connections
Discover one bounded native resource page with a reviewed snapshot
Requires admin role, admin:workspace and resources:read; grants also require resources:write and invocation requires eval:write. Mutations bind exact revision, authority epoch, selection epoch and actor idempotency UUID. Discovery is not access permission. Current provider ACLs and canonical credentials remain authoritative. Raw provider cursors are never accepted. Expired/stale reviews fail closed. Receipt recovery never dispatches work and never replays document content. Uncertain invocations must not be resubmitted with a new identity. Model calls retain canonical policy, budget and durable evidence controls.
POST
/
api
/
connections
/
graph
/
{id}
/
discover
Discover one bounded native resource page with a reviewed snapshot
curl --request POST \
--url https://evalgate.com/api/connections/graph/{id}/discover \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"expectedRevision": 123,
"expectedAuthorityEpoch": 123,
"expectedSelectionEpoch": 123,
"idempotencyKey": "<string>",
"endpointId": "<string>",
"parentGrantId": "<string>",
"cursor": "<string>",
"limit": 123
}
'import requests
url = "https://evalgate.com/api/connections/graph/{id}/discover"
payload = {
"expectedRevision": 123,
"expectedAuthorityEpoch": 123,
"expectedSelectionEpoch": 123,
"idempotencyKey": "<string>",
"endpointId": "<string>",
"parentGrantId": "<string>",
"cursor": "<string>",
"limit": 123
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
expectedRevision: 123,
expectedAuthorityEpoch: 123,
expectedSelectionEpoch: 123,
idempotencyKey: '<string>',
endpointId: '<string>',
parentGrantId: '<string>',
cursor: '<string>',
limit: 123
})
};
fetch('https://evalgate.com/api/connections/graph/{id}/discover', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://evalgate.com/api/connections/graph/{id}/discover",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'expectedRevision' => 123,
'expectedAuthorityEpoch' => 123,
'expectedSelectionEpoch' => 123,
'idempotencyKey' => '<string>',
'endpointId' => '<string>',
'parentGrantId' => '<string>',
'cursor' => '<string>',
'limit' => 123
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://evalgate.com/api/connections/graph/{id}/discover"
payload := strings.NewReader("{\n \"expectedRevision\": 123,\n \"expectedAuthorityEpoch\": 123,\n \"expectedSelectionEpoch\": 123,\n \"idempotencyKey\": \"<string>\",\n \"endpointId\": \"<string>\",\n \"parentGrantId\": \"<string>\",\n \"cursor\": \"<string>\",\n \"limit\": 123\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://evalgate.com/api/connections/graph/{id}/discover")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"expectedRevision\": 123,\n \"expectedAuthorityEpoch\": 123,\n \"expectedSelectionEpoch\": 123,\n \"idempotencyKey\": \"<string>\",\n \"endpointId\": \"<string>\",\n \"parentGrantId\": \"<string>\",\n \"cursor\": \"<string>\",\n \"limit\": 123\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://evalgate.com/api/connections/graph/{id}/discover")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"expectedRevision\": 123,\n \"expectedAuthorityEpoch\": 123,\n \"expectedSelectionEpoch\": 123,\n \"idempotencyKey\": \"<string>\",\n \"endpointId\": \"<string>\",\n \"parentGrantId\": \"<string>\",\n \"cursor\": \"<string>\",\n \"limit\": 123\n}"
response = http.request(request)
puts response.read_body{
"receiptId": "<string>",
"state": "completed",
"replayed": true,
"result": {
"resources": [
{
"kind": "<string>",
"nativeId": "<string>",
"name": "<string>",
"version": "<string>",
"provenance": "configured"
}
],
"documents": [
{
"nativeId": "<string>",
"title": "<string>",
"text": "<string>",
"mimeType": "<string>",
"version": "<string>",
"score": 123
}
],
"nextCursor": "<string>",
"complete": true,
"task": {
"id": "<string>",
"state": "<string>"
}
},
"snapshotId": "<string>",
"nextCursor": "<string>",
"observedAt": "<string>",
"expiresAt": "<string>"
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}Authorizations
Organization-scoped EvalGate API key. Discover the supported agent scopes at /.well-known/oauth-protected-resource. Per-operation grants are listed in x-evalgate-required-scopes; OpenAPI bearer security requirement arrays remain empty as required for non-OAuth schemes.
