DEVELOPER · DEVELOPER
Trigger pipelines, rerun workflows, and read job results for their projects.
Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.
Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.
Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
circleci_delete_context_by_context_idWRITEDelete a context by its ID. Will also delete all environment variables inside the context. via DELETE /context/{context_id}
circleci_delete_context_by_context_id_environment_variable_by_env_var_nameWRITEDelete an environment variable from a context. via DELETE /context/{context_id}/environment-variable/{env_var_name}
circleci_delete_context_by_context_id_restrictions_by_restriction_idWRITEDeletes a project, expression or group restriction from a context. via DELETE /context/{context_id}/restrictions/{restriction_id}
circleci_delete_org_by_orgid_oidc_custom_claimsWRITEDeletes org-level custom claims of OIDC identity tokens via DELETE /org/{orgID}/oidc-custom-claims
circleci_delete_org_by_orgid_project_by_projectid_oidc_custom_claimsWRITEDeletes project-level custom claims of OIDC identity tokens via DELETE /org/{orgID}/project/{projectID}/oidc-custom-claims
circleci_delete_organization_by_org_slug_or_idWRITEDelete an organization. This action will delete all projects including all build data for the organization. via DELETE /organization/{org-slug-or-id}
circleci_delete_organization_by_org_slug_or_id_url_orb_allow_list_by_allow_list_entry_idWRITERemove an entry from the org's URL orb allow-list via DELETE /organization/{org-slug-or-id}/url-orb-allow-list/{allow-list-entry-id}
circleci_delete_organizations_by_org_id_groups_by_group_idWRITEDelete a group in an organization. This will remove all members from the group as well, and the subsequent role grants tied to the group. Currently only supported for standalone organizations. via DELETE /organizations/{org_id}/groups/{group_id}
circleci_delete_otel_exporters_by_otel_exporter_idWRITE[__EXPERIMENTAL__] Deletes an OTLP exporter configuration by ID. via DELETE /otel/exporters/{otel_exporter_id}
circleci_delete_project_by_project_slugWRITEDeletes a project by project slug via DELETE /project/{project-slug}
circleci_delete_project_by_project_slug_checkout_key_by_fingerprintWRITEDeletes the checkout key via md5 or sha256 fingerprint. sha256 keys should be url-encoded. via DELETE /project/{project-slug}/checkout-key/{fingerprint}
circleci_delete_project_by_project_slug_envvar_by_nameWRITEDeletes the environment variable named :name. via DELETE /project/{project-slug}/envvar/{name}
circleci_delete_projects_by_project_id_pipeline_definitions_by_pipeline_definition_idWRITEDelete pipeline definition. Currently only supported for pipeline definitions where `config_source.provider` is `github_app`, `github_server`, or `bitbucket_dc`. [Share feedback](https://circleci.canny.io/cloud-feature-requests/p/project-administration-apis) about our Project Administration APIs. via DELETE /projects/{project_id}/pipeline-definitions/{pipeline_definition_id}
circleci_delete_projects_by_project_id_triggers_by_trigger_idWRITEDelete a trigger. Currently only supported for triggers where `event_source.provider` is `github_oauth`, `github_app`, `github_server`, `bitbucket_dc`, `webhook`, or `schedule`. [Share feedback](https://circleci.canny.io/cloud-feature-requests/p/project-administration-apis) about our Project Administration APIs. via DELETE /projects/{project_id}/triggers/{trigger_id}
circleci_delete_schedule_by_schedule_idWRITEDeletes a schedule by ID. Available only on schedules associated with GitHub OAuth or Bitbucket Cloud pipeline definitions. via DELETE /schedule/{schedule-id}
circleci_delete_webhook_by_webhook_idWRITEDeletes an existing outbound webhook by its unique ID. via DELETE /webhook/{webhook_id}
circleci_get_contextREADList all contexts for an owner. via GET /context
circleci_get_context_by_context_idREADReturns basic information about a context. via GET /context/{context_id}
circleci_get_context_by_context_id_environment_variableREADList information about environment variables in a context, not including their values. via GET /context/{context_id}/environment-variable
circleci_get_context_by_context_id_restrictionsREADGets a list of project and expression restrictions associated with a context. via GET /context/{context_id}/restrictions
circleci_get_deploy_componentsREADAllows for listing of components for a given organization ID. via GET /deploy/components
circleci_get_deploy_components_by_component_idREADGet the details of a component by ID. via GET /deploy/components/{component_id}
