SMAO API Documentation
Public APITools

List tools (paginated)

GET
/tools

Returns the organization's custom tools, ordered by created_at DESC. Auth configuration is summarized — the stored secret value is never returned; auth.has_secret indicates whether a credential is set.

Authorization

bearerAuth
AuthorizationBearer <token>

API key in the Authorization: Bearer <key> header. Keys are created in the SMAO dashboard (Settings → API Keys).

In: header

Query Parameters

cursor?string

Opaque cursor from a prior meta.next_cursor. Base64url-encoded (unpadded) — do not parse or construct it manually.

Match^[A-Za-z0-9_-]+$
limit?integer

Items per page (1–100, default 50).

Range1 <= value <= 100
Default50

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/tools"
{  "data": [    {      "id": "string",      "tool_key": "string",      "display_name": "string",      "description": "string",      "parameters": {},      "execution_type": "webhook",      "source": "custom",      "webhook": {        "url": "http://example.com",        "method": "GET",        "headers": {},        "body_template": "string",        "timeout_ms": 500,        "retry_count": 0      },      "integration": null,      "auth": {        "type": "apiKey",        "header_name": "string",        "username": "string",        "has_secret": true      },      "created_at": "2019-08-24T14:15:22Z",      "updated_at": "2019-08-24T14:15:22Z"    }  ],  "meta": {    "has_more": true,    "next_cursor": "string"  }}

Delete a calendar DELETE

Deletes a calendar. Fails with `409 conflict` if the calendar is still assigned to one or more assistants — unlink it from every assistant first (via the Assistants endpoint) and retry.

Create a tool POST

Creates a new webhook-type tool. `tool_key` must be unique within your organization; reuse returns 409. Auth secrets are stored AES-256-GCM encrypted and are never returned — submit them on create / PATCH to set or rotate. Integration-type tools must be created via the dashboard (OAuth flow) and cannot be created through the public API in v1.