Path Parameters
Body
application/json
Response
Successful response
state
Option 1 · enum<string>Option 2 · enum<string>Option 3 · enum<string>Option 4 · enum<string>
required
Available options:
completed Show child attributes
Show child attributes
⌘I
Discover one bounded native resource page with a reviewed snapshot
curl --request POST \
--url https://evalgate.com/api/connections/graph/{id}/discover \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"expectedRevision": 123,
"expectedAuthorityEpoch": 123,
"expectedSelectionEpoch": 123,
"idempotencyKey": "<string>",
"endpointId": "<string>",
"parentGrantId": "<string>",
"cursor": "<string>",
"limit": 123
}
'import requests
url = "https://evalgate.com/api/connections/graph/{id}/discover"
payload = {
"expectedRevision": 123,
"expectedAuthorityEpoch": 123,
"expectedSelectionEpoch": 123,
"idempotencyKey": "<string>",
"endpointId": "<string>",
"parentGrantId": "<string>",
"cursor": "<string>",
"limit": 123
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
expectedRevision: 123,
expectedAuthorityEpoch: 123,
expectedSelectionEpoch: 123,
idempotencyKey: '<string>',
endpointId: '<string>',
parentGrantId: '<string>',
cursor: '<string>',
limit: 123
})
};
fetch('https://evalgate.com/api/connections/graph/{id}/discover', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://evalgate.com/api/connections/graph/{id}/discover",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'expectedRevision' => 123,
'expectedAuthorityEpoch' => 123,
'expectedSelectionEpoch' => 123,
'idempotencyKey' => '<string>',
'endpointId' => '<string>',
'parentGrantId' => '<string>',
'cursor' => '<string>',
'limit' => 123
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://evalgate.com/api/connections/graph/{id}/discover"
payload := strings.NewReader("{\n \"expectedRevision\": 123,\n \"expectedAuthorityEpoch\": 123,\n \"expectedSelectionEpoch\": 123,\n \"idempotencyKey\": \"<string>\",\n \"endpointId\": \"<string>\",\n \"parentGrantId\": \"<string>\",\n \"cursor\": \"<string>\",\n \"limit\": 123\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://evalgate.com/api/connections/graph/{id}/discover")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"expectedRevision\": 123,\n \"expectedAuthorityEpoch\": 123,\n \"expectedSelectionEpoch\": 123,\n \"idempotencyKey\": \"<string>\",\n \"endpointId\": \"<string>\",\n \"parentGrantId\": \"<string>\",\n \"cursor\": \"<string>\",\n \"limit\": 123\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://evalgate.com/api/connections/graph/{id}/discover")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"expectedRevision\": 123,\n \"expectedAuthorityEpoch\": 123,\n \"expectedSelectionEpoch\": 123,\n \"idempotencyKey\": \"<string>\",\n \"endpointId\": \"<string>\",\n \"parentGrantId\": \"<string>\",\n \"cursor\": \"<string>\",\n \"limit\": 123\n}"
response = http.request(request)
puts response.read_body{
"receiptId": "<string>",
"state": "completed",
"replayed": true,
"result": {
"resources": [
{
"kind": "<string>",
"nativeId": "<string>",
"name": "<string>",
"version": "<string>",
"provenance": "configured"
}
],
"documents": [
{
"nativeId": "<string>",
"title": "<string>",
"text": "<string>",
"mimeType": "<string>",
"version": "<string>",
"score": 123
}
],
"nextCursor": "<string>",
"complete": true,
"task": {
"id": "<string>",
"state": "<string>"
}
},
"snapshotId": "<string>",
"nextCursor": "<string>",
"observedAt": "<string>",
"expiresAt": "<string>"
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "<string>",
"details": "<unknown>",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"redaction": {
"applied": true,
"fieldCount": 1,
"secretCount": 1
}
}
}