circleci_get_deploy_components_by_component_id_versionsREADList the versions for a component. via GET /deploy/components/{component_id}/versions
circleci_get_deploy_environmentsREADAllows listing environments for a given organization ID. via GET /deploy/environments
circleci_get_deploy_environments_by_environment_idREADAllows getting an environment for a given environment ID. via GET /deploy/environments/{environment_id}
circleci_get_insights_by_org_slug_summaryREADGets aggregated summary metrics with trends for the entire org. Also gets aggregated metrics and trends for each project belonging to the org. via GET /insights/{org-slug}/summary
circleci_get_insights_by_project_slug_branchesREADGet a list of all branches for a specified project. The list will only contain branches currently available within Insights. The maximum number of branches returned by this endpoint is 5,000. via GET /insights/{project-slug}/branches
circleci_get_insights_by_project_slug_flaky_testsREADGet a list of flaky tests for a given project. Flaky tests are branch agnostic. A flaky test is a test that passed and failed in the same commit. via GET /insights/{project-slug}/flaky-tests
circleci_get_insights_by_project_slug_workflowsREADGet summary metrics for a project's workflows. Workflow runs going back at most 90 days are included in the aggregation window. Metrics are refreshed daily, and thus may not include executions from the last 24 hours. Please note that Insights is not a financial reporting tool and should not be used for precise credit reporting. Credit reporting from Insights does not use the same source of truth as the billing information that is found in the Plan Overview page in the CircleCI UI, nor does the underlying data have the same data accuracy guarantees as the billing information in the CircleCI UI. This may lead to discrepancies between credits reported from Insights and the billing information in the Plan Overview page of the CircleCI UI. For precise credit reporting, always use the Plan Overview page in the CircleCI UI. via GET /insights/{project-slug}/workflows
circleci_get_insights_by_project_slug_workflows_by_workflow_nameREADGet recent runs of a workflow. Runs going back at most 90 days are returned. Please note that Insights is not a financial reporting tool and should not be used for precise credit reporting. Credit reporting from Insights does not use the same source of truth as the billing information that is found in the Plan Overview page in the CircleCI UI, nor does the underlying data have the same data accuracy guarantees as the billing information in the CircleCI UI. This may lead to discrepancies between credits reported from Insights and the billing information in the Plan Overview page of the CircleCI UI. For precise credit reporting, always use the Plan Overview page in the CircleCI UI. via GET /insights/{project-slug}/workflows/{workflow-name}
circleci_get_insights_by_project_slug_workflows_by_workflow_name_jobsREADGet summary metrics for a project workflow's jobs. Job runs going back at most 90 days are included in the aggregation window. Metrics are refreshed daily, and thus may not include executions from the last 24 hours. Please note that Insights is not a financial reporting tool and should not be used for precise credit reporting. Credit reporting from Insights does not use the same source of truth as the billing information that is found in the Plan Overview page in the CircleCI UI, nor does the underlying data have the same data accuracy guarantees as the billing information in the CircleCI UI. This may lead to discrepancies between credits reported from Insights and the billing information in the Plan Overview page of the CircleCI UI. For precise credit reporting, always use the Plan Overview page in the CircleCI UI. via GET /insights/{project-slug}/workflows/{workflow-name}/jobs
circleci_get_insights_by_project_slug_workflows_by_workflow_name_summaryREADGet the metrics and trends for a particular workflow on a single branch or all branches via GET /insights/{project-slug}/workflows/{workflow-name}/summary
circleci_get_insights_by_project_slug_workflows_by_workflow_name_test_metricsREADGet test metrics for a project's workflows. Currently tests metrics are calculated based on 10 most recent workflow runs. via GET /insights/{project-slug}/workflows/{workflow-name}/test-metrics
