Seqera Platform

Delete action via DELETE /actions/{actionId}. Deletes the pipeline action identified by the given `actionId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete agent via DELETE /agents/{agentId}. Tombstones an agent in a workspace. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete compute environment via DELETE /compute-envs/{computeEnvId}. Deletes the compute environment identified by the given `computeEnvId`. When `force=true`, bypasses active-job checks and SCMS/forge cleanup; only allowed for environments in ERRORED, INVALID, or DELETING status. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete credentials via DELETE /credentials/{credentialsId}. Deletes the credentials identified by the given `credentialsId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete data-link via DELETE /data-links/{dataLinkId}. Deletes the data-link associated with the given `dataLinkId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete data-link content via DELETE /data-links/{dataLinkId}/content. Deletes the content of the data-link associated with the given `dataLinkId`. The data-link itself is preserved. Deletes the files and directories named in the body from the data link's underlying storage -- an object-store delete, not a Seqera-side bookkeeping change. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete several datasets at once via DELETE /datasets. Deletes the dataset identified by the given `datasetId`. Deletes EVERY dataset named in `datasetIds` in one call. The ids are in the request body rather than the path because there is more than one; there is no partial-success report, so name only what you have already described. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete dataset (v2, workspace as a query parameter) via DELETE /datasets/{datasetId}. Deletes the dataset identified by the given `datasetId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete a Managed Identity via DELETE /identities/{managedIdentityId}. Delete a Managed Identity identified by the given ID. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete a user's Managed Credentials record belonging to a Managed Identity via DELETE /identities/{managedIdentityId}/credentials/{managedCredentialsId}. Delete Managed Credentials. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete label via DELETE /labels/{labelId}. Deletes the label identified by the given `labelId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete organization via DELETE /orgs/{orgId}. Deletes the organization identified by the given `orgId`. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Remove an IdP group from the catalog via DELETE /orgs/{orgId}/idp-groups/{groupId}. Removes a manually-entered group from the catalog. SCIM-managed groups cannot be deleted via this endpoint. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete member via DELETE /orgs/{orgId}/members/{memberId}. Deletes the member identified by the given `memberId`. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Leave organization via DELETE /orgs/{orgId}/members/leave. Removes the requesting user from the organization identified by the given `orgId`. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Revoke the active SCIM bearer token via DELETE /orgs/{orgId}/scim/token. Revokes the active SCIM bearer token for the organization. Returns 404 if no active token exists. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete team via DELETE /orgs/{orgId}/teams/{teamId}. Deletes the team identified by the given `teamId`. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete team member via DELETE /orgs/{orgId}/teams/{teamId}/members/{memberId}/delete. Deletes the team member identified by the given `memberId`. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete workspace via DELETE /orgs/{orgId}/workspaces/{workspaceId}. Deletes the workspace identified by the given `workspaceId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Leave workspace via DELETE /orgs/{orgId}/workspaces/{workspaceId}/participants. Removes the requesting user from the given workspace. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete workspace participant via DELETE /orgs/{orgId}/workspaces/{workspaceId}/participants/{participantId}. Deletes the given participant from the given workspace. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete workspace user via DELETE /orgs/{orgId}/workspaces/{workspaceId}/users/{userId}. Deletes the given user (member or collaborator) from the given workspace. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete secret via DELETE /pipeline-secrets/{secretId}. Deletes the pipeline secret identified by the given `secretId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete pipeline via DELETE /pipelines/{pipelineId}. Deletes the pipeline identified by the given `pipelineId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete a role with the given name via DELETE /roles/{roleName}. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete SSH key via DELETE /ssh-keys/{keyId}. Deletes the given SSH public key by its ID. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete Studio via DELETE /studios/{sessionId}. Deletes the Studio associated with the given Studio session ID. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Unstar studio via DELETE /studios/{sessionId}/star. Removes the studio identified by the given `sessionId` from your list of starred studios. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete token via DELETE /tokens/{tokenId}. Deletes the given API access token ID. Deleting the token this Agentic Fabriq connection was given breaks the connection immediately. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete all user tokens via DELETE /tokens/delete-all. Deletes all API access tokens in the user context. Deletes EVERY Platform access token this user holds, including the one this Agentic Fabriq connection was given -- the connection stops working at once, and so does anything else using a token from this account. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete a user entity via DELETE /users/{userId}. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete the Workflow entity with the given ID via DELETE /workflow/{workflowId}. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Unstar workflow via DELETE /workflow/{workflowId}/star. Removes the workflow identified by the given `workflowId` from your list of starred workflows. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

Delete dataset (workspace in the path) via DELETE /workspaces/{workspaceId}/datasets/{datasetId}. Deletes the dataset identified by the given `datasetId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context. DESTRUCTIVE: the resource is removed and there is no undo through this API. Read it first with the matching Describe or List tool if you may need what it held.

