---
title: "List connector http actions"
method: GET
path: "/connectors/{connectorId}/http-actions"
---

# List connector http actions

`GET /connectors/{connectorId}/http-actions`

## Request

- Base URL: `https://platform-api.visitoai.com/m2m/v1`
- URL: `https://platform-api.visitoai.com/m2m/v1/connectors/{connectorId}/http-actions`
- Auth: HTTP bearer

Tenant-bound connector configuration. No provider requests. Credentials are masked. Mutations require the current revision where applicable. Referenced connections and nonempty connectors cannot be deleted. New custom connector and action creation requires workspace rollout enablement.

## Path parameters

- `connectorId` string, required

## Query parameters

- `cursor` string

## Response `200`

Success

- ConnectorHttpActionsPage
  - `tools` Tool[], required
    - `toolId` string, required
    - `tenantId` string, required
    - `name` string, required
    - `description` string, required
    - `parameters` object, required
    - `endpoint` ToolEndpoint, required
      - `url` string, uri, required
      - `method` 'GET' | 'POST', required
      - `timeoutMs` integer
      - `path` string
    - `auth` object, required
      - `type` 'none' | 'bearer' | 'api_key', required
      - `headerName` string
      - `secretLastFour` string
      - `configured` boolean, required
    - `active` boolean, required
    - `readOnly` boolean, required
    - `allowInPlayground` boolean, required
    - `propertyIds` string[], required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `mode` 'off' | 'playground' | 'active' | 'legacy_live_only': Computed availability. legacy_live_only preserves existing HTTP live access without Playground access until explicitly changed.
    - `playgroundOnly` boolean
    - `configurationVersion` string, nullable: Opaque current action and connection configuration token. Confirm this exact value for write-capable tests.
    - `scopeMode` 'tenant' | 'businesses': tenant applies throughout this workspace and requires empty propertyIds; businesses uses explicitly selected active business IDs. Omission preserves legacy scope semantics. Scope is not an execution permission.
    - `connectorId` string
    - `connectionId` string
    - `revision` integer
    - `version` integer, nullable
    - `runtimeName` string
  - `nextCursor` string, nullable, required

---

[API](https://skmtc.dev/visitoai/apis/visito-m2m-api.md) - [All operations](https://skmtc.dev/visitoai/apis/visito-m2m-api/llms.txt) - [OpenAPI document](https://skmtc.dev/visitoai/apis/visito-m2m-api/revisions/98377d35c234?raw)
