Northflank

DEVELOPER · DEVELOPER

Projects, services, jobs, and managed-database addons in the account they connected.

Acts as the person, not as itself

Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.

Credentials never touch the agent

Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.

Every call on the record

Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.

What an agent can do

Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.

northflank_delete_v1_backup_destinations_by_backupdestinationidWRITE

Delete backup destination via DELETE /v1/backup-destinations/{backupDestinationId}. Northflank permission required: Account > Platform > BackupDestinations > Delete.

account:platform:backupdestinations:delete

northflank_delete_v1_cloud_providers_clusters_by_clusteridWRITE

Delete cluster via DELETE /v1/cloud-providers/clusters/{clusterId}. Northflank permission required: Account > Cloud > Clusters > Delete.

account:cloud:clusters:delete

northflank_delete_v1_cloud_providers_integrations_by_integrationidWRITE

Delete integration via DELETE /v1/cloud-providers/integrations/{integrationId}. Northflank permission required: Account > Cloud > Integrations > Delete.

account:cloud:integrations:delete

northflank_delete_v1_container_snapshots_by_snapshotidWRITE

Delete container snapshot via DELETE /v1/container-snapshots/{snapshotId}. Northflank permission required: Account > Platform > ContainerSnapshots > Delete.

account:platform:containersnapshots:delete

northflank_delete_v1_domains_by_domainWRITE

Delete domain via DELETE /v1/domains/{domain}. Northflank permission required: Account > Networking > Domains > Delete.

account:networking:domains:delete

northflank_delete_v1_domains_by_domain_subdomains_by_subdomainWRITE

Delete subdomain via DELETE /v1/domains/{domain}/subdomains/{subdomain}. Northflank permission required: Account > Networking > Subdomains > Update.

account:networking:subdomains:update

northflank_delete_v1_domains_by_domain_subdomains_by_subdomain_assignWRITE

Unassign subdomain via DELETE /v1/domains/{domain}/subdomains/{subdomain}/assign. Northflank permission required: Account > Networking > Subdomains > Update.

account:networking:subdomains:update

northflank_delete_v1_domains_by_domain_subdomains_by_subdomain_paths_by_subdomainpathWRITE

Delete subdomain path via DELETE /v1/domains/{domain}/subdomains/{subdomain}/paths/{subdomainPath}. Northflank permission required: Account > Networking > SubdomainPaths > Update.

account:networking:subdomainpaths:update

northflank_delete_v1_domains_by_domain_subdomains_by_subdomain_paths_by_subdomainpath_assignWRITE

Unassign subdomain path via DELETE /v1/domains/{domain}/subdomains/{subdomain}/paths/{subdomainPath}/assign. Northflank permission required: Account > Networking > SubdomainPaths > Update.

account:networking:subdomainpaths:update

northflank_delete_v1_egress_ips_by_egressipidWRITE

Delete egress ip via DELETE /v1/egress-ips/{egressIpId}. Northflank permission required: Account > Networking > EgressIps > Delete.

account:networking:egressips:delete

northflank_delete_v1_gradual_rollout_strategies_by_gradualrolloutstrategyidWRITE

Delete gradual rollout strategy via DELETE /v1/gradual-rollout-strategies/{gradualRolloutStrategyId}. Northflank permission required: Account > Platform > GradualRollouts > Delete.

account:platform:gradualrollouts:delete

northflank_delete_v1_integrations_log_sinks_by_logsinkidWRITE

Delete log sink via DELETE /v1/integrations/log-sinks/{logSinkId}. Northflank permission required: Account > Observability > LogSinks > Delete.

account:observability:logsinks:delete

northflank_delete_v1_integrations_notifications_by_notificationidWRITE

Delete notification integration via DELETE /v1/integrations/notifications/{notificationId}. Northflank permission required: Account > Observability > Notifications > Delete.

account:observability:notifications:delete

northflank_delete_v1_integrations_registries_by_credentialidWRITE

Delete registry via DELETE /v1/integrations/registries/{credentialId}. Northflank permission required: Account > Cloud > Registries > Delete.

account:cloud:registries:delete

northflank_delete_v1_integrations_ssh_identities_by_identityidWRITE

Delete ssh identity via DELETE /v1/integrations/ssh-identities/{identityId}. Northflank permission required: Account > Platform > Ssh > Delete.

account:platform:ssh:delete

northflank_delete_v1_load_balancers_by_loadbalanceridWRITE

Delete load balancer via DELETE /v1/load-balancers/{loadBalancerId}. Northflank permission required: Account > Networking > LoadBalancers > Delete.

account:networking:loadbalancers:delete

northflank_delete_v1_network_policies_by_networkpolicyidWRITE

Delete network policy via DELETE /v1/network-policies/{networkPolicyId}. Northflank permission required: Account > Networking > NetworkPolicies > Delete.

account:networking:networkpolicies:delete

northflank_delete_v1_org_roles_by_roleidWRITE

Delete org role via DELETE /v1/org-roles/{roleId}. Northflank permission required: Organisation > Admin > Roles > Manage.

organisation:admin:roles:manage

northflank_delete_v1_org_roles_by_roleid_members_by_memberidWRITE

Remove member from org role via DELETE /v1/org-roles/{roleId}/members/{memberId}. Northflank permission required: Organisation > Admin > Roles > Manage.

organisation:admin:roles:manage

northflank_delete_v1_projects_by_projectidWRITE

Delete project via DELETE /v1/projects/{projectId}. Northflank permission required: Project > Projects > Manage > Delete.

project:projects:manage:delete

northflank_delete_v1_projects_by_projectid_addons_by_addonidWRITE

Delete addon via DELETE /v1/projects/{projectId}/addons/{addonId}. Northflank permission required: Project > Addons > General > Delete.

project:addons:general:delete

northflank_delete_v1_projects_by_projectid_addons_by_addonid_backup_schedules_by_scheduleidWRITE

Delete addon backup schedule via DELETE /v1/projects/{projectId}/addons/{addonId}/backup-schedules/{scheduleId}. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_delete_v1_projects_by_projectid_addons_by_addonid_backups_by_backupidWRITE

Delete addon backup via DELETE /v1/projects/{projectId}/addons/{addonId}/backups/{backupId}. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_delete_v1_projects_by_projectid_external_addons_by_externaladdonidWRITE

Delete external addon via DELETE /v1/projects/{projectId}/external-addons/{externalAddonId}. Northflank permission required: Project > ExternalAddons > General > Delete.

project:externaladdons:general:delete

northflank_delete_v1_projects_by_projectid_harnesses_by_harnessidWRITE

Delete harness via DELETE /v1/projects/{projectId}/harnesses/{harnessId}. Northflank permission required: Project > Harnesses > General > Delete.

project:harnesses:general:delete

northflank_delete_v1_projects_by_projectid_jobs_by_jobidWRITE

Delete job via DELETE /v1/projects/{projectId}/jobs/{jobId}. Northflank permission required: Project > Jobs > General > Delete.

project:jobs:general:delete

northflank_delete_v1_projects_by_projectid_jobs_by_jobid_build_by_buildidWRITE

Abort job build via DELETE /v1/projects/{projectId}/jobs/{jobId}/build/{buildId}. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_delete_v1_projects_by_projectid_jobs_by_jobid_runs_by_runidWRITE

Abort job run via DELETE /v1/projects/{projectId}/jobs/{jobId}/runs/{runId}. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_delete_v1_projects_by_projectid_llm_model_deployments_by_llmmodeldeploymentidWRITE

Delete ai model via DELETE /v1/projects/{projectId}/llm-model-deployments/{llmModelDeploymentId}. Northflank permission required: Project > AiModels > General > Delete.

project:aimodels:general:delete

northflank_delete_v1_projects_by_projectid_pipelines_by_pipelineid_preview_envs_previews_by_previewidWRITE

Delete preview environment (pipelines) via DELETE /v1/projects/{projectId}/pipelines/{pipelineId}/preview-envs/previews/{previewId}. Northflank permission required: Account > Templates > General > Delete.

account:templates:general:delete

northflank_delete_v1_projects_by_projectid_preview_blueprints_by_previewblueprintidWRITE

Delete preview blueprint via DELETE /v1/projects/{projectId}/preview-blueprints/{previewBlueprintId}. Northflank permission required: Project > PreviewBlueprints > General > Delete.

project:previewblueprints:general:delete

northflank_delete_v1_projects_by_projectid_preview_blueprints_by_previewblueprintid_previews_by_previewidWRITE

Delete preview environment (preview blueprints) via DELETE /v1/projects/{projectId}/preview-blueprints/{previewBlueprintId}/previews/{previewId}. Northflank permission required: Project > PipelinesV2 > Previews > Delete.

project:pipelinesv2:previews:delete

northflank_delete_v1_projects_by_projectid_secrets_by_secretidWRITE

Delete project secret via DELETE /v1/projects/{projectId}/secrets/{secretId}. Northflank documents no required permission for it.

no provider scope

northflank_delete_v1_projects_by_projectid_secrets_by_secretid_addons_by_addonidWRITE

Unlink addon from project secret via DELETE /v1/projects/{projectId}/secrets/{secretId}/addons/{addonId}. Northflank documents no required permission for it.

no provider scope

northflank_delete_v1_projects_by_projectid_services_by_serviceidWRITE

Delete service via DELETE /v1/projects/{projectId}/services/{serviceId}. Northflank permission required: Project > Services > General > Delete.

project:services:general:delete

northflank_delete_v1_projects_by_projectid_services_by_serviceid_build_by_buildidWRITE

Abort service build via DELETE /v1/projects/{projectId}/services/{serviceId}/build/{buildId}. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_delete_v1_projects_by_projectid_services_by_serviceid_build_cacheWRITE

Clear the build cache of a service via DELETE /v1/projects/{projectId}/services/{serviceId}/build-cache. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_delete_v1_projects_by_projectid_services_by_serviceid_per_replica_volumes_volume_by_volumeidWRITE

Delete service per replica volume group via DELETE /v1/projects/{projectId}/services/{serviceId}/per-replica-volumes/volume/{volumeId}. Northflank permission required: Project > Services > General > Delete.

project:services:general:delete

northflank_delete_v1_projects_by_projectid_services_by_serviceid_per_replica_volumes_volume_by_volumeid_replica_by_ordinal

WRITE

Delete service per replica volume pvc via DELETE /v1/projects/{projectId}/services/{serviceId}/per-replica-volumes/volume/{volumeId}/replica/{ordinal}. Northflank permission required: Project > Services > General > Delete.

project:services:general:delete

northflank_delete_v1_projects_by_projectid_volumes_by_volumeidWRITE

Delete volume via DELETE /v1/projects/{projectId}/volumes/{volumeId}. Northflank permission required: Project > Volumes > General > Delete.

project:volumes:general:delete

northflank_delete_v1_projects_by_projectid_volumes_by_volumeid_backup_schedules_by_scheduleidWRITE

Delete volume backup schedule via DELETE /v1/projects/{projectId}/volumes/{volumeId}/backup-schedules/{scheduleId}. Northflank permission required: Project > Volumes > Backups > Delete.

project:volumes:backups:delete

northflank_delete_v1_projects_by_projectid_volumes_by_volumeid_backups_by_backupidWRITE

Delete volume backup via DELETE /v1/projects/{projectId}/volumes/{volumeId}/backups/{backupId}. Northflank permission required: Project > Volumes > Backups > Delete.

project:volumes:backups:delete

northflank_delete_v1_secrets_by_secretidWRITE

Delete global secret via DELETE /v1/secrets/{secretId}. Northflank documents no required permission for it.

no provider scope

northflank_delete_v1_tags_by_resourcetagidWRITE

Delete tag via DELETE /v1/tags/{resourceTagId}. Northflank permission required: Account > Platform > Tags > Delete.

account:platform:tags:delete

northflank_delete_v1_teams_by_teamidWRITE

Delete team via DELETE /v1/teams/{teamId}. Northflank permission required: Organisation > Team > General > Delete.

