The capability library

1Password Connect Server API: list vaults and items, read item details, create, update and delete items in a vault.

Adobe Acrobat Sign: read agreements, library documents and users, and create-and-send an agreement for signature in one account.

Adyen Checkout: read payment links and session results, create payment sessions and payments, and capture or refund payments.

Apache Airflow 2 stable REST API v1: read workflows (DAGs), runs, and connections; pause or unpause workflows; create or delete connections; trigger runs; and delete workflow metadata. Runs can change downstream systems. Airflow 3 API v2 is excluded.

Airtable Web API on the customer's bases: list records (GET and the long-query POST form), create records, update records with PATCH, and delete records.

Anthropic organization administration through the Admin API: workspaces and workspace members, API key status, organization members, and usage and cost reports.

Apollo.io sales intelligence API: search people, contacts, organizations and sequences, and enroll contacts in an outreach sequence.

SAP Ariba / SAP Business Network read-only APIs: supplier data retrieval, purchase order header reads and invoice header reads, against the realm-specific runtime URL from the Ariba developer portal.

JFrog Artifactory REST API on the customer's own deployment: list repositories and storage items, search with AQL, deploy artifacts, and delete items and repositories.

AWS pack: read-only IAM users, roles and account summary, Cost Explorer billing data and S3 object reads for one bucket prefix, plus Amazon Bedrock administration (model access, guardrails, Provisioned Throughput, invocation logging). The HTTP connector signs every request with Signature Version 4 and refuses malformed key material before calling AWS.

Azure Resource Manager pack: read subscriptions, resource groups, resources and subscription cost data, and administer one Azure OpenAI or Foundry account (model deployments, content filters, access-key rotation). Cost Management uses POST with a query body but changes no provider state.

Azure DevOps Services: list organization projects, project repositories, pipelines and work items, and queue a build.

BILL (Bill.com) v3 AP API: read vendors, bills and payments, create a bill, and approve or deny a bill.

Bitbucket Cloud: list workspace repositories, pull requests and pipelines, approve a pull request, and trigger a pipeline.

Box API on the customer's enterprise: list folder items, read file metadata, delete files and folders, and create shared links on files.

Brex spend management: read transactions and users, create payments, issue cards and terminate a card.

Checkout.com Unified Payments: read payments and disputes, request payments, and refund captured payments.

CircleCI cloud (API v2): read a project, list pipelines, workflows and jobs, trigger a pipeline, and approve a pending approval job.

Clay Public API (developer platform): search Clay's GTM people/company database, run routine functions, read routine run results, and query known tables (Enterprise).

Cloudflare API v4: list zones and DNS records, create, edit and delete DNS records, and purge a zone's cache.

SAP Concur Expense on the shared regional API host: read users, read expense reports and reports pending approval, submit a report for approval, and approve a report.

Confluence Cloud REST API v2: read pages and spaces, read the pages of one space, and create a page in a space.

Confluent Cloud management APIs: read environments, Kafka clusters and topics, create and update clusters, delete clusters and topics, and revoke API keys.

Coupa core REST API on the customer's own instance: read suppliers, invoices, purchase orders, requisitions and approvals, and perform the documented approve action on a pending approval.

CrowdStrike Falcon platform API: read hosts and alerts, view device login history, update alert state and tags, and contain or lift containment on hosts.

CyberArk Privilege Cloud REST API (Gen 2): list and read accounts, list safe members, onboard an account, and delete an account.

Databricks workspace REST API: cluster and job inventory, workspace object listing, and SQL warehouse listing.

Datadog: read monitors, hosts, events, and incidents; schedule downtime that suppresses monitor alerts and may send notifications.

dbt Cloud Administrative API v2: read jobs, runs and environments, create and update job definitions, trigger job runs (deploy-equivalent), and cancel runs.

Docusign eSignature: read envelopes, templates and users, and create-and-send an envelope for signature in one account.

Microsoft Dynamics 365 / Dataverse: read accounts, contacts, opportunities, and caller identity; update an opportunity’s fields, status, or owner. The general update can reassign ownership and requires the adapter’s If-Match protection against record creation.

Elasticsearch (Elastic Cloud or self-managed): list indices, run read-only searches, index documents, create and delete indices, and delete documents by query.

