Restrictions

List a connector’s tools for writing a restriction

Lists every tool a connector defines (name, person-readable label, description, resource and method), for picking tools[].tool_name values in a restriction. Unlike GET /connector/{slug}/tools, this answers regardless of the caller’s own restrictions: that route returns 403 for a connector the caller is blocked from, which would leave a member unable to narrow a rule that blocks them to specific tools. Reading the catalog grants nothing: execution, connections and toolbox pins still apply the caller’s restrictions, and the write routes still decide whether the caller may write the rule. Requires restriction:manage and connector:view (browsing the catalog needs the latter everywhere; this route drops only the caller’s use-side restriction). Cursor-paged by name. For an organization’s remote MCP connector the rows are the org’s registry of tool names (turned-off ones included, with status, tier and title), resource is mcp, method is the upstream tool name, and operation_counts is not returned.

get/restriction/connector/{slug}/tools

Request

  • Base URL: https://api.elaichi.ai
  • URL: https://api.elaichi.ai/restriction/connector/{slug}/tools
  • Auth: HTTP bearer

Path parameters

slugstring required

Connector slug.

Query parameters

limitinteger

Page size. Defaults to 50. Values above 200 are silently clamped to 200 rather than rejected; a value below 1, or a non-integer, is a 400. Ignored by the endpoints documented as unpaginated.

cursorstring

Opaque cursor — pass the next_cursor from a previous response. Ignored by unpaginated endpoints.

qstring

Case-insensitive substring match on tool_label, name, description and resource. LIKE wildcards are matched literally. Max 200 characters.

operationstring

Comma-separated CRUD buckets to keep: read, create, update, delete, other. Unknown values 400. Applied before paging, so the cursor never counts a row the filter would have hidden.

Headers

X-Organization-Idstring

Target organization (org_…). Required for cookie/session auth on org-scoped routes; optional for API tokens, which carry their organization, and rejected when it names a different one.

Response

OK

next_cursorstring nullable required
prev_cursorstring nullable required

Changes

No recorded changes to this operation across all 1 revision of this API.