organisation:team:general:delete

northflank_delete_v1_teams_by_teamid_members_by_memberidWRITE

Remove team member via DELETE /v1/teams/{teamId}/members/{memberId}. Northflank permission required: Account > Admin > Members > Manage.

account:admin:members:manage

northflank_delete_v1_teams_by_teamid_roles_by_roleidWRITE

Delete team role via DELETE /v1/teams/{teamId}/roles/{roleId}. Northflank permission required: Account > Admin > Roles > Manage.

account:admin:roles:manage

northflank_delete_v1_teams_by_teamid_roles_by_roleid_members_by_memberidWRITE

Remove member from team role via DELETE /v1/teams/{teamId}/roles/{roleId}/members/{memberId}. Northflank permission required: Account > Admin > Roles > Manage.

account:admin:roles:manage

northflank_delete_v1_templates_by_templateidWRITE

Delete template via DELETE /v1/templates/{templateId}. Northflank permission required: Account > Templates > General > Delete.

account:templates:general:delete

northflank_delete_v1_tokens_by_tokenid_keys_by_keyidWRITE

Delete a key from an api token via DELETE /v1/tokens/{tokenId}/keys/{keyId}. Northflank permission required: Account > Admin > ApiTokens > Update. Deleting the key this Agentic Fabriq connection was given breaks the connection immediately.

account:admin:apitokens:update

northflank_delete_v1_workload_identities_by_workloadidentityidWRITE

Delete workload identity via DELETE /v1/workload-identities/{workloadIdentityId}. Northflank permission required: Account > Cloud > WorkloadIdentities > Delete.

account:cloud:workloadidentities:delete

northflank_get_v1_authREAD

Get current authentication info via GET /v1/auth. Northflank documents no required permission for it. Reports what the connection's own API token is and which permissions it carries. Northflank documents no required permission for it.

no provider scope

northflank_get_v1_backup_destinationsREAD

List backup destinations via GET /v1/backup-destinations. Northflank permission required: Account > Platform > BackupDestinations > Read.

account:platform:backupdestinations:read

northflank_get_v1_backup_destinations_by_backupdestinationidREAD

Get backup destination via GET /v1/backup-destinations/{backupDestinationId}. Northflank permission required: Account > Platform > BackupDestinations > Read.

account:platform:backupdestinations:read

northflank_get_v1_backup_destinations_by_backupdestinationid_backupsREAD

List destinations backups via GET /v1/backup-destinations/{backupDestinationId}/backups. Northflank permission required: Account > Platform > BackupDestinations > Read.

account:platform:backupdestinations:read

northflank_get_v1_billing_credit_balanceREAD

Get credit balance via GET /v1/billing/credit-balance. Northflank permission required: Organisation > Admin > Billing > Read.

organisation:admin:billing:read

northflank_get_v1_billing_invoicesREAD

List invoices via GET /v1/billing/invoices. Northflank permission required: Organisation > Admin > Billing > Read.

organisation:admin:billing:read

northflank_get_v1_billing_invoices_by_invoiceidREAD

Get invoice via GET /v1/billing/invoices/{invoiceId}. Northflank permission required: Organisation > Admin > Billing > Read. `teamId` here is Northflank's own QUERY FILTER, not this connection's team: it narrows a response the token can already read, and Northflank refuses it from a token that can only read one team.

organisation:admin:billing:read

northflank_get_v1_billing_usageREAD

List usage via GET /v1/billing/usage. Northflank permission required: Organisation > Admin > Billing > Read. `teamId` here is Northflank's own QUERY FILTER, not this connection's team: it narrows a response the token can already read, and Northflank refuses it from a token that can only read one team.

organisation:admin:billing:read

northflank_get_v1_billing_usage_by_timestampREAD

Get usage via GET /v1/billing/usage/{timestamp}. Northflank permission required: Organisation > Admin > Billing > Read. `teamId` here is Northflank's own QUERY FILTER, not this connection's team: it narrows a response the token can already read, and Northflank refuses it from a token that can only read one team.

organisation:admin:billing:read

northflank_get_v1_cloud_providers_clustersREAD

List clusters via GET /v1/cloud-providers/clusters. Northflank permission required: Account > Cloud > Clusters > Read.

account:cloud:clusters:read

northflank_get_v1_cloud_providers_clusters_by_clusteridREAD

Get cluster via GET /v1/cloud-providers/clusters/{clusterId}. Northflank permission required: Account > Cloud > Clusters > Read.

account:cloud:clusters:read

northflank_get_v1_cloud_providers_clusters_by_clusterid_nodesREAD

List cluster nodes via GET /v1/cloud-providers/clusters/{clusterId}/nodes. Northflank permission required: Account > Cloud > Clusters > Read.

account:cloud:clusters:read

northflank_get_v1_cloud_providers_integrationsREAD

List integrations via GET /v1/cloud-providers/integrations. Northflank permission required: Account > Cloud > Integrations > Read.

account:cloud:integrations:read

northflank_get_v1_cloud_providers_integrations_by_integrationidREAD

Get integration via GET /v1/cloud-providers/integrations/{integrationId}. Northflank permission required: Account > Cloud > Integrations > Read.

account:cloud:integrations:read

northflank_get_v1_cloud_providers_integrations_by_integrationid_workload_identity_providerREAD

Get workload identity provider status via GET /v1/cloud-providers/integrations/{integrationId}/workload-identity-provider. Northflank permission required: Account > Cloud > WorkloadIdentities > Read.

account:cloud:workloadidentities:read

northflank_get_v1_cloud_providers_node_typesREAD

List provider node types via GET /v1/cloud-providers/node-types. Northflank documents no required permission for it. Answers 200 with no credential at all (measured 2026-09-22), so a 200 here says nothing about the connection's token.

no provider scope

northflank_get_v1_cloud_providers_regionsREAD

List provider regions via GET /v1/cloud-providers/regions. Northflank documents no required permission for it. Answers 200 with no credential at all (measured 2026-09-22), so a 200 here says nothing about the connection's token.

no provider scope

northflank_get_v1_container_snapshotsREAD

List container snapshots via GET /v1/container-snapshots. Northflank permission required: Account > Platform > ContainerSnapshots > Read.

account:platform:containersnapshots:read

northflank_get_v1_container_snapshots_by_snapshotidREAD

Get container snapshot via GET /v1/container-snapshots/{snapshotId}. Northflank permission required: Account > Platform > ContainerSnapshots > Read.

account:platform:containersnapshots:read

northflank_get_v1_directory_groupsREAD

List org directory groups via GET /v1/directory-groups. Northflank permission required: Organisation > Admin > Roles > Read.

organisation:admin:roles:read

northflank_get_v1_directory_groups_by_groupid_membersREAD

List directory group members via GET /v1/directory-groups/{groupId}/members. Northflank permission required: Organisation > Admin > Members > Read.

organisation:admin:members:read

northflank_get_v1_dns_idREAD

Get dns id via GET /v1/dns-id. Northflank permission required: Project > Projects > Manage > Read.

project:projects:manage:read

northflank_get_v1_domainsREAD

List domains via GET /v1/domains. Northflank permission required: Account > Networking > Domains > Read.

account:networking:domains:read

northflank_get_v1_domains_by_domainREAD

Get domain via GET /v1/domains/{domain}. Northflank permission required: Account > Networking > Domains > Read.

account:networking:domains:read

northflank_get_v1_domains_by_domain_certificateREAD

Get domain certificate via GET /v1/domains/{domain}/certificate. Northflank permission required: Account > Networking > Domains > Read.

account:networking:domains:read

northflank_get_v1_domains_by_domain_subdomains_by_subdomainREAD

Get subdomain via GET /v1/domains/{domain}/subdomains/{subdomain}. Northflank permission required: Account > Networking > Subdomains > Read.

account:networking:subdomains:read

northflank_get_v1_domains_by_domain_subdomains_by_subdomain_pathsREAD

List subdomain paths via GET /v1/domains/{domain}/subdomains/{subdomain}/paths. Northflank permission required: Account > Networking > SubdomainPaths > Read.

account:networking:subdomainpaths:read

northflank_get_v1_domains_by_domain_subdomains_by_subdomain_paths_by_subdomainpathREAD

Get subdomain path via GET /v1/domains/{domain}/subdomains/{subdomain}/paths/{subdomainPath}. Northflank permission required: Account > Networking > SubdomainPaths > Read.

account:networking:subdomainpaths:read

northflank_get_v1_egress_ipsREAD

List egress ips via GET /v1/egress-ips. Northflank permission required: Account > Networking > EgressIps > Read.

account:networking:egressips:read

northflank_get_v1_egress_ips_by_egressipidREAD

Get egress ip via GET /v1/egress-ips/{egressIpId}. Northflank permission required: Account > Networking > EgressIps > Read.

account:networking:egressips:read

northflank_get_v1_encryption_configurationsREAD

List encryption configurations via GET /v1/encryption/configurations. Northflank permission required: Account > Admin > Encryption > Read.

account:admin:encryption:read

northflank_get_v1_encryption_configurations_by_encryptionconfigurationidREAD

Get encryption configuration via GET /v1/encryption/configurations/{encryptionConfigurationId}. Northflank permission required: Account > Admin > Encryption > Read.

account:admin:encryption:read

northflank_get_v1_encryption_usageREAD

Get encryption configuration usage via GET /v1/encryption/usage. Northflank permission required: Account > Admin > Encryption > Read.

account:admin:encryption:read

northflank_get_v1_gradual_rollout_strategiesREAD

List gradual rollout strategies via GET /v1/gradual-rollout-strategies. Northflank permission required: Account > Platform > GradualRollouts > Read.

account:platform:gradualrollouts:read

northflank_get_v1_gradual_rollout_strategies_by_gradualrolloutstrategyidREAD

Get gradual rollout strategy via GET /v1/gradual-rollout-strategies/{gradualRolloutStrategyId}. Northflank permission required: Account > Platform > GradualRollouts > Read.

account:platform:gradualrollouts:read

northflank_get_v1_integrations_log_sinksREAD

List log sinks via GET /v1/integrations/log-sinks. Northflank permission required: Account > Observability > LogSinks > Read.

account:observability:logsinks:read

northflank_get_v1_integrations_log_sinks_by_logsinkidREAD

Get log sink details via GET /v1/integrations/log-sinks/{logSinkId}. Northflank permission required: Account > Observability > LogSinks > Read.

account:observability:logsinks:read

northflank_get_v1_integrations_notificationsREAD

List notification integrations via GET /v1/integrations/notifications. Northflank permission required: Account > Observability > Notifications > Read.

account:observability:notifications:read

northflank_get_v1_integrations_notifications_by_notificationidREAD

Get notification integration via GET /v1/integrations/notifications/{notificationId}. Northflank permission required: Account > Observability > Notifications > Read.

account:observability:notifications:read

northflank_get_v1_integrations_registriesREAD

List registries via GET /v1/integrations/registries. Northflank permission required: Account > Cloud > Registries > Read.

account:cloud:registries:read

northflank_get_v1_integrations_registries_by_credentialidREAD

Get registry via GET /v1/integrations/registries/{credentialId}. Northflank permission required: Account > Cloud > Registries > Read.

account:cloud:registries:read

northflank_get_v1_integrations_ssh_identitiesREAD

List ssh identities via GET /v1/integrations/ssh-identities. Northflank permission required: Account > Platform > Ssh > Read.

account:platform:ssh:read

northflank_get_v1_integrations_ssh_identities_by_identityidREAD

Get ssh identity via GET /v1/integrations/ssh-identities/{identityId}. Northflank permission required: Account > Platform > Ssh > Read.

account:platform:ssh:read

northflank_get_v1_integrations_vcsREAD

List vcs providers via GET /v1/integrations/vcs. Northflank permission required: Account > Git > General > Read.

