Pipory
Node reference

Coda

Coda node reference - all 125 operations, the credential it needs, and a worked example.

Coda / Superhuman Docs API (Files & Docs). 125 operations: docs; pages and page content, including export; tables, views and columns; rows (list, get, upsert single or bulk, update, delete, bulk delete, push button); formulas and controls; folders; permissions, principals and sharing settings; publishing, gallery categories and custom doc domains; webhook automations; doc, page and Pack analytics; account, workspace members and roles, Go links, browser-link resolution and mutation status; and the full Pack authoring surface (Packs, versions, releases and reviews, access, makers and invitations, listings, categories, featured docs and assets, OAuth and system connections, plus Pack, ingestion and agent logs).

Credential: Coda API token - see Credentials.

Token restrictions

Each operation below lists the token restriction it needs. Token restrictions are chosen when the API token is created at docs.superhuman.com/account. Coda -- renamed Superhuman Docs, with coda.io now 307-redirecting everything human-facing to docs.superhuman.com -- has no OAuth and no scope list on this REST surface, but a token is NOT simply "the user": the API document defines a real restriction model along two INDEPENDENT axes, and a refusal can be either one. The first is operation type: Read access allows GET only, Write access allows POST, PUT and DELETE only, Read and write allows all. The second is object type: a token can be narrowed to Documents, permitting only /docs/${DOC_ID} calls for one doc, or to Tables, permitting only /docs/${DOC_ID}/tables/${TABLE_ID} calls for one table. The column below states both halves for every operation, each derived from the HTTP verb and path the executor actually sends. Four things a refusal is NOT. First, and the most expensive: reachability is not read/write. The workspace, analytics, folder, category and the entire 53-operation Pack surface do not live under /docs/..., so a doc- or table-restricted token cannot call them whatever its read/write setting -- widening to "Read and write" changes nothing, and only an unrestricted token works. Second, PATCH is undocumented. Coda's own restriction table names GET under Read and POST/PUT/DELETE under Write and never mentions PATCH at all, so the six PATCH-only operations (updateDoc, updateAclSettings, updateFolder, updateCustomDocDomain, updatePack, patchPackSystemConnection) say so plainly rather than inventing a bucket. Third, the status code lies about which axis tripped: Coda answers 401 for a token whose restrictions do not cover a call, with a body reading only "Unauthorized" -- identical to a revoked or mistyped token -- and answers 404 rather than 403 for an object the token cannot see, so "not found" and "not yours" are indistinguishable. Fourth, a 429 is the rate limit, not a permission: per-token buckets of roughly 100 reads/6s, 10 writes/6s, 5 doc-content writes/10s and 4 doc-list reads/6s, none of them advertised in response headers. Two operations sit outside all of this by design -- whoami and resolveBrowserLink are callable by every token, restricted or not, which is why whoami is what the credential connection test calls. If a run fails with a permission error, the node names the missing token restriction in the error - grant it and re-run; you do not need to rebuild the workflow.

Operations (125)

Docs

OperationWhat it doesToken restriction
listDocsList docsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
createDocCreate docWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
getDocGet docRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
updateDocUpdate docCoda's token-restriction table lists GET under Read access and POST/PUT/DELETE under Write access, but never names PATCH -- so a restricted token's behaviour here is undocumented by the vendor. An unrestricted token always works, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
deleteDocDelete docWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.

Pages

OperationWhat it doesToken restriction
listPagesList pagesRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
createPageCreate pageWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
getPageGet pageRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
updatePageUpdate pageWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
deletePageDelete pageWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
listPageContentList page contentRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
deletePageContentDelete page contentWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
beginPageContentExportBegin page content exportWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
getPageContentExportStatusGet page export statusRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.

Tables & columns

OperationWhat it doesToken restriction
listTablesList tables & viewsRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
getTableGet table or viewRead access (GET) on the token, plus doc reach: an unrestricted token, a token restricted to this doc, or a token restricted to this table.
listColumnsList columnsRead access (GET) on the token, plus doc reach: an unrestricted token, a token restricted to this doc, or a token restricted to this table.
getColumnGet columnRead access (GET) on the token, plus doc reach: an unrestricted token, a token restricted to this doc, or a token restricted to this table.

