Entities


GET /{o}/{p}/entities/facets

Entity facet counts

Faceted counts by kind, state, owner label, and cell label. Each dimension is counted with every other dimension's filters applied (cross-exclusion).

Auth: Bearer token required · Permission: data:read

Path parameters

NameTypeDescription
ostring
pstring

Query parameters

NameTypeDescription
kindstringJSON-encoded string array — entity type names. '' matches rows where the label is unset
statestringJSON-encoded string array — states. '' matches rows where the label is unset
ownerstringJSON-encoded string array — owner label values. '' matches rows where the label is unset
cellstringJSON-encoded string array — cell label values. '' matches rows where the label is unset
searchstringSubstring match on name + entity type
cellKeystringProject cell label key; omit to skip the cell dimension

Responses

StatusDescriptionSchema
200OKEntityFacets
401UnauthorizedError
403ForbiddenError

GET /{o}/{p}/entities/groups

Entity counts per group

Membership counts per group — cell, entity type, or label value — with the per-type state and open-conformance roll-ups a collapsed group renders, in place of the member entities themselves. An entity in two cells is counted under both; entities no group claims land in ungrouped.

Auth: Bearer token required · Permission: data:read

Path parameters

NameTypeDescription
ostring
pstring

Query parameters

NameTypeDescription
groupBycell | entityType | labelGrouping axis: cell membership, entity type, or a label key (required)
labelKeystringLabel key to group by — required when groupBy=label

Responses

StatusDescriptionSchema
200OKEntityGroups
400Bad RequestError
401UnauthorizedError
403ForbiddenError

GET /{o}/{p}/entities

List entities

List entities in this project with optional filtering and keyset pagination. source narrows to one import source; the project-wide graph is the default (R3).

Auth: Bearer token required · Permission: data:read

Path parameters

NameTypeDescription
ostring
pstring

Query parameters

NameTypeDescription
entityTypestringFilter by entity type
statestringFilter by state
limitintegerMax results (1-2000)
cursorstringKeyset cursor from the previous page
driftStatuscurrent | stale | missingFilter by drift status
sourcestringFilter to entities bound to one canonical source URI

Responses

StatusDescriptionSchema
200OKEntityPage
401UnauthorizedError
403ForbiddenError

GET /{o}/{p}/entities/stream

Stream entity changes (SSE)

Server-Sent Events stream of entity create/update/delete in this project.

Auth: Bearer token required · Permission: data:read

Path parameters

NameTypeDescription
ostring
pstring

Responses

StatusDescriptionSchema
200text/event-stream stream; the connection stays open and frames are delivered as they occur
401UnauthorizedError
403ForbiddenError

GET /{o}/{p}/entities/metrics

Batch-read entity metric values

Read metric values for many entities in one call, keyed by entity name. Unknown/out-of-scope names are omitted.

Auth: Bearer token required · Permission: data:read

Path parameters

NameTypeDescription
ostring
pstring

Query parameters

NameTypeDescription
namesstringComma-separated entity names to fetch metrics for (max 500) (required)

Responses

StatusDescriptionSchema
200OKEntityMetricsBatch
401UnauthorizedError
403ForbiddenError

GET /{o}/{p}/entities/{name}/drift

Get entity drift status

Auth: Bearer token required · Permission: data:read

Path parameters

NameTypeDescription
namestringEntity name
ostring
pstring

Responses

StatusDescriptionSchema
200OKEntityDriftStatus
401UnauthorizedError
403ForbiddenError
404Not FoundError

GET /{o}/{p}/entities/{name}

Get an entity by name

Auth: Bearer token required · Permission: data:read

Path parameters

NameTypeDescription
namestringEntity name
ostring
pstring

Responses

StatusDescriptionSchema
200OKEntity
401UnauthorizedError
403ForbiddenError
404Not FoundError

GET /{o}/{p}/entities/{name}/relationships

List an entity's relationships

Returns all relationships incident on the entity (explicit ∪ derived). Derived edges carry null id/state/fromEntityId/toEntityId and origin: "derived".

Auth: Bearer token required · Permission: data:read

Path parameters

NameTypeDescription
namestringEntity name
ostring
pstring

Responses

StatusDescriptionSchema
200OKResolvedRelationshipList
401UnauthorizedError
403ForbiddenError
404Not FoundError

GET /{o}/{p}/entities/{name}/metrics

Get an entity's metric values

Auth: Bearer token required · Permission: data:read

Path parameters

NameTypeDescription
namestringEntity name
ostring
pstring

Responses

StatusDescriptionSchema
200OKEntityMetrics
401UnauthorizedError
403ForbiddenError
404Not FoundError

PUT /{o}/{p}/entities/{name}/metrics/{metricName}

Set a manual/push metric value

Auth: Bearer token required · Permission: metrics:write

Path parameters

NameTypeDescription
namestringEntity name
metricNamestringMetric name
ostring
pstring

Request body (application/json)

FieldTypeDescription
valuenumberMetric value (required)

Responses

StatusDescriptionSchema
200OKEntityMetricValue
401UnauthorizedError
403ForbiddenError
404Not FoundError