account:git:general:read

northflank_get_v1_integrations_vcs_link_sessions_by_linksessionidREAD

Get vcs link session via GET /v1/integrations/vcs/link-sessions/{linkSessionId}. Northflank permission required: Account > Git > General > Manage.

account:git:general:manage

northflank_get_v1_integrations_vcs_reposREAD

List repositories via GET /v1/integrations/vcs/repos. Northflank permission required: Account > Git > General > Read.

account:git:general:read

northflank_get_v1_integrations_vcs_repos_by_vcsservice_by_repositoryowner_by_repositoryname_branchesREAD

List branches via GET /v1/integrations/vcs/repos/{vcsService}/{repositoryOwner}/{repositoryName}/branches. Northflank permission required: Account > Git > General > Read.

account:git:general:read

northflank_get_v1_load_balancersREAD

List load balancers via GET /v1/load-balancers. Northflank permission required: Account > Networking > LoadBalancers > Read.

account:networking:loadbalancers:read

northflank_get_v1_load_balancers_by_loadbalanceridREAD

Get load balancer via GET /v1/load-balancers/{loadBalancerId}. Northflank permission required: Account > Networking > LoadBalancers > Read.

account:networking:loadbalancers:read

northflank_get_v1_logsREAD

Get logs for a resource via GET /v1/logs. Northflank documents no required permission for it. At least one of `projectId` or `clusterId` MUST be supplied, even though Northflank's documentation marks both optional: with neither, the API answers 400 nf-invalid-query-params, "value must contain at least one of [projectId, clusterId]" (measured 2026-09-22, with either one alone accepted).

no provider scope

northflank_get_v1_network_policies_by_networkpolicyidREAD

Get network policy via GET /v1/network-policies/{networkPolicyId}. Northflank permission required: Account > Networking > NetworkPolicies > Read.

account:networking:networkpolicies:read

northflank_get_v1_opentofu_jobs_by_opentofujobid_logsREAD

Get opentofu job logs via GET /v1/opentofu-jobs/{opentofuJobId}/logs. Northflank permission required: Account > Templates > General > Read.

account:templates:general:read

northflank_get_v1_org_membersREAD

List org members via GET /v1/org-members. Northflank permission required: Organisation > Admin > Members > Read.

organisation:admin:members:read

northflank_get_v1_org_rolesREAD

List org roles via GET /v1/org-roles. Northflank permission required: Organisation > Admin > Roles > Read.

organisation:admin:roles:read

northflank_get_v1_org_roles_by_roleidREAD

Get org role via GET /v1/org-roles/{roleId}. Northflank permission required: Organisation > Admin > Roles > Read.

organisation:admin:roles:read

northflank_get_v1_org_roles_by_roleid_membersREAD

List org role members via GET /v1/org-roles/{roleId}/members. Northflank permission required: Organisation > Admin > Roles > Read.

organisation:admin:roles:read

northflank_get_v1_plansREAD

List plans via GET /v1/plans. Northflank documents no required permission for it. Answers 200 with no credential at all (measured 2026-09-22), so a 200 here says nothing about the connection's token.

no provider scope

northflank_get_v1_projectsREAD

List projects via GET /v1/projects. Northflank permission required: Project > Projects > Manage > Read.

project:projects:manage:read

northflank_get_v1_projects_by_projectidREAD

Get project via GET /v1/projects/{projectId}. Northflank permission required: Project > Projects > Manage > Read.

project:projects:manage:read

northflank_get_v1_projects_by_projectid_addonsREAD

List addons via GET /v1/projects/{projectId}/addons. Northflank permission required: Project > Addons > General > Read.

project:addons:general:read

northflank_get_v1_projects_by_projectid_addons_by_addonidREAD

Get addon via GET /v1/projects/{projectId}/addons/{addonId}. Northflank permission required: Project > Addons > General > Read.

project:addons:general:read

northflank_get_v1_projects_by_projectid_addons_by_addonid_backup_schedulesREAD

Get addon backup schedules via GET /v1/projects/{projectId}/addons/{addonId}/backup-schedules. Northflank permission required: Project > Addons > General > Read.

project:addons:general:read

northflank_get_v1_projects_by_projectid_addons_by_addonid_backupsREAD

List addon backups via GET /v1/projects/{projectId}/addons/{addonId}/backups. Northflank permission required: Project > Addons > General > Read.

project:addons:general:read

northflank_get_v1_projects_by_projectid_addons_by_addonid_backups_by_backupidREAD

Get addon backup via GET /v1/projects/{projectId}/addons/{addonId}/backups/{backupId}. Northflank permission required: Project > Addons > General > Read.

project:addons:general:read

northflank_get_v1_projects_by_projectid_addons_by_addonid_backups_by_backupid_download_linkREAD

Get backup download link via GET /v1/projects/{projectId}/addons/{addonId}/backups/{backupId}/download-link. Northflank permission required: Project > Addons > General > Read.

project:addons:general:read

northflank_get_v1_projects_by_projectid_addons_by_addonid_backups_by_backupid_logsREAD

Get addon backup logs via GET /v1/projects/{projectId}/addons/{addonId}/backups/{backupId}/logs. Northflank permission required: Project > Addons > Deployment > View Observability.

project:addons:deployment:view-observability

northflank_get_v1_projects_by_projectid_addons_by_addonid_backups_by_backupid_restoresREAD

List addon backup restores via GET /v1/projects/{projectId}/addons/{addonId}/backups/{backupId}/restores. Northflank permission required: Project > Addons > General > Read.

project:addons:general:read

northflank_get_v1_projects_by_projectid_addons_by_addonid_backups_by_backupid_restores_by_restoreid_logsREAD

Get addon restore logs via GET /v1/projects/{projectId}/addons/{addonId}/backups/{backupId}/restores/{restoreId}/logs. Northflank permission required: Project > Addons > Deployment > View Observability.

project:addons:deployment:view-observability

northflank_get_v1_projects_by_projectid_addons_by_addonid_containersREAD

List addon containers via GET /v1/projects/{projectId}/addons/{addonId}/containers. Northflank permission required: Project > Addons > General > Read.

project:addons:general:read

northflank_get_v1_projects_by_projectid_addons_by_addonid_credentialsREAD

Get addon credentials via GET /v1/projects/{projectId}/addons/{addonId}/credentials. Northflank permission required: Project > Addons > General > Read.

project:addons:general:read

northflank_get_v1_projects_by_projectid_addons_by_addonid_logsREAD

Get addon logs via GET /v1/projects/{projectId}/addons/{addonId}/logs. Northflank permission required: Project > Addons > Deployment > View Observability.

project:addons:deployment:view-observability

northflank_get_v1_projects_by_projectid_addons_by_addonid_metricsREAD

Get addon metrics via GET /v1/projects/{projectId}/addons/{addonId}/metrics. Northflank permission required: Project > Addons > Deployment > View Observability.

project:addons:deployment:view-observability

northflank_get_v1_projects_by_projectid_addons_by_addonid_restoresREAD

List addon restores via GET /v1/projects/{projectId}/addons/{addonId}/restores. Northflank permission required: Project > Addons > General > Read.

project:addons:general:read

northflank_get_v1_projects_by_projectid_addons_by_addonid_versionREAD

Get addon version details via GET /v1/projects/{projectId}/addons/{addonId}/version. Northflank permission required: Project > Addons > General > Read.

project:addons:general:read

northflank_get_v1_projects_by_projectid_external_addonsREAD

List external addons via GET /v1/projects/{projectId}/external-addons. Northflank permission required: Project > ExternalAddons > General > Read.

project:externaladdons:general:read

northflank_get_v1_projects_by_projectid_external_addons_by_externaladdonidREAD

Get external addon via GET /v1/projects/{projectId}/external-addons/{externalAddonId}. Northflank permission required: Project > ExternalAddons > General > Read.

project:externaladdons:general:read

northflank_get_v1_projects_by_projectid_harnessesREAD

List harnesses via GET /v1/projects/{projectId}/harnesses. Northflank permission required: Project > Harnesses > General > Read.

project:harnesses:general:read

northflank_get_v1_projects_by_projectid_harnesses_by_harnessidREAD

Get harness via GET /v1/projects/{projectId}/harnesses/{harnessId}. Northflank permission required: Project > Harnesses > General > Read.

project:harnesses:general:read

northflank_get_v1_projects_by_projectid_harnesses_by_harnessid_logsREAD

Get harness logs via GET /v1/projects/{projectId}/harnesses/{harnessId}/logs. Northflank permission required: Project > Harnesses > General > Read.

project:harnesses:general:read

northflank_get_v1_projects_by_projectid_jobsREAD

List jobs via GET /v1/projects/{projectId}/jobs. Northflank permission required: Project > Jobs > General > Read.

project:jobs:general:read

northflank_get_v1_projects_by_projectid_jobs_by_jobidREAD

Get job via GET /v1/projects/{projectId}/jobs/{jobId}. Northflank permission required: Project > Jobs > General > Read.

project:jobs:general:read

northflank_get_v1_projects_by_projectid_jobs_by_jobid_branchesREAD

Get job branches via GET /v1/projects/{projectId}/jobs/{jobId}/branches. Northflank permission required: Project > Jobs > General > Read.

project:jobs:general:read

northflank_get_v1_projects_by_projectid_jobs_by_jobid_buildREAD

List job builds via GET /v1/projects/{projectId}/jobs/{jobId}/build. Northflank permission required: Project > Jobs > General > Read.

project:jobs:general:read

northflank_get_v1_projects_by_projectid_jobs_by_jobid_build_argumentsREAD

Get job build arguments via GET /v1/projects/{projectId}/jobs/{jobId}/build-arguments. Northflank permission required: Project > Secrets > Jobs > Read.

project:secrets:jobs:read

northflank_get_v1_projects_by_projectid_jobs_by_jobid_build_arguments_detailsREAD

Get job build argument details via GET /v1/projects/{projectId}/jobs/{jobId}/build-arguments/details. Northflank permission required: Project > Secrets > Jobs > Read.

project:secrets:jobs:read

northflank_get_v1_projects_by_projectid_jobs_by_jobid_build_by_buildidREAD

Get job build via GET /v1/projects/{projectId}/jobs/{jobId}/build/{buildId}. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_get_v1_projects_by_projectid_jobs_by_jobid_build_logsREAD

Get job build logs via GET /v1/projects/{projectId}/jobs/{jobId}/build-logs. Northflank permission required: Project > Jobs > Deployment > View Observability.

project:jobs:deployment:view-observability

northflank_get_v1_projects_by_projectid_jobs_by_jobid_build_metricsREAD

Get job build metrics via GET /v1/projects/{projectId}/jobs/{jobId}/build-metrics. Northflank permission required: Project > Jobs > Deployment > View Observability.

project:jobs:deployment:view-observability

northflank_get_v1_projects_by_projectid_jobs_by_jobid_containersREAD

List job containers via GET /v1/projects/{projectId}/jobs/{jobId}/containers. Northflank permission required: Project > Jobs > Deployment > View Observability.

project:jobs:deployment:view-observability

northflank_get_v1_projects_by_projectid_jobs_by_jobid_deploymentREAD

Get job deployment via GET /v1/projects/{projectId}/jobs/{jobId}/deployment. Northflank permission required: Project > Jobs > General > Read.

project:jobs:general:read

northflank_get_v1_projects_by_projectid_jobs_by_jobid_health_checksREAD

Get job health checks via GET /v1/projects/{projectId}/jobs/{jobId}/health-checks. Northflank permission required: Project > Jobs > General > Read.

project:jobs:general:read

northflank_get_v1_projects_by_projectid_jobs_by_jobid_logsREAD

Get job logs via GET /v1/projects/{projectId}/jobs/{jobId}/logs. Northflank permission required: Project > Jobs > Deployment > View Observability.