Rows

OperationWhat it doesToken restriction
listRowsList rowsRead access (GET) on the token, plus doc reach: an unrestricted token, a token restricted to this doc, or a token restricted to this table.
getRowGet rowRead access (GET) on the token, plus doc reach: an unrestricted token, a token restricted to this doc, or a token restricted to this table.
upsertRowInsert / update row (single)Write access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token, a token restricted to this doc, or a token restricted to this table.
upsertRowsInsert / update rows (bulk)Write access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token, a token restricted to this doc, or a token restricted to this table.
updateRowUpdate rowWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token, a token restricted to this doc, or a token restricted to this table.
deleteRowDelete rowWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token, a token restricted to this doc, or a token restricted to this table.
deleteRowsDelete rows (bulk)Write access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token, a token restricted to this doc, or a token restricted to this table.
pushButtonPush a button in a rowWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token, a token restricted to this doc, or a token restricted to this table.

Formulas & controls

OperationWhat it doesToken restriction
listFormulasList formulasRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
getFormulaGet formulaRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
listControlsList controlsRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
getControlGet controlRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.

Folders

OperationWhat it doesToken restriction
listFoldersList foldersRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
createFolderCreate folderWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
getFolderGet folderRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
updateFolderUpdate folderCoda's token-restriction table lists GET under Read access and POST/PUT/DELETE under Write access, but never names PATCH -- so a restricted token's behaviour here is undocumented by the vendor. An unrestricted token always works. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
deleteFolderDelete folderWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.

Permissions & sharing

OperationWhat it doesToken restriction
getSharingMetadataGet sharing metadataRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
getPermissionsList permissionsRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
addPermissionAdd permissionWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
deletePermissionDelete permissionWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
searchPrincipalsSearch principalsRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
getAclSettingsGet sharing settingsRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
updateAclSettingsUpdate sharing settingsCoda's token-restriction table lists GET under Read access and POST/PUT/DELETE under Write access, but never names PATCH -- so a restricted token's behaviour here is undocumented by the vendor. An unrestricted token always works, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.

Publishing & domains

OperationWhat it doesToken restriction
publishDocPublish docWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
unpublishDocUnpublish docWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
listCategoriesList gallery categoriesRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listCustomDocDomainsList custom doc domainsRead access (GET) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
addCustomDocDomainAdd custom doc domainWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
updateCustomDocDomainUpdate custom doc domainCoda's token-restriction table lists GET under Read access and POST/PUT/DELETE under Write access, but never names PATCH -- so a restricted token's behaviour here is undocumented by the vendor. An unrestricted token always works, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
deleteCustomDocDomainDelete custom doc domainWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.
getCustomDocDomainProviderGet custom domain providerRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.

Automations

OperationWhat it doesToken restriction
triggerWebhookAutomationTrigger a webhook automationWrite access (POST/PUT/DELETE) on the token, plus doc reach: an unrestricted token or one restricted to this doc. A table-restricted token cannot reach it.

Analytics

OperationWhat it doesToken restriction
listDocAnalyticsList doc analyticsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listDocAnalyticsSummaryDoc analytics summaryRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listPageAnalyticsList page analyticsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listPackAnalyticsList Pack analyticsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listPackAnalyticsSummaryPack analytics summaryRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listPackFormulaAnalyticsList Pack formula analyticsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
getAnalyticsLastUpdatedAnalytics last-updated dayRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.

Account & workspaces

OperationWhat it doesToken restriction
whoamiWho am ICallable by EVERY token, restricted or not -- Coda names /whoami as an explicit exception to the restriction rules. Use it to test a credential.
listWorkspaceMembersList workspace membersRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listWorkspaceRoleActivityList workspace role activityRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
changeUserRoleChange a user's workspace roleWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
addGoLinkAdd a Go linkWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
resolveBrowserLinkResolve a browser linkCallable by EVERY token, restricted or not -- but it only returns a result for an object the token can already read.
getMutationStatusGet mutation statusRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.

