@pipeshub-ai/mcp 1.0.0

package/esm/tool-names.js

@@ -0,0 +1,1060 @@
+// Auto-generated at build time
+export const toolNames = [
+    {
+        "name": "user-account-init-auth",
+        "description": "Initialize authentication session\n\nInitialize an authentication session for a user by email address.\nThis is the first step in the multi-step authentication flow.\n<br><br>\n<b>Flow:</b><br>\n1. Call this endpoint with the user's email<br>\n2. Receive a session token in the <code>x-session-token</code> response header<br>\n3. Use the session token in subsequent <code>/authenticate</code> calls<br>\n4. The response includes <code>allowedMethods</code> for the first authentication step\n<br><br>\n<b>Session Token:</b><br>\n- Stored in response header <code>x-session-token</code><br>\n- Required for all subsequent authentication requests<br>\n- Expires after a configured timeout period\n<br><br>\n<b>Multi-Factor Authentication:</b><br>\nIf the organization has MFA configured, you'll need to complete multiple\nauthentication steps. Each step completion returns the next step's allowed methods.\n"
+    },
+    {
+        "name": "user-account-authenticate",
+        "description": "Authenticate user with credentials\n\nAuthenticate a user using the specified method and credentials.\nRequires a valid session token from <code>/initAuth</code>.\n<br><br>\n<b>Credential Formats by Method:</b><br>\n- <code>password</code>: <code>{ \"credentials\": { \"password\": \"your-password\" } }</code><br>\n- <code>otp</code>: <code>{ \"credentials\": { \"otp\": \"123456\" } }</code> (6-digit code, valid for 10 minutes)<br>\n- <code>google</code>: <code>{ \"credentials\": \"google-id-token-string\" }</code><br>\n- <code>microsoft</code>: <code>{ \"credentials\": { \"accessToken\": \"...\", \"idToken\": \"...\" } }</code><br>\n- <code>azureAd</code>: <code>{ \"credentials\": { \"accessToken\": \"...\", \"idToken\": \"...\" } }</code><br>\n- <code>oauth</code>: <code>{ \"credentials\": { \"accessToken\": \"...\", \"idToken\": \"...\" } }</code><br>\n- <code>samlSso</code>: Handled via redirect flow (use <code>/saml/signIn</code> instead)\n<br><br>\n<b>Multi-Step Response:</b><br>\nIf organization uses MFA, successful authentication returns:<br>\n- <code>status: \"success\"</code> with <code>nextStep</code> and <code>allowedMethods</code> for next step\n<br><br>\n<b>Fully Authenticated Response:</b><br>\nAfter completing all steps:<br>\n- <code>message: \"Fully authenticated\"</code> with <code>accessToken</code> (1hr) and <code>refreshToken</code> (7d)\n<br><br>\n<b>Security:</b><br>\n- Account locks after 5 consecutive failed attempts<br>\n- CAPTCHA may be required if enabled (pass <code>cf-turnstile-response</code>)\n"
+    },
+    {
+        "name": "user-account-generate-login-otp",
+        "description": "Generate and send OTP for login\n\nGenerate and send a 6-digit one-time password (OTP) to the user's email.\nUse this endpoint before authenticating with the <code>otp</code> method.\n<br><br>\n<b>OTP Details:</b><br>\n- 6 digits numeric code<br>\n- Valid for <b>10 minutes</b> after generation<br>\n- Sent to user's registered email address\n<br><br>\n<b>Rate Limiting:</b><br>\n- Multiple OTP requests may be rate-limited<br>\n- Wait for the current OTP to expire before requesting a new one\n<br><br>\n<b>CAPTCHA:</b><br>\nIf Cloudflare Turnstile is enabled, include <code>cf-turnstile-response</code> in the request body.\n"
+    },
+    {
+        "name": "user-account-forgot-password",
+        "description": "Request password reset email\n\nSend a password reset link to the user's email.\nThe link contains a time-limited token that can be used to reset the password.\n<br><br>\n<b>Note:</b> This endpoint always returns 200 even if the email doesn't exist (to prevent email enumeration).\n"
+    },
+    {
+        "name": "user-account-logout",
+        "description": "Logout current session\n\nLog out the current user session and invalidate tokens.\n<br><br>\n<b>Effects:</b><br>\n- Invalidates the current access token<br>\n- Clears server-side session data<br>\n- Client should also clear stored tokens locally\n<br><br>\n<b>Note:</b> This endpoint requires the access token, not the refresh token.\n"
+    },
+    {
+        "name": "user-account-reset-password",
+        "description": "Reset password\n\nReset the password for the currently authenticated user.<br><br>\n<b>Overview:</b><br>\nAllows a logged-in user to change their password by providing the current password and a new password.\n"
+    },
+    {
+        "name": "O-auth-exchange-O-auth-code",
+        "description": "Exchange OAuth authorization code for tokens\n\nExchange an OAuth authorization code for access and ID tokens.\nUsed after the OAuth authorization flow redirects back to the application.\n<br><br>\n<b>Supported Providers:</b><br>\n- Generic OAuth 2.0 providers configured in org settings\n<br><br>\n<b>Flow:</b><br>\n1. User is redirected to OAuth provider's authorization URL<br>\n2. User authorizes and is redirected back with a code<br>\n3. This endpoint exchanges the code for tokens<br>\n4. Tokens can then be used with the <code>/userAccount/authenticate</code> endpoint\n"
+    },
+    {
+        "name": "O-auth-provider-oauth-authorize",
+        "description": "Initiate OAuth authorization flow\n\nOAuth 2.0 Authorization Endpoint (RFC 6749 Section 4.1.1).\n<br><br>\nInitiates the authorization code flow. Users are redirected here by OAuth clients\nto authorize access to their account.\n<br><br>\n<b>Flow:</b><br>\n1. Client redirects user to this endpoint with required parameters<br>\n2. If not logged in, user is redirected to PipesHub login<br>\n3. User sees consent page with requested scopes<br>\n4. User grants or denies consent<br>\n5. User is redirected back to client with authorization code\n<br><br>\n<b>PKCE Support (RFC 7636):</b><br>\n- Required for public clients (SPA, mobile apps)<br>\n- Recommended for confidential clients<br>\n- Use S256 method (SHA256 hash of code_verifier)\n<br><br>\n<b>Security:</b><br>\n- Always use HTTPS in production<br>\n- State parameter provides CSRF protection<br>\n- Redirect URI must match registered URIs exactly\n"
+    },
+    {
+        "name": "O-auth-provider-oauth-authorize-consent",
+        "description": "Submit authorization consent\n\nSubmit user's consent decision for OAuth authorization.\n<br><br>\nCalled after user reviews the consent page and makes a decision.\nThis endpoint generates an authorization code if consent is granted.\n<br><br>\n<b>Responses:</b><br>\n- Consent granted: Redirects to client with authorization code<br>\n- Consent denied: Redirects to client with `access_denied` error\n"
+    },
+    {
+        "name": "O-auth-provider-oauth-token",
+        "description": "Exchange authorization code for tokens\n\nOAuth 2.0 Token Endpoint (RFC 6749 Section 4.1.3).\n<br><br>\nExchanges an authorization code, client credentials, or refresh token for access tokens.\n<br><br>\n<b>Grant Types:</b><br>\n- `authorization_code`: Exchange auth code for tokens (user-based)<br>\n- `client_credentials`: Get tokens for machine-to-machine auth<br>\n- `refresh_token`: Get new access token using refresh token\n<br><br>\n<b>Client Authentication:</b><br>\nCan be provided via:<br>\n- HTTP Basic auth: `Authorization: Basic base64(client_id:client_secret)`<br>\n- Request body: `client_id` and `client_secret` parameters\n<br><br>\n<b>PKCE Verification:</b><br>\nIf authorization used PKCE, the `code_verifier` must be provided and will be\nverified against the stored code challenge.\n"
+    },
+    {
+        "name": "O-auth-provider-oauth-revoke",
+        "description": "Revoke an access or refresh token\n\nOAuth 2.0 Token Revocation Endpoint (RFC 7009).\n<br><br>\nRevokes an access token or refresh token, preventing further use.\nRevoking a refresh token also invalidates associated access tokens.\n<br><br>\n<b>Use Cases:</b><br>\n- User logs out of third-party app<br>\n- User revokes app access from account settings<br>\n- Security incident response\n<br><br>\n<b>Note:</b> Returns 200 OK even if token was already revoked or invalid\n(per RFC 7009, to prevent token enumeration).\n"
+    },
+    {
+        "name": "O-auth-provider-oauth-introspect",
+        "description": "Introspect a token\n\nOAuth 2.0 Token Introspection Endpoint (RFC 7662).\n<br><br>\nCheck if a token is active and retrieve its metadata.\n<br><br>\n<b>Use Cases:</b><br>\n- Resource servers validating tokens<br>\n- Debugging token issues<br>\n- Checking token scopes before processing requests\n<br><br>\n<b>Response:</b><br>\n- Active token: Returns `active: true` with token metadata<br>\n- Invalid/expired/revoked token: Returns only `active: false`\n"
+    },
+    {
+        "name": "open-ID-connect-oauth-user-info",
+        "description": "Get authenticated user information\n\nOpenID Connect UserInfo Endpoint.\n<br><br>\nReturns claims about the authenticated user. Requires a valid access token\nwith the `openid` scope.\n<br><br>\n<b>Available Claims:</b><br>\n- `user_id` - User identifier<br>\n- `name`, `given_name`, `family_name` - Name claims (with `profile` scope)<br>\n- `email`, `email_verified` - Email claims (with `email` scope)\n<br><br>\n<b>Authentication:</b><br>\nPass the access token as a Bearer token: `Authorization: Bearer {access_token}`\n"
+    },
+    {
+        "name": "open-ID-connect-openid-configuration",
+        "description": "OpenID Connect Discovery\n\nOpenID Connect Discovery Endpoint (RFC 8414).\n<br><br>\nReturns metadata about the OAuth/OIDC authorization server including\nendpoint URLs, supported features, and capabilities.\n<br><br>\n<b>Use Cases:</b><br>\n- Automatic client configuration<br>\n- Discovering supported features<br>\n- Getting endpoint URLs without hardcoding\n<br><br>\n<b>Note:</b> This endpoint does not require authentication.\n"
+    },
+    {
+        "name": "open-ID-connect-jwks",
+        "description": "JSON Web Key Set\n\nJSON Web Key Set Endpoint (RFC 7517).\n<br><br>\nReturns the public keys used to verify JWT signatures for ID tokens\nand access tokens.\n<br><br>\n<b>Use Cases:</b><br>\n- Verifying ID token signatures<br>\n- Verifying access token signatures (if JWT-based)\n<br><br>\n<b>Note:</b><br>\n- For HS256 (symmetric) signing, this returns empty keys<br>\n- For RS256 (asymmetric) signing, returns public RSA keys<br>\n- Keys should be cached with appropriate TTL\n"
+    },
+    {
+        "name": "O-auth-apps-list-O-auth-apps",
+        "description": "List OAuth apps\n\nList all OAuth apps registered for the organization.\n<br><br>\nReturns a paginated list of apps with their configuration (excluding secrets).\n<br><br>\n<b>Filters:</b><br>\n- `status` - Filter by app status (active, suspended, revoked)<br>\n- `search` - Search by app name\n"
+    },
+    {
+        "name": "O-auth-apps-create-O-auth-app",
+        "description": "Create OAuth app\n\nCreate a new OAuth app for the organization.\n<br><br>\n<b>Important:</b> The client secret is only returned once during creation.\nStore it securely - it cannot be retrieved later. If lost, you'll need to\nregenerate it.\n<br><br>\n<b>Admin Only:</b> Requires admin privileges.\n<br><br>\n<b>Rate Limited:</b> 10 requests per minute.\n"
+    },
+    {
+        "name": "O-auth-apps-list-O-auth-scopes",
+        "description": "List available scopes\n\nList all available OAuth scopes that can be requested by apps.\n<br><br>\nReturns scope names, descriptions, and categories for display\nin app configuration UI.\n"
+    },
+    {
+        "name": "O-auth-apps-get-O-auth-app",
+        "description": "Get OAuth app details\n\nGet details of a specific OAuth app.\n<br><br>\nReturns app configuration without the client secret.\n"
+    },
+    {
+        "name": "O-auth-apps-update-O-auth-app",
+        "description": "Update OAuth app\n\nUpdate an OAuth app's configuration.\n<br><br>\n<b>Admin Only:</b> Requires admin privileges.\n<br><br>\n<b>Rate Limited:</b> 10 requests per minute.\n<br><br>\n<b>Note:</b> To regenerate the client secret, use the\n`/oauth-clients/{appId}/regenerate-secret` endpoint.\n"
+    },
+    {
+        "name": "O-auth-apps-delete-O-auth-app",
+        "description": "Delete OAuth app\n\nDelete (soft delete) an OAuth app.\n<br><br>\nThis marks the app as deleted and revokes all its tokens.\nThe app cannot be restored after deletion.\n<br><br>\n<b>Admin Only:</b> Requires admin privileges.\n<br><br>\n<b>Rate Limited:</b> 10 requests per minute.\n"
+    },
+    {
+        "name": "O-auth-apps-regenerate-O-auth-app-secret",
+        "description": "Regenerate client secret\n\nRegenerate the client secret for an OAuth app.\n<br><br>\nThe old secret is immediately invalidated. Any clients using the old\nsecret will fail to authenticate until updated with the new secret.\n<br><br>\n<b>Important:</b> The new secret is only returned once. Store it securely.\n<br><br>\n<b>Admin Only:</b> Requires admin privileges.\n<br><br>\n<b>Rate Limited:</b> 10 requests per minute.\n"
+    },
+    {
+        "name": "O-auth-apps-suspend-O-auth-app",
+        "description": "Suspend OAuth app\n\nSuspend an OAuth app, preventing it from authenticating or issuing tokens.\n<br><br>\nExisting tokens remain valid until they expire, but no new tokens can\nbe obtained. Use this for temporary access suspension.\n<br><br>\n<b>Admin Only:</b> Requires admin privileges.\n<br><br>\n<b>Rate Limited:</b> 10 requests per minute.\n"
+    },
+    {
+        "name": "O-auth-apps-activate-O-auth-app",
+        "description": "Activate suspended OAuth app\n\nReactivate a suspended OAuth app, allowing it to authenticate and issue tokens again.\n<br><br>\n<b>Admin Only:</b> Requires admin privileges.\n<br><br>\n<b>Rate Limited:</b> 10 requests per minute.\n"
+    },
+    {
+        "name": "O-auth-apps-list-O-auth-app-tokens",
+        "description": "List app tokens\n\nList all active tokens issued to an OAuth app.\n<br><br>\nUseful for monitoring app usage and identifying tokens to revoke.\n<br><br>\n<b>Admin Only:</b> Requires admin privileges.\n"
+    },
+    {
+        "name": "O-auth-apps-revoke-all-O-auth-app-tokens",
+        "description": "Revoke all app tokens\n\nRevoke all tokens (access and refresh) issued to an OAuth app.\n<br><br>\nUse this for emergency access removal or when rotating credentials.\n<br><br>\n<b>Admin Only:</b> Requires admin privileges.\n<br><br>\n<b>Rate Limited:</b> 10 requests per minute.\n"