circleci_get_insights_pages_by_project_slug_summaryREADGet summary metrics and trends for a project at workflow and branch level. Workflow runs going back at most 90 days are included in the aggregation window. Trends are only supported upto last 30 days. Please note that Insights is not a financial reporting tool and should not be used for precise credit reporting. Credit reporting from Insights does not use the same source of truth as the billing information that is found in the Plan Overview page in the CircleCI UI, nor does the underlying data have the same data accuracy guarantees as the billing information in the CircleCI UI. This may lead to discrepancies between credits reported from Insights and the billing information in the Plan Overview page of the CircleCI UI. For precise credit reporting, always use the Plan Overview page in the CircleCI UI. via GET /insights/pages/{project-slug}/summary
circleci_get_insights_time_series_by_project_slug_workflows_by_workflow_name_jobsREADGet timeseries data for all jobs within a workflow. Hourly granularity data is only retained for 48 hours while daily granularity data is retained for 90 days. via GET /insights/time-series/{project-slug}/workflows/{workflow-name}/jobs
circleci_get_jobs_by_job_idREADGets a job's metadata by its unique ID, including its name, job number, type, status, and associated resource IDs. via GET /jobs/{job_id}
circleci_get_meREADProvides information about the user that is currently signed in. via GET /me
circleci_get_me_collaborationsREADProvides the set of organizations of which a user is a member or a collaborator. The set of organizations that a user can collaborate on is composed of: * Organizations that the current user belongs to across VCS types (e.g. BitBucket, GitHub) * The parent organization of repository that the user can collaborate on, but is not necessarily a member of * The organization of the current user's account via GET /me/collaborations
circleci_get_org_by_orgid_oidc_custom_claimsREADFetches org-level custom claims of OIDC identity tokens via GET /org/{orgID}/oidc-custom-claims
circleci_get_org_by_orgid_project_by_projectid_oidc_custom_claimsREADFetches project-level custom claims of OIDC identity tokens via GET /org/{orgID}/project/{projectID}/oidc-custom-claims
circleci_get_organization_by_org_slug_or_idREADRetrieve an organization by slug or ID via GET /organization/{org-slug-or-id}
circleci_get_organization_by_org_slug_or_id_url_orb_allow_listREADList the entries in the org's URL Orb allow-list via GET /organization/{org-slug-or-id}/url-orb-allow-list
circleci_get_organizations_by_org_id_groupsREADGet all the groups in an organization. via GET /organizations/{org_id}/groups
circleci_get_organizations_by_org_id_groups_by_group_idREADGet details for a group in an organization. Currently only supported for standalone organizations. via GET /organizations/{org_id}/groups/{group_id}
circleci_get_organizations_by_org_id_usage_export_job_by_usage_export_job_idREADGets a usage export for an organization. via GET /organizations/{org_id}/usage_export_job/{usage_export_job_id}
circleci_get_otel_exportersREAD[__EXPERIMENTAL__] Returns a list of OTLP exporter configurations for the given organization. via GET /otel/exporters
circleci_get_owner_by_ownerid_context_by_context_decisionREADThis endpoint will return a list of decision audit logs that were made using this owner's policies. via GET /owner/{ownerID}/context/{context}/decision
circleci_get_owner_by_ownerid_context_by_context_decision_by_decisionidREADThis endpoint will retrieve a decision for a given decision log ID via GET /owner/{ownerID}/context/{context}/decision/{decisionID}
circleci_get_owner_by_ownerid_context_by_context_decision_by_decisionid_policy_bundleREADThis endpoint will retrieve a policy bundle for a given decision log ID via GET /owner/{ownerID}/context/{context}/decision/{decisionID}/policy-bundle
circleci_get_owner_by_ownerid_context_by_context_decision_settingsREADThis endpoint retrieves the current decision settings (eg enable/disable policy evaluation) via GET /owner/{ownerID}/context/{context}/decision/settings
circleci_get_owner_by_ownerid_context_by_context_policy_bundleREADThis endpoint will retrieve a policy bundle via GET /owner/{ownerID}/context/{context}/policy-bundle
circleci_get_owner_by_ownerid_context_by_context_policy_bundle_by_policynameREADThis endpoint will retrieve a policy document. via GET /owner/{ownerID}/context/{context}/policy-bundle/{policyName}
circleci_get_pipelineREADReturns all pipelines for the most recently built projects (max 250) you follow in an organization. via GET /pipeline
circleci_get_pipeline_by_pipeline_idREADReturns a pipeline by the pipeline ID. via GET /pipeline/{pipeline-id}