List actions via GET /actions. Lists all available actions in a user context, enriched by `attributes`. Append `?workspaceId` to list actions in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe action via GET /actions/{actionId}. Retrieves the details of the action identified by the given `actionId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List action event types via GET /actions/types. Lists the supported event types that trigger a pipeline action. Append `?workspaceId` to list event types in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Validate action name via GET /actions/validate. Confirms the validity of the given action name. Append `?name=<your_action_name>`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List audit logs (v2) via GET /admin/audit-logs-v2. Lists audit logs with token-based pagination, ordered by timestamp (descending). Supports filtering by timestamp range.

Describe a single audit log (v2) via GET /admin/audit-logs-v2/{auditLogId}. Retrieves the pre/post change images associated with a specific audit log V2 record.

Export audit logs (v2) as CSV via GET /admin/audit-logs-v2/export-csv. Exports audit log entries as a CSV file. Supports filtering by timestamp range. Fails if the number of matching logs exceeds a certain maximum.

List agents via GET /agents. Lists non-deleted agents in a workspace. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe agent via GET /agents/{agentId}. Retrieves an agent in a workspace. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List agent runs via GET /agents/runs. Lists background agent runs in a workspace, newest first. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Get agent run status via GET /agents/runs/{agentRunId}/status. Retrieves the current status and chat identifiers for a background agent run in a workspace. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Catalog versions for a single component via GET /catalog/components/{key}/versions. As /versions but scoped to {key}; the same registered component compatibility-filter parameters apply (PF-2).

Component compatibility catalog versions via GET /catalog/versions. Returns catalog versions with servedFrom provenance and observed deploymentVersions. Optionally narrowed to a single component and compatibility-constrained by registered component query parameters plus platform/nextflow/fusion/sched/wave deployment context, for example fusion=2.5 or connect=0.11.2 (comma-lists; AND across, OR within; edge-less params do not constrain). Unknown parameters and malformed expressions return 400; unknown selected components return 404.

List compute environments via GET /compute-envs. Lists all available compute environments in a user context. Append `?workspaceId` to list compute environments in a workspace context, and `?status` to filter by compute environment status. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe compute environment via GET /compute-envs/{computeEnvId}. Retrieves the details of the compute environment identified by the given `computeEnvId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Validate compute environment name via GET /compute-envs/validate. Confirms the validity of the given compute environment name in a user context. Append `?name=<your_ce_name>`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List credentials via GET /credentials. Lists all available credentials in a user context. Append `?workspaceId` to list credentials in a workspace context, and `?platformId` to filter credentials by computing platform. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe credentials via GET /credentials/{credentialsId}. Retrieves the details of the credentials identified by the given `credentialsId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Get encrypted credentials via GET /credentials/{credentialsId}/keys. Retrieves the encrypted keys for the credentials identified by the given `credentialsId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe credential provider setup values via GET /credentials/federation-setup. Returns the labelled values an administrator copies into their cloud provider console to set up a credential of the given provider — for AWS OIDC workload identity: this installation's public address and the subject claims Platform mints. Scope-level rather than per-credential, because these values are needed before a credential can be created. Append `?workspaceId` for a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Validate credential name via GET /credentials/validate. Validates the given credentials name. Append `?name=<your_credential_name>`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List data-links via GET /data-links. Retrieves all available data-links in a user context. Append `?workspaceId={your-workspace-id}` to retrieve data-links in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe data-link via GET /data-links/{dataLinkId}. Retrieves the details of the data-link associated with the given `dataLinkId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Explore data-link via GET /data-links/{dataLinkId}/browse. Retrieves the content of the data-link associated with the given `dataLinkId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Explore data-link path via GET /data-links/{dataLinkId}/browse/{path}. Retrieves the content of the data-link associated with the given `dataLinkId`, at the given `path`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Explore a data-link tree via GET /data-links/{dataLinkId}/browse-tree. Provides a list of all files in the provided paths (including files in sub-paths). `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Generate data-link file download URL via GET /data-links/{dataLinkId}/generate-download-url. Returns a URL to download files from the data-link associated with the given `dataLinkId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Generate download script via GET /data-links/{dataLinkId}/script/download. Creates a script to download files from the data-link associated with the given `dataLinkId`. Append `?dirs` or `?files` to specify a list of files or paths to download within the data-link. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Refresh data-link cache via GET /data-links/cache/refresh. Refreshes the data-link cache for the given `workspaceId` or `credentialsId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List datasets via GET /datasets. Lists all available datasets in a user context. Append `?workspaceId` to list datasets in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe dataset (v2, workspace as a query parameter) via GET /datasets/{datasetId}/metadata. Retrieves the metadata of the dataset identified by the given `datasetId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Preview linked dataset content via GET /datasets/{datasetId}/v/{version}/preview. Fetches a partial preview of the content for a linked dataset version. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List all dataset versions (v2, workspace as a query parameter) via GET /datasets/{datasetId}/versions. Lists all versions of the given `datasetId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List latest dataset versions (v2, workspace as a query parameter) via GET /datasets/versions. Lists the latest version of each dataset in the user context. Append `?workspaceId` to list latest versions in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

GA4GH: List runs via GET /ga4gh/wes/v1/runs. Uses the GA4GH workflow execution service API to list all run records.

