@workos/openapi-spec 0.67.0 → 0.69.0

package/dist/open-api-spec.yaml

@@ -631,7 +631,7 @@ paths:
         - name: order
           required: false
           in: query
-          description: Order the results by the creation time.
+          description: Order the results by the creation time. Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -800,7 +800,7 @@ paths:
         - name: order
           required: false
           in: query
-          description: Order the results by the creation time.
+          description: Order the results by the creation time. Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -1661,7 +1661,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -2165,7 +2165,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: permission_slug
@@ -2355,7 +2355,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -2482,7 +2482,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -2594,7 +2594,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: resource_id
@@ -4291,7 +4291,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: permission_slug
@@ -4457,7 +4457,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: role_slug
@@ -4551,7 +4551,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -4925,7 +4925,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: organization_id
@@ -5630,7 +5630,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: permission_slug
@@ -5780,7 +5780,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: role_slug
@@ -6638,7 +6638,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: registration_types
@@ -7063,7 +7063,7 @@ paths:
         - name: order
           required: false
           in: query
-          description: Order the results by the creation time.
+          description: Order the results by the creation time. Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: connection_type
@@ -7419,7 +7419,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -7860,7 +7860,7 @@ paths:
                     installation, keyed by the provider's config field
                     descriptors.
                   example:
-                    mydomain: acme
+                    salesforce_host: acme.my.salesforce.com
               required:
                 - user_id
                 - client_id
@@ -8155,7 +8155,7 @@ paths:
         - name: order
           required: false
           in: query
-          description: Order the results by the creation time.
+          description: Order the results by the creation time. Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: organization_id
@@ -8349,7 +8349,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: directory
@@ -8517,7 +8517,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: directory
@@ -8708,7 +8708,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: events
@@ -8843,7 +8843,7 @@ paths:
         - name: order
           required: false
           in: query
-          description: Order the results by the creation time.
+          description: Order the results by the creation time. Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -9594,7 +9594,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: domains
@@ -10170,7 +10170,7 @@ paths:
         - name: order
           required: false
           in: query
-          description: Order the results by the creation time.
+          description: Order the results by the creation time. Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -10309,7 +10309,6 @@ paths:
       summary: List providers for an organization
       tags:
         - pipes.provider
-      x-feature-flag: pipes-org-overrides
   /organizations/{organizationId}/data_integration_configurations/{slug}:
     put:
       description: >-
@@ -10403,7 +10402,6 @@ paths:
       summary: Configure a provider for an organization
       tags:
         - pipes.provider
-      x-feature-flag: pipes-org-overrides
   /organizations/{organizationId}/feature-flags:
     get:
       description: Get a list of all enabled feature flags for an organization.
@@ -10449,7 +10447,7 @@ paths:
         - name: order
           required: false
           in: query
-          description: Order the results by the creation time.
+          description: Order the results by the creation time. Defaults to `desc`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -10615,7 +10613,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: search
@@ -11014,7 +11012,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -11169,7 +11167,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -14264,7 +14262,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -14415,7 +14413,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `desc`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: organization_id
@@ -15452,7 +15450,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `desc`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: organization_id
@@ -16298,7 +16296,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -16762,7 +16760,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -17026,7 +17024,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `desc`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: organization
@@ -18423,7 +18421,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `desc`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -18674,7 +18672,7 @@ paths:
         - name: order
           required: false
           in: query
-          description: Order the results by the creation time.
+          description: Order the results by the creation time. Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: organization_id
@@ -18846,7 +18844,7 @@ paths:
         - name: order
           required: false
           in: query
-          description: Order the results by the creation time.
+          description: Order the results by the creation time. Defaults to `desc`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -18927,7 +18925,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -19413,7 +19411,7 @@ paths:
         - name: order
           required: false
           in: query
-          description: Order the results by the creation time.
+          description: Order the results by the creation time. Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -19880,7 +19878,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
         - name: state
@@ -20537,7 +20535,7 @@ paths:
             Order the results by the creation time. Supported values are `"asc"`
             (ascending), `"desc"` (descending), and `"normal"` (descending with
             reversed cursor semantics where `before` fetches older records and
-            `after` fetches newer records).
+            `after` fetches newer records). Defaults to `normal`.
           schema:
             $ref: '#/components/schemas/PaginationOrder'
       responses:
@@ -21142,7 +21140,6 @@ components:
         - desc
         - asc
       example: desc
-      default: desc
     RedirectUriDto:
       type: object
       properties:
@@ -22469,14 +22466,19 @@ components:
           format: uri
           description: >-
             The provider's OAuth authorization endpoint. Required for OAuth
-            providers; omit for `api_key` providers.