Microsoft Entra directory via Microsoft Graph v1.0: read users, groups, group memberships, activated directory roles and app registrations. Read-only identity pack; every write is excluded pending a dedicated review.

Read Fivetran destinations, connector types, and connections; update connection settings, start syncs or historical re-syncs, and delete connections. Updates can resume scheduled data movement or carry source credentials.

Read Freshdesk tickets, contacts, and agents; reply to tickets and add notes. Replies reach the requester, and notes can be public or trigger email notifications.

Google Cloud pack: read projects, project access policies and billing accounts, and administer Vertex AI endpoints, read Model Garden models and manage Vertex AI quotas. The access-policy POST retrieves data without changing it.

Read Genesys users, active user conversations, queues, and conversation analytics; join or unjoin existing queue members, place outbound calls, and delete users. Uses the customer's regional API; conversation reads and calls need a separate user-context token.

List GitHub repositories, create issues, merge pull requests, delete repositories, and transfer repositories to another owner.

List GitLab projects, merge requests, pipelines, and repository trees; start pipelines that can deploy code, and approve merge requests.

Read Gong calls, transcripts, users, and workspaces in one company instance. Transcripts contain the conversation itself, including identifiable participants.

Read Google Workspace users, groups, and group memberships, and send Gmail messages as a named user. Sending requires user consent or domain-wide delegation to impersonate that user.

Read Grafana dashboard and folder listings, data sources, organization users, and provisioned alert rules. User listing requires granular role-based access control; this pack registers no writes.

Read HubSpot contacts, companies, deals, and tickets; create contacts with optional associations to existing records. Covers one account and does not register email sending.

Read Intercom contacts, companies, and conversations; reply to a conversation as an admin. Comment replies reach the contact in Messenger and by email.

List Jenkins top-level jobs and agents, read a job record with its build list, and schedule a build. A build can deploy code; on folders or multibranch projects the trigger can start scanning or indexing.

Read, create, edit, and delete Jira Cloud issues in one site.

List Kubernetes namespaces, deployments, and pods; create and scale deployments, delete deployments, and delete entire namespaces. Creation runs caller-chosen code, and namespace deletion removes the objects it contains.

Read LaunchDarkly projects and feature flags; create flags, change their settings or targeting, and delete flags or projects. Creation and targeting changes can immediately change application behavior.

Read the Looker API user's profile and dashboard and Look listings; run queries, create folders, and delete Looks and dashboards. Query results can include any data the credential's user can access.

Read Mailchimp audiences, members, and campaigns; add or update members, send campaigns, and delete campaigns or entire audiences. Member updates can send confirmation emails or enable marketing mail.

Read Marketo leads, campaigns, lists, and activity records; run a trigger campaign for up to 100 named leads. A campaign can send outbound email. Activity reads need a paging token obtained separately.

Read Marqeta cards, users, transactions, and balances; change card states to enable or withdraw authorization eligibility. Card reads can expose full card numbers or security codes until response fields are fixed outside the agent's control.

Read Microsoft 365 users, mailbox messages, and calendar events; send mail, create events that can invite attendees, and post Teams channel messages. Ordinary Teams posting needs a separate delegated user token.

Read MongoDB Atlas projects, clusters, database users, and network access lists; create clusters and users, update or pause clusters, terminate clusters, and add network access. Cluster updates can change billable infrastructure; pausing can delete Search Node data.

Read Navan expense transactions and receipt links, and batch-update accounting attributes on existing transactions. Updates do not change approval status. Covers the Expense API, not travel booking or payments.

List NetSuite vendors, vendor bills, purchase orders, and customers, and create vendor bills. Lists return record references; bill creation is treated as approval-capable but does not schedule or move payment.

Search Notion pages and data sources, query data-source rows, create pages, update pages, and trash blocks. Page updates can trash a page or irreversibly erase its block children.

Read Okta users, groups, and group members; add or remove group members and deactivate users. Membership can grant application access, and deactivation can destroy data in assigned applications.

OpenAI organization administration through the Admin API: projects, project API keys and service accounts, per-model rate limits, users, admin API keys, and usage and cost reports.

List, count, and read Opsgenie alerts; create, acknowledge, close, annotate, escalate, and delete alerts. Writes are asynchronous, and several actions can notify responders. Request-status polling is not registered.

Read Oracle Fusion suppliers, payables invoices, and purchase orders; create payables invoices. Creation does not pay an invoice, but its unrestricted body can set writable validation-status fields.