GA4GH: Describe run via GET /ga4gh/wes/v1/runs/{run_id}. Uses the GA4GH workflow execution service API to retrieve the details of the run assoiated with the given `run_id`.

GA4GH: Retrieve run status via GET /ga4gh/wes/v1/runs/{run_id}/status. Uses the GA4GH workflow execution service API to retrieve the status of the run associated with the given `run_id`.

GA4GH workflow execution service API info via GET /ga4gh/wes/v1/service-info.

List Managed Identities via GET /identities. List all Managed Identities in an organization.

Describe a Managed Identity via GET /identities/{managedIdentityId}. Describe a Managed Identity in an organization.

List Managed Credentials via GET /identities/{managedIdentityId}/credentials. List Managed Credentials belonging to a Managed Identity.

List labels via GET /labels. Lists all available labels in a user context. Append `?workspaceId` to list labels in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List allowed dynamic labels via GET /labels/dynamic/allowed.

Describe Launch record via GET /launch/{launchId}. Retrieves the details of the launch identified by the given `launchId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe launch datasets via GET /launch/{launchId}/datasets. Retrieves the details of the datasets used in the launch identified by the given `launchId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Get the full Nextflow lineage record from the object store via GET /lineage/{lid}. Always reads the record from the lineage object store (golden source). For the slim denormalized projection, use `/lineage/{lid}/summary` instead. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Data-flow navigation one hop downstream from a lineage record via GET /lineage/{lid}/downstream. Returns records produced / consumed by `{lid}`. Supports optional `type` filter. WorkflowRun is not a node in data-flow navigation — use /search?q=workflow:{lid} instead. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Get the slim index projection for a lineage record via GET /lineage/{lid}/summary. Returns a thin projection ({name, path|sessionId|workflowRun, labels}) served directly from the index — no object-store read. 404 when no index row exists for the LID. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Data-flow navigation one hop upstream from a lineage record via GET /lineage/{lid}/upstream. Returns records that produce / feed into `{lid}`. Supports optional `type` filter. WorkflowRun is not a node in data-flow navigation — use /search?q=workflow:{lid} instead. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Resolve a platform identifier to a lineage LID via GET /lineage/resolve. Resolves a Nextflow run or file path to a lineage LID. Exactly one of sessionId or filePath must be provided. A run is identified by sessionId *and* runName: a resumed run inherits the parent run's sessionId but produces its own lineage record. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Search lineage records across a selectable set of accessible workspaces via GET /lineage/search. Cross-workspace lineage search. The `q` DSL uses a simple set of conventions: whitespace = AND, a comma inside a qualifier = OR, and repeating a qualifier = AND. Filter the lineage index by `type:`, `workflow:`, `task:`, `pipeline:`, `pipelineId:`, `label:`, and/or free-text tokens. Workspace scope is expressed inside the DSL: `workspace:org/name` or the numeric `workspaceId:` alias. Omit both to search every accessible workspace.

List organizations via GET /orgs. Lists all available organizations in a user context.

Describe organization via GET /orgs/{orgId}. Retrieves the details of the organization identified by the given `orgId`.

List organization collaborators via GET /orgs/{orgId}/collaborators. Lists the collaborators of the organization identified by the given `orgId`.

List IdP groups for an organization via GET /orgs/{orgId}/idp-groups. Returns the IdP group catalog for the organization, including both SCIM-pushed and manually entered groups.

List organization members via GET /orgs/{orgId}/members. Lists the members of the organization identified by the given `orgId`.

Describe organization quotas via GET /orgs/{orgId}/quotas. Retrieves the details of the organization quotas identified by the given `orgId`.

View SCIM configuration via GET /orgs/{orgId}/scim/config. Returns the SCIM configuration for the organization, including token metadata, group count, and SSO state. Accessible to all org members (read access).

List organization teams via GET /orgs/{orgId}/teams. Lists all teams in the organization identified by the given `orgId`.

Describe team via GET /orgs/{orgId}/teams/{teamId}. Retrieves the details of the team identified by the given `teamId`.

List team members via GET /orgs/{orgId}/teams/{teamId}/members. Lists the team members associated with the given `teamId`.

List team workspaces via GET /orgs/{orgId}/teams/{teamId}/workspaces. Lists all the workspaces of which the given `teamId` is a participant.

Validate team name via GET /orgs/{orgId}/teams/validate. Confirms the validity of the given team name. Append `?name=<your_team_name>`.

List all user roles and permissions in an organization via GET /orgs/{orgId}/users/{userId}/roles. List all user roles and permissions in an organization; also list the sources of those roles (via team assignment or direct user assignment).

List organization workspaces via GET /orgs/{orgId}/workspaces. Lists the organization workspaces in `orgId` to which the requesting user belongs.