circleci_get_pipeline_by_pipeline_id_configREADReturns a pipeline's configuration by ID. via GET /pipeline/{pipeline-id}/config
circleci_get_pipeline_by_pipeline_id_valuesREADReturns a map of pipeline values by pipeline ID. For more information see the [pipeline values reference page](https://circleci.com/docs/variables/#pipeline-values). via GET /pipeline/{pipeline_id}/values
circleci_get_pipeline_by_pipeline_id_workflowREADReturns a paginated list of workflows by pipeline ID. via GET /pipeline/{pipeline-id}/workflow
circleci_get_project_by_project_slugREADRetrieves a project by project slug. via GET /project/{project-slug}
circleci_get_project_by_project_slug_checkout_keyREADReturns a sequence of checkout keys for `:project`. via GET /project/{project-slug}/checkout-key
circleci_get_project_by_project_slug_checkout_key_by_fingerprintREADReturns an individual checkout key via md5 or sha256 fingerprint. sha256 keys should be url-encoded. via GET /project/{project-slug}/checkout-key/{fingerprint}
circleci_get_project_by_project_slug_envvarREADReturns four 'x' characters, in addition to the last four ASCII characters of the value, consistent with the display of environment variable values on the CircleCI website. via GET /project/{project-slug}/envvar
circleci_get_project_by_project_slug_envvar_by_nameREADReturns the masked value of environment variable :name. via GET /project/{project-slug}/envvar/{name}
circleci_get_project_by_project_slug_pipelineREADReturns all pipelines for this project. via GET /project/{project-slug}/pipeline
circleci_get_project_by_project_slug_pipeline_by_pipeline_numberREADReturns a pipeline by the pipeline number. via GET /project/{project-slug}/pipeline/{pipeline-number}
circleci_get_project_by_project_slug_pipeline_mineREADReturns a sequence of all pipelines for this project triggered by the user. via GET /project/{project-slug}/pipeline/mine
circleci_get_project_by_project_slug_scheduleREADFor a given project, returns all schedules associated with GitHub OAuth or Bitbucket Cloud pipeline definitions. Does not return schedule triggers associated with GitHub App pipelines. To fetch schedule triggers associated with GitHub App pipelines, use the [List pipeline definition triggers](https://circleci.com/docs/api/v2/index.html#tag/Trigger/operation/listPipelineDefinitionTriggers] endpoint. via GET /project/{project-slug}/schedule
circleci_get_project_by_provider_by_organization_by_project_settingsREADReturns a list of the advanced settings for a CircleCI project, whether enabled (true) or not (false). via GET /project/{provider}/{organization}/{project}/settings
circleci_get_projects_by_project_id_pipeline_definitionsREADList all pipeline definitions for a given project. [Share feedback](https://circleci.canny.io/cloud-feature-requests/p/project-administration-apis) about our Project Administration APIs. via GET /projects/{project_id}/pipeline-definitions
circleci_get_projects_by_project_id_pipeline_definitions_by_pipeline_definition_idREADGet details for a pipeline definition. Currently only supported for pipeline definitions where `config_source.provider` is `github_app`, `github_server`, `github_oauth`, `bitbucket_dc`, `bitbucket_oauth` or `gitlab`. [Share feedback](https://circleci.canny.io/cloud-feature-requests/p/project-administration-apis) about our Project Administration APIs. via GET /projects/{project_id}/pipeline-definitions/{pipeline_definition_id}
circleci_get_projects_by_project_id_pipeline_definitions_by_pipeline_definition_id_triggersREADList all triggers for a given pipeline definition. Currently only supported for pipeline definitions where `config_source.provider` is `github_oauth`, `github_app`, `github_server`, `bitbucket_dc`, or `schedule`. [Share feedback](https://circleci.canny.io/cloud-feature-requests/p/project-administration-apis) about our Project Administration APIs. via GET /projects/{project_id}/pipeline-definitions/{pipeline_definition_id}/triggers
circleci_get_projects_by_project_id_triggers_by_trigger_idREADGet details for a trigger. Currently only supported for triggers where `event_source.provider` is `github_oauth`, `github_app`, `github_server`, `bitbucket_dc`, `webhook`, or `schedule`. [Share feedback](https://circleci.canny.io/cloud-feature-requests/p/project-administration-apis) about our Project Administration APIs. via GET /projects/{project_id}/triggers/{trigger_id}
circleci_get_schedule_by_schedule_idREADGet a schedule by id. via GET /schedule/{schedule-id}
circleci_get_user_by_idREADProvides information about the user with the given ID. via GET /user/{id}