+    },
+    {
+        "name": "organization-auth-config-get-auth-methods",
+        "description": "Get organization authentication methods\n\nRetrieve the configured authentication methods for the organization.\n<br><br>\n<b>Response Structure:</b><br>\nReturns an array of authentication steps, each containing:<br>\n- <code>order</code>: Step number (1-3)<br>\n- <code>allowedMethods</code>: Array of methods allowed for that step\n<br><br>\n<b>Example Response:</b><br>\n<pre>\n{\n  \"authMethods\": [\n    { \"order\": 1, \"allowedMethods\": [{ \"type\": \"password\" }, { \"type\": \"google\" }] },\n    { \"order\": 2, \"allowedMethods\": [{ \"type\": \"otp\" }] }\n  ]\n}\n</pre>\n<br>\n<b>Admin Access Required:</b> Only organization admins can view auth configuration.\n"
+    },
+    {
+        "name": "organization-auth-config-update-auth-method",
+        "description": "Update organization authentication methods\n\nUpdate the authentication methods configuration for an organization.\nThis allows admins to configure single or multi-factor authentication.\n<br><br>\n<b>Validation Rules:</b><br>\n- Minimum 1 step, maximum 3 steps<br>\n- Each step must have a unique order (1, 2, or 3)<br>\n- No duplicate methods within the same step<br>\n- No method can appear in multiple steps<br>\n- Each step must have at least one allowed method\n<br><br>\n<b>Available Methods:</b><br>\n- <code>password</code>: Email/password authentication<br>\n- <code>otp</code>: One-time password via email<br>\n- <code>google</code>: Google OAuth 2.0<br>\n- <code>microsoft</code>: Microsoft OAuth 2.0<br>\n- <code>azureAd</code>: Azure Active Directory<br>\n- <code>samlSso</code>: SAML 2.0 Single Sign-On<br>\n- <code>oauth</code>: Generic OAuth 2.0 provider\n<br><br>\n<b>Example - Single Factor (Password or Google):</b><br>\n<pre>\n{\n  \"authMethods\": [\n    { \"order\": 1, \"allowedMethods\": [{ \"type\": \"password\" }, { \"type\": \"google\" }] }\n  ]\n}\n</pre>\n<br>\n<b>Example - Two Factor (Password + OTP):</b><br>\n<pre>\n{\n  \"authMethods\": [\n    { \"order\": 1, \"allowedMethods\": [{ \"type\": \"password\" }] },\n    { \"order\": 2, \"allowedMethods\": [{ \"type\": \"otp\" }] }\n  ]\n}\n</pre>\n<br>\n<b>Admin Access Required:</b> Only organization admins can update auth configuration.\n"
+    },
+    {
+        "name": "organization-auth-config-set-up-auth-config",
+        "description": "Set up auth configuration\n\nSet up or initialize the organization's authentication configuration.\n"
+    },
+    {
+        "name": "saml-sign-in-via-SAML",
+        "description": "Initiate SAML sign-in flow\n\nInitiate SAML Single Sign-On authentication by redirecting to the Identity Provider (IDP).\n<br><br>\n<b>Usage:</b><br>\n1. Call <code>/userAccount/initAuth</code> to get a session token<br>\n2. If <code>samlSso</code> is in the allowed methods, redirect the user to this endpoint<br>\n3. User authenticates with their IDP<br>\n4. IDP redirects back to <code>/saml/signIn/callback</code> with SAML response<br>\n5. Callback completes authentication and returns tokens\n<br><br>\n<b>Note:</b> This is a browser redirect endpoint, not a typical API call.\nThe user's browser should be redirected to this URL.\n<br><br>\n<b>Prerequisites:</b><br>\n- Organization must have SAML SSO configured via <code>/saml/updateAppConfig</code><br>\n- User must belong to an organization with SAML enabled\n"
+    },
+    {
+        "name": "saml-saml-sign-in-callback",
+        "description": "SAML sign-in callback\n\nHandle the SAML Identity Provider callback after user authentication. This endpoint receives the SAML assertion from the IdP.\n"
+    },
+    {
+        "name": "users-get-all-users",
+        "description": "Get all users\n\nRetrieve a paginated list of all users in the organization.<br><br>\n<b>Overview:</b><br>\nThis endpoint returns all active users in your organization. It's the primary endpoint for listing and displaying users in admin dashboards, user directories, and selection interfaces.<br><br>\n<b>Response Data:</b><br>\n<ul>\n<li>User profile information (name, email, designation)</li>\n<li>Account status (active, pending invitation, disabled)</li>\n<li>Login history (hasLoggedIn flag)</li>\n<li>Timestamps (createdAt, updatedAt)</li>\n</ul>\n<b>Privacy Controls:</b><br>\n<ul>\n<li>Email addresses may be masked based on organization settings</li>\n<li>Sensitive fields (password, tokens) are never exposed</li>\n<li>Deleted users are excluded from results</li>\n</ul>\n<b>Performance Notes:</b><br>\n<ul>\n<li>Results are cached for improved performance</li>\n<li>For large organizations, consider using pagination</li>\n<li>Use <code>/users/by-ids</code> for fetching specific users</li>\n</ul>\n"
+    },
+    {
+        "name": "users-create-user",
+        "description": "Create a new user\n\nCreate a new user account in the organization and optionally send an invitation email.<br><br>\n<b>Overview:</b><br>\nThis endpoint creates a new user account. The user will be added to the organization but won't have a password set until they complete the invitation flow or are assigned one by an admin.<br><br>\n<b>Invitation Flow:</b><br>\n<ol>\n<li>Admin creates user with this endpoint</li>\n<li>System generates invitation token</li>\n<li>User receives invitation email (if sendInvite is true)</li>\n<li>User clicks link and sets their password</li>\n<li>User can now log in normally</li>\n</ol>\n<b>Validation Rules:</b><br>\n<ul>\n<li><code>fullName</code>: Required, 1-100 characters</li>\n<li><code>email</code>: Required, valid email format, must be unique in org</li>\n<li><code>mobile</code>: Optional, format: +[country][number] (10-15 digits)</li>\n<li><code>designation</code>: Optional, job title or role</li>\n</ul>\n<b>Side Effects:</b><br>\n<ul>\n<li>User is automatically added to the \"everyone\" group</li>\n<li>Invitation email sent if <code>sendInvite: true</code></li>\n<li>User creation event published to event bus</li>\n<li>Audit log entry created</li>\n</ul>\n<b>Authorization:</b><br>\nOnly organization administrators can create new users.\n"
+    },
+    {
+        "name": "users-get-user-by-id",
+        "description": "Get user by ID\n\nRetrieve detailed information about a specific user by their unique identifier.<br><br>\n<b>Overview:</b><br>\nThis endpoint returns the complete user profile for the specified user ID. Use this to display user details in profiles, settings pages, or when you need full user information.<br><br>\n<b>Response Data:</b><br>\n<ul>\n<li>Basic info: fullName, firstName, lastName, email</li>\n<li>Contact: mobile, address</li>\n<li>Professional: designation</li>\n<li>Status: hasLoggedIn, isDeleted, accountStatus</li>\n<li>Metadata: createdAt, updatedAt, createdBy</li>\n</ul>\n<b>Privacy Notes:</b><br>\n<ul>\n<li>Email may be masked for non-admin users based on org settings</li>\n<li>Password and sensitive tokens are never returned</li>\n<li>Display picture URL returned if set</li>\n</ul>\n<b>Related Endpoints:</b><br>\n<ul>\n<li><code>GET /users/{id}/email</code> - Get just the email (admin only)</li>\n<li><code>GET /users/fetch/with-groups</code> - Get user with group memberships</li>\n</ul>\n"
+    },
+    {
+        "name": "users-update-user",
+        "description": "Update user\n\nUpdate user profile information. Users can update their own profile, admins can update any user.<br><br>\n<b>Overview:</b><br>\nThis endpoint allows updating user profile fields. The scope of allowed updates depends on the requester's role and relationship to the user being updated.<br><br>\n<b>Authorization Matrix:</b><br>\n<ul>\n<li><b>Self-update:</b> Users can update their own fullName, mobile, designation, address</li>\n<li><b>Admin-update:</b> Admins can update any field for any user</li>\n<li><b>Email changes:</b> Require admin privileges and trigger re-verification</li>\n</ul>\n<b>Updatable Fields:</b><br>\n<ul>\n<li><code>fullName</code>: Display name (also updates firstName/lastName if parsed)</li>\n<li><code>firstName</code>: First name only</li>\n<li><code>lastName</code>: Last name only</li>\n<li><code>email</code>: Email address (admin only, triggers verification)</li>\n<li><code>mobile</code>: Phone number with country code</li>\n<li><code>designation</code>: Job title</li>\n<li><code>address</code>: Full address object</li>\n</ul>\n<b>Validation Rules:</b><br>\n<ul>\n<li>Email must be unique within the organization</li>\n<li>Mobile must match pattern: +[country][number]</li>\n<li>Name fields: 1-100 characters</li>\n</ul>\n<b>Side Effects:</b><br>\n<ul>\n<li>User update event published to event bus</li>\n<li>Audit log entry created for admin updates</li>\n<li>Email change triggers verification email</li>\n</ul>\n"
+    },
+    {
+        "name": "users-delete-user",
+        "description": "Delete user\n\nSoft delete a user from the organization. The user account is deactivated but data is retained for audit purposes.<br><br>\n<b>Overview:</b><br>\nThis endpoint performs a soft delete on a user account. The user is marked as deleted and can no longer access the system, but their data is retained for compliance and audit purposes.<br><br>\n<b>What Happens on Delete:</b><br>\n<ol>\n<li>User's <code>isDeleted</code> flag is set to true</li>\n<li>User's password is cleared</li>\n<li>User is removed from all user groups</li>\n<li>User's active sessions are invalidated</li>\n<li>User deletion event is published</li>\n</ol>\n<b>Restrictions:</b><br>\n<ul>\n<li>Cannot delete organization admins (demote first)</li>\n<li>Cannot delete the organization owner</li>\n<li>Cannot delete yourself through this endpoint</li>\n<li>Cannot delete already-deleted users</li>\n</ul>\n<b>Data Retention:</b><br>\n<ul>\n<li>User profile data is retained (soft delete)</li>\n<li>User's documents and content remain with updated ownership</li>\n<li>Audit logs are preserved</li>\n<li>Data can be permanently purged by super admin if required</li>\n</ul>\n<b>Recovery:</b><br>\nDeleted users can be restored by organization admins within a configurable retention period.\n"
+    },
+    {
+        "name": "users-get-user-email-by-id",
+        "description": "Get user email by ID\n\nRetrieve the email address for a specific user. This is a dedicated endpoint for email lookup with proper access controls.<br><br>\n<b>Overview:</b><br>\nThis endpoint provides direct access to a user's email address. It exists separately from the main user endpoint to allow granular permission control over email visibility.<br><br>\n<b>Use Cases:</b><br>\n<ul>\n<li>Admin communication workflows</li>\n<li>Invitation and notification systems</li>\n<li>Email-based user lookup</li>\n<li>Contact information export</li>\n</ul>\n<b>Privacy Considerations:</b><br>\n<ul>\n<li>Only organization admins can access this endpoint</li>\n<li>Access is logged for audit purposes</li>\n<li>Consider GDPR/privacy regulations when exposing emails</li>\n</ul>\n<b>Authorization:</b><br>\nRequires admin privileges. Regular users should use the main user endpoint which may mask emails based on organization settings.\n"
+    },
+    {
+        "name": "users-update-email",
+        "description": "Update user email\n\nUpdate the email address of a user.\n"
+    },
+    {
+        "name": "users-upload-user-display-picture",
+        "description": "Upload display picture\n\nUpload or update the display picture (avatar) for the authenticated user.<br><br>\n<b>Overview:</b><br>\nThis endpoint allows users to upload their profile picture. The image is processed, resized, and stored for use throughout the application.<br><br>\n<b>File Requirements:</b><br>\n<ul>\n<li><b>Allowed types:</b> PNG, JPEG, JPG, WebP, GIF</li>\n<li><b>Maximum size:</b> 1MB (1,048,576 bytes)</li>\n<li><b>Recommended dimensions:</b> 256x256 pixels or larger</li>\n<li><b>Aspect ratio:</b> Square recommended (will be cropped to square)</li>\n</ul>\n<b>Image Processing:</b><br>\n<ul>\n<li>Images are automatically resized to standard dimensions</li>\n<li>Converted to JPEG for consistency and smaller file size</li>\n<li>Multiple sizes may be generated (thumbnail, standard, large)</li>\n<li>Original is not preserved</li>\n</ul>\n<b>Side Effects:</b><br>\n<ul>\n<li>Previous display picture is replaced</li>\n<li>Cached images are invalidated</li>\n<li>CDN cache may take time to update</li>\n</ul>\n<b>Authorization:</b><br>\nUsers can only upload their own display picture. Admins cannot upload on behalf of other users.\n"
+    },
+    {
+        "name": "users-get-user-display-picture",
+        "description": "Get display picture\n\nRetrieve the current user's display picture image.<br><br>\n<b>Overview:</b><br>\nThis endpoint returns the user's profile picture as binary image data. Use this for displaying the user's avatar in the application.<br><br>\n<b>Response Format:</b><br>\n<ul>\n<li>Returns raw image data (not JSON)</li>\n<li>Content-Type header indicates image format (typically image/jpeg)</li>\n<li>Suitable for use directly in &lt;img&gt; src or CSS background</li>\n</ul>\n<b>Caching:</b><br>\n<ul>\n<li>Response includes cache headers for browser caching</li>\n<li>Use ETag for conditional requests</li>\n<li>Cache invalidated when picture is updated</li>\n</ul>\n<b>Alternative:</b><br>\nFor signed URL access, use the user profile endpoint which returns a <code>displayPictureUrl</code> field.\n"
+    },
+    {
+        "name": "users-remove-user-display-picture",
+        "description": "Remove display picture\n\nRemove the current user's display picture and revert to default avatar.<br><br>\n<b>Overview:</b><br>\nThis endpoint permanently removes the user's uploaded profile picture. After removal, the user will display a default avatar (typically initials or generic icon).<br><br>\n<b>What Happens:</b><br>\n<ul>\n<li>Profile picture file is deleted from storage</li>\n<li>User profile updated to remove picture reference</li>\n<li>Cached images invalidated</li>\n<li>Default avatar will be shown in UI</li>\n</ul>\n<b>Note:</b><br>\nThis action is immediate and irreversible. To restore a picture, user must upload a new one.\n"
+    },
+    {
+        "name": "users-bulk-invite-users",