project:jobs:deployment:view-observability

northflank_get_v1_projects_by_projectid_jobs_by_jobid_metricsREAD

Get job metrics via GET /v1/projects/{projectId}/jobs/{jobId}/metrics. Northflank permission required: Project > Jobs > Deployment > View Observability.

project:jobs:deployment:view-observability

northflank_get_v1_projects_by_projectid_jobs_by_jobid_pull_requestsREAD

Get job pull requests via GET /v1/projects/{projectId}/jobs/{jobId}/pull-requests. Northflank permission required: Project > Jobs > General > Read.

project:jobs:general:read

northflank_get_v1_projects_by_projectid_jobs_by_jobid_runsREAD

Get job runs via GET /v1/projects/{projectId}/jobs/{jobId}/runs. Northflank permission required: Project > Jobs > General > Read.

project:jobs:general:read

northflank_get_v1_projects_by_projectid_jobs_by_jobid_runs_by_runidREAD

Get run details via GET /v1/projects/{projectId}/jobs/{jobId}/runs/{runId}. Northflank permission required: Project > Jobs > General > Read.

project:jobs:general:read

northflank_get_v1_projects_by_projectid_jobs_by_jobid_runtime_environmentREAD

Get job runtime environment via GET /v1/projects/{projectId}/jobs/{jobId}/runtime-environment. Northflank permission required: Project > Secrets > Jobs > Read.

project:secrets:jobs:read

northflank_get_v1_projects_by_projectid_jobs_by_jobid_runtime_environment_detailsREAD

Get job runtime environment details via GET /v1/projects/{projectId}/jobs/{jobId}/runtime-environment/details. Northflank permission required: Project > Secrets > Jobs > Read.

project:secrets:jobs:read

northflank_get_v1_projects_by_projectid_llm_model_deploymentsREAD

List ai models via GET /v1/projects/{projectId}/llm-model-deployments. Northflank permission required: Project > AiModels > General > Read.

project:aimodels:general:read

northflank_get_v1_projects_by_projectid_llm_model_deployments_by_llmmodeldeploymentidREAD

Get ai model via GET /v1/projects/{projectId}/llm-model-deployments/{llmModelDeploymentId}. Northflank permission required: Project > AiModels > General > Read.

project:aimodels:general:read

northflank_get_v1_projects_by_projectid_pipelinesREAD

List pipelines via GET /v1/projects/{projectId}/pipelines. Northflank permission required: Project > Pipelines > General > Read.

project:pipelines:general:read

northflank_get_v1_projects_by_projectid_pipelines_by_pipelineidREAD

Get pipeline via GET /v1/projects/{projectId}/pipelines/{pipelineId}. Northflank permission required: Project > Pipelines > General > Read.

project:pipelines:general:read

northflank_get_v1_projects_by_projectid_pipelines_by_pipelineid_preview_envsREAD

Get preview template via GET /v1/projects/{projectId}/pipelines/{pipelineId}/preview-envs. Northflank permission required: Account > Templates > General > Read.

account:templates:general:read

northflank_get_v1_projects_by_projectid_pipelines_by_pipelineid_preview_envs_previewsREAD

List preview environments (pipelines) via GET /v1/projects/{projectId}/pipelines/{pipelineId}/preview-envs/previews. Northflank permission required: Account > Templates > General > Read.

account:templates:general:read

northflank_get_v1_projects_by_projectid_pipelines_by_pipelineid_preview_envs_runsREAD

List preview template runs via GET /v1/projects/{projectId}/pipelines/{pipelineId}/preview-envs/runs. Northflank permission required: Account > Templates > General > Read.

account:templates:general:read

northflank_get_v1_projects_by_projectid_pipelines_by_pipelineid_preview_envs_runs_by_templaterunidREAD

Get preview template run via GET /v1/projects/{projectId}/pipelines/{pipelineId}/preview-envs/runs/{templateRunId}. Northflank permission required: Account > Templates > General > Read.

account:templates:general:read

northflank_get_v1_projects_by_projectid_pipelines_by_pipelineid_release_flows_by_stageREAD

Get release flow via GET /v1/projects/{projectId}/pipelines/{pipelineId}/release-flows/{stage}. Northflank permission required: Project > Pipelines > General > Read.

project:pipelines:general:read

northflank_get_v1_projects_by_projectid_pipelines_by_pipelineid_release_flows_by_stage_runsREAD

List release flow runs via GET /v1/projects/{projectId}/pipelines/{pipelineId}/release-flows/{stage}/runs. Northflank permission required: Project > Pipelines > General > Read.

project:pipelines:general:read

northflank_get_v1_projects_by_projectid_pipelines_by_pipelineid_release_flows_by_stage_runs_by_runidREAD

Get release flow run details via GET /v1/projects/{projectId}/pipelines/{pipelineId}/release-flows/{stage}/runs/{runId}. Northflank permission required: Project > Pipelines > General > Read.

project:pipelines:general:read

northflank_get_v1_projects_by_projectid_preview_blueprintsREAD

List preview blueprints via GET /v1/projects/{projectId}/preview-blueprints. Northflank permission required: Project > PreviewBlueprints > General > Read.

project:previewblueprints:general:read

northflank_get_v1_projects_by_projectid_preview_blueprints_by_previewblueprintidREAD

Get preview blueprint via GET /v1/projects/{projectId}/preview-blueprints/{previewBlueprintId}. Northflank permission required: Project > PreviewBlueprints > General > Read.

project:previewblueprints:general:read

northflank_get_v1_projects_by_projectid_preview_blueprints_by_previewblueprintid_previewsREAD

List preview environments (preview blueprints) via GET /v1/projects/{projectId}/preview-blueprints/{previewBlueprintId}/previews. Northflank permission required: Project > PreviewBlueprints > General > Read.

project:previewblueprints:general:read

northflank_get_v1_projects_by_projectid_preview_blueprints_by_previewblueprintid_runsREAD

List preview blueprint runs via GET /v1/projects/{projectId}/preview-blueprints/{previewBlueprintId}/runs. Northflank permission required: Project > PreviewBlueprints > Runs > Read.

project:previewblueprints:runs:read

northflank_get_v1_projects_by_projectid_preview_blueprints_by_previewblueprintid_runs_by_runidREAD

Get preview blueprint run details via GET /v1/projects/{projectId}/preview-blueprints/{previewBlueprintId}/runs/{runId}. Northflank permission required: Project > PreviewBlueprints > Runs > Read.

project:previewblueprints:runs:read

northflank_get_v1_projects_by_projectid_secretsREAD

List project secrets via GET /v1/projects/{projectId}/secrets. Northflank permission required: Project > Secrets > SecretGroups > List.

project:secrets:secretgroups:list

northflank_get_v1_projects_by_projectid_secrets_by_secretidREAD

Get project secret via GET /v1/projects/{projectId}/secrets/{secretId}. Northflank documents no required permission for it.

no provider scope

northflank_get_v1_projects_by_projectid_secrets_by_secretid_addons_by_addonidREAD

Get project secret addon link details via GET /v1/projects/{projectId}/secrets/{secretId}/addons/{addonId}. Northflank documents no required permission for it.

no provider scope

northflank_get_v1_projects_by_projectid_secrets_by_secretid_detailsREAD

Get project secret details via GET /v1/projects/{projectId}/secrets/{secretId}/details. Northflank documents no required permission for it.

no provider scope

northflank_get_v1_projects_by_projectid_servicesREAD

List services via GET /v1/projects/{projectId}/services. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceidREAD

Get service via GET /v1/projects/{projectId}/services/{serviceId}. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_branchesREAD

Get service branches via GET /v1/projects/{projectId}/services/{serviceId}/branches. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_buildREAD

List service builds via GET /v1/projects/{projectId}/services/{serviceId}/build. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_build_argumentsREAD

Get service build arguments via GET /v1/projects/{projectId}/services/{serviceId}/build-arguments. Northflank permission required: Project > Secrets > Services > Read.

project:secrets:services:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_build_arguments_detailsREAD

Get service build arguments details via GET /v1/projects/{projectId}/services/{serviceId}/build-arguments/details. Northflank permission required: Project > Secrets > Services > Read.

project:secrets:services:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_build_by_buildidREAD

Get service build via GET /v1/projects/{projectId}/services/{serviceId}/build/{buildId}. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_build_logsREAD

Get service build logs via GET /v1/projects/{projectId}/services/{serviceId}/build-logs. Northflank permission required: Project > Services > Deployment > View Observability.

project:services:deployment:view-observability

northflank_get_v1_projects_by_projectid_services_by_serviceid_build_metricsREAD

Get service build metrics via GET /v1/projects/{projectId}/services/{serviceId}/build-metrics. Northflank permission required: Project > Services > Deployment > View Observability.

project:services:deployment:view-observability

northflank_get_v1_projects_by_projectid_services_by_serviceid_containersREAD

List service containers via GET /v1/projects/{projectId}/services/{serviceId}/containers. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_deploymentREAD

Get service deployment via GET /v1/projects/{projectId}/services/{serviceId}/deployment. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_deploymentsREAD

List service deployments via GET /v1/projects/{projectId}/services/{serviceId}/deployments. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_health_checksREAD

Get service health checks via GET /v1/projects/{projectId}/services/{serviceId}/health-checks. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_logsREAD

Get service logs via GET /v1/projects/{projectId}/services/{serviceId}/logs. Northflank permission required: Project > Services > Deployment > View Observability.

project:services:deployment:view-observability

northflank_get_v1_projects_by_projectid_services_by_serviceid_metricsREAD

Get service metrics via GET /v1/projects/{projectId}/services/{serviceId}/metrics. Northflank permission required: Project > Services > Deployment > View Observability.

project:services:deployment:view-observability

northflank_get_v1_projects_by_projectid_services_by_serviceid_per_replica_volumesREAD

Get service per replica volumes via GET /v1/projects/{projectId}/services/{serviceId}/per-replica-volumes. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_portsREAD

Get service ports via GET /v1/projects/{projectId}/services/{serviceId}/ports. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_pull_requestsREAD

Get service pull requests via GET /v1/projects/{projectId}/services/{serviceId}/pull-requests. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_rolloutREAD

Get service rollout via GET /v1/projects/{projectId}/services/{serviceId}/rollout. Northflank permission required: Project > Services > General > Read.

project:services:general:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_runtime_environmentREAD

Get service runtime environment via GET /v1/projects/{projectId}/services/{serviceId}/runtime-environment. Northflank permission required: Project > Secrets > Services > Read.

project:secrets:services:read

northflank_get_v1_projects_by_projectid_services_by_serviceid_runtime_environment_detailsREAD

Get service runtime environment details via GET /v1/projects/{projectId}/services/{serviceId}/runtime-environment/details. Northflank permission required: Project > Secrets > Services > Read.

project:secrets:services:read

northflank_get_v1_projects_by_projectid_volumesREAD

List volumes via GET /v1/projects/{projectId}/volumes. Northflank permission required: Project > Volumes > General > Read.

project:volumes:general:read

northflank_get_v1_projects_by_projectid_volumes_by_volumeidREAD

Get volume via GET /v1/projects/{projectId}/volumes/{volumeId}. Northflank permission required: Project > Volumes > General > Read.

project:volumes:general:read

northflank_get_v1_projects_by_projectid_volumes_by_volumeid_backup_schedulesREAD

Get volume backup schedules via GET /v1/projects/{projectId}/volumes/{volumeId}/backup-schedules. Northflank permission required: Project > Volumes > Backups > Read.

project:volumes:backups:read

northflank_get_v1_projects_by_projectid_volumes_by_volumeid_backupsREAD

Get volume backups via GET /v1/projects/{projectId}/volumes/{volumeId}/backups. Northflank permission required: Project > Volumes > Backups > Read.

project:volumes:backups:read

northflank_get_v1_projects_by_projectid_volumes_by_volumeid_backups_by_backupidREAD

Get volume backup details via GET /v1/projects/{projectId}/volumes/{volumeId}/backups/{backupId}. Northflank permission required: Project > Volumes > Backups > Read.