Describe workspace via GET /orgs/{orgId}/workspaces/{workspaceId}. Retrieves the details of the workspace identified by the given `workspaceId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List workspace participants via GET /orgs/{orgId}/workspaces/{workspaceId}/participants. Lists the participants of the workspace identified by the given `workspaceId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List workspace Studios settings via GET /orgs/{orgId}/workspaces/{workspaceId}/settings/studios. Retrieves the Studios settings of the workspace identified by the given `workspaceId`. Takes no body, although Seqera's own contract declares one: the entry carries the request body of the PUT on the same path (`UpdateWorkspaceRequest`, 'Workspace update request') while its own description reads 'Retrieves the Studios settings ...' and does not mark the body required. Use Update workspace Studios settings to change them. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Validate workspace name via GET /orgs/{orgId}/workspaces/validate. Confirms the validity of the given workspace name. Append `?name=<your_workspace_name>`.

Validate organization name via GET /orgs/validate. Confirms the validity of the given organization name. Append `?name=<your_org_name>`.

List pipeline secrets via GET /pipeline-secrets. Lists all available pipeline secrets in a user context. Append `?workspaceId` to list secrets in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe pipeline secret via GET /pipeline-secrets/{secretId}. Retrieves the details of the pipeline secret identified by the given `secretId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Validate secret name via GET /pipeline-secrets/validate. Confirms the validity of the given pipeline secret name in a user context. Append `?name=<your_secret_name>`. Append `?workspaceId` to validate the name in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List pipelines via GET /pipelines. Lists all available pipelines in a user context, enriched by `attributes`. Append `workspaceId` to list pipelines in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe pipeline via GET /pipelines/{pipelineId}. Retrieves the details of the pipeline identified by the given `pipelineId`, enriched by `attributes`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe pipeline launch via GET /pipelines/{pipelineId}/launch. Retrieves the launch details of the pipeline identified by the given `pipelineId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe pipeline schema via GET /pipelines/{pipelineId}/schema. Retrieves the pipeline schema of the pipeline identified by the given `pipelineId`, enriched by `attributes`. `200 - OK` responses include the pipeline schema. `204 - OK` responses indicate a successful request, with no saved schema found for the given pipeline ID. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List pipeline versions via GET /pipelines/{pipelineId}/versions. Lists all available pipeline versions in a user context. Append `workspaceId` to list pipeline versions in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Validate pipeline version name via GET /pipelines/{pipelineId}/versions/validate. Confirms the validity of the given pipeline version `name` in a user context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe remote pipeline repository via GET /pipelines/info. Retrieves the details of a remote Nextflow pipeline Git repository. Append the repository name or full URL with `?name`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List user pipeline repositories via GET /pipelines/repositories. Lists known Nextflow pipeline Git repositories, extracted from existing runs. Append `?workspaceId` to list repositories in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Validate pipeline name via GET /pipelines/validate. Confirms the validity of the given pipeline `name` in a user context. Append `?name=<your_pipeline_name>`. Append `?workspaceId` to validate the name in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Nextflow version catalog via GET /platform/versions. Returns the system-wide catalog of selectable Nextflow versions and the per-run version-selection policy used by the launch form.

List platforms via GET /platforms. Lists all available computing platforms in a user context. Append `?workspaceId` to list platforms in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe platform via GET /platforms/{platformId}. Retrieves the details of the computing platform identified by the given `platformId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List platform regions via GET /platforms/{platformId}/regions. Lists the available regions for the computing platform identified by the given `platformId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List all roles via GET /roles.

Describe role and its permissions fetching by role name via GET /roles/{roleName}.

List all role permissions available in the system via GET /roles/permissions.

Validate if a role name is available within the organization via GET /roles/validate.

General Seqera service features and version. via GET /service-info. Answers 200 with NO credential at all, and with an invalid one -- measured 2026-09-27 against api.cloud.seqera.io with no Authorization header and with a bogus bearer, byte-identical replies. So a 200 here says the deployment is reachable and says NOTHING about this connection's token. The credential probe deliberately uses Describe the current user instead.

List SSH keys via GET /ssh-keys. Retrieves the list of all SSH public keys for the authenticated user.

Describe SSH key via GET /ssh-keys/{keyId}. Retrieves the details of an SSH public key by its ID.

Validate SSH key via GET /ssh-keys/validate/key. Confirms the availability of the given key for a SSH key in the user context.

Validate SSH key name via GET /ssh-keys/validate/name. Confirms the availability of the given name for a SSH key in the user context.