+        "description": "Bulk invite users\n\nInvite multiple users to the organization in a single operation. Ideal for onboarding entire teams at once.<br><br>\n<b>Overview:</b><br>\nThis endpoint creates user accounts for multiple email addresses and sends invitation emails to all of them. It's the most efficient way to add multiple users to your organization.<br><br>\n<b>Invitation Flow:</b><br>\n<ol>\n<li>Validate all email addresses</li>\n<li>Check for existing accounts (skip duplicates)</li>\n<li>Create user accounts for new emails</li>\n<li>Restore any previously deleted accounts</li>\n<li>Add users to specified groups (optional)</li>\n<li>Send invitation emails to all new users</li>\n</ol>\n<b>Requirements:</b><br>\n<ul>\n<li><b>Account Type:</b> Business accounts only (not individual)</li>\n<li><b>SMTP:</b> Email configuration must be set up</li>\n<li><b>Authorization:</b> Admin privileges required</li>\n</ul>\n<b>Email Processing:</b><br>\n<ul>\n<li>Duplicate emails are automatically skipped</li>\n<li>Invalid email formats are rejected</li>\n<li>Existing users are not re-invited (use resend-invite)</li>\n<li>Previously deleted users are restored</li>\n</ul>\n<b>Response Details:</b><br>\nResponse includes count of successful invites and any failures with reasons.\n"
+    },
+    {
+        "name": "users-resend-user-invite",
+        "description": "Resend user invite\n\nResend the invitation email to a user who hasn't completed their account setup.<br><br>\n<b>Overview:</b><br>\nThis endpoint resends the invitation email to a user who was previously invited but hasn't logged in yet. Useful when the original invitation email was lost, expired, or ended up in spam.<br><br>\n<b>When to Use:</b><br>\n<ul>\n<li>User didn't receive original invitation</li>\n<li>Invitation link expired</li>\n<li>User forgot to complete setup</li>\n<li>Email went to spam folder</li>\n</ul>\n<b>Requirements:</b><br>\n<ul>\n<li>User must exist in the system</li>\n<li>User must NOT have logged in yet (hasLoggedIn: false)</li>\n<li>SMTP configuration must be active</li>\n<li>Admin privileges required</li>\n</ul>\n<b>What Happens:</b><br>\n<ul>\n<li>Generates a new invitation token</li>\n<li>Invalidates any previous invitation links</li>\n<li>Sends new invitation email</li>\n<li>Resets invitation expiry timer</li>\n</ul>\n"
+    },
+    {
+        "name": "users-list-users-graph",
+        "description": "List users (paginated with graph data)\n\nRetrieve a paginated list of users with enhanced search capabilities using the graph service.<br><br>\n<b>Overview:</b><br>\nThis endpoint provides advanced user listing with full-text search, pagination, and optional relationship data from the knowledge graph. It's optimized for large organizations with thousands of users.<br><br>\n<b>Search Capabilities:</b><br>\n<ul>\n<li>Full-text search across name and email</li>\n<li>Fuzzy matching for typo tolerance</li>\n<li>Results ranked by relevance</li>\n</ul>\n<b>Use Cases:</b><br>\n<ul>\n<li>User directory with search</li>\n<li>Autocomplete user selection</li>\n<li>Admin user management lists</li>\n<li>User analytics dashboards</li>\n</ul>\n<b>Performance:</b><br>\n<ul>\n<li>Powered by graph database for fast queries</li>\n<li>Supports pagination for large datasets</li>\n<li>Results cached for repeated queries</li>\n</ul>\n<b>vs /users endpoint:</b><br>\nUse this endpoint when you need advanced search or are dealing with large user bases. Use <code>/users</code> for simple full-list retrieval.\n"
+    },
+    {
+        "name": "users-unblock-user",
+        "description": "Unblock a user in organization\n\nUnblock a previously blocked user within the authenticated administrator's organization.<br><br>\n\n<b>Overview:</b><br>\nThis endpoint updates the user's credential record by setting <code>isBlocked</code> to <code>false</code> \nand resetting <code>wrongCredentialCount</code> to <code>0</code>.<br><br>\n\n<b>Authorization:</b><br>\n<ul>\n<li><b>Admin only:</b> Only organization administrators can unblock users</li>\n<li>Requires a valid Bearer token</li>\n</ul>\n\n<b>Validation & Conditions:</b><br>\n<ul>\n<li>User must belong to the same <code>orgId</code> as the authenticated admin</li>\n<li>User must currently be blocked (<code>isBlocked: true</code>)</li>\n<li>User must not be deleted (<code>isDeleted: false</code>)</li>\n</ul>\n\n<b>Note:</b> If the user is not blocked or does not exist in the organization, a 404 response is returned.\n"
+    },
+    {
+        "name": "users-get-all-users-with-groups",
+        "description": "Get all users with groups\n\nRetrieve all users in the organization along with their group memberships.\n"
+    },
+    {
+        "name": "users-get-users-by-ids",
+        "description": "Get users by IDs\n\nRetrieve multiple users by their IDs in a single request.\n"
+    },
+    {
+        "name": "users-update-full-name",
+        "description": "Update user full name\n\nUpdate the full name of a user.\n"
+    },
+    {
+        "name": "users-update-first-name",
+        "description": "Update user first name\n\nUpdate the first name of a user.\n"
+    },
+    {
+        "name": "users-update-last-name",
+        "description": "Update user last name\n\nUpdate the last name of a user.\n"
+    },
+    {
+        "name": "users-update-designation",
+        "description": "Update user designation\n\nUpdate the designation/title of a user.\n"
+    },
+    {
+        "name": "users-admin-check",
+        "description": "Check if user is admin\n\nCheck whether the specified user has admin privileges. Returns 200 OK if the user is an admin.\n"
+    },
+    {
+        "name": "users-get-user-teams-via-users",
+        "description": "Get user teams\n\nRetrieve teams associated with the authenticated user.\n"
+    },
+    {
+        "name": "teams-create-team",
+        "description": "Create a team\n\nCreate a new team within the organization for project collaboration and resource sharing.<br><br>\n<b>Overview:</b><br>\nTeams are collaborative units that group users together for specific projects, departments, or initiatives. Teams have their own resources, permissions, and member hierarchies.<br><br>\n<b>Team Structure:</b><br>\n<ul>\n<li><b>Owner:</b> Creator of the team, full administrative control</li>\n<li><b>Admins:</b> Can manage members and settings</li>\n<li><b>Members:</b> Standard access to team resources</li>\n<li><b>Viewers:</b> Read-only access</li>\n</ul>\n<b>What Gets Created:</b><br>\n<ul>\n<li>Team entity with unique identifier</li>\n<li>Owner role automatically assigned to creator</li>\n<li>Team workspace for shared resources</li>\n<li>Default permission settings</li>\n</ul>\n<b>Initial Members:</b><br>\nYou can optionally add initial members with their roles during creation using the <code>userRoles</code> array.<br><br>\n<b>Validation:</b><br>\n<ul>\n<li>Team name is required and must be unique in the org</li>\n<li>Name: 1-100 characters</li>\n<li>Description: Optional, max 500 characters</li>\n</ul>\n"
+    },
+    {
+        "name": "teams-list-teams",
+        "description": "List teams\n\nRetrieve all teams in the organization with optional search and pagination.<br><br>\n<b>Overview:</b><br>\nThis endpoint returns teams the authenticated user can access. Admins see all teams; regular users see teams they're members of.<br><br>\n<b>Response Data per Team:</b><br>\n<ul>\n<li>Team metadata (name, description)</li>\n<li>Member count</li>\n<li>Owner information</li>\n<li>Creation timestamp</li>\n</ul>\n<b>Search:</b><br>\nThe search parameter performs fuzzy matching on team names and descriptions.<br><br>\n<b>Visibility Rules:</b><br>\n<ul>\n<li><b>Admins:</b> See all organization teams</li>\n<li><b>Users:</b> See only teams they belong to</li>\n</ul>\n<b>Sorting:</b><br>\nResults are sorted by name alphabetically by default.\n"
+    },
+    {
+        "name": "teams-get-team-by-id",
+        "description": "Get team by ID\n\nRetrieve detailed information about a specific team.<br><br>\n<b>Overview:</b><br>\nReturns complete team details including metadata, member list with roles, and resource information. Use this for team profile pages and detailed views.<br><br>\n<b>Response Includes:</b><br>\n<ul>\n<li>Team metadata (name, description, slug)</li>\n<li>Owner and creator information</li>\n<li>Member count and list (with pagination)</li>\n<li>Team settings and permissions</li>\n<li>Creation and modification timestamps</li>\n</ul>\n<b>Authorization:</b><br>\n<ul>\n<li>Team members can view their team</li>\n<li>Organization admins can view any team</li>\n</ul>\n"
+    },
+    {
+        "name": "teams-update-team",
+        "description": "Update team\n\nUpdate team metadata and settings.<br><br>\n<b>Overview:</b><br>\nThis endpoint allows updating team properties like name and description. Member management is handled through separate endpoints.<br><br>\n<b>Updatable Fields:</b><br>\n<ul>\n<li><code>name</code>: Team display name (must remain unique)</li>\n<li><code>description</code>: Team description</li>\n</ul>\n<b>Authorization:</b><br>\n<ul>\n<li><b>Team Owner:</b> Full update access</li>\n<li><b>Team Admin:</b> Can update name and description</li>\n<li><b>Org Admin:</b> Can update any team</li>\n</ul>\n<b>Side Effects:</b><br>\n<ul>\n<li>Team update event published</li>\n<li>Team slug may be regenerated if name changes</li>\n<li>Cached team data invalidated</li>\n</ul>\n"
+    },
+    {
+        "name": "teams-delete-team",
+        "description": "Delete team\n\nDelete a team from the organization.<br><br>\n<b>Behavior:</b><br>\n<ul>\n<li>Team is soft-deleted (isDeleted: true)</li>\n<li>Team members lose access to team resources</li>\n<li>Team can be restored by admin if needed</li>\n</ul>\n<b>Restrictions:</b><br>\n<ul>\n<li>Only team owner or organization admin can delete</li>\n<li>Team must have no active resources (configurable)</li>\n</ul>\n"
+    },
+    {
+        "name": "teams-get-user-teams",
+        "description": "Get current user's teams\n\nRetrieve all teams that the authenticated user is a member of.<br><br>\n<b>Response Details:</b><br>\n<ul>\n<li>Includes teams where user is owner, admin, member, or viewer</li>\n<li>Returns user's role in each team</li>\n<li>Sorted by most recently accessed</li>\n</ul>\n<b>Use Cases:</b><br>\n<ul>\n<li>Populating team switcher in UI</li>\n<li>Dashboard team list</li>\n<li>Access control checks</li>\n</ul>\n"
+    },
+    {
+        "name": "teams-get-team-users",
+        "description": "Get users in team\n\nRetrieve all users that belong to a specific team.\n"
+    },
+    {
+        "name": "teams-add-users-to-team",
+        "description": "Add users to team\n\nAdd one or more users to a team.\n"
+    },
+    {
+        "name": "teams-remove-user-from-team",
+        "description": "Remove user from team\n\nRemove a user from a team.\n"
+    },
+    {
+        "name": "teams-update-team-users-permissions",
+        "description": "Update team users permissions\n\nUpdate permissions for users within a team.\n"
+    },
+    {
+        "name": "teams-get-user-created-teams",
+        "description": "Get user created teams\n\nRetrieve teams created by the authenticated user.\n"
+    },
+    {
+        "name": "organizations-check-org-exists",
+        "description": "Check if organization exists\n\nCheck if any organization has been created in the system. This is typically the first API call made during initial setup.<br><br>\n<b>Overview:</b><br>\nThis public endpoint determines whether the system has been initialized with an organization. Used by the frontend to decide whether to show the setup wizard or the login screen.<br><br>\n<b>Use Cases:</b><br>\n<ul>\n<li>First-time setup detection</li>\n<li>Onboarding flow decisions</li>\n<li>System initialization checks</li>\n</ul>\n<b>Response:</b><br>\n<ul>\n<li><code>exists: true</code> - Organization exists, show login</li>\n<li><code>exists: false</code> - No organization, show setup wizard</li>\n</ul>\n<b>Note:</b> This endpoint requires no authentication and is publicly accessible.\n"
+    },
+    {
+        "name": "organizations-create-organization",
+        "description": "Create organization\n\nCreate a new organization and its first admin user. This is the initial setup endpoint for new PipesHub installations.<br><br>\n<b>Overview:</b><br>\nThis endpoint performs the complete initial setup of a PipesHub instance, including creating the organization entity and its first administrator account. Should only be called once during initial setup.<br><br>\n<b>Setup Flow:</b><br>\n<ol>\n<li>Frontend calls <code>/org/exists</code> to check if setup is needed</li>\n<li>If no organization exists, show setup wizard</li>\n<li>Collect organization and admin details</li>\n<li>Call this endpoint to create organization</li>\n<li>User is automatically logged in as admin</li>\n</ol>\n<b>What Gets Created:</b><br>\n<ul>\n<li>Organization entity with provided details</li>\n<li>Admin user account with provided credentials</li>\n<li>Default user groups (admin, everyone)</li>\n<li>Default system settings</li>\n<li>Initial authentication configuration</li>\n</ul>\n<b>Account Types:</b><br>\n<ul>\n<li><code>individual</code>: Single-user account, limited team features</li>\n<li><code>business</code>: Multi-user organization with full features</li>\n</ul>\n<b>Security:</b><br>\n<ul>\n<li>This endpoint only works if no organization exists</li>\n<li>Password must meet security requirements</li>\n<li>Email verification may be required based on config</li>\n</ul>\n"
+    },
+    {
+        "name": "organizations-get-current-organization",
+        "description": "Get current organization\n\nRetrieve details about the authenticated user's organization.<br><br>\n<b>Overview:</b><br>\nThis endpoint returns complete information about the current user's organization, including profile data, settings, and configuration. Use this for organization profile pages and settings.<br><br>\n<b>Response Includes:</b><br>\n<ul>\n<li>Organization profile (name, email, address)</li>\n<li>Account type and billing status</li>\n<li>Feature flags and limits</li>\n<li>Branding settings (logo, colors)</li>\n<li>Creation and modification timestamps</li>\n</ul>\n<b>Use Cases:</b><br>\n<ul>\n<li>Organization profile pages</li>\n<li>Settings and configuration screens</li>\n<li>Billing and subscription displays</li>\n<li>White-label branding retrieval</li>\n</ul>\n<b>Note:</b><br>\nAll authenticated users can access this endpoint to view their organization's details.\n"
+    },
+    {
+        "name": "organizations-update-organization",