Packs

OperationWhat it doesToken restriction
listPacksList PacksRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
createPackCreate PackWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
getPackGet PackRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
updatePackUpdate PackCoda's token-restriction table lists GET under Read access and POST/PUT/DELETE under Write access, but never names PATCH -- so a restricted token's behaviour here is undocumented by the vendor. An unrestricted token always works. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
deletePackDelete PackWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listPackListingsList Pack listingsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
getPackListingGet Pack listingRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
getPackConfigurationSchemaGet Pack configuration schemaRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.

Pack versions & releases

OperationWhat it doesToken restriction
listPackVersionsList Pack versionsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
getNextPackVersionGet next Pack versionWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
registerPackVersionRegister Pack versionWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
packVersionUploadCompleteFinalize Pack version uploadWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
getPackVersionDiffsDiff two Pack versionsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
uploadPackSourceCodeBegin Pack source-code uploadWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
packSourceCodeUploadCompleteFinalize Pack source-code uploadWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
getPackSourceCodeGet Pack source codeRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
createPackReleaseCreate Pack releaseWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listPackReleasesList Pack releasesRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
updatePackReleaseUpdate Pack release notesWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listPackReviewsList Pack reviewsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
createPackReviewSubmit Pack for reviewWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
cancelPackReviewCancel pending Pack reviewWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.

Pack access & makers

OperationWhat it doesToken restriction
getPackPermissionsList Pack permissionsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
addPackPermissionAdd Pack permissionWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
deletePackPermissionDelete Pack permissionWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
deleteUserPackPermissionDelete my Pack permissionWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listPackInvitationsList Pack invitationsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
createPackInvitationCreate Pack invitationWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
updatePackInvitationUpdate Pack invitationWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
deletePackInvitationDelete Pack invitationWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listUserPackInvitationsList my Pack invitationsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
replyToPackInvitationReply to a Pack invitationWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
addPackMakerAdd Pack makerWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
deletePackMakerRemove Pack makerWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listPackMakersList Pack makersRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.

Pack listing & assets

OperationWhat it doesToken restriction
getPackListingDraftGet Pack listing draftRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
upsertPackListingDraftUpsert Pack listing draftWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
deletePackListingDraftDelete Pack listing draftWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listPackCategoriesList Pack categoriesRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
addPackCategoryAdd Pack categoryWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
deletePackCategoryDelete Pack categoryWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listPackFeaturedDocsList Pack featured docsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
updatePackFeaturedDocsUpdate Pack featured docsWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
uploadPackAssetBegin Pack asset uploadWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
packAssetUploadCompleteFinalize Pack asset uploadWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.

Pack connections

OperationWhat it doesToken restriction
getPackOauthConfigGet Pack OAuth configRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
setPackOauthConfigSet Pack OAuth configWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
getPackSystemConnectionGet Pack system connectionRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
setPackSystemConnectionSet Pack system connectionWrite access (POST/PUT/DELETE) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
patchPackSystemConnectionPatch Pack system connectionCoda's token-restriction table lists GET under Read access and POST/PUT/DELETE under Write access, but never names PATCH -- so a restricted token's behaviour here is undocumented by the vendor. An unrestricted token always works. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.

Pack logs & ingestion

OperationWhat it doesToken restriction
listPackLogsList Pack logsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listGroupedPackLogsList grouped Pack logsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
getPackLogDetailsGet Pack log detailsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listIngestionLogsList ingestion logsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listGroupedIngestionLogsList grouped ingestion logsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listIngestionBatchExecutionsList ingestion batch executionsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listIngestionParentItemsList ingestion parent itemsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listAgentLogsList agent logsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
listAgentSessionIdsList agent session IDsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.
getAgentPackLogDetailsGet agent log detailsRead access (GET) on the token. Requires an UNRESTRICTED token -- this path is not under /docs/{docId}, so a doc-restricted or table-restricted token cannot reach it at all, whatever its read/write setting.