+            providers; omit for `api_key` providers. Must be a static URL:
+            `${config.…}` placeholders are resolved against a provider's
+            declared config fields, which custom providers cannot declare.
           example: https://provider.example.com/oauth/authorize
         token_url:
           type: string
           format: uri
           description: >-
-            The provider's OAuth token endpoint. Required for OAuth providers;
-            omit for `api_key` providers.
+            The provider's OAuth token endpoint. Required for OAuth and
+            `client_credentials` providers; omit for `api_key` providers. Must
+            be a static URL: `${config.…}` placeholders are resolved against a
+            provider's declared config fields, which custom providers cannot
+            declare.
           example: https://provider.example.com/oauth/token
         refresh_token_url:
           type:
@@ -22485,7 +22487,7 @@ components:
           format: uri
           description: >-
             The endpoint used to refresh tokens, if different from the token
-            endpoint.
+            endpoint. Must be a static URL, like the other endpoints.
           example: https://provider.example.com/oauth/token
         pkce_enabled:
           type: boolean
@@ -22625,12 +22627,18 @@ components:
         authorization_url:
           type: string
           format: uri
-          description: The provider's OAuth authorization endpoint.
+          description: >-
+            The provider's OAuth authorization endpoint. Must be a static URL:
+            `${config.…}` placeholders are resolved against a provider's
+            declared config fields, which custom providers cannot declare.
           example: https://provider.example.com/oauth/authorize
         token_url:
           type: string
           format: uri
-          description: The provider's OAuth token endpoint.
+          description: >-
+            The provider's OAuth token endpoint. Must be a static URL:
+            `${config.…}` placeholders are resolved against a provider's
+            declared config fields, which custom providers cannot declare.
           example: https://provider.example.com/oauth/token
         refresh_token_url:
           type:
@@ -22639,7 +22647,7 @@ components:
           format: uri
           description: >-
             The endpoint used to refresh tokens, if different from the token
-            endpoint.
+            endpoint. Must be a static URL, like the other endpoints.
           example: https://provider.example.com/oauth/token
         pkce_enabled:
           type: boolean
@@ -23739,6 +23747,9 @@ components:
           items:
             type: string
             enum: &ref_17
+              - agent.blueprint.created
+              - agent.blueprint.deleted
+              - agent.blueprint.updated
               - agent.registration.created
               - agent.registration.claim.attempt.created
               - agent.registration.claim.completed
@@ -27183,7 +27194,7 @@ components:
           description: >-
             An object containing the custom attribute mapping for the Directory
             Provider.
-          example: &ref_20
+          example: &ref_23
             department: Engineering
             job_title: Software Engineer
         role:
@@ -27412,7 +27423,7 @@ components:
             - data
             - created_at
           description: An event emitted by WorkOS.
-          example: &ref_25
+          example: &ref_28
             object: event
             id: event_01EHZNVPK3SFK441A1RGBFSHRT
             event: dsync.user.created
@@ -27579,6 +27590,308 @@ components:
                 - data
                 - created_at
                 - object
+            - type: object
+              properties:
+                id:
+                  type: string
+                  description: Unique identifier for the event.
+                  example: event_01EHZNVPK3SFK441A1RGBFSHRT
+                event:
+                  type: string
+                  const: agent.blueprint.created
+                data:
+                  type: object
+                  properties:
+                    object:
+                      type: string
+                      description: Distinguishes the agent blueprint object.
+                      const: agent_blueprint
+                    id:
+                      type: string
+                      description: Unique identifier of the agent blueprint.
+                      example: agent_blueprint_01EHWNCE74X7JSDV0X3SZ3KJNY
+                    name:
+                      type: string
+                      description: Human-readable name of the agent blueprint.
+                      example: Prospecting Agent
+                    description:
+                      type:
+                        - string
+                        - 'null'
+                      description: Human-readable description of the agent blueprint.
+                      example: Finds and qualifies sales prospects.
+                    permissions:
+                      type: array
+                      items:
+                        type: string
+                      description: >-
+                        Permission slugs forming the ceiling on what sessions
+                        minted from this blueprint may do.
+                      example: &ref_19
+                        - crm:read
+                        - email:send
+                    invocable_by:
+                      type: object
+                      properties:
+                        role_slugs:
+                          type: array
+                          items:
+                            type: string
+                          description: >-
+                            Role slugs whose members may mint user-delegated
+                            sessions from this blueprint.