+        "description": "Update organization\n\nUpdate organization profile and settings information.<br><br>\n<b>Overview:</b><br>\nThis endpoint allows administrators to update the organization's profile information, contact details, and address. Used in the organization settings section of the admin panel.<br><br>\n<b>Updatable Fields:</b><br>\n<ul>\n<li><code>registeredName</code>: Official registered/legal name of the organization</li>\n<li><code>shortName</code>: Short display name used in UI</li>\n<li><code>phoneNumber</code>: Primary contact phone number</li>\n<li><code>permanentAddress</code>: Full address object with street, city, state, country, postal code</li>\n</ul>\n<b>Restrictions:</b><br>\n<ul>\n<li>Only organization admins can perform updates</li>\n<li>Contact email cannot be changed through this endpoint</li>\n<li>Account type cannot be changed after creation</li>\n</ul>\n<b>Side Effects:</b><br>\n<ul>\n<li>Organization update event is published</li>\n<li>Cached organization data is invalidated</li>\n<li>Changes are reflected immediately across all services</li>\n</ul>\n<b>Validation:</b><br>\n<ul>\n<li>Phone number must be valid international format</li>\n<li>Address fields have maximum length constraints</li>\n<li>Names cannot be empty if provided</li>\n</ul>\n"
+    },
+    {
+        "name": "organizations-delete-organization",
+        "description": "Delete organization\n\nPermanently delete an organization and all associated data.<br><br>\n<b>WARNING:</b> This action is <b>irreversible</b>.<br><br>\n<b>Data Deleted:</b><br>\n<ul>\n<li>All user accounts in the organization</li>\n<li>All teams and user groups</li>\n<li>All documents and storage data</li>\n<li>All configuration and settings</li>\n</ul>\n<b>Requirements:</b><br>\n<ul>\n<li>Must be the organization owner (super admin)</li>\n<li>Must provide confirmation parameter</li>\n<li>All active subscriptions must be cancelled first</li>\n</ul>\n"
+    },
+    {
+        "name": "organizations-upload-organization-logo",
+        "description": "Upload organization logo\n\nUpload or update the organization's logo image.<br><br>\n<b>Supported Formats:</b><br>\n<ul>\n<li>PNG (recommended for transparency)</li>\n<li>JPG/JPEG</li>\n<li>SVG</li>\n<li>WebP</li>\n</ul>\n<b>Requirements:</b><br>\n<ul>\n<li>Maximum file size: 5MB</li>\n<li>Recommended dimensions: 256x256 pixels or higher</li>\n<li>Square aspect ratio recommended</li>\n</ul>\n<b>Side Effects:</b><br>\n<ul>\n<li>Previous logo is replaced</li>\n<li>Multiple sizes may be generated for different use cases</li>\n</ul>\n"
+    },
+    {
+        "name": "organizations-get-organization-logo",
+        "description": "Get organization logo\n\nRetrieve the organization's logo image or URL.<br><br>\n<b>Response Formats:</b><br>\n<ul>\n<li>Returns a signed URL to access the logo</li>\n<li>URL is valid for a limited time (typically 1 hour)</li>\n</ul>\n<b>Use Cases:</b><br>\n<ul>\n<li>Displaying logo in navigation/header</li>\n<li>Email templates</li>\n<li>White-label branding</li>\n</ul>\n"
+    },
+    {
+        "name": "organizations-delete-organization-logo",
+        "description": "Delete organization logo\n\nRemove the organization's custom logo.<br><br>\n<b>Behavior:</b><br>\n<ul>\n<li>Logo file is permanently deleted from storage</li>\n<li>Organization reverts to default/placeholder logo</li>\n</ul>\n"
+    },
+    {
+        "name": "organizations-get-onboarding-status",
+        "description": "Get onboarding status\n\nRetrieve the organization's onboarding progress and status.<br><br>\n<b>Response Details:</b><br>\n<ul>\n<li>Current onboarding step</li>\n<li>Completion status of each step</li>\n<li>Overall completion percentage</li>\n</ul>\n<b>Onboarding Steps:</b><br>\n<ul>\n<li>Organization profile setup</li>\n<li>Admin account configuration</li>\n<li>Invite team members</li>\n<li>Connect integrations</li>\n<li>Configure settings</li>\n</ul>\n"
+    },
+    {
+        "name": "organizations-update-onboarding-status",
+        "description": "Update onboarding status\n\nUpdate the organization's onboarding progress.<br><br>\n<b>Use Cases:</b><br>\n<ul>\n<li>Mark a step as completed</li>\n<li>Skip optional steps</li>\n<li>Complete entire onboarding</li>\n</ul>\n<b>Behavior:</b><br>\n<ul>\n<li>Steps must be completed in order (unless skippable)</li>\n<li>Completing all required steps marks onboarding as complete</li>\n</ul>\n"
+    },
+    {
+        "name": "user-groups-create-user-group",
+        "description": "Create user group\n\nCreate a new user group within the organization.<br><br>\n<b>Group Types:</b><br>\n<ul>\n<li><code>admin</code> - Administrative group with elevated privileges</li>\n<li><code>standard</code> - Regular user group</li>\n<li><code>everyone</code> - Automatically includes all organization users</li>\n<li><code>custom</code> - Custom group with manual membership management</li>\n</ul>\n<b>Validation Rules:</b><br>\n<ul>\n<li>Group name must be unique within the organization</li>\n<li>Group name is required and cannot be empty</li>\n<li>Type must be one of the allowed values</li>\n</ul>\n<b>Side Effects:</b><br>\n<ul>\n<li>Creates a unique slug from the group name</li>\n<li>Sets createdBy to the authenticated user</li>\n</ul>\n"
+    },
+    {
+        "name": "user-groups-get-all-user-groups",
+        "description": "Get all user groups\n\nRetrieve all user groups in the organization.<br><br>\n<b>Response Details:</b><br>\n<ul>\n<li>Returns all groups including admin, standard, everyone, and custom types</li>\n<li>Groups are returned with their member counts</li>\n<li>Soft-deleted groups are excluded by default</li>\n</ul>\n<b>Use Cases:</b><br>\n<ul>\n<li>Populating group selection dropdowns</li>\n<li>Managing group memberships</li>\n<li>Access control configuration</li>\n</ul>\n"
+    },
+    {
+        "name": "user-groups-get-user-group-by-id",
+        "description": "Get user group by ID\n\nRetrieve detailed information about a specific user group.<br><br>\n<b>Response Includes:</b><br>\n<ul>\n<li>Group metadata (name, type, description)</li>\n<li>Member count</li>\n<li>Creation and modification timestamps</li>\n<li>Creator information</li>\n</ul>\n"
+    },
+    {
+        "name": "user-groups-update-user-group",
+        "description": "Update user group\n\nUpdate an existing user group's information.<br><br>\n<b>Updatable Fields:</b><br>\n<ul>\n<li><code>name</code> - Display name (must remain unique)</li>\n<li><code>description</code> - Group description</li>\n</ul>\n<b>Note:</b> Group type cannot be changed after creation.\n"
+    },
+    {
+        "name": "user-groups-delete-user-group",
+        "description": "Delete user group\n\nSoft delete a user group.<br><br>\n<b>Behavior:</b><br>\n<ul>\n<li>Group is marked as deleted (isDeleted: true)</li>\n<li>Group members are not affected</li>\n<li>Group can be restored by admin if needed</li>\n</ul>\n<b>Restrictions:</b><br>\n<ul>\n<li>Cannot delete system groups (admin, everyone)</li>\n<li>Requires admin privileges</li>\n</ul>\n"
+    },
+    {
+        "name": "user-groups-add-users-to-group",
+        "description": "Add users to group\n\nAdd one or more users to a user group.<br><br>\n<b>Behavior:</b><br>\n<ul>\n<li>Users already in the group are silently skipped</li>\n<li>Invalid user IDs are reported in the response</li>\n<li>Operation is atomic - all valid users are added together</li>\n</ul>\n<b>Validation:</b><br>\n<ul>\n<li>All user IDs must be valid MongoDB ObjectIds</li>\n<li>Users must belong to the same organization</li>\n<li>Group must exist and not be deleted</li>\n</ul>\n"
+    },
+    {
+        "name": "user-groups-remove-users-from-group",
+        "description": "Remove users from group\n\nRemove one or more users from a user group.<br><br>\n<b>Behavior:</b><br>\n<ul>\n<li>Users not in the group are silently skipped</li>\n<li>Operation is atomic - all specified users are removed together</li>\n</ul>\n<b>Restrictions:</b><br>\n<ul>\n<li>Cannot remove users from \"everyone\" group type</li>\n<li>Cannot remove the last admin from admin group</li>\n</ul>\n"
+    },
+    {
+        "name": "user-groups-get-groups-for-user",
+        "description": "Get groups for a user\n\nRetrieve all user groups that a specific user belongs to.<br><br>\n<b>Response Details:</b><br>\n<ul>\n<li>Includes all group types (admin, standard, everyone, custom)</li>\n<li>Returns group metadata for each membership</li>\n</ul>\n<b>Use Cases:</b><br>\n<ul>\n<li>Displaying user's group memberships in profile</li>\n<li>Access control checks</li>\n<li>Permission inheritance calculations</li>\n</ul>\n"
+    },
+    {
+        "name": "user-groups-get-users-in-group",
+        "description": "Get users in group\n\nRetrieve all users that belong to a specific user group.\n"
+    },
+    {
+        "name": "user-groups-get-group-statistics",
+        "description": "Get group statistics\n\nRetrieve statistics for all user groups including member counts.\n"
+    },
+    {
+        "name": "document-management-download-document",
+        "description": "Download document\n\nGet a time-limited signed URL to download the document, or receive the file directly for local storage.<br><br>\n<b>Overview:</b><br>\nThis endpoint generates secure download access to documents. For cloud storage (S3/Azure), it returns a presigned URL. For local storage, it streams the file directly.<br><br>\n<b>Download Behavior by Storage:</b><br>\n<ul>\n<li><b>S3/Azure:</b> Returns presigned URL valid for specified duration</li>\n<li><b>Local:</b> Streams file directly with appropriate headers</li>\n</ul>\n<b>Version Download:</b><br>\nSpecify the <code>version</code> parameter to download a specific historical version. Only available for versioned documents.<br><br>\n<b>URL Expiration:</b><br>\n<ul>\n<li>Default: 3600 seconds (1 hour)</li>\n<li>Configurable via <code>expirationTimeInSeconds</code></li>\n<li>Maximum depends on storage provider limits</li>\n</ul>\n<b>Security:</b><br>\nSigned URLs are single-use and time-limited. They can be safely shared for temporary access.\n"
+    },
+    {
+        "name": "knowledge-bases-create-knowledge-base",
+        "description": "Create a new knowledge base\n\nCreate a new knowledge base for organizing and managing documents within your organization.<br><br>\n<b>Overview:</b><br>\nA knowledge base is a container for organizing related documents, files, and content. It provides a central location for teams to collaborate on shared information.<br><br>\n<b>Features:</b><br>\n<ul>\n<li>Hierarchical folder structure support</li>\n<li>Role-based access control (OWNER, ORGANIZER, WRITER, READER, etc.)</li>\n<li>Full-text search across all records</li>\n<li>Integration with external connectors (Google Drive, OneDrive, etc.)</li>\n<li>Automatic content indexing for AI-powered search</li>\n</ul>\n<b>Naming Rules:</b><br>\n<ul>\n<li>Name must be 1-255 characters</li>\n<li>Special characters and HTML tags are sanitized</li>\n<li>Names don't need to be unique within organization</li>\n</ul>\n<b>Creator Permissions:</b><br>\nThe user creating the KB automatically becomes the OWNER with full administrative rights.\n"
+    },
+    {
+        "name": "knowledge-bases-list-knowledge-bases",
+        "description": "List all knowledge bases\n\nRetrieve a paginated list of all knowledge bases accessible to the authenticated user.<br><br>\n<b>Overview:</b><br>\nReturns knowledge bases where the user has at least READER permission. Results include the user's role for each KB.<br><br>\n<b>Filtering:</b><br>\n<ul>\n<li><b>search:</b> Full-text search on KB names (max 1000 chars)</li>\n<li><b>permissions:</b> Filter by user's role (comma-separated: OWNER,WRITER,READER)</li>\n</ul>\n<b>Sorting Options:</b><br>\n<ul>\n<li><code>name</code> - Alphabetical by KB name</li>\n<li><code>createdAtTimestamp</code> - By creation date</li>\n<li><code>updatedAtTimestamp</code> - By last modification</li>\n<li><code>userRole</code> - By permission level</li>\n</ul>\n<b>Performance:</b><br>\nUses efficient pagination with limit/offset. For large result sets, use smaller page sizes.\n"
+    },
+    {
+        "name": "knowledge-bases-get-knowledge-base",
+        "description": "Get knowledge base by ID\n\nRetrieve detailed information about a specific knowledge base.<br><br>\n<b>Overview:</b><br>\nReturns complete KB metadata including name, timestamps, and the requesting user's role/permissions.<br><br>\n<b>Access Control:</b><br>\nUser must have at least READER permission to view KB details.\n"
+    },
+    {
+        "name": "knowledge-bases-update-knowledge-base",
+        "description": "Update knowledge base\n\nUpdate a knowledge base's name.<br><br>\n<b>Required Permission:</b> OWNER or ORGANIZER<br><br>\n<b>Validation:</b><br>\n<ul>\n<li>Name must be 1-255 characters</li>\n<li>XSS protection applied to input</li>\n</ul>\n"
+    },
+    {
+        "name": "knowledge-bases-delete-knowledge-base",
+        "description": "Delete knowledge base\n\nPermanently delete a knowledge base and all its contents.<br><br>\n<b>Required Permission:</b> OWNER only<br><br>\n<b>What Gets Deleted:</b><br>\n<ul>\n<li>All folders within the KB</li>\n<li>All records and their indexed content</li>\n<li>All permission grants</li>\n<li>Associated storage files</li>\n</ul>\n<b>Warning:</b> This action is irreversible. Consider exporting data before deletion.\n"
+    },
+    {
+        "name": "knowledge-bases-reindex-failed-records",
+        "description": "Reindex failed records for connector\n\nTrigger reindexing of records that previously failed to index for a specific connector.\n"
+    },
+    {
+        "name": "knowledge-bases-move-record",
+        "description": "Move record to another location\n\nMove a record from one location to another within a knowledge base.\n"
+    },
+    {
+        "name": "knowledge-bases-get-knowledge-hub-root-nodes",
+        "description": "Get knowledge hub root nodes\n\nRetrieve root-level nodes for unified knowledge hub browsing.<br><br>\n<b>Overview:</b><br>\nProvides a unified view across all knowledge sources - KBs, connectors, and apps. Use for building file browser UIs.<br><br>\n<b>Node Types:</b><br>\n<ul>\n<li><b>KB:</b> Knowledge bases</li>\n<li><b>CONNECTOR:</b> External connector instances</li>\n<li><b>APP:</b> Connected applications</li>\n</ul>\n"
+    },
+    {
+        "name": "knowledge-bases-get-knowledge-hub-child-nodes",