Read Outreach prospects, mailings, tasks, and events; enroll prospects in a sequence. Enrollment starts automation immediately and can send outbound email from the selected mailbox.

Read PagerDuty incidents, services, users, and on-call entries; update incidents to acknowledge, resolve, escalate, or reassign them. Escalation and reassignment can notify another responder.

Read PandaDoc documents, templates, and contacts; create documents from templates or uploaded files, and send draft documents for signature. Sending can email recipients a signing link.

Read Salesforce Account Engagement prospects, lists, campaigns, and visitors; add prospects to static email lists. Membership can trigger communication through an active engagement program or list-email send.

Read PayPal orders and refunds, create orders, and capture approved payments. Order creation can initiate automatic authorization or capture on payer approval; capture responses require checking the payment status.

Plaid account data: read accounts, transactions, balances and identity data for connected Items, and create Link tokens.

PostgreSQL: query invoices, customer records and audit logs, and insert, update or delete invoice rows through an allowlisted SQL adapter.

Microsoft Power BI REST API on a customer workspace: read datasets, query them with DAX and read refresh history, trigger dataset refresh, delete datasets and reports, and grant workspace access.

Prisma Cloud (Palo Alto Networks) Cloud Security API: read alerts, policies, compliance posture and cloud accounts, create alert rules, dismiss or reopen alerts, and remediate an alert.

QuickBooks Online accounting: read customers, vendors, invoices, payments and company info.

Ramp: read transactions and users, create bills that start a payment workflow, and issue physical cards with provider-set spending limits.

Redis Cloud REST API: read subscriptions and databases, create and update subscriptions and databases, and delete databases or entire subscriptions.

RingCentral REST API with OAuth2 JWT-grant: read extensions, messages and call logs, send SMS, and delete messages from the message store.

Salesforce CRM records: read accounts, create leads, update opportunities and delete accounts in one org.

Salesloft: read people, accounts, outreach sequences and activity history, and enroll a person in a sequence that can automatically send email.

SAP S/4HANA Cloud: read business partners, supplier invoices, purchase orders and journal entries, and create purchase orders that may be sent to suppliers.

Twilio SendGrid v3 API: send mail, read global and group suppressions, and delete suppression entries from a group or the global list.

Sentry: read projects, issues and releases, update (resolve, merge, publish) or delete an issue, and delete a project.

ServiceNow Table API on the customer's own instance: read, create and update incidents, read and create change requests, and read catalog items.

Shopify: read orders, customers, products and refunds, and create refund records, submit payment refunds and optionally notify customers.

Slack: read channels and message history, post messages and add reactions as a bot, and create public file links with a separate user token.

Snowflake SQL REST API (/api/v2/statements): status checks and result retrieval for one pre-bound statement, and cancellation of that statement's execution.

Snyk: read projects, issues and suppression records; update project settings; suppress or reveal findings; and delete monitored projects.

SonarQube Server: read projects, issues, code metrics and quality gate results; change issue status or a project’s quality gate; and create or delete projects.

Splunk: read saved searches, indexes and search jobs, and run ad-hoc SPL searches within a separately restricted role.

Stripe payments: read payment intents and customer records, create payment intents and refunds, and delete a customer record.

Tableau REST API on the customer's own Tableau Server or Tableau Cloud site: read workbooks, data sources and users, update and publish workbooks, refresh data source extracts, and delete workbooks and data sources.

HCP Terraform and Terraform Enterprise: read workspaces and runs; create workspaces with automation; queue, apply or discard runs that may deploy or destroy resources; and force-delete workspaces.

Twilio messaging and voice: read message logs and phone numbers, send SMS, and place calls under a consent gate.

HashiCorp Vault: list secret names, read secret values, write new versions, soft-delete or permanently destroy versions, delete all metadata and history, and revoke leases.

Xero: read contacts, invoices, payments and bank transactions, and create draft or approved invoices and purchase bills.

Zendesk Support: read tickets, users and organizations, and create or update tickets whose public comments reach customers.

Zoom API v2 with Server-to-Server OAuth: read users, meetings and recordings; create, update and delete meetings; delete meeting recordings.

Zscaler: read ZIA filtering configuration, stage URL filtering rules and activate all pending tenant changes; read or create ZPA application segments that can grant access through existing policies.