+                          example: &ref_20
+                            - manager
+                        organization_ids:
+                          type: array
+                          items:
+                            type: string
+                          description: >-
+                            Organizations in which autonomous sessions may be
+                            minted from this blueprint.
+                          example: &ref_21
+                            - org_01EHWNCE74X7JSDV0X3SZ3KJNY
+                      required:
+                        - role_slugs
+                        - organization_ids
+                      description: Who may mint sessions from this blueprint.
+                    session_settings:
+                      type: object
+                      properties:
+                        max_age_seconds:
+                          type: number
+                          description: >-
+                            Maximum lifetime of a session in seconds; refreshes
+                            never extend a session past this.
+                          example: 3600
+                        access_token_ttl_seconds:
+                          type: number
+                          description: Lifetime of each minted access token in seconds.
+                          example: 300
+                        refresh_token_ttl_seconds:
+                          type: number
+                          description: Lifetime of each rotated refresh token in seconds.
+                          example: 3600
+                      required:
+                        - max_age_seconds
+                        - access_token_ttl_seconds
+                        - refresh_token_ttl_seconds
+                      description: >-
+                        Token and session lifetimes for sessions minted from
+                        this blueprint.
+                    created_at:
+                      type: string
+                      description: The timestamp when the agent blueprint was created.
+                      example: '2026-01-15T12:00:00.000Z'
+                    updated_at:
+                      type: string
+                      description: The timestamp when the agent blueprint was last updated.
+                      example: '2026-01-15T12:00:00.000Z'
+                  required:
+                    - object
+                    - id
+                    - name
+                    - description
+                    - permissions
+                    - invocable_by
+                    - session_settings
+                    - created_at
+                    - updated_at
+                  description: The event payload.
+                created_at:
+                  format: date-time
+                  type: string
+                  description: An ISO 8601 timestamp.
+                  example: '2026-01-15T12:00:00.000Z'
+                context:
+                  $ref: '#/components/schemas/EventContextDto'
+                object:
+                  type: string
+                  description: Distinguishes the Event object.
+                  const: event
+              required:
+                - id
+                - event
+                - data
+                - created_at
+                - object
+            - type: object
+              properties:
+                id:
+                  type: string
+                  description: Unique identifier for the event.
+                  example: event_01EHZNVPK3SFK441A1RGBFSHRT
+                event:
+                  type: string
+                  const: agent.blueprint.deleted
+                data:
+                  type: object
+                  properties:
+                    object:
+                      type: string
+                      description: Distinguishes the agent blueprint object.
+                      const: agent_blueprint
+                    id:
+                      type: string
+                      description: Unique identifier of the agent blueprint.
+                      example: agent_blueprint_01EHWNCE74X7JSDV0X3SZ3KJNY
+                    name:
+                      type: string
+                      description: Human-readable name of the agent blueprint.
+                      example: Prospecting Agent
+                    created_at:
+                      type: string
+                      description: The timestamp when the agent blueprint was created.
+                      example: '2026-01-15T12:00:00.000Z'
+                    updated_at:
+                      type: string
+                      description: The timestamp when the agent blueprint was last updated.
+                      example: '2026-01-15T12:00:00.000Z'
+                  required:
+                    - object
+                    - id
+                    - name
+                    - created_at
+                    - updated_at
+                  description: The event payload.
+                created_at:
+                  format: date-time
+                  type: string
+                  description: An ISO 8601 timestamp.
+                  example: '2026-01-15T12:00:00.000Z'
+                context:
+                  $ref: '#/components/schemas/EventContextDto'
+                object:
+                  type: string
+                  description: Distinguishes the Event object.
+                  const: event
+              required:
+                - id
+                - event
+                - data
+                - created_at
+                - object
+            - type: object
+              properties:
+                id:
+                  type: string
+                  description: Unique identifier for the event.
+                  example: event_01EHZNVPK3SFK441A1RGBFSHRT
+                event:
+                  type: string
+                  const: agent.blueprint.updated
+                data:
+                  type: object
+                  properties:
+                    object:
+                      type: string
+                      description: Distinguishes the agent blueprint object.
+                      const: agent_blueprint
+                    id:
+                      type: string
+                      description: Unique identifier of the agent blueprint.
+                      example: agent_blueprint_01EHWNCE74X7JSDV0X3SZ3KJNY
+                    name:
+                      type: string
+                      description: Human-readable name of the agent blueprint.
