Permissions

You can find the full list of API endpoints in the Token Permission type.

Endpoint	Write Token	Read Token	Robot Token
/v1/apps.add	✅
/v1/apps.delete	✅
/v1/apps.file.get	✅	✅	✅
/v1/apps.flow.run	✅
/v1/apps.list	✅	✅
/v1/apps.repositories.add	✅
/v1/apps.repositories.delete	✅
/v1/apps.repositories.list	✅	✅
/v1/apps.repositories.update	✅
/v1/apps.reset	✅
/v1/apps.upload.get	✅	✅	✅
/v1/audit.download	✅
/v1/audit.logs	✅	✅
/v1/auth.check	✅	✅	✅
/v1/auth.tfa.check	✅	✅
/v1/auth.tfa.toggle	✅
/v1/auth.tfa.verify	✅
/v1/billing.company.get	✅	✅	✅
/v1/billing.company.update	✅
/v1/billing.invoices.get	✅	✅
/v1/billing.orders.get	✅	✅
/v1/billing.subscription.hook	✅
/v1/billing.subscriptions.cancel	✅
/v1/billing.subscriptions.get	✅	✅
/v1/billing.subscriptions.upgrade	✅
/v1/flows.delete	✅
/v1/flows.files.get	✅	✅	✅
/v1/flows.list	✅	✅
/v1/flows.publish	✅
/v1/flows.published.delete	✅
/v1/flows.published.list	✅	✅
/v1/flows.published.run	✅
/v1/flows.published.update	✅
/v1/flows.run	✅
/v1/flows.shared.delete	✅
/v1/flows.shared.import	✅
/v1/flows.shared.list	✅	✅
/v1/flows.stop	✅
/v1/flows.tags.add	✅
/v1/flows.tags.delete	✅
/v1/flows.versions.create	✅
/v1/flows.versions.delete	✅
/v1/flows.versions.list	✅	✅
/v1/flows.versions.update	✅
/v1/jobs.list	✅	✅
/v1/jobs.stop	✅
/v1/licenses.activate	✅
/v1/licenses.delete	✅
/v1/licenses.list	✅	✅
/v1/licenses.upload	✅
/v1/queues.create	✅
/v1/queues.delete	✅
/v1/queues.item.delete	✅		✅
/v1/queues.item.get	✅	✅	✅
/v1/queues.item.get.all	✅	✅	✅
/v1/queues.item.insert	✅		✅
/v1/queues.item.list	✅	✅
/v1/queues.item.update	✅		✅
/v1/queues.list	✅	✅
/v1/queues.update	✅
/v1/robots.create	✅
/v1/robots.delete	✅
/v1/robots.list	✅	✅	✅
/v1/robots.stop	✅
/v1/robots.update	✅
/v1/schedules.create	✅
/v1/schedules.delete	✅
/v1/schedules.list	✅	✅
/v1/schedules.update	✅
/v1/templates.get	✅	✅
/v1/templates.import	✅
/v1/triggers.create	✅
/v1/triggers.delete	✅
/v1/triggers.list	✅	✅
/v1/triggers.pending.add	✅
/v1/triggers.update	✅
/v1/users.delete	✅
/v1/users.edit	✅
/v1/users.invitation.delete	✅
/v1/users.invite	✅
/v1/users.list	✅	✅
/v1/users.machines.connected.list	✅	✅
/v1/users.robots.connected.list	✅	✅
/v1/users.update	✅
/v1/vaults.items.get	✅	✅	✅
/v1/vaults.items.list	✅	✅
/v1/vaults.list	✅	✅	✅
/v1/vaults.secret.inject	✅
/v1/vaults.update	✅
/v1/workspace	✅	✅
/v1/workspace.robots.connected.list	✅	✅
/v1/workspace.stats	✅	✅
/plugins.list	✅
/plugins.toggle	✅
/repositories.add	✅
/repositories.delete	✅
/repositories.update	✅
/repositories.list	✅	✅	✅

info

Any request with a token having insufficient permission will result in "no_permission" response.

Example request with insufficient permission:

curl -X DELETE https://api.robomotion.io/v1/robots.delete -H "Authorization: Bearer a77eeb98e94448e3b4d25b8e2c2c4420c27a85b217f94d379bd2b97b407fe0fe" -d '{"robot_id": "94f7dca1-67dc-4d6b-aae1-17a61f91281c"}'

Example response with insufficient permission:

{"ok":false,"error":"no_permission"}