List Studios via GET /studios. Lists all available Studios in a user context. Append `?workspaceId` to list Studios in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe Studio via GET /studios/{sessionId}. Retrieves the details of the Studio session identified by the given `sessionId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List Studio checkpoints via GET /studios/{sessionId}/checkpoints. Retrieves the list of checkpoints for the given Studio session ID, sorted by creation date in descending order. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Get Studio checkpoint via GET /studios/{sessionId}/checkpoints/{checkpointId}. Retrieves the details of the given Studio checkpoint ID. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List compute environments compatible with a Studio via GET /studios/{sessionId}/compatible-ce. Lists the compute environments in the same workspace as the given Studio that are compatible with its compute environment. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Get Studio logs via GET /studios/{sessionId}/log. Retrieves the process log of the latest session of the given Studio, read from the compute environment's log stream (e.g. CloudWatch). Availability depends on the compute provider and its log retention. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List mounted data-links via GET /studios/data-links. Lists the IDs of all available data-links mounted in existing Studios. Append `orgId` or `?workspaceId` to list mounted data-links in an organization or workspace context, respectively. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List available Studio templates via GET /studios/templates. Returns the list of available, configured Studio templates. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Validate Studio name via GET /studios/validate. Confirms the availability of the given name for a Studio in the user context. Append `?workspaceId=` to validate the name in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List tokens via GET /tokens. Retrieves the list of all available API access tokens.

List user workspaces and organizations via GET /user/{userId}/workspaces. Lists the workspaces and organizations to which the user identified by the given `userId` belongs.

Describe current user via GET /user-info. The endpoint this integration's credential probe uses: it is read-only, needs no workspace context and is credential-gated (401 with no header and 401 with a bogus bearer, measured 2026-09-25 and re-confirmed 2026-09-27).

Describe a user entity via GET /users/{userId}.

Check that the user name is valid via GET /users/validate.

List workflows via GET /workflow. Lists all workflow records, enriched with `attributes`. Append `?workspaceId` to list workflow records in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe workflow via GET /workflow/{workflowId}. Retrieves the details of the workflow record associated with the given `workflowId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Download workflow files via GET /workflow/{workflowId}/download. Downloads the workflow files for the Nextflow main job associated with the given `workflowId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Download workflow task files via GET /workflow/{workflowId}/download/{taskId}. Downloads the workflow files of the task identified by the given `taskId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe workflow launch via GET /workflow/{workflowId}/launch. Retrieves the details of the workflow launch associated with the given `workflowId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Get workflow logs via GET /workflow/{workflowId}/log. Retrieves the output logs for the Nextflow main job of the workflow identified by the given `workflowId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Get workflow task logs via GET /workflow/{workflowId}/log/{taskId}. Retrieves the output logs for the workflow task identified by the given `taskId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Get the execution metrics for the given Workflow ID via GET /workflow/{workflowId}/metrics. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Retrieve the execution progress for the given Workflow ID via GET /workflow/{workflowId}/progress. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Check workflow star status via GET /workflow/{workflowId}/star. Confirms whether the given `workflowId` is starred. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe a task entity with the given ID via GET /workflow/{workflowId}/task/{taskId}. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List the tasks for the given Workflow ID and filter parameters via GET /workflow/{workflowId}/tasks. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Summarize the tasks of the given workflow per process, optionally filtered by search via GET /workflow/{workflowId}/tasks/summary. Rolls up matching tasks per process so the run-timeline grouped view stays complete on large runs, where a capped/paged task list could hide processes whose matches fall past the page. Rejected with a 400 when the run's total task count exceeds 20,000, since the search term does not bound the cost of the underlying query -- only run size does. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Generates a random name via GET /workflow/random-name.

Validate run name via GET /workflow/validate. Check that the given run name of a workflow has a valid format. When the session ID is given: check that no other workflow in the system exists with the combination of both elements.

List available datasets via GET /workspaces/{workspaceId}/datasets. Lists all available datasets in the workspace context identified by the given `workspaceId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Describe dataset (workspace in the path) via GET /workspaces/{workspaceId}/datasets/{datasetId}/metadata. Retrieves the metadata of the dataset identified by the given `datasetId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List all dataset versions (workspace in the path) via GET /workspaces/{workspaceId}/datasets/{datasetId}/versions. Lists all versions of the given `datasetId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