circleci_get_webhookREADGet a list of outbound webhooks that match the given scope-type and scope-id. via GET /webhook
circleci_get_webhook_by_webhook_idREADGet an outbound webhook by id. via GET /webhook/{webhook_id}
circleci_get_workflow_by_idREADReturns summary fields of a workflow by ID. via GET /workflow/{id}
circleci_get_workflow_by_id_jobREADReturns a sequence of jobs for a workflow. via GET /workflow/{id}/job
circleci_patch_org_by_orgid_oidc_custom_claimsWRITECreates/Updates org-level custom claims of OIDC identity tokens via PATCH /org/{orgID}/oidc-custom-claims
circleci_patch_org_by_orgid_project_by_projectid_oidc_custom_claimsWRITECreates/Updates project-level custom claims of OIDC identity tokens via PATCH /org/{orgID}/project/{projectID}/oidc-custom-claims
circleci_patch_owner_by_ownerid_context_by_context_decision_settingsWRITEThis endpoint allows modifying decision settings (eg enable/disable policy evaluation) via PATCH /owner/{ownerID}/context/{context}/decision/settings
circleci_patch_project_by_provider_by_organization_by_project_settingsWRITEUpdates one or more of the advanced settings for a CircleCI project. via PATCH /project/{provider}/{organization}/{project}/settings
circleci_patch_projects_by_project_id_pipeline_definitions_by_pipeline_definition_idWRITEUpdate pipeline definition. Currently only supported for pipeline definitions where `config_source.provider` is `github_app`, `github_server`, or `bitbucket_dc`. [Share feedback](https://circleci.canny.io/cloud-feature-requests/p/project-administration-apis) about our Project Administration APIs. via PATCH /projects/{project_id}/pipeline-definitions/{pipeline_definition_id}
circleci_patch_projects_by_project_id_triggers_by_trigger_idWRITEUpdate a trigger. Currently only supported for triggers where `event_source.provider` is `github_oauth`, `github_app`, `github_server`, `bitbucket_dc`, `webhook`, or `schedule`. [Share feedback](https://circleci.canny.io/cloud-feature-requests/p/project-administration-apis) about our Project Administration APIs. via PATCH /projects/{project_id}/triggers/{trigger_id}
circleci_patch_schedule_by_schedule_idWRITEUpdates a schedule and returns the updated schedule. Available only on schedules associated with GitHub OAuth or Bitbucket Cloud pipeline definitions. To update schedule triggers for GitHub App pipeline definitions, use the [Update trigger](https://circleci.com/docs/api/v2/index.html#tag/Trigger/operation/updateTrigger) endpoint. via PATCH /schedule/{schedule-id}
circleci_post_contextWRITECreates a new context in the specified organization. via POST /context
circleci_post_context_by_context_id_restrictionsWRITECreates project or expression restriction on a context. via POST /context/{context_id}/restrictions
circleci_post_jobs_by_job_id_cancelWRITECancel job with a given job ID. via POST /jobs/{job-id}/cancel
circleci_post_organizationWRITECreate a new organization. For VCS providers (GitHub/Bitbucket), this validates access and syncs org data. For standalone orgs, this creates a new CircleCI organization. via POST /organization
circleci_post_organization_by_org_slug_or_id_projectWRITECreate a new project. Works for all organization types. via POST /organization/{org-slug-or-id}/project
circleci_post_organization_by_org_slug_or_id_url_orb_allow_listWRITECreate a new URL Orb allow-list entry via POST /organization/{org-slug-or-id}/url-orb-allow-list
circleci_post_organizations_by_org_id_groupsWRITECreate a new group under the organization. Currently only supported for standalone organizations. via POST /organizations/{org_id}/groups
circleci_post_organizations_by_org_id_usage_export_jobWRITESubmits a request to create a usage export for an organization. via POST /organizations/{org_id}/usage_export_job
circleci_post_otel_exportersWRITE[__EXPERIMENTAL__] Creates a new OTLP exporter configuration for the given organization. A maximum of 5 exporter configurations are allowed per organization. via POST /otel/exporters
circleci_post_owner_by_ownerid_context_by_context_decisionWRITEThis endpoint will evaluate input data (config+metadata) against owner's stored policies and return a decision. via POST /owner/{ownerID}/context/{context}/decision
circleci_post_owner_by_ownerid_context_by_context_policy_bundleWRITEThis endpoint replaces the current policy bundle with the provided policy bundle via POST /owner/{ownerID}/context/{context}/policy-bundle