+                      example: Prospecting Agent
+                    description:
+                      type:
+                        - string
+                        - 'null'
+                      description: Human-readable description of the agent blueprint.
+                      example: Finds and qualifies sales prospects.
+                    permissions:
+                      type: array
+                      items:
+                        type: string
+                      description: >-
+                        Permission slugs forming the ceiling on what sessions
+                        minted from this blueprint may do.
+                      example: *ref_19
+                    invocable_by:
+                      type: object
+                      properties:
+                        role_slugs:
+                          type: array
+                          items:
+                            type: string
+                          description: >-
+                            Role slugs whose members may mint user-delegated
+                            sessions from this blueprint.
+                          example: *ref_20
+                        organization_ids:
+                          type: array
+                          items:
+                            type: string
+                          description: >-
+                            Organizations in which autonomous sessions may be
+                            minted from this blueprint.
+                          example: *ref_21
+                      required:
+                        - role_slugs
+                        - organization_ids
+                      description: Who may mint sessions from this blueprint.
+                    session_settings:
+                      type: object
+                      properties:
+                        max_age_seconds:
+                          type: number
+                          description: >-
+                            Maximum lifetime of a session in seconds; refreshes
+                            never extend a session past this.
+                          example: 3600
+                        access_token_ttl_seconds:
+                          type: number
+                          description: Lifetime of each minted access token in seconds.
+                          example: 300
+                        refresh_token_ttl_seconds:
+                          type: number
+                          description: Lifetime of each rotated refresh token in seconds.
+                          example: 3600
+                      required:
+                        - max_age_seconds
+                        - access_token_ttl_seconds
+                        - refresh_token_ttl_seconds
+                      description: >-
+                        Token and session lifetimes for sessions minted from
+                        this blueprint.
+                    created_at:
+                      type: string
+                      description: The timestamp when the agent blueprint was created.
+                      example: '2026-01-15T12:00:00.000Z'
+                    updated_at:
+                      type: string
+                      description: The timestamp when the agent blueprint was last updated.
+                      example: '2026-01-15T12:00:00.000Z'
+                  required:
+                    - object
+                    - id
+                    - name
+                    - description
+                    - permissions
+                    - invocable_by
+                    - session_settings
+                    - created_at
+                    - updated_at
+                  description: The event payload.
+                created_at:
+                  format: date-time
+                  type: string
+                  description: An ISO 8601 timestamp.
+                  example: '2026-01-15T12:00:00.000Z'
+                context:
+                  $ref: '#/components/schemas/EventContextDto'
+                object:
+                  type: string
+                  description: Distinguishes the Event object.
+                  const: event
+              required:
+                - id
+                - event
+                - data
+                - created_at
+                - object
             - type: object
               properties:
                 id:
@@ -28232,7 +28545,7 @@ components:
                       items:
                         type: string
                       description: The permissions granted to the API key.
-                      example: &ref_19
+                      example: &ref_22
                         - users:read
                         - users:write
                     created_at:
@@ -28358,7 +28671,7 @@ components:
                       items:
                         type: string
                       description: The permissions granted to the API key.
-                      example: *ref_19
+                      example: *ref_22
                     created_at:
                       type: string
                       description: The timestamp when the API key was created.
@@ -28482,7 +28795,7 @@ components:
                       items:
                         type: string
                       description: The permissions granted to the API key.
-                      example: *ref_19
+                      example: *ref_22
                     created_at:
                       type: string
                       description: The timestamp when the API key was created.
@@ -31349,7 +31662,7 @@ components:
                       description: >-
                         An object containing the custom attribute mapping for
                         the Directory Provider.
-                      example: *ref_20
+                      example: *ref_23
                     role:
                       $ref: '#/components/schemas/SlimRole'
                     roles:
@@ -31539,7 +31852,7 @@ components:
                       description: >-
                         Labels assigned to the Feature Flag for categorizing and
                         filtering.
-                      example: &ref_21
+                      example: &ref_24
                         - reports
                     enabled:
                       type: boolean
@@ -31700,7 +32013,7 @@ components:
                       description: >-
                         Labels assigned to the Feature Flag for categorizing and
                         filtering.
-                      example: *ref_21
+                      example: *ref_24
                     enabled:
                       type: boolean
                       description: >-
@@ -31860,7 +32173,7 @@ components:
                       description: >-
                         Labels assigned to the Feature Flag for categorizing and
                         filtering.