project:volumes:backups:read

northflank_get_v1_projects_by_projectid_workflowsREAD

List workflows via GET /v1/projects/{projectId}/workflows. Northflank permission required: Project > Workflows > General > Read.

project:workflows:general:read

northflank_get_v1_projects_by_projectid_workflows_by_workflowidREAD

Get workflow via GET /v1/projects/{projectId}/workflows/{workflowId}. Northflank permission required: Project > Workflows > General > Read.

project:workflows:general:read

northflank_get_v1_projects_by_projectid_workflows_by_workflowid_runsREAD

List workflow runs via GET /v1/projects/{projectId}/workflows/{workflowId}/runs. Northflank permission required: Project > Workflows > Runs > Read.

project:workflows:runs:read

northflank_get_v1_projects_by_projectid_workflows_by_workflowid_runs_by_runidREAD

Get workflow run details via GET /v1/projects/{projectId}/workflows/{workflowId}/runs/{runId}. Northflank permission required: Project > Workflows > Runs > Read.

project:workflows:runs:read

northflank_get_v1_regionsREAD

List regions via GET /v1/regions. Northflank documents no required permission for it. Answers 200 with no credential at all (measured 2026-09-22), so a 200 here says nothing about the connection's token.

no provider scope

northflank_get_v1_secretsREAD

List global secrets via GET /v1/secrets. Northflank permission required: Account > GlobalSecrets > Secrets > Read.

account:globalsecrets:secrets:read

northflank_get_v1_secrets_by_secretidREAD

Get global secret via GET /v1/secrets/{secretId}. Northflank documents no required permission for it.

no provider scope

northflank_get_v1_tagsREAD

List tags via GET /v1/tags. Northflank permission required: Account > Platform > Tags > Read.

account:platform:tags:read

northflank_get_v1_tags_by_resourcetagidREAD

Get tag via GET /v1/tags/{resourceTagId}. Northflank permission required: Account > Platform > Tags > Read.

account:platform:tags:read

northflank_get_v1_teamsREAD

List teams via GET /v1/teams. Northflank permission required: Organisation > Team > General > Read.

organisation:team:general:read

northflank_get_v1_teams_by_teamidREAD

Get team via GET /v1/teams/{teamId}. Northflank permission required: Organisation > Team > General > Read.

organisation:team:general:read

northflank_get_v1_teams_by_teamid_membersREAD

List team members via GET /v1/teams/{teamId}/members. Northflank permission required: Account > Admin > Members > Read.

account:admin:members:read

northflank_get_v1_teams_by_teamid_rolesREAD

List team roles via GET /v1/teams/{teamId}/roles. Northflank permission required: Account > Admin > Roles > Read.

account:admin:roles:read

northflank_get_v1_teams_by_teamid_roles_by_roleidREAD

Get team role via GET /v1/teams/{teamId}/roles/{roleId}. Northflank permission required: Account > Admin > Roles > Read.

account:admin:roles:read

northflank_get_v1_teams_by_teamid_roles_by_roleid_membersREAD

List team role members via GET /v1/teams/{teamId}/roles/{roleId}/members. Northflank permission required: Account > Admin > Roles > Read.

account:admin:roles:read

northflank_get_v1_templatesREAD

List templates via GET /v1/templates. Northflank permission required: Account > Templates > General > Read.

account:templates:general:read

northflank_get_v1_templates_by_templateidREAD

Get template via GET /v1/templates/{templateId}. Northflank permission required: Account > Templates > General > Read.

account:templates:general:read

northflank_get_v1_templates_by_templateid_runsREAD

List template runs via GET /v1/templates/{templateId}/runs. Northflank permission required: Account > Templates > General > Read.

account:templates:general:read

northflank_get_v1_templates_by_templateid_runs_by_templaterunidREAD

Get template run via GET /v1/templates/{templateId}/runs/{templateRunId}. Northflank permission required: Account > Templates > General > Read.

account:templates:general:read

northflank_get_v1_tokensREAD

List api tokens via GET /v1/tokens. Northflank permission required: Account > Admin > ApiTokens > Read.

account:admin:apitokens:read

northflank_get_v1_workload_identitiesREAD

List workload identities via GET /v1/workload-identities. Northflank permission required: Account > Cloud > WorkloadIdentities > Read.

account:cloud:workloadidentities:read

northflank_get_v1_workload_identities_by_workloadidentityidREAD

Get workload identity via GET /v1/workload-identities/{workloadIdentityId}. Northflank permission required: Account > Cloud > WorkloadIdentities > Read.

account:cloud:workloadidentities:read

northflank_patch_v1_backup_destinations_by_backupdestinationidWRITE

Patch backup destination via PATCH /v1/backup-destinations/{backupDestinationId}. Northflank permission required: Account > Platform > BackupDestinations > Update.

account:platform:backupdestinations:update

northflank_patch_v1_cloud_providers_clusters_by_clusteridWRITE

Patch cluster via PATCH /v1/cloud-providers/clusters/{clusterId}. Northflank permission required: Account > Cloud > Clusters > Update.

account:cloud:clusters:update

northflank_patch_v1_cloud_providers_integrations_by_integrationidWRITE

Patch integration via PATCH /v1/cloud-providers/integrations/{integrationId}. Northflank permission required: Account > Cloud > Integrations > Update.

account:cloud:integrations:update

northflank_patch_v1_domains_by_domainWRITE

Update domain via PATCH /v1/domains/{domain}. Northflank permission required: Account > Networking > Domains > Update.

account:networking:domains:update

northflank_patch_v1_domains_by_domain_subdomains_by_subdomain_geo_routingWRITE

Update geo routing configuration via PATCH /v1/domains/{domain}/subdomains/{subdomain}/geo-routing. Northflank permission required: Account > Networking > Subdomains > Update.

account:networking:subdomains:update

northflank_patch_v1_egress_ips_by_egressipidWRITE

Patch egress ip via PATCH /v1/egress-ips/{egressIpId}. Northflank permission required: Account > Networking > EgressIps > Update.

account:networking:egressips:update

northflank_patch_v1_gradual_rollout_strategies_by_gradualrolloutstrategyidWRITE

Update gradual rollout strategy via PATCH /v1/gradual-rollout-strategies/{gradualRolloutStrategyId}. Northflank permission required: Account > Platform > GradualRollouts > Update.

account:platform:gradualrollouts:update

northflank_patch_v1_integrations_registries_by_credentialidWRITE

Update registry via PATCH /v1/integrations/registries/{credentialId}. Northflank permission required: Account > Cloud > Registries > Update.

account:cloud:registries:update

northflank_patch_v1_integrations_ssh_identities_by_identityidWRITE

Update ssh identity via PATCH /v1/integrations/ssh-identities/{identityId}. Northflank permission required: Account > Platform > Ssh > Update.

account:platform:ssh:update

northflank_patch_v1_load_balancers_by_loadbalanceridWRITE

Patch load balancer via PATCH /v1/load-balancers/{loadBalancerId}. Northflank permission required: Account > Networking > LoadBalancers > Update.

account:networking:loadbalancers:update

northflank_patch_v1_network_policies_by_networkpolicyidWRITE

Update network policy via PATCH /v1/network-policies/{networkPolicyId}. Northflank permission required: Account > Networking > NetworkPolicies > Update.

account:networking:networkpolicies:update

northflank_patch_v1_org_roles_by_roleidWRITE

Update org role via PATCH /v1/org-roles/{roleId}. Northflank permission required: Organisation > Admin > Roles > Manage.

organisation:admin:roles:manage

northflank_patch_v1_projects_by_projectidWRITE

Update project via PATCH /v1/projects/{projectId}. Northflank permission required: Project > Projects > Manage > Update.

project:projects:manage:update

northflank_patch_v1_projects_by_projectid_addons_by_addonidWRITE

Patch addon via PATCH /v1/projects/{projectId}/addons/{addonId}. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_patch_v1_projects_by_projectid_external_addons_by_externaladdonidWRITE

Update external addon via PATCH /v1/projects/{projectId}/external-addons/{externalAddonId}. Northflank permission required: Project > ExternalAddons > General > Update.

project:externaladdons:general:update

northflank_patch_v1_projects_by_projectid_harnesses_by_harnessidWRITE

Patch harness via PATCH /v1/projects/{projectId}/harnesses/{harnessId}. Northflank permission required: Project > Harnesses > General > Update.

project:harnesses:general:update

northflank_patch_v1_projects_by_projectid_jobs_by_jobidWRITE

Patch job via PATCH /v1/projects/{projectId}/jobs/{jobId}. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_patch_v1_projects_by_projectid_jobs_cron_by_jobidWRITE

Patch cron job via PATCH /v1/projects/{projectId}/jobs/cron/{jobId}. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_patch_v1_projects_by_projectid_jobs_manual_by_jobidWRITE

Patch manual job via PATCH /v1/projects/{projectId}/jobs/manual/{jobId}. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_patch_v1_projects_by_projectid_secrets_by_secretidWRITE

Patch project secret via PATCH /v1/projects/{projectId}/secrets/{secretId}. Northflank documents no required permission for it.

no provider scope

northflank_patch_v1_projects_by_projectid_services_build_by_serviceidWRITE

Patch build service via PATCH /v1/projects/{projectId}/services/build/{serviceId}. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_patch_v1_projects_by_projectid_services_combined_by_serviceidWRITE

Patch combined service via PATCH /v1/projects/{projectId}/services/combined/{serviceId}. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_patch_v1_projects_by_projectid_services_deployment_by_serviceidWRITE

Patch deployment service via PATCH /v1/projects/{projectId}/services/deployment/{serviceId}. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_patch_v1_secrets_by_secretidWRITE

Patch global secret via PATCH /v1/secrets/{secretId}. Northflank documents no required permission for it.

no provider scope

northflank_patch_v1_tags_by_resourcetagidWRITE

Update tag via PATCH /v1/tags/{resourceTagId}. Northflank permission required: Account > Platform > Tags > Update.

account:platform:tags:update

northflank_patch_v1_teams_by_teamidWRITE

Update team via PATCH /v1/teams/{teamId}. Northflank permission required: Organisation > Team > General > Update.

organisation:team:general:update

northflank_patch_v1_teams_by_teamid_roles_by_roleidWRITE

Update team role via PATCH /v1/teams/{teamId}/roles/{roleId}. Northflank permission required: Account > Admin > Roles > Manage.

account:admin:roles:manage

northflank_patch_v1_workload_identities_by_workloadidentityidWRITE

Update workload identity via PATCH /v1/workload-identities/{workloadIdentityId}. Northflank permission required: Account > Cloud > WorkloadIdentities > Update.

account:cloud:workloadidentities:update

northflank_post_v1_backup_destinationsWRITE

Add backup destination via POST /v1/backup-destinations. Northflank permission required: Account > Platform > BackupDestinations > Create.

account:platform:backupdestinations:create

northflank_post_v1_cloud_providers_clustersWRITE

Create cluster via POST /v1/cloud-providers/clusters. Northflank permission required: Account > Cloud > Clusters > Create.

account:cloud:clusters:create

northflank_post_v1_cloud_providers_clusters_by_clusterid_nodes_by_nodeid_cordonWRITE

Cordon cluster node via POST /v1/cloud-providers/clusters/{clusterId}/nodes/{nodeId}/cordon. Northflank permission required: Account > Cloud > Clusters > Update.

account:cloud:clusters:update

northflank_post_v1_cloud_providers_clusters_by_clusterid_nodes_by_nodeid_drainWRITE

Drain cluster node via POST /v1/cloud-providers/clusters/{clusterId}/nodes/{nodeId}/drain. Northflank permission required: Account > Cloud > Clusters > Update.

account:cloud:clusters:update

northflank_post_v1_cloud_providers_clusters_by_clusterid_nodes_by_nodeid_uncordonWRITE

