How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

IntegrationOS Link API

The live customer link: status, API-key rotation, and the customer-facing connect flow

IntegrationOS Link API is one of 31 APIs that IntegrationOS publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Link. The published artifact set on APIs.io includes an OpenAPI specification, an API reference, a getting-started guide, API documentation, and an engineering blog.

This API exposes 5 operations across 5 paths, and defines 27 schemas. It is described by OpenAPI 3.2.0, at version 5.35.0.

Requests are made against the base URL https://api.withone.ai.

5 operations 5 paths 27 schemas 3 GET2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
5.35.0
Base URL
https://api.withone.ai
Authentication
HTTP Bearer, OAuth 2.0, API Key, API Key, API Key, API Key, API Key
Resource Areas
1

Authentication & Security 7

IntegrationOS Link API declares 7 security schemes for authenticating requests. It accepts HTTP bearer tokens (Bearer). It supports OAuth 2.0 (OAuth2) using the authorizationCode flow, exposing 38 scopes. An API key is passed in the cookie as withone (Session). An API key is passed in the header as X-One-Connection-Key (X-One-Connection-Key). An API key is passed in the header as X-One-Secret (X-One-Secret). An API key is passed in the header as X-One-Connection-Key (X-Pica-Connection-Key). An API key is passed in the header as X-One-Secret (X-Pica-Secret).

Paths & Operations 5

Across 5 paths, the API surfaces 5 operations — 3 GET, 2 POST. Each is listed below with its method, path, parameters, and response codes.

Link 5

The live customer link: status, API-key rotation, and the customer-facing connect flow

GET
/v1/link/connections
List link connections
list_link_connections 3 params → 200400402403404409429500
POST
/v1/link/init
Init link connection
init_link_connection 3 params body → 200400402403404409429500
GET
/v1/link/organizations/{org_id}/{id}
Retrieve link
retrieve_link 2 params → 200400402403404409429500
POST
/v1/link/organizations/{org_id}/{id}/rotate
Rotate link
rotate_link 2 params → 200400402403404409429500
GET
/v1/link/resolve
Resolve link
resolve_link → 200400402403404409429500

Schemas 27

The contract defines 27 schemas that model the data the API accepts and returns. The most detailed are LinkInvitationView (20 properties), PrepareInitParams (6 properties), ErrorResponse (5 properties), BrandingSnapshot (5 properties). Each schema is shown below with its type and property counts.

ConnectionStateType
string
ConnectionType
string
ConnectionIdentityType
string
InvitationActivity
ResolvedConnectorView
ConnectorRule
ConnectionOAuthDefinitionId
string
Prefixed ID with 'connoauthdef' prefix (e.g., 'connoauthdef1C'), also accepts raw integer
LinkInvitationView
object
20 properties 17 required
InitResponse
AllowedActionView
object
2 properties 2 required
ChangeLog
object
SecretKeyEnvironment
string
RotateResponse
object
1 property 1 required
Method
string
ConnectionDefinitionId
string
Prefixed ID with 'conndef' prefix (e.g., 'conndef1C'), also accepts raw integer
PrepareInitParams
object
6 properties
Paginated_ConnectionView
object
4 properties 4 required
LinkInvitationStatusType
string
ConnectedPlatformId
string
Prefixed ID with 'connplf' prefix (e.g., 'connplf1C'), also accepts raw integer
BrandingSnapshot
object
5 properties 3 required
EnvelopeView
object
What a connector rule lets through, as every surface publishes it. Absent means unrestricted, on the way out and on the way back in. A submission that omits me…
2 properties
RetrieveResponse
object
Retrieve response surfaces the invitation alongside the connectedplatforms rows currently activated in the customerproject. Closes the agency's visibility gap…
2 properties 2 required
ResolveResponse
object
2 properties 2 required
OAuthRequestId
string
Prefixed ID with 'oauthreq' prefix (e.g., 'oauthreq1C'), also accepts raw integer
ErrorResponse
object
5 properties 5 required
Paginated_ConnectedPlatformView
object
4 properties 4 required
EventAccessId
string
Prefixed ID with 'evtac' prefix (e.g., 'evtac1C'), also accepts raw integer

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

integration-os-link-api-openapi.yml Raw ↑

Other APIs IntegrationOS publishes across the network.

IntegrationOS Access API
IntegrationOS Actions API
IntegrationOS AI Agent Cron Runs API
IntegrationOS AI Agents API
IntegrationOS AI Runner Secrets API
IntegrationOS AI Runners API
IntegrationOS AI Skills API
IntegrationOS Auth Kit API
IntegrationOS Billing API
IntegrationOS Connection Definitions API
IntegrationOS Connection OAuth Definitions API
IntegrationOS Connections API
Where this information came from

This is an independent, third-party profile of IntegrationOS Link API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.