+        "description": "Get knowledge hub child nodes\n\nRetrieve child nodes under a specific parent in the knowledge hub tree.<br><br>\n<b>Navigation:</b><br>\nUse this to drill down into KBs, folders, and connector hierarchies.\n"
+    },
+    {
+        "name": "records-get-all-records",
+        "description": "Get all records across knowledge bases\n\nRetrieve records from all knowledge bases accessible to the user.<br><br>\n<b>Overview:</b><br>\nSearch and filter records across your entire organization. Useful for global search, reporting, and cross-KB content discovery.<br><br>\n<b>Filtering Options:</b><br>\n<ul>\n<li><b>search:</b> Full-text search in record names</li>\n<li><b>recordTypes:</b> FILE, WEBPAGE, EMAIL, MESSAGE, TICKET, etc.</li>\n<li><b>origins:</b> UPLOAD or CONNECTOR</li>\n<li><b>connectors:</b> Filter by connector source</li>\n<li><b>indexingStatus:</b> COMPLETED, FAILED, IN_PROGRESS, etc.</li>\n<li><b>dateFrom/dateTo:</b> Filter by creation date range</li>\n</ul>\n<b>Response Includes:</b><br>\n<ul>\n<li>Paginated record list</li>\n<li>Applied and available filter counts</li>\n<li>Pagination metadata</li>\n</ul>\n"
+    },
+    {
+        "name": "records-get-KB-records",
+        "description": "Get records for a knowledge base\n\nRetrieve a paginated list of records within a specific knowledge base.<br><br>\n<b>Overview:</b><br>\nReturns all records (documents, files, content) stored in the specified KB, with powerful filtering and sorting capabilities.<br><br>\n<b>Filtering:</b><br>\n<ul>\n<li><b>search:</b> Search by record name (partial match, max 1000 chars)</li>\n<li><b>recordTypes:</b> FILE, WEBPAGE, COMMENT, MESSAGE, EMAIL, TICKET</li>\n<li><b>origins:</b> UPLOAD (manual uploads) or CONNECTOR (synced)</li>\n<li><b>indexingStatus:</b> Filter by processing state</li>\n<li><b>dateFrom/dateTo:</b> Creation date range (Unix timestamps)</li>\n</ul>\n<b>Sorting:</b><br>\nDefault sorts by <code>createdAtTimestamp</code> descending (newest first).\n"
+    },
+    {
+        "name": "records-get-KB-children",
+        "description": "Get KB children (alias for records)\n\nRetrieve a paginated list of children (folders and records) within a specific knowledge base.<br><br>\n<b>Overview:</b><br>\nThis is an alias endpoint for <code>/knowledgeBase/{kbId}/records</code>. It returns all direct children of the KB root, including both folders and records.<br><br>\n<b>Filtering:</b><br>\n<ul>\n<li><b>search:</b> Search by record name (partial match, max 1000 chars)</li>\n<li><b>recordTypes:</b> FILE, WEBPAGE, COMMENT, MESSAGE, EMAIL, TICKET</li>\n<li><b>origins:</b> UPLOAD (manual uploads) or CONNECTOR (synced)</li>\n<li><b>indexingStatus:</b> Filter by processing state</li>\n<li><b>dateFrom/dateTo:</b> Creation date range (Unix timestamps)</li>\n</ul>\n<b>Sorting:</b><br>\nDefault sorts by <code>createdAtTimestamp</code> descending (newest first).\n"
+    },
+    {
+        "name": "records-get-record-by-id",
+        "description": "Get record by ID\n\nRetrieve detailed information about a specific record.<br><br>\n<b>Overview:</b><br>\nReturns complete record metadata including name, type, indexing status, storage information, and version history.<br><br>\n<b>File Conversion:</b><br>\nUse the optional <code>convertTo</code> parameter to request file format conversion (e.g., PDF to text).\n"
+    },
+    {
+        "name": "records-update-record",
+        "description": "Update record\n\nUpdate a record's name and/or file content.<br><br>\n<b>Overview:</b><br>\nAllows updating the display name and optionally replacing the file content. Triggers re-indexing when content changes.<br><br>\n<b>Required Permission:</b> WRITER or higher<br><br>\n<b>Updating File Content:</b><br>\nInclude a new file in the request to replace the existing content. The file extension must match the original.<br><br>\n<b>Side Effects:</b><br>\n<ul>\n<li>Updates <code>updatedAtTimestamp</code></li>\n<li>Increments version if file content changed</li>\n<li>Triggers re-indexing for content changes</li>\n</ul>\n"
+    },
+    {
+        "name": "records-delete-record",
+        "description": "Delete record\n\nPermanently delete a record from the knowledge base.<br><br>\n<b>Required Permission:</b> WRITER or higher<br><br>\n<b>What Gets Deleted:</b><br>\n<ul>\n<li>Record metadata</li>\n<li>Associated storage file</li>\n<li>Indexed content and embeddings</li>\n</ul>\n<b>Warning:</b> This action is irreversible.\n"
+    },
+    {
+        "name": "records-stream-record-buffer",
+        "description": "Stream record content\n\nStream the binary content of a record's file.<br><br>\n<b>Overview:</b><br>\nReturns the raw file content with appropriate Content-Type and Content-Disposition headers for download or inline viewing.<br><br>\n<b>Use Cases:</b><br>\n<ul>\n<li>File downloads</li>\n<li>Inline document preview</li>\n<li>Content extraction pipelines</li>\n</ul>\n<b>Format Conversion:</b><br>\nUse <code>convertTo</code> parameter to convert between formats (e.g., DOCX to PDF).\n"
+    },
+    {
+        "name": "folders-create-root-folder",
+        "description": "Create root folder\n\nCreate a new folder at the root level of a knowledge base.<br><br>\n<b>Required Permission:</b> FILEORGANIZER or higher<br><br>\n<b>Folder Features:</b><br>\n<ul>\n<li>Organize records hierarchically</li>\n<li>Support nested subfolders</li>\n<li>Inherit parent KB permissions</li>\n</ul>\n<b>Naming Rules:</b><br>\n<ul>\n<li>1-255 characters</li>\n<li>XSS protection applied</li>\n<li>Can contain spaces and special characters</li>\n</ul>\n"
+    },
+    {
+        "name": "folders-get-folder-contents",
+        "description": "Get folder contents\n\nRetrieve the contents of a folder including subfolders and records.<br><br>\n<b>Overview:</b><br>\nReturns paginated list of records within the folder, with same filtering options as KB-level record listing.<br><br>\n<b>Navigation:</b><br>\nUse this endpoint to browse folder hierarchies. Response includes folder metadata and child items.\n"
+    },
+    {
+        "name": "folders-update-folder",
+        "description": "Update folder\n\nRename a folder.<br><br>\n<b>Required Permission:</b> FILEORGANIZER or higher\n"
+    },
+    {
+        "name": "folders-delete-folder",
+        "description": "Delete folder\n\nDelete a folder and all its contents.<br><br>\n<b>Required Permission:</b> FILEORGANIZER or higher<br><br>\n<b>Cascade Delete:</b><br>\nAll subfolders and records within will be permanently deleted.<br><br>\n<b>Warning:</b> This action is irreversible.\n"
+    },
+    {
+        "name": "folders-get-folder-children",
+        "description": "Get folder children (alias for folder contents)\n\nRetrieve the children (subfolders and records) of a folder.<br><br>\n<b>Overview:</b><br>\nThis is an alias endpoint for <code>/knowledgeBase/{kbId}/folder/{folderId}</code>. Returns paginated list of records within the folder, with same filtering options as KB-level record listing.<br><br>\n<b>Navigation:</b><br>\nUse this endpoint to browse folder hierarchies. Response includes folder metadata and child items.\n"
+    },
+    {
+        "name": "folders-create-subfolder",
+        "description": "Create subfolder\n\nCreate a nested folder within an existing folder.<br><br>\n<b>Required Permission:</b> FILEORGANIZER or higher<br><br>\n<b>Nesting:</b><br>\nSupports unlimited folder nesting depth for complex organizational structures.\n"
+    },
+    {
+        "name": "upload-upload-records-to-KB",
+        "description": "Upload files to knowledge base\n\nUpload one or more files directly to a knowledge base.<br><br>\n<b>Overview:</b><br>\nBatch upload multiple files in a single request. Each file becomes a new record in the KB with automatic content indexing.<br><br>\n<b>Upload Limits:</b><br>\n<ul>\n<li><b>Max files per request:</b> 1000</li>\n<li><b>Default max file size:</b> 30MB (configurable via platform settings)</li>\n<li>Use <code>GET /knowledgeBase/limits</code> to check current limits</li>\n</ul>\n<b>Supported File Types:</b><br>\nDocuments (PDF, DOCX, TXT), Images (PNG, JPG), Videos (MP4), and more.<br><br>\n<b>File Metadata:</b><br>\nUse <code>files_metadata</code> to provide additional info like file paths and last modified timestamps.<br><br>\n<b>Versioning:</b><br>\nSet <code>isVersioned: true</code> to enable version tracking for uploaded files.\n"
+    },
+    {
+        "name": "upload-upload-records-to-folder",
+        "description": "Upload files to folder\n\nUpload files directly to a specific folder within a knowledge base.<br><br>\n<b>Same as KB upload</b> but files are placed in the specified folder instead of KB root.\n"
+    },
+    {
+        "name": "upload-get-upload-limits",
+        "description": "Get upload limits\n\nRetrieve current upload constraints for the organization.<br><br>\n<b>Use Case:</b><br>\nCall this before uploads to validate file sizes on the client side and display appropriate limits to users.\n"
+    },
+    {
+        "name": "connector-reindex-record",
+        "description": "Reindex single record\n\nTrigger reindexing for a specific record.<br><br>\n<b>Overview:</b><br>\nReprocesses the record's content to update search indexes and AI embeddings. Useful after content changes or to fix indexing failures.<br><br>\n<b>Depth Parameter:</b><br>\nControls processing depth for complex documents (-1 for full depth, 0-100 for limited).\n"
+    },
+    {
+        "name": "connector-reindex-record-group",
+        "description": "Reindex record group\n\nTrigger reindexing for all records in a folder or knowledge base.<br><br>\n<b>Overview:</b><br>\nBatch reindex operation for entire containers. The recordGroupId can be a folder ID or KB ID.\n"
+    },
+    {
+        "name": "connector-resync-connector",
+        "description": "Resync connector\n\nTrigger a full resync of all records from a connector.<br><br>\n<b>Overview:</b><br>\nFetches all content from the external source and updates local records. Use when you suspect data is out of sync.<br><br>\n<b>Warning:</b> This can be resource-intensive for large connectors.\n"
+    },
+    {
+        "name": "connector-get-connector-stats",
+        "description": "Get connector statistics\n\nRetrieve statistics for a specific connector including record counts, indexing status breakdown, and sync information.\n"
+    },
+    {
+        "name": "permissions-create-KB-permission",
+        "description": "Grant permissions\n\nGrant access permissions to users or teams for a knowledge base.<br><br>\n<b>Required Permission:</b> OWNER or ORGANIZER<br><br>\n<b>Permission Roles (highest to lowest):</b><br>\n<ol>\n<li><b>OWNER:</b> Full control, can delete KB, manage all permissions</li>\n<li><b>ORGANIZER:</b> Can manage permissions (except OWNER), edit KB settings</li>\n<li><b>FILEORGANIZER:</b> Can create/delete folders, organize content</li>\n<li><b>WRITER:</b> Can upload, edit, delete records</li>\n<li><b>COMMENTER:</b> Can add comments (if supported)</li>\n<li><b>READER:</b> View-only access</li>\n</ol>\n<b>Grant to Multiple:</b><br>\nProvide arrays of userIds and/or teamIds to grant the same role to multiple entities.\n"
+    },
+    {
+        "name": "permissions-list-KB-permissions",
+        "description": "List permissions\n\nRetrieve all permissions granted on a knowledge base.<br><br>\n<b>Required Permission:</b> ORGANIZER or higher to see all permissions, others see only their own.\n"
+    },
+    {
+        "name": "permissions-update-KB-permissions",
+        "description": "Update permissions\n\nUpdate permission roles for users or teams.<br><br>\n<b>Required Permission:</b> OWNER or ORGANIZER\n"
+    },
+    {
+        "name": "permissions-delete-KB-permissions",
+        "description": "Remove permissions\n\nRemove access permissions from users or teams.<br><br>\n<b>Required Permission:</b> OWNER or ORGANIZER<br><br>\n<b>Note:</b> Cannot remove the last OWNER from a KB.\n"
+    },
+    {
+        "name": "conversations-create-conversation",
+        "description": "Create a new AI conversation\n\nStart a new conversation with PipesHub's AI assistant.<br><br>\n<b>Overview:</b><br>\nThis endpoint creates a new conversation session and processes the initial query.\nThe AI searches your organization's knowledge bases for relevant information and\ngenerates a response with citations to source documents.<br><br>\n<b>How It Works:</b><br>\n<ol>\n<li>Your query is analyzed and converted to semantic embeddings</li>\n<li>Relevant content is retrieved from indexed knowledge bases</li>\n<li>The AI generates a response using the retrieved context</li>\n<li>Citations link back to source documents for verification</li>\n<li>Follow-up questions are suggested based on the conversation</li>\n</ol>\n<b>Filtering Options:</b><br>\n<ul>\n<li><b>recordIds:</b> Limit search to specific documents</li>\n<li><b>filters.apps:</b> Search only specific connector apps</li>\n<li><b>filters.kb:</b> Search only specific knowledge bases</li>\n</ul>\n<b>Model Selection:</b><br>\nUse <code>modelKey</code> to select different AI models configured for your organization.\nEach model may have different capabilities, speed, and accuracy trade-offs.\n"
+    },
+    {
+        "name": "conversations-get-all-conversations",
+        "description": "List all conversations\n\nRetrieve all conversations for the authenticated user.<br><br>\n<b>Overview:</b><br>\nReturns a list of all conversations owned by or shared with the current user.\nConversations are returned with their messages, status, and metadata.<br><br>\n<b>Filtering:</b><br>\n<ul>\n<li>Only non-archived conversations are returned by default</li>\n<li>Use <code>/conversations/show/archives</code> for archived conversations</li>\n</ul>\n<b>Sorting:</b><br>\nConversations are sorted by last activity timestamp (most recent first).\n"
+    },
+    {
+        "name": "conversations-get-archived-conversations",
+        "description": "List archived conversations\n\nRetrieve all archived conversations for the authenticated user.<br><br>\n<b>Overview:</b><br>\nArchived conversations are hidden from the main list but preserved for reference.\nThis endpoint returns only conversations where <code>isArchived: true</code>.<br><br>\n<b>Unarchiving:</b><br>\nUse <code>PATCH /conversations/{id}/unarchive</code> to restore a conversation\nto the active list.\n"
+    },
+    {
+        "name": "conversations-get-conversation-by-id",
