Skip to content
GET /connection/{id}/tools

What this authenticated account can run: the connector's tools, each flagged `restricted`/`restricted_by` for the caller rather than filtered out — this is where a PARTIALLY restricted connection says so, since the connection row's own `restricted_by` asserts the whole connector is blocked. Contrast `GET /connector/{slug}/tools`, which is the catalog capability with no account behind it. A restricted connector answers 403. Resolves the same access as `GET /connection/{id}`: a connection the caller holds no grant on is `404`, with no oversight opt-in of any kind — a `visibility` query parameter is not accepted.

Path Parameters

idstring
required·

Connection id (conn_…).

Response Body

next_cursorstring,null
prev_cursorstring,null
resultobject[]
descriptionstring
input_schemaRecord<string, any>

JSON Schema for the tool arguments.

methodstring
namestring

Exact tool name — what a toolbox entry's tool_name must contain.

resourcestring
restrictedboolean

True when the caller's restrictions block THIS tool. Blocked tools are returned flagged, never omitted — a shorter list is no signal, because nobody knows the length it should have been. Presence is not permission: execution still refuses it. The connector-level 403 is a separate question and is unchanged.

restricted_bystring,null

Which precedence layer's rule blocks this tool, null when none does. Same field, union and meaning as on connector and connection rows: adds which to restricted's whether and nothing else — no rule id, author, reason or coverage. restricted === (restricted_by !== null) always.

Possible values:
roleusernull
restricted_scopestring,null

"connector" when the tool is refused because its WHOLE connector is restricted for the caller, "tool" for a rule about the tool itself, null exactly when restricted_by is. Decides which ask can succeed: a tool request on a connector restricted whole is refused (409 tool_request_connector_blocked), so ask for the connector. On this listing it is only ever "tool" when set, since a connector restricted whole 403s the route; toolbox entries carry the same field and can say "connector".

Possible values:
connectortoolnull
curl -X GET 'https://api.elaichi.ai/connection/<id>/tools' \
  -H 'Authorization: Bearer $ELAICHI_API_TOKEN' \
  -H 'Content-Type: application/json'
const response = await fetch('https://api.elaichi.ai/connection/<id>/tools', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer ' + process.env.ELAICHI_API_TOKEN,
    'Content-Type': 'application/json',
  },
});

const data = await response.json();
console.log(data);
import os
import requests

url = "https://api.elaichi.ai/connection/<id>/tools"
headers = {
    "Authorization": f"Bearer {os.environ['ELAICHI_API_TOKEN']}",
    "Content-Type": "application/json",
}

response = requests.get(url, headers=headers)
print(response.json())