List latest dataset versions (workspace in the path) via GET /workspaces/{workspaceId}/datasets/versions. Lists the latest version of each dataset associated with the given `workspaceId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Apply a partial update to the workflow-extension metadata for the given Workflow ID via PATCH /workflow/{workflowId}. Updates only the workflow-extension store; never a core workflow field. Designed to carry workflow-extension attributes generally so future fields reuse this operation. Returns the updated workflow representation. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create action via POST /actions. Creates a new pipeline action. Append `?workspaceId` to associate the action with the given workspace. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Trigger Tower Launch action via POST /actions/{actionId}/launch. Triggers the execution of the Tower Launch action identified by the given `actionId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Pause or resume action via POST /actions/{actionId}/pause. Pauses or resumes the pipeline action identified by the given `actionId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Resolve a schedule description to a cron expression via POST /actions/cron/resolve. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Add labels to actions via POST /actions/labels/add. Adds the given list of labels to the given pipeline actions. Existing labels are preserved. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Replace action labels via POST /actions/labels/apply. Applies the given list of labels to the given pipeline actions. Existing labels are replaced — include labels to be preserved in `labelIds`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Remove labels from actions via POST /actions/labels/remove. Removes the given list of labels from the given pipeline actions. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create agent via POST /agents. Creates an agent in a workspace. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Disable agent via POST /agents/{agentId}/disable. Marks an active agent as inactive. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Enable agent via POST /agents/{agentId}/enable. Marks an inactive agent as active. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Launch agent via POST /agents/launch. Launches a background AI agent run. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create compute environment via POST /compute-envs. Creates a new compute environment. Append `?workspaceId` to create the environment in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Disable compute environment via POST /compute-envs/{computeEnvId}/disable. Disables the compute environment identified by the given `computeEnvId`. A disabled compute environment cannot be used to launch workflows. If the compute environment is primary, it will be automatically unset as primary. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Enable compute environment via POST /compute-envs/{computeEnvId}/enable. Enables the compute environment identified by the given `computeEnvId`. An enabled compute environment can be used to launch workflows. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Define primary compute environment via POST /compute-envs/{computeEnvId}/primary. Selects the compute environment identified by the given `computeEnvId` as the primary compute environment in the given workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Validate a compute environment via POST /compute-envs/{computeEnvId}/validate. Re-runs the pre-flight checks (associated-credential validation and work-directory accessibility) for the compute environment identified by the given `computeEnvId` and persists the outcome to the compute environment and its credential. Intended to recover a compute environment marked `INVALID` after the underlying problem has been fixed. Available only while the pre-flight feature is enabled. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create credentials via POST /credentials. Creates new credentials in a user context. Append `?workspaceId` to create the credentials in a workspace context. For AWS credentials with IAM Role ARN, append `?useExternalId=true` to generate a Platform-managed External ID. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Validate credentials against their cloud provider and report the outcome via POST /credentials/{credentialsId}/validate. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create data-link via POST /data-links. Creates a new data-link in a user context. Append `?workspaceId=` to create the data-link in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Generate data-link file upload URL via POST /data-links/{dataLinkId}/upload. Creates a URL to upload files to the data-link associated with the given `dataLinkId`. For AWS S3 data-links, an additional follow-up request must be sent after your file upload has completed (or encountered an error) to finalize the upload - see the `/upload/finish` endpoint. Requests an upload URL; it does not carry the bytes. Seqera's optional `Origin` request header is a browser CORS header and is not offered as an argument. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Generate data-link file upload URL (to given path) via POST /data-links/{dataLinkId}/upload/{dirPath}. Creates a URL to upload files to the data-link associated with the given `dataLinkId`, specifying a file path (`dirPath`). For AWS S3 data-links, an additional follow-up request must be sent after your file upload has completed (or encountered an error) to finalize the upload - see the `/upload/finish` endpoint. Requests an upload URL for a path inside the link; it does not carry the bytes. Seqera's optional `Origin` request header is a browser CORS header and is not offered as an argument. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Finish data-link file upload via POST /data-links/{dataLinkId}/upload/finish. Finish upload of a data-link file. This is necessary for AWS S3 data-links (`DataLinkProvider=aws`) to finalize a successful file upload, or abort an upload if an error was encountered while uploading a file using an upload URL from the `/upload` endpoint. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Finish data-link file upload to given path via POST /data-links/{dataLinkId}/upload/finish/{dirPath}. Finish upload of a data-link file, specifying a file path (`dirPath`). This is necessary for AWS S3 data-links (`DataLinkProvider=aws`) to finalize a successful file upload, or abort an upload if an error was encountered while uploading a file using an upload URL from the `/upload` endpoint. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create dataset (v2, workspace as a query parameter) via POST /datasets. Creates a new dataset in the user context. Include the dataset file and details in your request body. Append `?workspaceId` to create the dataset in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Link external URL as dataset version via POST /datasets/{datasetId}/link. Creates a new linked DatasetVersion for an existing LINKED dataset by supplying a public HTTP/HTTPS URL. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Disable a dataset version via POST /datasets/{datasetId}/versions/{version}/disable. Disable a dataset version, the dataset version cannot be used for runs, and cannot be enabled again. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Hide dataset via POST /datasets/hide. Hide the given `datasetIds`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Add labels to datasets via POST /datasets/labels/add. Adds the given list of labels to the given datasets. Existing labels are preserved. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Replace datasets labels via POST /datasets/labels/apply. Applies the given list of labels to the given datasets. Existing labels are replaced - include labels to be preserved in `labelIds`. Only simple labels can be attached to datasets. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Remove labels from datasets via POST /datasets/labels/remove. Removes the given list of labels from the given datasets. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Preview content from a URL via POST /datasets/preview-url. Fetches a partial content preview from an arbitrary HTTP/HTTPS URL, without creating a dataset. Intended for the dataset form preview after URL validation. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Show dataset via POST /datasets/show. Show the given `datasetIds`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Validate URL for dataset linking via POST /datasets/validate-url. Validates that a remote dataset URL is accessible and returns a supported CSV/TSV format, without creating a dataset. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

GA4GH: Launch run via POST /ga4gh/wes/v1/runs. Uses the GA4GH workflow execution service API to launch a new run. Runs are launched in the user workspace context by default. To launch in an organization workspace context, include the `workspaceId` in `workflow_engine_parameters`. Runs are launched with the workspace primary compute environment by default. To launch with a different compute environment, include the `computeEnvId` in `workflow_engine_parameters`. Ships as its application/json variant. Seqera also accepts multipart/form-data here for attaching workflow files; that half is not offered, because binary transport has no approved Agentic Fabriq artifact contract on this integration.

