
 		},
 		{