+        "description": "Get conversation by ID\n\nRetrieve a specific conversation with its full message history.<br><br>\n<b>Overview:</b><br>\nReturns the complete conversation including all messages, citations,\nfeedback, and metadata. Messages can be paginated for long conversations.<br><br>\n<b>Message Pagination:</b><br>\nFor conversations with many messages, use pagination parameters:\n<ul>\n<li><code>page</code>: Page number (default: 1)</li>\n<li><code>limit</code>: Messages per page (default: 10)</li>\n<li><code>sortBy</code>: Sort field (default: createdAt)</li>\n<li><code>sortOrder</code>: 'asc' or 'desc' (default: desc)</li>\n</ul>\n<b>Access Control:</b><br>\nUsers can access conversations they own or that have been shared with them.\n"
+    },
+    {
+        "name": "conversations-delete-conversation-by-id",
+        "description": "Delete conversation\n\nDelete a conversation by its ID.<br><br>\n<b>Overview:</b><br>\nPerforms a soft delete by setting <code>isDeleted: true</code>.\nThe conversation is removed from listings but preserved in the database.<br><br>\n<b>Permissions:</b><br>\nOnly the conversation owner (initiator) can delete it.\nShared users cannot delete conversations.\n"
+    },
+    {
+        "name": "conversations-add-message",
+        "description": "Add message to conversation\n\nAdd a follow-up message to an existing conversation.<br><br>\n<b>Overview:</b><br>\nContinues an existing conversation by adding a new user query.\nThe AI maintains context from previous messages when generating the response.<br><br>\n<b>Context Handling:</b><br>\n<ul>\n<li>Previous messages provide context for the new query</li>\n<li>Citations from earlier messages may be referenced</li>\n<li>The AI can refer back to previous topics discussed</li>\n</ul>\n<b>Model Override:</b><br>\nYou can specify a different model for this message using <code>modelKey</code>.\nThis allows switching models mid-conversation if needed.\n"
+    },
+    {
+        "name": "conversations-share-conversation",
+        "description": "Share conversation with users\n\nShare a conversation with other users in your organization.<br><br>\n<b>Overview:</b><br>\nAllows the conversation owner to grant access to other users.\nShared users can view the conversation and optionally add messages.<br><br>\n<b>Access Levels:</b><br>\n<ul>\n<li><code>read</code> - Can view conversation and messages (default)</li>\n<li><code>write</code> - Can view and add new messages</li>\n</ul>\n<b>Permissions:</b><br>\nOnly the conversation initiator (owner) can share. Users must belong\nto the same organization.\n"
+    },
+    {
+        "name": "conversations-update-conversation-title",
+        "description": "Update conversation title\n\nUpdate the title of a conversation.<br><br>\n<b>Overview:</b><br>\nConversation titles are auto-generated from the first query by default.\nUse this endpoint to set a custom, more descriptive title.<br><br>\n<b>Title Limits:</b><br>\n<ul>\n<li>Minimum: 1 character</li>\n<li>Maximum: 200 characters</li>\n</ul>\n"
+    },
+    {
+        "name": "conversations-archive-conversation",
+        "description": "Archive conversation\n\nArchive a conversation to hide it from the main list.<br><br>\n<b>Overview:</b><br>\nArchived conversations are preserved but hidden from the default conversation list.\nUse archiving to clean up your workspace without permanently deleting conversations.<br><br>\n<b>Retrieval:</b><br>\nView archived conversations using <code>GET /conversations/show/archives</code>.\n"
+    },
+    {
+        "name": "conversations-unarchive-conversation",
+        "description": "Unarchive conversation\n\nRestore an archived conversation to the active list.<br><br>\n<b>Overview:</b><br>\nRemoves the archived flag, making the conversation visible in the main list again.\n"
+    },
+    {
+        "name": "conversations-regenerate-answer",
+        "description": "Regenerate AI response\n\nRegenerate the AI response for a specific message.<br><br>\n<b>Overview:</b><br>\nIf you're not satisfied with an AI response, use this endpoint to generate\na new answer. The AI will re-process the original query and may produce\na different response.<br><br>\n<b>Use Cases:</b><br>\n<ul>\n<li>Response was incomplete or unclear</li>\n<li>Want to try a different AI model</li>\n<li>New documents have been indexed since original response</li>\n</ul>\n<b>Model Override:</b><br>\nSpecify <code>modelKey</code> to use a different model for regeneration.\n"
+    },
+    {
+        "name": "conversations-update-message-feedback",
+        "description": "Submit feedback on AI response\n\nProvide feedback on an AI-generated response.<br><br>\n<b>Overview:</b><br>\nFeedback helps improve AI response quality over time. You can rate\nvarious aspects of the response and provide detailed comments.<br><br>\n<b>Feedback Options:</b><br>\n<ul>\n<li><b>isHelpful:</b> Overall thumbs up/down</li>\n<li><b>ratings:</b> 1-5 scale for accuracy, relevance, completeness, clarity</li>\n<li><b>categories:</b> Issue categories (incorrect info, too verbose, etc.)</li>\n<li><b>comments:</b> Free-text positive/negative feedback and suggestions</li>\n<li><b>citationFeedback:</b> Rate individual citations</li>\n</ul>\n<b>Restrictions:</b><br>\nFeedback can only be submitted on <code>bot_response</code> messages,\nnot on user queries or system messages.\n"
+    },
+    {
+        "name": "conversations-unshare-conversation-by-id",
+        "description": "Unshare a conversation\n\nRevoke sharing for a conversation, making it private again.\n"
+    },
+    {
+        "name": "semantic-search-search",
+        "description": "Perform semantic search\n\nExecute a semantic search across your organization's knowledge base.<br><br>\n<b>Overview:</b><br>\nSemantic search uses AI embeddings to find content based on meaning,\nnot just keyword matching. This enables finding relevant information\neven when the exact words differ.<br><br>\n<b>How It Works:</b><br>\n<ol>\n<li>Your query is converted to a vector embedding</li>\n<li>The system finds documents with similar semantic meaning</li>\n<li>Results are ranked by relevance score</li>\n<li>Matching chunks are returned with metadata</li>\n</ol>\n<b>Filtering:</b><br>\nUse filters to narrow your search:\n<ul>\n<li><code>filters.apps</code>: Limit to specific connector apps (Google Drive, Confluence, etc.)</li>\n<li><code>filters.kb</code>: Limit to specific knowledge bases</li>\n</ul>\n<b>Results:</b><br>\nEach result includes:\n<ul>\n<li>Matching content chunk</li>\n<li>Relevance score (0-1, higher is better)</li>\n<li>Source document metadata (name, URL, type)</li>\n</ul>\n<b>Search History:</b><br>\nAll searches are saved and can be retrieved via <code>GET /search</code>.\n"
+    },
+    {
+        "name": "semantic-search-search-history",
+        "description": "Get search history\n\nRetrieve your search history with pagination.<br><br>\n<b>Overview:</b><br>\nReturns a list of all searches performed by the authenticated user.\nEach entry includes the original query, results, and metadata.<br><br>\n<b>Pagination:</b><br>\nUse <code>page</code> and <code>limit</code> to navigate through results.\n"
+    },
+    {
+        "name": "semantic-search-delete-all-search-history",
+        "description": "Clear all search history\n\nDelete all search history for the authenticated user.<br><br>\n<b>Warning:</b><br>\nThis action cannot be undone. All saved searches will be permanently removed.\n"
+    },
+    {
+        "name": "semantic-search-get-search-by-id",
+        "description": "Get search by ID\n\nRetrieve a specific search result by its ID.\n"
+    },
+    {
+        "name": "semantic-search-delete-search-by-id",
+        "description": "Delete search by ID\n\nDelete a specific search result by its ID.\n"
+    },
+    {
+        "name": "semantic-search-share-search",
+        "description": "Share a search\n\nShare a specific search result, making it accessible to other users.\n"
+    },
+    {
+        "name": "semantic-search-unshare-search",
+        "description": "Unshare a search\n\nRevoke sharing for a specific search result, making it private again.\n"
+    },
+    {
+        "name": "semantic-search-archive-search",
+        "description": "Archive a search\n\nArchive a specific search result. Archived searches are hidden from the default search history view.\n"
+    },
+    {
+        "name": "semantic-search-unarchive-search",
+        "description": "Unarchive a search\n\nRestore a previously archived search result back to the active search history.\n"
+    },
+    {
+        "name": "agent-templates-list-agent-templates",
+        "description": "List agent templates\n\nRetrieve all available agent templates.<br><br>\n<b>Overview:</b><br>\nAgent templates provide pre-configured starting points for creating\ncustom AI agents. Templates include system prompts, recommended tools,\nand configuration schemas.<br><br>\n<b>Template Types:</b><br>\n<ul>\n<li>Public templates available to all organization users</li>\n<li>Private templates created by individual users</li>\n</ul>\n"
+    },
+    {
+        "name": "agent-templates-create-agent-template",
+        "description": "Create agent template\n\nCreate a new reusable agent template.<br><br>\n<b>Overview:</b><br>\nTemplates define the base configuration for agents including\nsystem prompts, tool recommendations, and customization options.<br><br>\n<b>Template Components:</b><br>\n<ul>\n<li><b>System prompt:</b> Default instructions for agents</li>\n<li><b>Recommended tools:</b> Suggested tool integrations</li>\n<li><b>Config schema:</b> JSON Schema for customization options</li>\n</ul>\n"
+    },
+    {
+        "name": "agent-templates-get-agent-template",
+        "description": "Get agent template\n\nRetrieve a specific agent template by ID."
+    },
+    {
+        "name": "agent-templates-update-agent-template",
+        "description": "Update agent template\n\nUpdate an existing agent template.<br><br>\n<b>Permissions:</b><br>\nOnly the template creator can update it.\n"
+    },
+    {
+        "name": "agent-templates-delete-agent-template",
+        "description": "Delete agent template\n\nDelete an agent template.<br><br>\n<b>Note:</b><br>\nExisting agents created from this template are not affected.\n"
+    },
+    {
+        "name": "agents-list-agents",
+        "description": "List agents\n\nRetrieve all agents available to the authenticated user.<br><br>\n<b>Overview:</b><br>\nReturns agents created by the user plus public agents in the organization.\nEach agent has unique capabilities defined by its tools and knowledge scope.\n"
+    },
+    {
+        "name": "agents-create-agent",
+        "description": "Create agent\n\nCreate a new custom AI agent.<br><br>\n<b>Overview:</b><br>\nAgents are specialized AI assistants configured for specific tasks.\nThey can have custom system prompts, access to specific tools, and\nbe limited to certain knowledge bases.<br><br>\n<b>Agent Configuration:</b><br>\n<ul>\n<li><b>System prompt:</b> Instructions that define agent behavior</li>\n<li><b>Tools:</b> Capabilities like web search, code execution, etc.</li>\n<li><b>Knowledge bases:</b> Data sources the agent can access</li>\n<li><b>Model config:</b> AI model settings (temperature, max tokens)</li>\n</ul>\n<b>Use Cases:</b><br>\n<ul>\n<li>Customer support bot with product knowledge</li>\n<li>Code review assistant with repository access</li>\n<li>HR assistant with policy documents</li>\n</ul>\n"
+    },
+    {
+        "name": "agents-list-agent-tools",
+        "description": "List available tools\n\nGet all tools that can be assigned to agents.<br><br>\n<b>Overview:</b><br>\nTools extend agent capabilities beyond basic Q&A. Each tool\nhas specific inputs and outputs defined by its schema.<br><br>\n<b>Common Tools:</b><br>\n<ul>\n<li><b>web-search:</b> Search the internet</li>\n<li><b>code-interpreter:</b> Execute code snippets</li>\n<li><b>file-reader:</b> Read uploaded files</li>\n<li><b>api-caller:</b> Make external API requests</li>\n</ul>\n"
+    },
+    {
+        "name": "agents-get-agent",
+        "description": "Get agent\n\nRetrieve agent details by its unique key."
+    },
+    {
+        "name": "agents-update-agent",
+        "description": "Update agent\n\nUpdate an existing agent's configuration.<br><br>\n<b>Permissions:</b><br>\nOnly the agent creator can update it.\n"
+    },
+    {
+        "name": "agents-delete-agent",
+        "description": "Delete agent\n\nDelete an agent.<br><br>\n<b>Warning:</b><br>\nAll conversations with this agent will become inaccessible.\n"
+    },
+    {
+        "name": "agents-get-agent-permissions",
+        "description": "Get agent permissions\n\nGet the current permission configuration for an agent."
+    },
+    {
+        "name": "agents-update-agent-permissions",
+        "description": "Update agent permissions\n\nUpdate who can access and use the agent."
+    },
+    {
+        "name": "agents-share-agent",
+        "description": "Share agent\n\nShare an agent with specific users."
+    },
+    {
+        "name": "agents-unshare-agent",
+        "description": "Unshare an agent\n\nRevoke sharing for an agent, removing access for specified users or teams.\n"
+    },
+    {
+        "name": "agent-conversations-list-agent-conversations",
+        "description": "List agent conversations\n\nGet all conversations with a specific agent.<br><br>\n<b>Overview:</b><br>\nReturns conversations the user has had with this particular agent.\nAgent conversations maintain the agent's context and capabilities.\n"
+    },
+    {
+        "name": "agent-conversations-create-agent-conversation",
+        "description": "Create agent conversation\n\nStart a new conversation with an agent.<br><br>\n<b>Overview:</b><br>\nCreates a conversation using the agent's configuration including\nits system prompt, tools, and knowledge base access.\n"
+    },
+    {
+        "name": "agent-conversations-get-agent-conversation",
+        "description": "Get agent conversation\n\nRetrieve a specific agent conversation by ID."
+    },
+    {
+        "name": "agent-conversations-delete-agent-conversation",
+        "description": "Delete agent conversation\n\nDelete a conversation with an agent."
+    },
+    {
+        "name": "agent-conversations-add-agent-message",
+        "description": "Add message to agent conversation\n\nAdd a follow-up message to an agent conversation."