GA4GH: Cancel run via POST /ga4gh/wes/v1/runs/{run_id}/cancel. Uses the GA4GH workflow execution service API to cancel the run associated with the given `run_id`.

Create Managed Identity via POST /identities. Create a new Managed Identity in an organization.

Creates Managed Credentials via POST /identities/{managedIdentityId}/credentials. Creates Managed Credentials for the given Managed Identity.

Create label via POST /labels. Creates a new label or returns an existing label based on name/value. By default the operation works in a user context, append `?workspaceId` to create/retrieve a label in a workspace context. Resource labels include `resource: true` and a `value`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create organization via POST /orgs. Creates a new organization.

Manually add an IdP group to the catalog via POST /orgs/{orgId}/idp-groups. Adds a group entry to the IdP group catalog via manual entry. The admin must enter the exact claim value their IdP sends in the groups claim.

Generate a SCIM bearer token via POST /orgs/{orgId}/scim/token. Generates a new SCIM bearer token for the organization. If an active token already exists it is revoked first. The plaintext token is returned only once.

Rotate the SCIM bearer token via POST /orgs/{orgId}/scim/token/rotate. Revokes the current active token and generates a new one. The new plaintext token is returned only once. Rotating the organization's SCIM token invalidates the previous one, so any identity provider still sending it stops provisioning until it is updated. It is not the token this connection holds.

Create team via POST /orgs/{orgId}/teams. Creates a new team in the organization identified by the given `orgId`.

Create team member via POST /orgs/{orgId}/teams/{teamId}/members. Adds a new member to the team identified by the given `teamId`.

Create workspace via POST /orgs/{orgId}/workspaces. Creates a new organization workspace.

Create pipeline schema via POST /pipeline-schemas. Creates a new pipeline schema in a user context. Append `?workspaceId` to create the schema in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create pipeline secret via POST /pipeline-secrets. Creates a new pipeline secret in the user context. Append `?workspaceId` to create the secret in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create pipeline via POST /pipelines. Creates a new pipeline in a user context. Append `?workspaceId` to create the pipeline in a workspace context. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update pipeline version via POST /pipelines/{pipelineId}/versions/{versionId}. Updates the details of the pipeline version identified by the given `pipelineId` and `versionId`. **Note**: If `labelIds` is `null`, empty, or omitted, existing pipeline labels are removed. Include `labelIds: [<label-id-1>,<label-id-2>]` to override existing labels. Labels to be preserved must be included. To append a list of labels to multiple pipelines, use `/pipelines/labels/add`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Add labels to pipelines via POST /pipelines/labels/add. Adds the given list of labels to the given pipelines. Existing labels are preserved. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Replace pipeline labels via POST /pipelines/labels/apply. Applies the given list of labels to the given pipelines. Existing labels are replaced — include labels to be preserved in `labelIds`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Remove labels from pipelines via POST /pipelines/labels/remove. Removes the given list of labels from the given pipelines. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create a role with the given name via POST /roles.

Create SSH key via POST /ssh-keys. Creates a new SSH public key with the details in the given request body.

Create Studio via POST /studios. Creates a new Studio environment, starting it by default. Default behavior can be changed using the query parameter `autoStart=false`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Extend a Studio session's lifespan via POST /studios/{sessionId}/lifespan. Extends the lifespan of the given Studio session ID. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Star studio via POST /studios/{sessionId}/star. Adds the studio identified by the given `sessionId` to your list of starred studios. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create token via POST /tokens. Creates an API access token with the details in the given request body. Mints a NEW Platform access token. Its value is returned once and is a live credential for this account -- treat the result as a secret. It does not change the token this connection holds.

Create workflow execution trace via POST /trace/create. Creates a new workflow execution trace. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update an user entity via POST /users/{userId}.

