Read and update a workspace from another system — so the same people don’t have to be typed in twice.
Read and update a workspace from another system.
There is no CORS. A key is a server-side credential. Calls from a browser will fail by design — that is the enforcement of “never put your key in a browser”, not advice.
A field you can’t see is absent, not blank. If your key lacks a data class, those fields are left out of the response entirely and listed in redacted_classes. An empty value would be a claim about the person; an absent one is a claim about your key.
Machine-readable spec: openapi.json (OpenAPI 3.1.0).