-                      example: *ref_21
+                      example: *ref_24
                     enabled:
                       type: boolean
                       description: >-
@@ -32140,7 +32453,7 @@ components:
                       description: >-
                         Labels assigned to the Feature Flag for categorizing and
                         filtering.
-                      example: *ref_21
+                      example: *ref_24
                     enabled:
                       type: boolean
                       description: >-
@@ -33128,7 +33441,7 @@ components:
                       description: >-
                         Object containing [metadata](/authkit/metadata)
                         key/value pairs associated with the Organization.
-                      example: &ref_22
+                      example: &ref_25
                         tier: diamond
                       propertyNames:
                         maxLength: 40
@@ -33278,7 +33591,7 @@ components:
                       description: >-
                         Object containing [metadata](/authkit/metadata)
                         key/value pairs associated with the Organization.
-                      example: *ref_22
+                      example: *ref_25
                       propertyNames:
                         maxLength: 40
                       maxProperties: 50
@@ -34105,7 +34418,7 @@ components:
                       items:
                         type: string
                       description: The permissions granted by the role.
-                      example: &ref_23
+                      example: &ref_26
                         - users:read
                         - users:write
                     created_at:
@@ -34189,7 +34502,7 @@ components:
                       items:
                         type: string
                       description: The permissions granted by the role.
-                      example: *ref_23
+                      example: *ref_26
                     created_at:
                       format: date-time
                       type: string
@@ -34271,7 +34584,7 @@ components:
                       items:
                         type: string
                       description: The permissions granted by the role.
-                      example: *ref_23
+                      example: *ref_26
                     created_at:
                       format: date-time
                       type: string
@@ -34408,7 +34721,7 @@ components:
                       description: >-
                         Object containing [metadata](/authkit/metadata)
                         key/value pairs associated with the Organization.
-                      example: *ref_22
+                      example: *ref_25
                       propertyNames:
                         maxLength: 40
                       maxProperties: 50
@@ -35062,6 +35375,190 @@ components:
                 - data
                 - created_at
                 - object
+            - type: object
+              properties:
+                id:
+                  type: string
+                  description: Unique identifier for the event.
+                  example: event_01EHZNVPK3SFK441A1RGBFSHRT
+                event:
+                  type: string
+                  const: resource_export.completed
+                data:
+                  type: object
+                  properties:
+                    id:
+                      type: string
+                      description: The ID of the resource export.
+                      example: resource_export_01HWZBQZY2M3AMQW166Q22K88F
+                    resource_type:
+                      type: string
+                      enum:
+                        - users
+                        - organizations
+                        - events
+                        - sessions
+                      description: The type of resource being exported.
+                      example: users
+                  required:
+                    - id
+                    - resource_type
+                  description: The event payload.
+                created_at:
+                  format: date-time
+                  type: string
+                  description: An ISO 8601 timestamp.
+                  example: '2026-01-15T12:00:00.000Z'
+                context:
+                  $ref: '#/components/schemas/EventContextDto'
+                object:
+                  type: string
+                  description: Distinguishes the Event object.
+                  const: event
+              required:
+                - id
+                - event
+                - data
+                - created_at
+                - object
+            - type: object
+              properties:
+                id:
+                  type: string
+                  description: Unique identifier for the event.
+                  example: event_01EHZNVPK3SFK441A1RGBFSHRT
+                event:
+                  type: string
+                  const: resource_export.created
+                data:
+                  type: object
+                  properties:
+                    id:
+                      type: string
+                      description: The ID of the resource export.
+                      example: resource_export_01HWZBQZY2M3AMQW166Q22K88F
+                    resource_type:
+                      type: string
+                      enum:
+                        - users
+                        - organizations
+                        - events
+                        - sessions
+                      description: The type of resource being exported.
+                      example: users
+                  required:
+                    - id
+                    - resource_type
+                  description: The event payload.
+                created_at:
+                  format: date-time
+                  type: string
+                  description: An ISO 8601 timestamp.
+                  example: '2026-01-15T12:00:00.000Z'
+                context:
+                  $ref: '#/components/schemas/EventContextDto'
+                object:
+                  type: string
+                  description: Distinguishes the Event object.
+                  const: event
+              required:
+                - id
+                - event
+                - data
+                - created_at
+                - object
+            - type: object
+              properties:
+                id:
+                  type: string
+                  description: Unique identifier for the event.