GET /{o}/{p}/entities/{name}/actions

List available instance actions for an entity

Auth: Bearer token required · Permission: data:read

Path parameters

NameTypeDescription
namestringEntity name
ostring
pstring

Responses

StatusDescriptionSchema
200OKActionList
401UnauthorizedError
403ForbiddenError
404Not FoundError

POST /{o}/{p}/entities/{name}/actions/{actionName}

Trigger an instance action on an entity

Auth: Bearer token required · Permission: actions:trigger

Path parameters

NameTypeDescription
namestringEntity name
actionNamestringAction name
ostring
pstring

Request body (application/json)

FieldTypeDescription
parametersobjectAction parameters as JSON
recommendationsobjectRecommendation selections as JSON

Responses

StatusDescriptionSchema
202AcceptedActionRun
401UnauthorizedError
403ForbiddenError
404Not FoundError

POST /{o}/{p}/entities/{name}/sync-stamp

Record a sync observation for an entity

Auth: Bearer token required · Permission: observations:write

Path parameters

NameTypeDescription
namestringEntity name
ostring
pstring

Request body (application/json)

FieldTypeDescription
sourcestringSource-of-truth name (e.g. argo, k8s, aws) (required)
observedAtstring(date-time)ISO-8601 observation timestamp; defaults to server time

Responses

StatusDescriptionSchema
200OKEntitySyncStamp
401UnauthorizedError
403ForbiddenError
404Not FoundError

Schemas

Action

FieldTypeDescription
namestring(required)
displayNamestring | null(required)
descriptionstring | null(required)
associatedWithobject(required)
conditionsobject[](required)
parametersobject[](required)
recommendationsobject[](required)
operationobject | object | object | object | object | object | object | object(required)
triggerobject | object | object | object | object | object | null(required)
dependsOnobject[] | null(required)
mutatesPropertystring | null(required)
timeoutMinutesinteger | null(required)
orgIdstring(required)
projectIdstring(required)
createdAtstring | string(required)
updatedAtstring | string(required)

ActionList

Type: Action[]

ActionRun

FieldTypeDescription
idstring(uuid)(required)
actionNamestring(required)
entityIdstring(uuid) | null(required)
statuspending | running | succeeded | failed | cancelled | dispatching | blocked(required)
parametersobject(required)
recommendationsobject(required)
triggeredBystring(required)
createdAtstring | string(required)
startedAtstring | string | null(required)
completedAtstring | string | null(required)
errorstring | null(required)
outputobject | null(required)
orgIdstring(required)
projectIdstring(required)
operationEntityIdstring | null(required)
metadataobject | null(required)
resolvedTargetsobject(required)

Entity

FieldTypeDescription
idstring(uuid)(required)
entityTypeNamestring(required)
namestring(required)
statestring(required)
propertiesobject(required)
labelsobject(required)
lastSyncedAtstring | string | null(required)
syncSourcestring | null(required)
createdAtstring | string(required)
updatedAtstring | string(required)
orgIdstring(required)
projectIdstring(required)

EntityDriftStatus

FieldTypeDescription
namestring(required)
driftStatusstring | null(required)
lastSyncedAtstring | null(required)
syncSourcestring | null(required)
messagestring(required)

EntityFacets

FieldTypeDescription
kindobject[](required)
stateobject[](required)
ownerobject[](required)
cellobject[](required)
totalinteger(required)

EntityGroups

FieldTypeDescription
groupBycell | entityType | label(required)
labelKeystring | null(required)
groupsobject[](required)
ungroupedobject(required)

EntityMetricValue

FieldTypeDescription
entityNamestring(required)
metricNamestring(required)
valuenumber(required)

EntityMetrics

Type: object

EntityMetricsBatch

Type: object

EntityPage

FieldTypeDescription
itemsEntity[](required)
nextCursorstring | nullCursor for the next page; null on the final page (required)

EntitySyncStamp

FieldTypeDescription
idstring(uuid)(required)
namestring(required)
lastSyncedAtstring | string | null(required)
syncSourcestring | null(required)

Error

FieldTypeDescription
errorstring(required)
codestring

PlacementDecision

FieldTypeDescription
groupingKindCell | DeploymentTargetSet(required)
groupstring(required)
policyleast-loaded | round-robin | random(required)
metricstring | null(required)
metricValuenumber | null(required)
candidatesinteger(required)

ResolvedRelationshipList

Type: ResolvedRelationshipListRow[]

ResolvedRelationshipListRow

FieldTypeDescription
idstring(uuid) | null(required)
relationshipTypeNamestring(required)
fromEntityNamestring(required)
toEntityNamestring(required)
originexplicit | derived(required)
statestring | null(required)
labelsobject(required)
fromEntityIdstring | null(required)
toEntityIdstring | null(required)
orgIdstring | null(required)
projectIdstring | null(required)
createdAtstring | string | null(required)
updatedAtstring | string | null(required)
deletionScheduledAtstring | string | null(required)
deletionGracePeriodSecondsinteger | null(required)

ResolvedTargetRecord

FieldTypeDescription
namestring(required)
provideraws | gcp | s3-backend | tfc-workspace | generic(required)
placementPlacementDecision