SnozeDevelopers
API referenceConnected Accounts

Resolve shared resources for this viewer

Answers, for the signed-in viewer only, whether each referenced external resource is reachable through one of their own credentials. Never resolves through the credential of whoever placed the reference. At most 50 distinct refs per request (the payload accepts up to 400 ids before de-duplication); more is a validation error, not a truncated answer. Answers are cached per viewer and per satisfying account, positively for ten minutes and negatively for two so newly granted access appears quickly; `forceRecheck` clears the cached answers first. A probe that errors or exceeds five seconds renders as no access rather than falling back to another credential. A redacted ref the viewer cannot reach carries no name, URL or provider id.

POST
/v1/workspaces/{workspaceId}/resource-access

Authorization

apiKey
headerAuthorizationBearer <snoze_sk_…>

Workspace API key created in Workspace settings → API keys. Scopes on the key bound what it can read and write.

Path Parameters

workspaceId*string

Request Body

application/json
  1. body
refIds*array<string>
Itemsitems <= 400
forceRecheck?boolean|null

Response Body

Success

application/json
  1. response
data*array<>
Example Request
curl -X POST 'https://api.snoze.dev/v1/workspaces/string/resource-access' \  -H 'Content-Type: application/json' \  -d '{  "refIds": []}'
Example Response
{  "data": [    {      "ref": {        "id": "string",        "provider": "string",        "externalType": "string",        "externalId": "string",        "displayName": "string",        "canonicalUrl": "string",        "redactName": true      },      "access": {        "state": "reachable",        "connectedAccountId": "string",        "connectionId": "string",        "accountLabel": "string"      },      "checkedAt": "string"    }  ]}

Disconnect an account

Removes the caller's account-level credential and every grant, cached reachability answer, and stored secret that belonged to it. The workspace install the credential was mirrored from is disabled and stripped of its copy of the token, and its Google push channels are stopped, so Snoze stops syncing and receiving data for the account immediately. Automations pinned to it are paused rather than silently re-run under a different identity.

Rebind an automation's credential

Changes which credential an automation runs on, or clears the pin so its nodes fall back to their workspace connection. Deliberately separate from saving the graph: editing conditions or mappings must never silently remove the only credential that works. The current run-as owner may swap the pin for another of their own accounts without further permission; clearing it, moving it onto a workspace connection, or any change by someone else needs `automations:write`. A personal credential can only ever be bound by the person who owns it, and is rejected outright when the workspace requires workspace connections. A workspace target may be a connection created through the connections API or an enabled provider install.