Cancel workflow via POST /workflow/{workflowId}/cancel. Cancels the workflow execution identified by the given `workflowId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Star workflow via POST /workflow/{workflowId}/star. Adds the workflow identified by the given `workflowId` to your list of starred workflows. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Delete workflows via POST /workflow/delete. Deletes the workflow records identified by the given list of `workflowIds`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Add labels to workflows via POST /workflow/labels/add. Adds the given list of labels to the given workflows. Existing labels are preserved. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Replace workflow labels via POST /workflow/labels/apply. Applies the given list of labels to the given workflows. Existing labels are replaced — include labels to be preserved in `labelIds`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Remove labels from workflows via POST /workflow/labels/remove. Removes the given list of labels from the given workflows. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Launch workflow via POST /workflow/launch. Submits a workflow execution. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create dataset (workspace in the path) via POST /workspaces/{workspaceId}/datasets. Creates a new dataset in the given workspace context. Include the dataset file and details in your request body. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update action via PUT /actions/{actionId}. Updates the details of the action identified by the given `actionId`. The `source` of an existing action cannot be changed. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update agent via PUT /agents/{agentId}. Updates an agent in a workspace. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update compute environment via PUT /compute-envs/{computeEnvId}. Updates the details of the compute environment identified by the given `computeEnvId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update credentials via PUT /credentials/{credentialsId}. Updates the details of the credentials identified by the given `credentialsId`. For AWS credentials with IAM Role ARN, append `?useExternalId=true` to generate a Platform-managed External ID. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update data-link via PUT /data-links/{dataLinkId}. Update the data-link associated with the given `dataLinkId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update dataset (v2, workspace as a query parameter) via PUT /datasets/{datasetId}. Updates the details of the dataset identified by the given `datasetId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update a Managed Identity via PUT /identities/{managedIdentityId}. Update a Managed Identity identified by the given ID.

Updates Managed Credentials via PUT /identities/{managedIdentityId}/credentials/{managedCredentialsId}. Update Managed Credentials for the given Managed Identity.

Update label via PUT /labels/{labelId}. Updates the label identified by the given `labelId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update organization via PUT /orgs/{orgId}. Updates the details of the organization identified by the given `orgId`.

Add organization member via PUT /orgs/{orgId}/members/add. Adds a new member to the organization identified by the given `orgId`.

Update member role via PUT /orgs/{orgId}/members/{memberId}/role. Updates the role of the member identified by the given `memberId`.

Update team via PUT /orgs/{orgId}/teams/{teamId}. Updates the details of the team identified by the given `teamId`.

Update workspace via PUT /orgs/{orgId}/workspaces/{workspaceId}. Updates the details of the workspace identified by the given `workspaceId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Create workspace participant via PUT /orgs/{orgId}/workspaces/{workspaceId}/participants/add. Adds a new participant to the workspace identified by the given `workspaceId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update participant role via PUT /orgs/{orgId}/workspaces/{workspaceId}/participants/{participantId}/role. Updates the role of the given participant in the given workspace. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update workspace Studios settings via PUT /orgs/{orgId}/workspaces/{workspaceId}/settings/studios. Updates the Studios settings of the workspace identified by the given `workspaceId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update secret via PUT /pipeline-secrets/{secretId}. Updates the pipeline secret identified by the given `secretId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update pipeline (default version) via PUT /pipelines/{pipelineId}. Updates the details of the pipeline identified by the given `pipelineId`. **Note**: If `labelIds` is `null`, empty, or omitted, existing pipeline labels are removed. Include `labelIds: [<label-id-1>,<label-id-2>]` to override existing labels. Labels to be preserved must be included. To append a list of labels to multiple pipelines, use `/pipelines/labels/add`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update pipeline version name and default flag via PUT /pipelines/{pipelineId}/versions/{versionId}/manage. Updates a pipeline version's name and/or marks it as the default version. When setting a version as default, any previously default version is automatically unset. Version names cannot be changed if the version is already referenced by workflow runs. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update a role with the given name via PUT /roles/{roleName}.

Update a Studio via PUT /studios/{sessionId}. Updates the given Studio session ID. Can only update non-running Studios. The compute environment can be changed by setting `computeEnvId` to a CE compatible with the Studio's current one; see `GET /studios/{sessionId}/compatible-ce`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update Studio checkpoint name via PUT /studios/{sessionId}/checkpoints/{checkpointId}. Updates the name of the given Studio checkpoint ID. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Starts a Studio via PUT /studios/{sessionId}/start. Starts the given Studio session ID. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Stop Studio via PUT /studios/{sessionId}/stop. Stops the given Studio session ID. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Signal workflow execution start via PUT /trace/{workflowId}/begin. Updates the workflow execution trace for the given `workflowId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Signal workflow execution completion via PUT /trace/{workflowId}/complete. Updates the workflow execution trace for the given `workflowId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Signal workflow execution heartbeat via PUT /trace/{workflowId}/heartbeat. Update the workflow execution trace heartbeat for the given `workflowId` to signal that execution is ongoing. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Store workflow task execution metadata via PUT /trace/{workflowId}/progress. Store the execution metadata for one or more tasks in the given `workflowId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.

Update dataset (workspace in the path) via PUT /workspaces/{workspaceId}/datasets/{datasetId}. Updates the details of the dataset identified by the given `datasetId`. `workspaceId` is Seqera's numeric workspace id (see List workspaces); omitting it addresses the token owner's personal context.