Identity & Access

Browse GraphQL domains.

Queries

OperationDescription
accountReturn an account with the caller's role and capabilities in it.
accountInvitationsList account invitations.
accountMembersList the members of an account with their roles, oldest first.
accountsList the personal and team accounts the caller belongs to, oldest first, with the caller's role and capabilities in each.
apiKeyReturn one API key's metadata, status and scopes, without its secret.
apiKeysList the caller's API keys, or the keys bound to one project, newest first; every surface returns active keys unless status selects expired, revoked or all.
currentUserReturn the profile of the signed-in user; GraphQL and MCP also return the profile of the user who owns an API key.
invitationsList invitations across projects.
projectInvitationReturn an invitation.
projectInvitationsList the invitations.
projectMemberReturns one member of the project with role, capabilities and the read-only AI budget projection.
projectMembersLists the project's members with their role and resolved capabilities, one page at a time by user ID cursor.
projectToolAccessProfileReturn tool access profile.

Mutations

OperationDescription
acceptAccountInvitationAccept account invitation.
createAccountCreate a team account that the caller owns.
createAccountInvitationCreate account invitation.
createApiKeyCreate an API key and return its secret once.
createProjectInvitationCreate an invitation.
deleteAccountInvitationDelete account invitation.
deleteAccountMemberRemove a member from the account, or leave it yourself; removing another member requires account.members.manage.
deleteApiKeyRevoke an API key so that it can no longer authenticate; the key stays listed with status revoked.
deleteProjectInvitationDelete an invitation.
deleteProjectMemberRemoves a member from the project; the last owner cannot be removed, so transfer ownership first.
resendProjectInvitationResend an invitation.
updateAccountChange an account's name or slug.
updateAccountMemberChange an account member's role.
updateApiKeyChange an API key's name or expiry.
updateProjectMemberChanges a non-owner member's role to admin, editor or viewer; the owner changes only through updateProjectOwner.
updateProjectOwnerTransfers project ownership from the calling owner to another existing member and demotes the previous owner to admin.