Uncordon cluster node via POST /v1/cloud-providers/clusters/{clusterId}/nodes/{nodeId}/uncordon. Northflank permission required: Account > Cloud > Clusters > Update.

account:cloud:clusters:update

northflank_post_v1_cloud_providers_integrationsWRITE

Create integration via POST /v1/cloud-providers/integrations. Northflank permission required: Account > Cloud > Integrations > Create.

account:cloud:integrations:create

northflank_post_v1_cloud_providers_integrations_by_integrationid_workload_identity_provider_installWRITE

Install workload identity provider via POST /v1/cloud-providers/integrations/{integrationId}/workload-identity-provider/install. Northflank permission required: Account > Cloud > WorkloadIdentities > Update.

account:cloud:workloadidentities:update

northflank_post_v1_domainsWRITE

Create new domain via POST /v1/domains. Northflank permission required: Account > Networking > Domains > Create.

account:networking:domains:create

northflank_post_v1_domains_by_domain_importWRITE

Import domain certificate via POST /v1/domains/{domain}/import. Northflank permission required: Account > Networking > Domains > Update.

account:networking:domains:update

northflank_post_v1_domains_by_domain_subdomainsWRITE

Add subdomain via POST /v1/domains/{domain}/subdomains. Northflank permission required: Account > Networking > Subdomains > Update.

account:networking:subdomains:update

northflank_post_v1_domains_by_domain_subdomains_by_subdomain_assignWRITE

Assign service to subdomain via POST /v1/domains/{domain}/subdomains/{subdomain}/assign. Northflank permission required: Account > Networking > Subdomains > Update.

account:networking:subdomains:update

northflank_post_v1_domains_by_domain_subdomains_by_subdomain_cdn_disableWRITE

Remove cdn from a subdomain via POST /v1/domains/{domain}/subdomains/{subdomain}/cdn/disable. Northflank permission required: Account > Networking > Subdomains > Update.

account:networking:subdomains:update

northflank_post_v1_domains_by_domain_subdomains_by_subdomain_cdn_enableWRITE

Enable cdn on a subdomain via POST /v1/domains/{domain}/subdomains/{subdomain}/cdn/enable. Northflank permission required: Account > Networking > Subdomains > Update.

account:networking:subdomains:update

northflank_post_v1_domains_by_domain_subdomains_by_subdomain_cdn_purgeWRITE

Purge cdn cache for a subdomain via POST /v1/domains/{domain}/subdomains/{subdomain}/cdn/purge. Northflank permission required: Account > Networking > Subdomains > Update.

account:networking:subdomains:update

northflank_post_v1_domains_by_domain_subdomains_by_subdomain_certificate_importWRITE

Import subdomain certificate via POST /v1/domains/{domain}/subdomains/{subdomain}/certificate/import. Northflank permission required: Account > Networking > Subdomains > Update.

account:networking:subdomains:update

northflank_post_v1_domains_by_domain_subdomains_by_subdomain_pathsWRITE

Add subdomain path via POST /v1/domains/{domain}/subdomains/{subdomain}/paths. Northflank permission required: Account > Networking > SubdomainPaths > Create.

account:networking:subdomainpaths:create

northflank_post_v1_domains_by_domain_subdomains_by_subdomain_paths_by_subdomainpathWRITE

Update subdomain path via POST /v1/domains/{domain}/subdomains/{subdomain}/paths/{subdomainPath}. Northflank permission required: Account > Networking > SubdomainPaths > Update.

account:networking:subdomainpaths:update

northflank_post_v1_domains_by_domain_subdomains_by_subdomain_paths_by_subdomainpath_assignWRITE

Assign subdomain path via POST /v1/domains/{domain}/subdomains/{subdomain}/paths/{subdomainPath}/assign. Northflank permission required: Account > Networking > SubdomainPaths > Update.

account:networking:subdomainpaths:update

northflank_post_v1_domains_by_domain_subdomains_by_subdomain_verifyWRITE

Verify subdomain via POST /v1/domains/{domain}/subdomains/{subdomain}/verify. Northflank permission required: Account > Networking > Subdomains > Update.

account:networking:subdomains:update

northflank_post_v1_domains_by_domain_verifyWRITE

Verify domain via POST /v1/domains/{domain}/verify. Northflank permission required: Account > Networking > Domains > Create.

account:networking:domains:create

northflank_post_v1_egress_ipsWRITE

Create egress ip via POST /v1/egress-ips. Northflank permission required: Account > Networking > EgressIps > Create.

account:networking:egressips:create

northflank_post_v1_encryption_configurationsWRITE

Create encryption configuration via POST /v1/encryption/configurations. Northflank permission required: Account > Admin > Encryption > Create.

account:admin:encryption:create

northflank_post_v1_encryption_configurations_by_encryptionconfigurationid_activateWRITE

Activate encryption configuration via POST /v1/encryption/configurations/{encryptionConfigurationId}/activate. Northflank permission required: Account > Admin > Encryption > Manage.

account:admin:encryption:manage

northflank_post_v1_encryption_configurations_by_encryptionconfigurationid_deactivateWRITE

Deactivate encryption configuration via POST /v1/encryption/configurations/{encryptionConfigurationId}/deactivate. Northflank permission required: Account > Admin > Encryption > Manage.

account:admin:encryption:manage

northflank_post_v1_encryption_configurations_by_encryptionconfigurationid_verifyREAD

Verify encryption configuration via POST /v1/encryption/configurations/{encryptionConfigurationId}/verify. Northflank permission required: Account > Admin > Encryption > Read.

account:admin:encryption:read

northflank_post_v1_encryption_northflank_managed_activateWRITE

Enable northflank managed envelope encryption via POST /v1/encryption/northflank-managed/activate. Northflank permission required: Account > Admin > Encryption > Manage.

account:admin:encryption:manage

northflank_post_v1_gradual_rollout_strategiesWRITE

Create gradual rollout strategy via POST /v1/gradual-rollout-strategies. Northflank permission required: Account > Platform > GradualRollouts > Create.

account:platform:gradualrollouts:create

northflank_post_v1_integrations_log_sinksWRITE

Create log sink via POST /v1/integrations/log-sinks. Northflank permission required: Account > Observability > LogSinks > Create.

account:observability:logsinks:create

northflank_post_v1_integrations_log_sinks_by_logsinkid_pauseWRITE

Pause log sink via POST /v1/integrations/log-sinks/{logSinkId}/pause. Northflank permission required: Account > Observability > LogSinks > Update.

account:observability:logsinks:update

northflank_post_v1_integrations_log_sinks_by_logsinkid_resumeWRITE

Resume log sink via POST /v1/integrations/log-sinks/{logSinkId}/resume. Northflank permission required: Account > Observability > LogSinks > Update.

account:observability:logsinks:update

northflank_post_v1_integrations_log_sinks_by_logsinkid_settingsWRITE

Update log sink via POST /v1/integrations/log-sinks/{logSinkId}/settings. Northflank permission required: Account > Observability > LogSinks > Update.

account:observability:logsinks:update

northflank_post_v1_integrations_notificationsWRITE

Create notification integration via POST /v1/integrations/notifications. Northflank permission required: Account > Observability > Notifications > Create.

account:observability:notifications:create

northflank_post_v1_integrations_notifications_by_notificationidWRITE

Update notification integration via POST /v1/integrations/notifications/{notificationId}. Northflank permission required: Account > Observability > Notifications > Update.

account:observability:notifications:update

northflank_post_v1_integrations_registriesWRITE

Add registry via POST /v1/integrations/registries. Northflank permission required: Account > Cloud > Registries > Create.

account:cloud:registries:create

northflank_post_v1_integrations_ssh_identitiesWRITE

Add ssh identity via POST /v1/integrations/ssh-identities. Northflank permission required: Account > Platform > Ssh > Create.

account:platform:ssh:create

northflank_post_v1_integrations_vcs_custom_by_customvcsid_token_by_vcslinkidREAD

Generate vcs token via POST /v1/integrations/vcs/custom/{customVCSId}/token/{vcsLinkId}. Northflank permission required: Account > Git > Tokens > Read.

account:git:tokens:read

northflank_post_v1_integrations_vcs_link_sessionsWRITE

Create vcs link session via POST /v1/integrations/vcs/link-sessions. Northflank permission required: Account > Git > General > Manage.

account:git:general:manage

northflank_post_v1_integrations_vcs_repo_accessREAD

Check repository access via POST /v1/integrations/vcs/repo-access. Northflank permission required: Account > Git > General > Read.

account:git:general:read

northflank_post_v1_load_balancersWRITE

Create load balancer via POST /v1/load-balancers. Northflank permission required: Account > Networking > LoadBalancers > Create.

account:networking:loadbalancers:create

northflank_post_v1_network_policiesWRITE

Create network policy via POST /v1/network-policies. Northflank permission required: Account > Networking > NetworkPolicies > Create.

account:networking:networkpolicies:create

northflank_post_v1_org_rolesWRITE

Create org role via POST /v1/org-roles. Northflank permission required: Organisation > Admin > Roles > Manage.

organisation:admin:roles:manage

northflank_post_v1_org_roles_by_roleid_membersWRITE

Add member to org role via POST /v1/org-roles/{roleId}/members. Northflank permission required: Organisation > Admin > Roles > Manage.

organisation:admin:roles:manage

northflank_post_v1_projectsWRITE

Create project via POST /v1/projects. Northflank permission required: Project > Projects > Manage > Create.

project:projects:manage:create

northflank_post_v1_projects_by_projectid_addonsWRITE

Create addon via POST /v1/projects/{projectId}/addons. Northflank permission required: Project > Addons > General > Create.

project:addons:general:create

northflank_post_v1_projects_by_projectid_addons_by_addonid_backup_schedulesWRITE

Create addon backup schedule via POST /v1/projects/{projectId}/addons/{addonId}/backup-schedules. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_backupsWRITE

Backup addon via POST /v1/projects/{projectId}/addons/{addonId}/backups. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_backups_by_backupid_abortWRITE

Abort backup via POST /v1/projects/{projectId}/addons/{addonId}/backups/{backupId}/abort. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_backups_by_backupid_abort_restoreWRITE

Abort backup restore via POST /v1/projects/{projectId}/addons/{addonId}/backups/{backupId}/abort-restore. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_backups_by_backupid_restoreWRITE

Restore addon backup via POST /v1/projects/{projectId}/addons/{addonId}/backups/{backupId}/restore. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_backups_by_backupid_retainWRITE

Retain backup via POST /v1/projects/{projectId}/addons/{addonId}/backups/{backupId}/retain. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_importWRITE

Import addon backup via POST /v1/projects/{projectId}/addons/{addonId}/import. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_network_settingsWRITE

Update addon network settings via POST /v1/projects/{projectId}/addons/{addonId}/network-settings. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_pauseWRITE

Pause addon via POST /v1/projects/{projectId}/addons/{addonId}/pause. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_resetWRITE

Reset addon via POST /v1/projects/{projectId}/addons/{addonId}/reset. Northflank permission required: Project > Addons > General > Delete. DESTRUCTIVE: Northflank requires the 'Project > Addons > General > Delete' permission for this, not an Update one -- resetting an addon discards its data.

project:addons:general:delete

northflank_post_v1_projects_by_projectid_addons_by_addonid_restartWRITE

Restart addon via POST /v1/projects/{projectId}/addons/{addonId}/restart. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_resumeWRITE

Resume addon via POST /v1/projects/{projectId}/addons/{addonId}/resume. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_scaleWRITE

Scale addon resources via POST /v1/projects/{projectId}/addons/{addonId}/scale. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_secret_rotationWRITE

Rotate addon secrets via POST /v1/projects/{projectId}/addons/{addonId}/secret-rotation. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_secret_rotation_finaliseWRITE

Finalise addon secret rotation via POST /v1/projects/{projectId}/addons/{addonId}/secret-rotation/finalise. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_securityWRITE

