DATA · DATA & ANALYTICS
KPIs, their data entries, and groups from that account’s own dashboards.
Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.
Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.
Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
simplekpi_delete_groups_by_group_id_items_by_idWRITEDelete group item via DELETE /groups/{group_id}/items/{id}
simplekpi_delete_groups_by_idWRITEDelete group via DELETE /groups/{id}
simplekpi_delete_kpicategories_by_category_id_kpis_by_idWRITEDelete kpi in category via DELETE /kpicategories/{category_id}/kpis/{id}
simplekpi_delete_kpicategories_by_idWRITEDelete kpi category via DELETE /kpicategories/{id}
simplekpi_delete_kpientries_by_idWRITEDelete kpi entry via DELETE /kpientries/{id}
simplekpi_delete_kpis_by_idWRITEDelete kpi via DELETE /kpis/{id}
simplekpi_delete_kpiunits_by_idWRITEDelete kpi unit via DELETE /kpiunits/{id}
simplekpi_delete_users_by_idWRITEDelete user via DELETE /users/{id}
simplekpi_delete_users_by_user_id_groupitems_by_idWRITEDelete user group item via DELETE /users/{user_id}/groupitems/{id}
simplekpi_delete_users_by_user_id_kpis_by_idWRITEDelete user kpi via DELETE /users/{user_id}/kpis/{id}
simplekpi_get_groupsREADGet all groups via GET /groups
simplekpi_get_groups_by_group_id_itemsREADGet all group items via GET /groups/{group_id}/items
simplekpi_get_groups_by_group_id_items_by_idREADGet group item via GET /groups/{group_id}/items/{id}
simplekpi_get_groups_by_idREADGet group via GET /groups/{id}
simplekpi_get_kpicategoriesREADGet all kpi categories via GET /kpicategories
simplekpi_get_kpicategories_by_category_id_kpisREADGet all kpis in category via GET /kpicategories/{category_id}/kpis
simplekpi_get_kpicategories_by_category_id_kpis_by_idREADGet kpi in category via GET /kpicategories/{category_id}/kpis/{id}
simplekpi_get_kpicategories_by_idREADGet kpi category via GET /kpicategories/{id}
simplekpi_get_kpientriesREADGet all kpi entries via GET /kpientries
simplekpi_get_kpientries_by_idREADGet kpi entry via GET /kpientries/{id}
simplekpi_get_kpifrequenciesREADGet all kpi frequencies via GET /kpifrequencies
simplekpi_get_kpifrequencies_by_idREADGet kpi frequency via GET /kpifrequencies/{id}
simplekpi_get_kpiiconsREADGet all kpi icons via GET /kpiicons
simplekpi_get_kpiicons_by_idREADGet kpi icon via GET /kpiicons/{id}
simplekpi_get_kpisREADGet all kpis via GET /kpis
simplekpi_get_kpis_by_idREADGet kpi via GET /kpis/{id}
simplekpi_get_kpiunitsREADGet all kpi units via GET /kpiunits
simplekpi_get_kpiunits_by_idREADGet kpi unit via GET /kpiunits/{id}
simplekpi_get_reports_alldataentriesREADGet all data entries via GET /reports/AllDataEntries
simplekpi_get_usersREADGet all users via GET /users
simplekpi_get_users_by_idREADGet user via GET /users/{id}
simplekpi_get_users_by_user_id_groupitemsREADGet all user group items via GET /users/{user_id}/groupitems
simplekpi_get_users_by_user_id_groupitems_by_idREADGet user group item via GET /users/{user_id}/groupitems/{id}
simplekpi_get_users_by_user_id_kpisREADGet all user kpis via GET /users/{user_id}/kpis
simplekpi_get_users_by_user_id_kpis_by_idREADGet user kpi via GET /users/{user_id}/kpis/{id}
simplekpi_post_groupsWRITEAdd group via POST /groups
simplekpi_post_groups_by_group_id_itemsWRITEAdd group item via POST /groups/{group_id}/items
simplekpi_post_kpicategoriesWRITEAdd kpi category via POST /kpicategories
simplekpi_post_kpicategories_by_category_id_kpisWRITEAdd kpi to category via POST /kpicategories/{category_id}/kpis
simplekpi_post_kpientriesWRITEAdd kpi entry via POST /kpientries
simplekpi_post_kpientries_listWRITEAdd update kpi entry list via POST /kpientries/list
simplekpi_post_kpisWRITEAdd kpi via POST /kpis
simplekpi_post_kpiunitsWRITEAdd kpi unit via POST /kpiunits
simplekpi_post_usersWRITEAdd user via POST /users
simplekpi_post_users_by_user_id_groupitemsWRITEAdd user group item via POST /users/{user_id}/groupitems
simplekpi_post_users_by_user_id_kpisWRITEAdd user kpi via POST /users/{user_id}/kpis
simplekpi_put_groups_by_group_id_items_by_idWRITEUpdate group item via PUT /groups/{group_id}/items/{id}
simplekpi_put_groups_by_idWRITEUpdate group via PUT /groups/{id}
simplekpi_put_kpicategories_by_category_id_kpis_by_idWRITEUpdate kpi in category via PUT /kpicategories/{category_id}/kpis/{id}
simplekpi_put_kpicategories_by_idWRITEUpdate kpi category via PUT /kpicategories/{id}
simplekpi_put_kpientries_by_idWRITEUpdate kpi entry via PUT /kpientries/{id}
simplekpi_put_kpis_by_idWRITEUpdate kpi via PUT /kpis/{id}
simplekpi_put_kpiunits_by_idWRITEUpdate kpi unit via PUT /kpiunits/{id}
simplekpi_put_users_by_idWRITEUpdate user via PUT /users/{id}
simplekpi_put_users_by_user_id_kpis_by_idWRITEUpdate user kpi via PUT /users/{user_id}/kpis/{id}
Put SimpleKPI behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.