circleci_post_pipeline_continueWRITEContinue a pipeline from the setup phase. For information on using pipeline parameters with dynamic configuration, see the [Pipeline values and parameters](https://circleci.com/docs/pipeline-variables/#pipeline-parameters-and-dynamic-configuration) docs. via POST /pipeline/continue
circleci_post_project_by_project_slug_checkout_keyWRITENot available to projects that use GitLab or GitHub App. Creates a new checkout key. This API request is only usable with a user API token. Please ensure that you have authorized your account with GitHub before creating user keys. This is necessary to give CircleCI the permission to create a user key associated with your GitHub user account. You can find this page by visiting Project Settings > Checkout SSH Keys via POST /project/{project-slug}/checkout-key
circleci_post_project_by_project_slug_envvarWRITECreates a new environment variable. via POST /project/{project-slug}/envvar
circleci_post_project_by_project_slug_job_by_job_number_cancelWRITECancel job with a given job number. via POST /project/{project-slug}/job/{job-number}/cancel
circleci_post_project_by_project_slug_pipelineWRITE**[This endpoint is superseded by the [new Trigger Pipeline API](#tag/Pipeline/operation/triggerPipelineRun), which supports all organization and pipeline types except GitLab.]** Triggers a new pipeline on the project. Does not support triggering pipelines integrated with GitLab or GitHub App. via POST /project/{project-slug}/pipeline
circleci_post_project_by_project_slug_scheduleWRITECreates a schedule and returns the created schedule. Available only on organizations of type `bitbucket` and `github`, and for the latter will exclusively create schedule triggers associated with the GitHub OAuth pipeline definition. For projects of type `circleci`, or to create schedule triggers for GitHub App pipeline definitions, use the [Create trigger](https://circleci.com/docs/api/v2/index.html#tag/Trigger/operation/createTrigger) endpoint. via POST /project/{project-slug}/schedule
circleci_post_project_by_provider_by_organization_by_project_pipeline_runWRITETrigger a pipeline given a pipeline definition ID. Currently only supported for pipeline definitions where `config_source.provider` is `github_app`, `github_server`, `github_oauth`, `bitbucket_dc`, or `bitbucket_oauth`. The slash-separated project slug is shown in Project Settings > Overview. Depending on the organization type, the project slug may have a human-readable format (`vcs_type/org_name/project_name`) or be an opaque string (e.g. `circleci/43G3lM5RtfFE7v5sa4nWAU/44n9wujWcTnVZ2b5S8Fnat`). via POST /project/{provider}/{organization}/{project}/pipeline/run
circleci_post_projects_by_project_id_pipeline_definitionsWRITECreate a pipeline definition for a given project. Currently only supported for pipeline definitions where `config_source.provider` is `github_app` or `github_server`. [Share feedback](https://circleci.canny.io/cloud-feature-requests/p/project-administration-apis) about our Project Administration APIs. via POST /projects/{project_id}/pipeline-definitions
circleci_post_projects_by_project_id_pipeline_definitions_by_pipeline_definition_id_triggersWRITECreate a trigger for a given pipeline definition. Currently only supported for pipeline definitions where `config_source.provider` is `github_oauth`, `github_app`, `github_server`, or `schedule`. [Share feedback](https://circleci.canny.io/cloud-feature-requests/p/project-administration-apis) about our Project Administration APIs. via POST /projects/{project_id}/pipeline-definitions/{pipeline_definition_id}/triggers
circleci_post_projects_by_project_id_rollbackWRITEPerforms a rollback operation by triggering a rollback pipeline. via POST /projects/{project_id}/rollback
circleci_post_webhookWRITECreates an outbound webhook for the given scope. via POST /webhook
circleci_post_workflow_by_id_approve_by_approval_request_idWRITEApproves a pending approval job in a workflow. via POST /workflow/{id}/approve/{approval_request_id}
circleci_post_workflow_by_id_cancelWRITECancels a running workflow. via POST /workflow/{id}/cancel
circleci_post_workflow_by_id_rerunWRITEReruns a workflow. via POST /workflow/{id}/rerun
circleci_put_context_by_context_id_environment_variable_by_env_var_nameWRITECreate or update an environment variable within a context. Returns information about the environment variable, not including its value. via PUT /context/{context_id}/environment-variable/{env_var_name}
circleci_put_webhook_by_webhook_idWRITEUpdates an existing outbound webhook by its unique ID. via PUT /webhook/{webhook_id}
Put CircleCI behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.