Update addon security rules via POST /v1/projects/{projectId}/addons/{addonId}/security. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_addons_by_addonid_versionWRITE

Upgrade addon version via POST /v1/projects/{projectId}/addons/{addonId}/version. Northflank permission required: Project > Addons > General > Update.

project:addons:general:update

northflank_post_v1_projects_by_projectid_external_addonsWRITE

Create external addon via POST /v1/projects/{projectId}/external-addons. Northflank permission required: Project > ExternalAddons > General > Create.

project:externaladdons:general:create

northflank_post_v1_projects_by_projectid_harnessesWRITE

Create harness via POST /v1/projects/{projectId}/harnesses. Northflank permission required: Project > Harnesses > General > Create.

project:harnesses:general:create

northflank_post_v1_projects_by_projectid_harnesses_by_harnessid_pauseWRITE

Pause harness via POST /v1/projects/{projectId}/harnesses/{harnessId}/pause. Northflank permission required: Project > Harnesses > General > Update.

project:harnesses:general:update

northflank_post_v1_projects_by_projectid_harnesses_by_harnessid_restartWRITE

Restart harness via POST /v1/projects/{projectId}/harnesses/{harnessId}/restart. Northflank permission required: Project > Harnesses > General > Update.

project:harnesses:general:update

northflank_post_v1_projects_by_projectid_harnesses_by_harnessid_resumeWRITE

Resume harness via POST /v1/projects/{projectId}/harnesses/{harnessId}/resume. Northflank permission required: Project > Harnesses > General > Update.

project:harnesses:general:update

northflank_post_v1_projects_by_projectid_jobsWRITE

Create job via POST /v1/projects/{projectId}/jobs. Northflank permission required: Project > Jobs > General > Create.

project:jobs:general:create

northflank_post_v1_projects_by_projectid_jobs_by_jobid_buildWRITE

Start job build via POST /v1/projects/{projectId}/jobs/{jobId}/build. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_post_v1_projects_by_projectid_jobs_by_jobid_build_argumentsWRITE

Edit job build arguments via POST /v1/projects/{projectId}/jobs/{jobId}/build-arguments. Northflank permission required: Project > Secrets > Jobs > Update.

project:secrets:jobs:update

northflank_post_v1_projects_by_projectid_jobs_by_jobid_build_optionsWRITE

Update job build options via POST /v1/projects/{projectId}/jobs/{jobId}/build-options. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_post_v1_projects_by_projectid_jobs_by_jobid_build_sourceWRITE

Update job build source via POST /v1/projects/{projectId}/jobs/{jobId}/build-source. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_post_v1_projects_by_projectid_jobs_by_jobid_deploymentWRITE

Update job deployment via POST /v1/projects/{projectId}/jobs/{jobId}/deployment. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_post_v1_projects_by_projectid_jobs_by_jobid_health_checksWRITE

Update job health checks via POST /v1/projects/{projectId}/jobs/{jobId}/health-checks. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_post_v1_projects_by_projectid_jobs_by_jobid_pauseWRITE

Pause job via POST /v1/projects/{projectId}/jobs/{jobId}/pause. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_post_v1_projects_by_projectid_jobs_by_jobid_resumeWRITE

Resume job via POST /v1/projects/{projectId}/jobs/{jobId}/resume. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_post_v1_projects_by_projectid_jobs_by_jobid_runsWRITE

Run job via POST /v1/projects/{projectId}/jobs/{jobId}/runs. Northflank permission required: Project > Jobs > General > Run Job.

project:jobs:general:run-job

northflank_post_v1_projects_by_projectid_jobs_by_jobid_runtime_environmentWRITE

Edit job runtime environment via POST /v1/projects/{projectId}/jobs/{jobId}/runtime-environment. Northflank permission required: Project > Secrets > Jobs > Update.

project:secrets:jobs:update

northflank_post_v1_projects_by_projectid_jobs_by_jobid_scaleWRITE

Scale job via POST /v1/projects/{projectId}/jobs/{jobId}/scale. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_post_v1_projects_by_projectid_jobs_by_jobid_settingsWRITE

Update job settings via POST /v1/projects/{projectId}/jobs/{jobId}/settings. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_post_v1_projects_by_projectid_jobs_by_jobid_suspendWRITE

Suspend job via POST /v1/projects/{projectId}/jobs/{jobId}/suspend. Northflank permission required: Project > Jobs > General > Update.

project:jobs:general:update

northflank_post_v1_projects_by_projectid_jobs_cronWRITE

Create cron job via POST /v1/projects/{projectId}/jobs/cron. Northflank permission required: Project > Jobs > General > Create.

project:jobs:general:create

northflank_post_v1_projects_by_projectid_jobs_manualWRITE

Create manual job via POST /v1/projects/{projectId}/jobs/manual. Northflank permission required: Project > Jobs > General > Create.

project:jobs:general:create

northflank_post_v1_projects_by_projectid_llm_model_deploymentsWRITE

Create ai model via POST /v1/projects/{projectId}/llm-model-deployments. Northflank permission required: Project > AiModels > General > Create.

project:aimodels:general:create

northflank_post_v1_projects_by_projectid_llm_model_deployments_by_llmmodeldeploymentidWRITE

Update ai model via POST /v1/projects/{projectId}/llm-model-deployments/{llmModelDeploymentId}. Northflank permission required: Project > AiModels > General > Update.

project:aimodels:general:update

northflank_post_v1_projects_by_projectid_pipelines_by_pipelineid_preview_envsWRITE

Update preview template via POST /v1/projects/{projectId}/pipelines/{pipelineId}/preview-envs. Northflank permission required: Account > Templates > General > Create.

account:templates:general:create

northflank_post_v1_projects_by_projectid_pipelines_by_pipelineid_preview_envs_runsWRITE

Run preview environment via POST /v1/projects/{projectId}/pipelines/{pipelineId}/preview-envs/runs. Northflank permission required: Account > Templates > General > Create.

account:templates:general:create

northflank_post_v1_projects_by_projectid_pipelines_by_pipelineid_release_flows_by_stageWRITE

Update release flow via POST /v1/projects/{projectId}/pipelines/{pipelineId}/release-flows/{stage}. Northflank permission required: Project > Pipelines > General > Update.

project:pipelines:general:update

northflank_post_v1_projects_by_projectid_pipelines_by_pipelineid_release_flows_by_stage_runsWRITE

Run release flow via POST /v1/projects/{projectId}/pipelines/{pipelineId}/release-flows/{stage}/runs. Northflank permission required: Project > Pipelines > General > Update.

project:pipelines:general:update

northflank_post_v1_projects_by_projectid_pipelines_by_pipelineid_release_flows_by_stage_runs_by_runid_abortWRITE

Abort release flow run via POST /v1/projects/{projectId}/pipelines/{pipelineId}/release-flows/{stage}/runs/{runId}/abort. Northflank permission required: Project > Pipelines > General > Update.

project:pipelines:general:update

northflank_post_v1_projects_by_projectid_preview_blueprintsWRITE

Create preview blueprint via POST /v1/projects/{projectId}/preview-blueprints. Northflank permission required: Project > PreviewBlueprints > General > Create.

project:previewblueprints:general:create

northflank_post_v1_projects_by_projectid_preview_blueprints_by_previewblueprintidWRITE

Update preview blueprint via POST /v1/projects/{projectId}/preview-blueprints/{previewBlueprintId}. Northflank permission required: Project > PreviewBlueprints > General > Update.

project:previewblueprints:general:update

northflank_post_v1_projects_by_projectid_preview_blueprints_by_previewblueprintid_previews_by_previewid_pauseWRITE

Pause preview environment via POST /v1/projects/{projectId}/preview-blueprints/{previewBlueprintId}/previews/{previewId}/pause. Northflank permission required: Project > PipelinesV2 > Previews > Pause.

project:pipelinesv2:previews:pause

northflank_post_v1_projects_by_projectid_preview_blueprints_by_previewblueprintid_previews_by_previewid_resetWRITE

Reset preview environment expiry via POST /v1/projects/{projectId}/preview-blueprints/{previewBlueprintId}/previews/{previewId}/reset. Northflank permission required: Project > PreviewBlueprints > General > Update.

project:previewblueprints:general:update

northflank_post_v1_projects_by_projectid_preview_blueprints_by_previewblueprintid_previews_by_previewid_resumeWRITE

Resume preview environment via POST /v1/projects/{projectId}/preview-blueprints/{previewBlueprintId}/previews/{previewId}/resume. Northflank permission required: Project > PipelinesV2 > Previews > Resume.

project:pipelinesv2:previews:resume

northflank_post_v1_projects_by_projectid_preview_blueprints_by_previewblueprintid_runsWRITE

Run preview blueprint via POST /v1/projects/{projectId}/preview-blueprints/{previewBlueprintId}/runs. Northflank permission required: Project > PreviewBlueprints > Runs > Start.

project:previewblueprints:runs:start

northflank_post_v1_projects_by_projectid_preview_blueprints_by_previewblueprintid_runs_by_runid_abortWRITE

Abort preview blueprint run via POST /v1/projects/{projectId}/preview-blueprints/{previewBlueprintId}/runs/{runId}/abort. Northflank permission required: Project > PreviewBlueprints > Runs > Abort.

project:previewblueprints:runs:abort

northflank_post_v1_projects_by_projectid_secretsWRITE

Create project secret via POST /v1/projects/{projectId}/secrets. Northflank permission required: Project > Secrets > SecretGroups > Create.

project:secrets:secretgroups:create

northflank_post_v1_projects_by_projectid_secrets_by_secretidWRITE

Update project secret via POST /v1/projects/{projectId}/secrets/{secretId}. Northflank documents no required permission for it.

no provider scope

northflank_post_v1_projects_by_projectid_secrets_by_secretid_addons_by_addonidWRITE

Update project secret addon link via POST /v1/projects/{projectId}/secrets/{secretId}/addons/{addonId}. Northflank documents no required permission for it.

no provider scope

northflank_post_v1_projects_by_projectid_services_buildWRITE

Create build service via POST /v1/projects/{projectId}/services/build. Northflank permission required: Project > Services > General > Create.

project:services:general:create

northflank_post_v1_projects_by_projectid_services_by_serviceid_buildWRITE

Start service build via POST /v1/projects/{projectId}/services/{serviceId}/build. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_build_argumentsWRITE

Edit service build arguments via POST /v1/projects/{projectId}/services/{serviceId}/build-arguments. Northflank permission required: Project > Secrets > Services > Update.

project:secrets:services:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_build_optionsWRITE

Update service build options via POST /v1/projects/{projectId}/services/{serviceId}/build-options. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_build_sourceWRITE

Update service build source via POST /v1/projects/{projectId}/services/{serviceId}/build-source. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_deploymentWRITE

Update service deployment via POST /v1/projects/{projectId}/services/{serviceId}/deployment. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_health_checksWRITE

Update service health checks via POST /v1/projects/{projectId}/services/{serviceId}/health-checks. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_pauseWRITE

Pause service via POST /v1/projects/{projectId}/services/{serviceId}/pause. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_portsWRITE

Update service ports via POST /v1/projects/{projectId}/services/{serviceId}/ports. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_restartWRITE

Restart service via POST /v1/projects/{projectId}/services/{serviceId}/restart. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_resumeWRITE

Resume service via POST /v1/projects/{projectId}/services/{serviceId}/resume. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_rollout_configurationWRITE

Update service rollout configuration via POST /v1/projects/{projectId}/services/{serviceId}/rollout/configuration. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_rollout_promoteWRITE

Promote service rollout via POST /v1/projects/{projectId}/services/{serviceId}/rollout/promote. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_rollout_rollbackWRITE

Roll back service rollout via POST /v1/projects/{projectId}/services/{serviceId}/rollout/rollback. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_runtime_environmentWRITE