+                  example: event_01EHZNVPK3SFK441A1RGBFSHRT
+                event:
+                  type: string
+                  const: resource_export.downloaded
+                data:
+                  type: object
+                  properties:
+                    id:
+                      type: string
+                      description: The ID of the resource export.
+                      example: resource_export_01HWZBQZY2M3AMQW166Q22K88F
+                    resource_type:
+                      type: string
+                      enum:
+                        - users
+                        - organizations
+                        - events
+                        - sessions
+                      description: The type of resource being exported.
+                      example: users
+                  required:
+                    - id
+                    - resource_type
+                  description: The event payload.
+                created_at:
+                  format: date-time
+                  type: string
+                  description: An ISO 8601 timestamp.
+                  example: '2026-01-15T12:00:00.000Z'
+                context:
+                  $ref: '#/components/schemas/EventContextDto'
+                object:
+                  type: string
+                  description: Distinguishes the Event object.
+                  const: event
+              required:
+                - id
+                - event
+                - data
+                - created_at
+                - object
+            - type: object
+              properties:
+                id:
+                  type: string
+                  description: Unique identifier for the event.
+                  example: event_01EHZNVPK3SFK441A1RGBFSHRT
+                event:
+                  type: string
+                  const: resource_export.failed
+                data:
+                  type: object
+                  properties:
+                    id:
+                      type: string
+                      description: The ID of the resource export.
+                      example: resource_export_01HWZBQZY2M3AMQW166Q22K88F
+                    resource_type:
+                      type: string
+                      enum:
+                        - users
+                        - organizations
+                        - events
+                        - sessions
+                      description: The type of resource being exported.
+                      example: users
+                  required:
+                    - id
+                    - resource_type
+                  description: The event payload.
+                created_at:
+                  format: date-time
+                  type: string
+                  description: An ISO 8601 timestamp.
+                  example: '2026-01-15T12:00:00.000Z'
+                context:
+                  $ref: '#/components/schemas/EventContextDto'
+                object:
+                  type: string
+                  description: Distinguishes the Event object.
+                  const: event
+              required:
+                - id
+                - event
+                - data
+                - created_at
+                - object
             - type: object
               properties:
                 id:
@@ -35091,7 +35588,7 @@ components:
                       items:
                         type: string
                       description: The permissions granted by the role.
-                      example: &ref_24
+                      example: &ref_27
                         - users:read
                         - users:write
                     created_at:
@@ -35157,7 +35654,7 @@ components:
                       items:
                         type: string
                       description: The permissions granted by the role.
-                      example: *ref_24
+                      example: *ref_27
                     created_at:
                       format: date-time
                       type: string
@@ -35221,7 +35718,7 @@ components:
                       items:
                         type: string
                       description: The permissions granted by the role.
-                      example: *ref_24
+                      example: *ref_27
                     created_at:
                       format: date-time
                       type: string
@@ -36361,7 +36858,7 @@ components:
                 - data
                 - created_at
                 - object
-      example: *ref_25
+      example: *ref_28
       description: An event emitted by WorkOS.
     EventList:
       type: object
@@ -36396,7 +36893,7 @@ components:
       example:
         object: list
         data:
-          - *ref_25
+          - *ref_28
         list_metadata:
           after: event_01EHZNVPK3SFK441A1RGBFSHRT
     JwtTemplate:
@@ -37390,7 +37887,9 @@ components:
           type: string
           description: >-
             The OAuth redirect URI to register with the provider when
-            configuring the custom application.
+            configuring the custom application. Empty for `api_key` and
+            `client_credentials` integrations, which run no authorization
+            redirect.
           example: >-
             https://api.workos.com/data-integrations/github/dik_01EHZNVPK3SFK441A1RGBFSHRT/callback
         auth_methods:
@@ -37409,8 +37908,8 @@ components:
         credentials:
           description: >-
             The integration-level OAuth app credentials. `null` for `api_key`
-            integrations, which hold no OAuth credentials (keys are installed
-            per-tenant).
+            and `client_credentials` integrations, which hold no
+            integration-level credentials (secrets are installed per-tenant).
           oneOf:
             - type: object
               properties:
@@ -37905,7 +38404,11 @@ components:
                     type: string
                   description: >-
                     If the integration has requested scopes that aren't present
-                    on the access token, they're listed here.
+                    on the access token, they're listed here. The scopes granted
+                    to a client-credentials token are governed by the connected
+                    organization's client application, so the integration's
+                    configured scopes are requests or defaults rather than
+                    guarantees.
                   example: []
                 metadata:
                   type: object