+    },
+    {
+        "name": "agent-conversations-regenerate-agent-answer",
+        "description": "Regenerate agent response\n\nRegenerate the agent's response for a specific message.<br><br>\n<b>Overview:</b><br>\nSimilar to conversation regeneration but uses the agent's configuration.\n"
+    },
+    {
+        "name": "connector-registry-get-connector-registry",
+        "description": "List available connector types\n\nGet all available connector types from the registry.<br><br>\n<b>Overview:</b><br>\nThe registry contains all connector types that can be configured as instances.\nEach type has specific authentication requirements, supported scopes, and capabilities.<br><br>\n<b>Connector Types Include:</b><br>\n<ul>\n<li><b>Google Workspace:</b> Drive, Gmail, Calendar, etc.</li>\n<li><b>Microsoft 365:</b> OneDrive, Outlook, SharePoint, etc.</li>\n<li><b>Cloud Storage:</b> Dropbox, Box, AWS S3</li>\n<li><b>Collaboration:</b> Slack, Confluence, Notion, Jira</li>\n<li><b>Databases:</b> PostgreSQL, MySQL, MongoDB</li>\n</ul>\n<b>Filtering:</b><br>\nUse <code>scope</code> to filter by team or personal connectors.\nUse <code>search</code> for full-text search across connector names.\n"
+    },
+    {
+        "name": "connector-registry-get-connector-schema",
+        "description": "Get connector configuration schema\n\nGet the configuration schema for a specific connector type.<br><br>\n<b>Overview:</b><br>\nReturns JSON Schema definitions for authentication, sync settings, and\nfilter options. Use this to dynamically build configuration forms.<br><br>\n<b>Schema Sections:</b><br>\n<ul>\n<li><b>authSchema:</b> Fields for authentication (credentials, tokens)</li>\n<li><b>syncSchema:</b> Sync settings (schedule, incremental options)</li>\n<li><b>filterSchema:</b> Filter field definitions</li>\n</ul>\n"
+    },
+    {
+        "name": "connector-instances-list-connector-instances",
+        "description": "List connector instances\n\nGet all configured connector instances for your organization.<br><br>\n<b>Overview:</b><br>\nReturns instances created by users, filtered by scope and permissions.\nTeam-scope connectors are visible to all org users. Personal connectors\nare only visible to their creators.<br><br>\n<b>Instance States:</b><br>\n<ul>\n<li><b>isConfigured:</b> All required settings are complete</li>\n<li><b>isAuthenticated:</b> OAuth flow complete or credentials valid</li>\n<li><b>isActive:</b> Connector is enabled for sync/agent</li>\n</ul>\n"
+    },
+    {
+        "name": "connector-instances-create-connector-instance",
+        "description": "Create connector instance\n\nCreate a new connector instance from a registry type.<br><br>\n<b>Overview:</b><br>\nCreates a new connector instance that can then be configured and enabled.\nThe instance is created in an unconfigured state and needs authentication\nand filter setup before it can be activated.<br><br>\n<b>Scope Permissions:</b><br>\n<ul>\n<li><code>team</code> scope requires admin privileges</li>\n<li><code>personal</code> scope available to all users</li>\n</ul>\n<b>Next Steps After Creation:</b><br>\n<ol>\n<li>Configure authentication via <code>PUT /{id}/config/auth</code></li>\n<li>Complete OAuth flow if needed via <code>GET /{id}/oauth/authorize</code></li>\n<li>Set up filters via <code>POST /{id}/filters</code></li>\n<li>Enable connector via <code>POST /{id}/toggle</code></li>\n</ol>\n"
+    },
+    {
+        "name": "connector-instances-list-active-connectors",
+        "description": "List active connector instances\n\nGet all active (enabled) connector instances.<br><br>\n<b>Overview:</b><br>\nReturns only instances where <code>isActive: true</code>.\nThese are connectors currently syncing data or available to AI agents.\n"
+    },
+    {
+        "name": "connector-instances-list-inactive-connectors",
+        "description": "List inactive connector instances\n\nGet all inactive (disabled) connector instances."
+    },
+    {
+        "name": "connector-instances-list-configured-connectors",
+        "description": "List configured connector instances\n\nGet all connector instances that have completed configuration.<br><br>\n<b>Overview:</b><br>\nReturns instances where <code>isConfigured: true</code>.\nThese have all required settings but may not be active yet.\n"
+    },
+    {
+        "name": "connector-instances-list-active-agent-connectors",
+        "description": "List active agent connectors\n\nGet connector instances enabled for AI agent integration.<br><br>\n<b>Overview:</b><br>\nReturns connectors where <code>agentEnabled: true</code>.\nThese are available to AI agents for querying and actions.\n"
+    },
+    {
+        "name": "connector-instances-get-connector-instance",
+        "description": "Get connector instance\n\nRetrieve a specific connector instance by ID."
+    },
+    {
+        "name": "connector-instances-delete-connector-instance",
+        "description": "Delete connector instance\n\nDelete a connector instance and all associated data.<br><br>\n<b>Warning:</b><br>\nThis permanently removes the connector configuration.\nSynced records in knowledge bases are NOT deleted.<br><br>\n<b>Permissions:</b><br>\n<ul>\n<li>Team scope: Requires admin</li>\n<li>Personal scope: Only creator can delete</li>\n</ul>\n"
+    },
+    {
+        "name": "connector-instances-update-connector-name",
+        "description": "Update connector instance name\n\nUpdate the display name of a connector instance.<br><br>\n<b>Note:</b> This only updates the display name, not the connector configuration.\n"
+    },
+    {
+        "name": "connector-configuration-get-connector-config",
+        "description": "Get connector configuration\n\nGet the current configuration for a connector instance.<br><br>\n<b>Security:</b><br>\nSensitive data (credentials, OAuth tokens) are redacted from the response.\nOnly admins can see partial credential information.\n"
+    },
+    {
+        "name": "connector-configuration-update-connector-config",
+        "description": "Update connector configuration\n\nUpdate authentication, sync, and filter configuration.<br><br>\n<b>Prerequisites:</b><br>\nConnector must be <b>disabled</b> before updating configuration.\nDisable it first using <code>POST /{id}/toggle</code>.<br><br>\n<b>Partial Updates:</b><br>\nOnly provide the sections you want to update. Omitted sections\nare not modified.\n"
+    },
+    {
+        "name": "connector-configuration-update-connector-auth-config",
+        "description": "Update authentication configuration\n\nUpdate only the authentication configuration.<br><br>\n<b>Use Case:</b><br>\nUse this when you need to update credentials without changing\nsync or filter settings. Useful for credential rotation.<br><br>\n<b>Prerequisites:</b><br>\nConnector must be disabled. This endpoint clears OAuth state,\nrequiring re-authentication for OAuth connectors.\n"
+    },
+    {
+        "name": "connector-configuration-update-connector-filters-66d",
+        "description": "Update filters and sync configuration\n\nUpdate filter selections and sync settings without touching auth.<br><br>\n<b>Use Case:</b><br>\nUse this to change what data is synced or adjust sync schedule\nwithout re-authenticating.\n"
+    },
+    {
+        "name": "connector-control-toggle-connector",
+        "description": "Toggle connector sync or agent\n\nEnable or disable a connector for sync or agent functionality.<br><br>\n<b>Toggle Types:</b><br>\n<ul>\n<li><code>sync</code> - Enable/disable data synchronization</li>\n<li><code>agent</code> - Enable/disable AI agent integration</li>\n</ul>\n<b>Prerequisites for Enabling:</b><br>\n<ul>\n<li>Connector must be configured (<code>isConfigured: true</code>)</li>\n<li>For OAuth connectors: Must be authenticated (<code>isAuthenticated: true</code>)</li>\n<li>For agent: Connector must support agent (<code>supportsAgent: true</code>)</li>\n</ul>\n<b>Permissions:</b><br>\n<ul>\n<li>Team scope: Requires admin</li>\n<li>Personal scope: Only creator can toggle</li>\n</ul>\n"
+    },
+    {
+        "name": "connector-O-auth-get-O-auth-authorization-url",
+        "description": "Get OAuth authorization URL\n\nGenerate an OAuth authorization URL to start the OAuth flow.<br><br>\n<b>Flow:</b><br>\n<ol>\n<li>Call this endpoint to get the authorization URL</li>\n<li>Redirect user's browser to the URL</li>\n<li>User authenticates with the provider</li>\n<li>Provider redirects to callback with authorization code</li>\n<li>Callback exchanges code for tokens automatically</li>\n</ol>\n<b>State Parameter:</b><br>\nThe response includes a <code>state</code> value that encodes the\nconnector ID. This is validated in the callback.\n"
+    },
+    {
+        "name": "connector-O-auth-handle-O-auth-callback",
+        "description": "OAuth callback handler\n\nHandle the OAuth callback from the identity provider.<br><br>\n<b>Note:</b><br>\nThis endpoint is called by the OAuth provider after user authentication.\nThe state parameter contains the encoded connector ID.<br><br>\n<b>Success:</b><br>\nOn success, tokens are stored and the connector becomes authenticated.\nUser is redirected to the frontend success page.<br><br>\n<b>Error:</b><br>\nIf the provider returns an error (e.g., user denied access),\nuser is redirected with error information.\n"
+    },
+    {
+        "name": "connector-O-auth-get-token-from-code",
+        "description": "Exchange Google authorization code for tokens\n\n<b>⚠️ Deprecated:</b> Legacy Google Workspace token exchange endpoint. Use the generic\nOAuth flow via <code>/connectors/{connectorId}/oauth/authorize</code> instead.<br><br>\n<b>Overview:</b><br>\nExchanges a Google OAuth authorization code for access and refresh tokens,\nstores the credentials, and enables the Google Workspace connector.<br><br>\n<b>What Happens:</b><br>\n<ol>\n<li>Retrieves Google Workspace OAuth config (client ID/secret)</li>\n<li>Exchanges the authorization code for tokens via Google's token endpoint</li>\n<li>Verifies the ID token</li>\n<li>Stores access and refresh tokens in configuration manager</li>\n<li>Creates or enables the Google Workspace connector</li>\n<li>Publishes an AppEnabledEvent for the sync service</li>\n</ol>\n<b>Admin Only:</b><br>\nRequires organization admin privileges.\n"
+    },
+    {
+        "name": "connector-filters-get-connector-filters",
+        "description": "Get filter options\n\nGet available filter options for a connector.<br><br>\n<b>Overview:</b><br>\nReturns filter fields that can be used to limit what data is synced.\nFor example, a Google Drive connector might offer filters for\nspecific folders or file types.<br><br>\n<b>Dynamic Filters:</b><br>\nSome filter fields have <code>dynamic: true</code>, meaning their\noptions are loaded separately via the filter options endpoint.\n"
+    },
+    {
+        "name": "connector-filters-save-connector-filters",
+        "description": "Save filter selections\n\nSave the user's filter selections for a connector.<br><br>\n<b>Overview:</b><br>\nAfter viewing filter options, use this endpoint to save the\nselected values. These determine what data will be synced.\n"
+    },
+    {
+        "name": "connector-filters-get-filter-field-options",
+        "description": "Get dynamic filter options\n\nGet options for a dynamic filter field with pagination.<br><br>\n<b>Overview:</b><br>\nFor filters with <code>dynamic: true</code>, options are loaded\nfrom the connected service. This supports pagination and search.<br><br>\n<b>Examples:</b><br>\n<ul>\n<li>Google Drive folders list</li>\n<li>Slack channels list</li>\n<li>Confluence spaces list</li>\n</ul>\n"
+    },
+    {
+        "name": "toolset-registry-list-toolset-registry",
+        "description": "List available toolsets\n\nGet all available toolsets from the registry.<br><br>\n<b>Overview:</b><br>\nReturns toolsets that can be configured and used with agents.\nSupports pagination and search.\n"
+    },
+    {
+        "name": "toolset-registry-get-toolset-schema",
+        "description": "Get toolset schema\n\nGet configuration schema for a specific toolset type"
+    },
+    {
+        "name": "toolset-instances-create-toolset",
+        "description": "Create toolset instance\n\nCreate a new toolset instance with authentication configuration\n"
+    },
+    {
+        "name": "toolset-instances-list-configured-toolsets",
+        "description": "List configured toolsets\n\nGet all configured toolsets for the authenticated user\n"
+    },
+    {
+        "name": "toolset-instances-check-toolset-status",
+        "description": "Check toolset status\n\nCheck authentication status of a toolset instance"
+    },
+    {
+        "name": "toolset-instances-reauthenticate-toolset",
+        "description": "Reauthenticate toolset\n\nClear toolset OAuth credentials and mark as unauthenticated, requiring re-authentication.<br><br>\nOnly applicable to OAuth-configured toolsets.\n"
+    },
+    {
+        "name": "toolset-instances-get-my-toolsets",
+        "description": "List my toolsets with auth status\n\nReturns organization toolset instances merged with current user's authentication status."
+    },
+    {
+        "name": "toolset-instances-get-toolset-instances",
+        "description": "List toolset instances\n\nList all toolset instances configured for the organization."
+    },
+    {
+        "name": "toolset-instances-create-toolset-instance",
+        "description": "Create toolset instance\n\nCreate a new toolset instance (admin only)."
+    },
+    {
+        "name": "toolset-instances-get-toolset-instance",
+        "description": "Get toolset instance"
+    },
+    {
+        "name": "toolset-instances-update-toolset-instance",
+        "description": "Update toolset instance"
+    },
+    {
+        "name": "toolset-instances-delete-toolset-instance",
+        "description": "Delete toolset instance"
+    },
+    {
+        "name": "toolset-instances-authenticate-toolset-instance",
+        "description": "Authenticate toolset instance"
+    },
+    {
+        "name": "toolset-instances-remove-toolset-credentials",
+        "description": "Remove toolset credentials"
+    },
+    {
+        "name": "toolset-instances-reauthenticate-toolset-instance",
+        "description": "Mark instance for reauthentication"
+    },
+    {
+        "name": "toolset-instances-get-toolset-instance-status",
+        "description": "Get instance authentication status"
+    },
+    {
+        "name": "toolset-configuration-get-toolset-config",
+        "description": "Get toolset configuration\n\nGet configuration for a specific toolset instance"
+    },
+    {
+        "name": "toolset-configuration-save-toolset-config",
+        "description": "Save toolset configuration\n\nSave or update toolset configuration (deprecated - use PUT)"
+    },
+    {
+        "name": "toolset-configuration-update-toolset-config",
+        "description": "Update toolset configuration\n\nUpdate toolset configuration"
+    },
+    {
+        "name": "toolset-configuration-delete-toolset-config",
+        "description": "Delete toolset configuration\n\nDelete a toolset instance and its configuration"
+    },
+    {
+        "name": "toolset-O-auth-get-toolset-O-auth-url",
+        "description": "Get OAuth authorization URL\n\nGet OAuth authorization URL for a toolset.<br><br>\nReturns a URL that the user should visit to authorize the toolset.\n"
+    },
+    {
+        "name": "toolset-O-auth-handle-toolset-O-auth-callback",
+        "description": "Handle OAuth callback\n\nHandle OAuth callback from the authorization server.<br><br>\nThis endpoint processes the authorization code and completes the OAuth flow.\n"
+    },
+    {
+        "name": "toolset-O-auth-get-instance-O-auth-authorization-url",
+        "description": "Get OAuth authorization URL for instance"
+    },
+    {
+        "name": "O-auth-configuration-list-toolset-O-auth-configs",
+        "description": "List OAuth configs by toolset type"
+    },
+    {
+        "name": "O-auth-configuration-update-toolset-O-auth-config",
+        "description": "Update OAuth config"
+    },
+    {
+        "name": "O-auth-configuration-delete-toolset-O-auth-config",
+        "description": "Delete OAuth config"
+    },
+    {
+        "name": "O-auth-configuration-get-O-auth-registry",
+        "description": "List OAuth-capable connector types\n\nGet all connector types that support OAuth authentication.<br><br>\n<b>Admin Use:</b><br>\nAdmins use this to see which connector types need OAuth credentials\nto be configured before users can authenticate.\n"
+    },
+    {
+        "name": "O-auth-configuration-get-O-auth-connector-type",
+        "description": "Get OAuth connector type details\n\nGet details for a specific OAuth-capable connector type."