Edit service runtime environment via POST /v1/projects/{projectId}/services/{serviceId}/runtime-environment. Northflank permission required: Project > Secrets > Services > Update.

project:secrets:services:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_scaleWRITE

Scale service via POST /v1/projects/{projectId}/services/{serviceId}/scale. Northflank permission required: Project > Services > General > Update.

project:services:general:update

northflank_post_v1_projects_by_projectid_services_by_serviceid_snapshotsWRITE

Create container snapshot via POST /v1/projects/{projectId}/services/{serviceId}/snapshots. Northflank permission required: Account > Platform > ContainerSnapshots > Create.

account:platform:containersnapshots:create

northflank_post_v1_projects_by_projectid_services_combinedWRITE

Create combined service via POST /v1/projects/{projectId}/services/combined. Northflank permission required: Project > Services > General > Create.

project:services:general:create

northflank_post_v1_projects_by_projectid_services_deploymentWRITE

Create deployment service via POST /v1/projects/{projectId}/services/deployment. Northflank permission required: Project > Services > General > Create.

project:services:general:create

northflank_post_v1_projects_by_projectid_volumesWRITE

Create volume via POST /v1/projects/{projectId}/volumes. Northflank permission required: Project > Volumes > General > Create.

project:volumes:general:create

northflank_post_v1_projects_by_projectid_volumes_by_volumeidWRITE

Update volume via POST /v1/projects/{projectId}/volumes/{volumeId}. Northflank permission required: Project > Volumes > General > Update.

project:volumes:general:update

northflank_post_v1_projects_by_projectid_volumes_by_volumeid_attachWRITE

Attach volume via POST /v1/projects/{projectId}/volumes/{volumeId}/attach. Northflank permission required: Project > Volumes > General > Update.

project:volumes:general:update

northflank_post_v1_projects_by_projectid_volumes_by_volumeid_backup_schedulesWRITE

Create volume backup schedule via POST /v1/projects/{projectId}/volumes/{volumeId}/backup-schedules. Northflank permission required: Project > Volumes > Backups > Create.

project:volumes:backups:create

northflank_post_v1_projects_by_projectid_volumes_by_volumeid_backupsWRITE

Backup volume via POST /v1/projects/{projectId}/volumes/{volumeId}/backups. Northflank permission required: Project > Volumes > Backups > Create.

project:volumes:backups:create

northflank_post_v1_projects_by_projectid_volumes_by_volumeid_detachWRITE

Detach volume via POST /v1/projects/{projectId}/volumes/{volumeId}/detach. Northflank permission required: Project > Volumes > General > Update.

project:volumes:general:update

northflank_post_v1_projects_by_projectid_workflowsWRITE

Create workflow via POST /v1/projects/{projectId}/workflows. Northflank permission required: Project > Workflows > General > Create.

project:workflows:general:create

northflank_post_v1_projects_by_projectid_workflows_by_workflowidWRITE

Update workflow via POST /v1/projects/{projectId}/workflows/{workflowId}. Northflank permission required: Project > Workflows > General > Update.

project:workflows:general:update

northflank_post_v1_projects_by_projectid_workflows_by_workflowid_runsWRITE

Run workflow via POST /v1/projects/{projectId}/workflows/{workflowId}/runs. Northflank permission required: Project > Workflows > Runs > Start.

project:workflows:runs:start

northflank_post_v1_projects_by_projectid_workflows_by_workflowid_runs_by_runid_abortWRITE

Abort workflow run via POST /v1/projects/{projectId}/workflows/{workflowId}/runs/{runId}/abort. Northflank permission required: Project > Workflows > Runs > Abort.

project:workflows:runs:abort

northflank_post_v1_secretsWRITE

Create global secret via POST /v1/secrets. Northflank permission required: Account > GlobalSecrets > Secrets > Create.

account:globalsecrets:secrets:create

northflank_post_v1_secrets_by_secretid_trigger_dependentsWRITE

Trigger global secret dependents via POST /v1/secrets/{secretId}/trigger-dependents. Northflank permission required: Account > Templates > General > Run.

account:templates:general:run

northflank_post_v1_tagsWRITE

Add tag via POST /v1/tags. Northflank permission required: Account > Platform > Tags > Create.

account:platform:tags:create

northflank_post_v1_teamsWRITE

Create team via POST /v1/teams. Northflank permission required: Organisation > Team > General > Create.

organisation:team:general:create

northflank_post_v1_teams_by_teamid_membersWRITE

Invite team member via POST /v1/teams/{teamId}/members. Northflank permission required: Account > Admin > Members > Manage.

account:admin:members:manage

northflank_post_v1_teams_by_teamid_rolesWRITE

Create team role via POST /v1/teams/{teamId}/roles. Northflank permission required: Account > Admin > Roles > Manage.

account:admin:roles:manage

northflank_post_v1_teams_by_teamid_roles_by_roleid_membersWRITE

Add member to team role via POST /v1/teams/{teamId}/roles/{roleId}/members. Northflank permission required: Account > Admin > Roles > Manage.

account:admin:roles:manage

northflank_post_v1_templatesWRITE

Create template via POST /v1/templates. Northflank permission required: Account > Templates > General > Create.

account:templates:general:create

northflank_post_v1_templates_by_templateidWRITE

Update template via POST /v1/templates/{templateId}. Northflank permission required: Account > Templates > General > Update.

account:templates:general:update

northflank_post_v1_templates_by_templateid_opentofu_import_stateWRITE

Import opentofu state via POST /v1/templates/{templateId}/opentofu/import-state. Northflank permission required: Account > Templates > General > Update.

account:templates:general:update

northflank_post_v1_templates_by_templateid_runsWRITE

Run template via POST /v1/templates/{templateId}/runs. Northflank permission required: Account > Templates > General > Run.

account:templates:general:run

northflank_post_v1_templates_by_templateid_runs_by_templaterunid_abortWRITE

Abort template run via POST /v1/templates/{templateId}/runs/{templateRunId}/abort. Northflank permission required: Account > Templates > Runs > Abort.

account:templates:runs:abort

northflank_post_v1_tokens_by_tokenid_keysWRITE

Rotate a key on an api token via POST /v1/tokens/{tokenId}/keys. Northflank permission required: Account > Admin > ApiTokens > Update. Rotating a key EXPIRES the token's existing keys (immediately unless otherKeysExpiresAt is set). If the rotated token is the one this Agentic Fabriq connection holds, the connection stops working until a new token is pasted.

account:admin:apitokens:update

northflank_post_v1_workload_identitiesWRITE

Create workload identity via POST /v1/workload-identities. Northflank permission required: Account > Cloud > WorkloadIdentities > Create.

account:cloud:workloadidentities:create

northflank_post_v1_workload_identities_by_workloadidentityid_installWRITE

Install workload identity via POST /v1/workload-identities/{workloadIdentityId}/install. Northflank permission required: Account > Cloud > WorkloadIdentities > Update.

account:cloud:workloadidentities:update

northflank_put_v1_cloud_providers_clustersWRITE

Put cluster via PUT /v1/cloud-providers/clusters. Northflank permission required: Account > Cloud > Clusters > Create.

account:cloud:clusters:create

northflank_put_v1_cloud_providers_integrationsWRITE

Put integration via PUT /v1/cloud-providers/integrations. Northflank permission required: Account > Cloud > Integrations > Create.

account:cloud:integrations:create

northflank_put_v1_domains_by_domain_subdomainsWRITE

Put subdomain via PUT /v1/domains/{domain}/subdomains. Northflank permission required: Account > Networking > Subdomains > Update.

account:networking:subdomains:update

northflank_put_v1_egress_ipsWRITE

Put egress ip via PUT /v1/egress-ips. Northflank permission required: Account > Networking > EgressIps > Create.

account:networking:egressips:create

northflank_put_v1_encryption_configurations_by_encryptionconfigurationid_optionsWRITE

Update encryption configuration options via PUT /v1/encryption/configurations/{encryptionConfigurationId}/options. Northflank permission required: Account > Admin > Encryption > Manage.

account:admin:encryption:manage

northflank_put_v1_encryption_configurations_by_encryptionconfigurationid_settingsWRITE

Update encryption configuration settings via PUT /v1/encryption/configurations/{encryptionConfigurationId}/settings. Northflank permission required: Account > Admin > Encryption > Manage.

account:admin:encryption:manage

northflank_put_v1_gradual_rollout_strategiesWRITE

Create or update gradual rollout strategy via PUT /v1/gradual-rollout-strategies. Northflank permission required: Account > Platform > GradualRollouts > Create.

account:platform:gradualrollouts:create

northflank_put_v1_integrations_ssh_identities_by_identityidWRITE

Create or update ssh identity via PUT /v1/integrations/ssh-identities/{identityId}. Northflank permission required: Account > Platform > Ssh > Update.

account:platform:ssh:update

northflank_put_v1_load_balancersWRITE

Put load balancer via PUT /v1/load-balancers. Northflank permission required: Account > Networking > LoadBalancers > Create.

account:networking:loadbalancers:create

northflank_put_v1_org_rolesWRITE

Create or update org role via PUT /v1/org-roles. Northflank permission required: Organisation > Admin > Roles > Manage.

organisation:admin:roles:manage

northflank_put_v1_projectsWRITE

Create or update project via PUT /v1/projects. Northflank permission required: Project > Projects > Manage > Create.

project:projects:manage:create

northflank_put_v1_projects_by_projectid_addonsWRITE

Put addon via PUT /v1/projects/{projectId}/addons. Northflank permission required: Project > Addons > General > Create.

project:addons:general:create

northflank_put_v1_projects_by_projectid_harnessesWRITE

Put harness via PUT /v1/projects/{projectId}/harnesses. Northflank permission required: Project > Harnesses > General > Create.

project:harnesses:general:create

northflank_put_v1_projects_by_projectid_jobsWRITE

Put job via PUT /v1/projects/{projectId}/jobs. Northflank permission required: Project > Jobs > General > Create.

project:jobs:general:create

northflank_put_v1_projects_by_projectid_jobs_cronWRITE

Put cron job via PUT /v1/projects/{projectId}/jobs/cron. Northflank permission required: Project > Jobs > General > Create.

project:jobs:general:create

northflank_put_v1_projects_by_projectid_jobs_manualWRITE

Put manual job via PUT /v1/projects/{projectId}/jobs/manual. Northflank permission required: Project > Jobs > General > Create.

project:jobs:general:create

northflank_put_v1_projects_by_projectid_secretsWRITE

Put project secret via PUT /v1/projects/{projectId}/secrets. Northflank permission required: Project > Secrets > SecretGroups > Create.

project:secrets:secretgroups:create

northflank_put_v1_projects_by_projectid_services_buildWRITE

Put build service via PUT /v1/projects/{projectId}/services/build. Northflank permission required: Project > Services > General > Create.

project:services:general:create

northflank_put_v1_projects_by_projectid_services_combinedWRITE

Put combined service via PUT /v1/projects/{projectId}/services/combined. Northflank permission required: Project > Services > General > Create.

project:services:general:create

northflank_put_v1_projects_by_projectid_services_deploymentWRITE

Put deployment service via PUT /v1/projects/{projectId}/services/deployment. Northflank permission required: Project > Services > General > Create.

project:services:general:create

northflank_put_v1_secretsWRITE

Put global secret via PUT /v1/secrets. Northflank permission required: Account > GlobalSecrets > Secrets > Create.

account:globalsecrets:secrets:create

northflank_put_v1_tagsWRITE

Put tag via PUT /v1/tags. Northflank permission required: Account > Platform > Tags > Update.

account:platform:tags:update

northflank_put_v1_teams_by_teamid_rolesWRITE

Create or update role via PUT /v1/teams/{teamId}/roles. Northflank permission required: Account > Admin > Roles > Manage.

account:admin:roles:manage

Often connected alongside

Put Northflank behind one governed endpoint.

Same permissions, same audit trail, whatever else you connect next.

Get a demo See pricing