+    },
+    {
+        "name": "O-auth-configuration-list-O-auth-configs",
+        "description": "List OAuth configurations\n\nList all OAuth configurations for the organization.<br><br>\n<b>Security:</b><br>\n<ul>\n<li>Admins see full configuration including credentials</li>\n<li>Non-admins see only essential fields (client ID, not secret)</li>\n</ul>\n"
+    },
+    {
+        "name": "O-auth-configuration-list-O-auth-configs-by-type",
+        "description": "List OAuth configs for connector type\n\nGet all OAuth configurations for a specific connector type."
+    },
+    {
+        "name": "O-auth-configuration-create-O-auth-config",
+        "description": "Create OAuth configuration\n\nCreate a new OAuth configuration for a connector type.<br><br>\n<b>Admin Only:</b><br>\nOnly admins can create OAuth configurations. These provide the\nOAuth credentials needed for users to authenticate connectors.<br><br>\n<b>Use Case:</b><br>\nBefore users can create Google Drive connectors with OAuth,\nan admin must create an OAuth configuration with the Google\nOAuth client ID and secret.\n"
+    },
+    {
+        "name": "O-auth-configuration-get-O-auth-config",
+        "description": "Get OAuth configuration\n\nGet a specific OAuth configuration by ID."
+    },
+    {
+        "name": "O-auth-configuration-update-O-auth-config",
+        "description": "Update OAuth configuration\n\nUpdate an OAuth configuration.<br><br>\n<b>Admin Only:</b><br>\nOnly the creator or another admin can update.\n"
+    },
+    {
+        "name": "O-auth-configuration-delete-O-auth-config",
+        "description": "Delete OAuth configuration\n\nDelete an OAuth configuration.<br><br>\n<b>Warning:</b><br>\nCannot delete if the configuration is used by active connectors.\nDisable or delete dependent connectors first.\n"
+    },
+    {
+        "name": "storage-configuration-get-storage-config",
+        "description": "Get current storage configuration\n\nRetrieve the current storage backend configuration. Returns the configuration for whichever storage type is currently active (Local, S3, or Azure Blob)."
+    },
+    {
+        "name": "SMTP-configuration-create-SMTP-config",
+        "description": "Create or update SMTP configuration\n\nConfigure SMTP email server for sending system emails including user invitations, notifications, and password resets.\n\nCommon SMTP providers and their settings:\n- Gmail: host=smtp.gmail.com, port=587 (requires App Password)\n- SendGrid: host=smtp.sendgrid.net, port=587\n- Amazon SES: host=email-smtp.{region}.amazonaws.com, port=587\n- Microsoft 365: host=smtp.office365.com, port=587\n\nConfiguration is encrypted before storage.\n"
+    },
+    {
+        "name": "SMTP-configuration-get-SMTP-config",
+        "description": "Get SMTP configuration\n\nRetrieve the current SMTP server configuration. Password is included in the response for admin users."
+    },
+    {
+        "name": "authentication-configuration-set-azure-ad-auth-a00",
+        "description": "Configure Azure AD authentication\n\nSet up Azure Active Directory as an authentication provider for user login."
+    },
+    {
+        "name": "authentication-configuration-get-azure-ad-auth-cb3",
+        "description": "Get Azure AD configuration\n\nRetrieve Azure AD authentication configuration."
+    },
+    {
+        "name": "authentication-configuration-set-microsoft-auth-154",
+        "description": "Configure Microsoft authentication\n\nSet up Microsoft account as an authentication provider."
+    },
+    {
+        "name": "authentication-configuration-get-microsoft-auth-9dc",
+        "description": "Get Microsoft authentication configuration\n\nGet Microsoft authentication configuration."
+    },
+    {
+        "name": "authentication-configuration-set-google-auth-config",
+        "description": "Configure Google authentication\n\nSet up Google OAuth as an authentication provider."
+    },
+    {
+        "name": "authentication-configuration-get-google-auth-config",
+        "description": "Get Google authentication configuration\n\nGet Google authentication configuration."
+    },
+    {
+        "name": "authentication-configuration-set-sso-auth-config",
+        "description": "Configure SAML SSO authentication\n\nSet up SAML 2.0 Single Sign-On with your identity provider (Okta, OneLogin, etc.)."
+    },
+    {
+        "name": "authentication-configuration-get-sso-auth-config",
+        "description": "Get SAML SSO configuration\n\nGet SAML SSO configuration."
+    },
+    {
+        "name": "authentication-configuration-set-O-auth-config",
+        "description": "Configure generic OAuth provider\n\nSet up a custom OAuth 2.0 authentication provider."
+    },
+    {
+        "name": "authentication-configuration-get-generic-O-auth-5dc",
+        "description": "Get generic OAuth configuration\n\nGet generic OAuth configuration."
+    },
+    {
+        "name": "AI-models-providers-get-models-by-type",
+        "description": "Get models by type\n\nGet all configured models of a specific type."
+    },
+    {
+        "name": "AI-models-providers-get-available-models-by-type",
+        "description": "Get available models for selection\n\nGet available models in a flattened format for UI selection dropdowns."
+    },
+    {
+        "name": "AI-models-providers-add-AI-model-provider",
+        "description": "Add new AI model provider\n\nAdd a new AI model provider configuration. Performs a health check before saving to verify connectivity. Supported providers: openai, anthropic, azure-openai, aws-bedrock, google-vertex, ollama, huggingface."
+    },
+    {
+        "name": "AI-models-providers-update-AI-model-provider",
+        "description": "Update AI model provider\n\nUpdate an existing AI model provider configuration."
+    },
+    {
+        "name": "AI-models-providers-delete-AI-model-provider",
+        "description": "Delete AI model provider\n\nRemove an AI model provider configuration. Cannot delete the default model if it's the only one."
+    },
+    {
+        "name": "AI-models-providers-set-default-AI-model",
+        "description": "Set default AI model\n\nSet a model as the default for its type."
+    },
+    {
+        "name": "public-UR-ls-set-frontend-public-url",
+        "description": "Set frontend public URL\n\nConfigure the public URL where the frontend application is accessible. Used for OAuth redirects and email links."
+    },
+    {
+        "name": "public-UR-ls-get-frontend-public-url",
+        "description": "Get frontend public URL\n\nGet frontend public URL."
+    },
+    {
+        "name": "public-UR-ls-set-connector-public-url",
+        "description": "Set connector public URL\n\nConfigure the public URL for connector OAuth callbacks."
+    },
+    {
+        "name": "public-UR-ls-get-connector-public-url",
+        "description": "Get connector public URL\n\nGet connector public URL."
+    },
+    {
+        "name": "platform-settings-set-platform-settings",
+        "description": "Update platform settings\n\nConfigure platform-wide settings including file upload limits and feature flags.\n\n**File Upload Limits:**\n- Default: 30MB (31457280 bytes)\n- Maximum: 1GB (1073741824 bytes)\n\n**Available Feature Flags:**\n- ENABLE_BETA_CONNECTORS: Enable beta connector integrations (default: false)\n"
+    },
+    {
+        "name": "platform-settings-get-platform-settings",
+        "description": "Get platform settings\n\nRetrieve current platform settings including file upload limits and feature flag states."
+    },
+    {
+        "name": "platform-settings-get-available-feature-flags",
+        "description": "Get available feature flags\n\nList all available feature flags with their descriptions and default values."
+    },
+    {
+        "name": "platform-settings-set-custom-system-prompt",
+        "description": "Update custom system prompt\n\nSet a custom system prompt that will be used by AI models."
+    },
+    {
+        "name": "platform-settings-get-custom-system-prompt",
+        "description": "Get custom system prompt\n\nGet custom system prompt."
+    },
+    {
+        "name": "metrics-collection-get-metrics-collection",
+        "description": "Get metrics collection configuration\n\nRetrieve the current metrics collection configuration including:\n- Whether collection is enabled\n- Push interval settings\n- Server URL configuration\n- Instance identification\n\n**Admin Access Required:** This endpoint requires administrator privileges.\n"
+    },
+    {
+        "name": "metrics-collection-toggle-metrics-collection",
+        "description": "Enable or disable metrics collection\n\nToggle the master switch for metrics collection.\n\n**When Enabled:**\n- Application metrics are collected in the background\n- Metrics are pushed to the configured server at regular intervals\n- Activity counters track API usage patterns\n\n**When Disabled:**\n- No metrics are collected or stored\n- No data is sent to the metrics server\n- Existing scheduled push jobs are stopped\n\n**Admin Access Required:** This endpoint requires administrator privileges.\n"
+    },
+    {
+        "name": "configuration-manager-get-slack-bot-configs",
+        "description": "Get Slack bot configurations\n\nRetrieve all Slack bot configurations for the organization.\n"
+    },
+    {
+        "name": "configuration-manager-create-slack-bot-config",
+        "description": "Create Slack bot configuration\n\nCreate a new Slack bot configuration for the organization.\n"
+    },
+    {
+        "name": "configuration-manager-update-slack-bot-config",
+        "description": "Update Slack bot configuration\n\nUpdate an existing Slack bot configuration.\n"
+    },
+    {
+        "name": "configuration-manager-delete-slack-bot-config",
+        "description": "Delete Slack bot configuration\n\nDelete a Slack bot configuration.\n"
+    },
+    {
+        "name": "configuration-manager-set-metrics-collection-cb8",
+        "description": "Set metrics push interval\n\nConfigure the interval for pushing metrics to the collection server.\n"
+    },
+    {
+        "name": "configuration-manager-set-metrics-collection-58e",
+        "description": "Set metrics remote server URL\n\nConfigure the remote server URL for metrics collection.\n"
+    },
+    {
+        "name": "configuration-manager-get-AI-models-config",
+        "description": "Get AI models configuration\n\nRetrieve the AI models configuration for the organization.\n"
+    },
+    {
+        "name": "configuration-manager-create-AI-models-config",
+        "description": "Create AI models configuration\n\nCreate or initialize AI models configuration for the organization.\n"
+    },
+    {
+        "name": "configuration-manager-get-AI-models-providers",
+        "description": "Get AI model providers\n\nRetrieve all available AI model providers.\n"
+    },
+    {
+        "name": "crawling-jobs-schedule-crawling-job",
+        "description": "Schedule a crawling job\n\nSchedule a new crawling job for a specific connector instance.<br><br>\n\n<b>Overview:</b><br>\nCreates a scheduled crawling job that will sync data from the specified connector into\nPipesHub's search index. The job is added to a BullMQ queue and will execute according\nto the specified schedule configuration.<br><br>\n\n<b>Schedule Types:</b><br>\n<ul>\n<li><b>hourly:</b> Run every X hours at specified minute (e.g., every 2 hours at :30)</li>\n<li><b>daily:</b> Run once per day at specified time (e.g., 2:00 AM daily)</li>\n<li><b>weekly:</b> Run on specific days of the week (e.g., Mon/Wed/Fri at 3:00 AM)</li>\n<li><b>monthly:</b> Run on specific day of month (e.g., 1st of each month at 4:00 AM)</li>\n<li><b>custom:</b> Use cron expression for complex schedules</li>\n<li><b>once:</b> Run once at a specific future datetime</li>\n</ul>\n\n<b>Access Control:</b><br>\n<ul>\n<li>Team-scoped connectors: Requires admin privileges</li>\n<li>Personal-scoped connectors: Only the creator can schedule jobs</li>\n</ul>\n\n<b>Job Behavior:</b><br>\n<ul>\n<li>If a job already exists for this connector, it will be replaced</li>\n<li>Disabled schedules (<code>isEnabled: false</code>) will throw an error</li>\n<li>Jobs use exponential backoff for retries (5s, 10s, 20s, etc.)</li>\n<li>Only last 10 completed/failed jobs are retained per connector</li>\n</ul>\n\n<b>Related Endpoints:</b><br>\n<ul>\n<li><code>GET /crawlingManager/{connector}/{connectorId}/schedule</code> - Get job status</li>\n<li><code>POST /crawlingManager/{connector}/{connectorId}/pause</code> - Pause job</li>\n<li><code>DELETE /crawlingManager/{connector}/{connectorId}/remove</code> - Remove job</li>\n</ul>\n"
+    },
+    {
+        "name": "crawling-jobs-get-crawling-job-status",
+        "description": "Get crawling job status\n\nRetrieve the current status of a scheduled crawling job for a specific connector.<br><br>\n\n<b>Overview:</b><br>\nReturns detailed information about the most recent crawling job for the specified connector,\nincluding its current state, progress, timing information, and any error details.<br><br>\n\n<b>Job States:</b><br>\n<ul>\n<li><b>waiting:</b> Job is queued and waiting to be processed</li>\n<li><b>active:</b> Job is currently being processed by a worker</li>\n<li><b>completed:</b> Job finished successfully</li>\n<li><b>failed:</b> Job failed after exhausting retry attempts</li>\n<li><b>delayed:</b> Job is scheduled for future execution</li>\n<li><b>paused:</b> Job has been manually paused</li>\n</ul>\n\n<b>Access Control:</b><br>\nSame as scheduling - team connectors require admin, personal connectors require creator.\n"
+    },
+    {
+        "name": "crawling-jobs-remove-crawling-job",
+        "description": "Remove a crawling job\n\nPermanently remove a scheduled crawling job for a specific connector.<br><br>\n\n<b>Overview:</b><br>\nRemoves the crawling job and all associated data from the queue. This includes\nremoving repeatable job configurations and cleaning up job history.<br><br>\n\n<b>What Gets Removed:</b><br>\n<ul>\n<li>Active or waiting job instances</li>\n<li>Repeatable job configuration (for recurring schedules)</li>\n<li>Paused job information</li>\n<li>Job mappings and metadata</li>\n</ul>\n\n<b>Note:</b> Completed and failed job records may be retained for audit purposes.\n\n<b>Related Endpoints:</b><br>\n<ul>\n<li><code>DELETE /crawlingManager/schedule/all</code> - Remove all jobs for organization</li>\n</ul>\n"
+    },
+    {
+        "name": "crawling-jobs-get-all-crawling-job-status",
+        "description": "Get all crawling job statuses\n\nRetrieve the status of all scheduled crawling jobs across the organization.\n"
+    },
+    {
+        "name": "crawling-jobs-remove-all-crawling-job",
+        "description": "Remove all crawling jobs\n\nRemove all scheduled crawling jobs for the organization.\n"
+    },
+    {
+        "name": "crawling-jobs-pause-crawling-job",
+        "description": "Pause a crawling job\n\nPause a running or scheduled crawling job for a specific connector.\n"
+    },
+    {
+        "name": "crawling-jobs-resume-crawling-job",
+        "description": "Resume a crawling job\n\nResume a previously paused crawling job for a specific connector.\n"
+    },
+    {
+        "name": "crawling-jobs-get-queue-stats",
+        "description": "Get queue statistics\n\nRetrieve statistics for the crawling job queue including active, waiting, and completed job counts.\n"
+    }
+];
+//# sourceMappingURL=tool-names.js.map