Granite

Granite Workspaces API

Company workspaces (Business plan): members with roles (owner, admin, member, guest), invitations by email or link, and verified email domains that let colleagues join. Anyone who is not a member gets 404 for everything about a workspace.

GitHub OpenAPI

Operations 44

GET /v1/me/people People in my workspaces #
GET /v1/workspaces Your workspaces #
POST /v1/workspaces Create a workspace #
GET /v1/workspaces/{workspace_id} Get a workspace #
PATCH /v1/workspaces/{workspace_id} Change a workspace #
DELETE /v1/workspaces/{workspace_id} Delete a workspace #
GET /v1/workspaces/{workspace_id}/members Members #
GET /v1/workspaces/{workspace_id}/members/{user_id}/export Download a member's personal vaults #
POST /v1/workspaces/{workspace_id}/members/{user_id}/delete-account Delete a member's account #
PATCH /v1/workspaces/{workspace_id}/members/{user_id} Change a member's role #
DELETE /v1/workspaces/{workspace_id}/members/{user_id} Remove a member #
POST /v1/workspaces/{workspace_id}/transfer Transfer ownership #
POST /v1/workspaces/{workspace_id}/leave Leave a workspace #
POST /v1/workspaces/{workspace_id}/join Join through your email domain (retired) #
GET /v1/workspaces/{workspace_id}/invitations Pending invitations #
POST /v1/workspaces/{workspace_id}/invitations Invite someone #
DELETE /v1/workspaces/{workspace_id}/invitations/{invitation_id} Revoke an invitation #
GET /v1/workspaces/{workspace_id}/domains Claimed email domains #
POST /v1/workspaces/{workspace_id}/domains Claim an email domain #
DELETE /v1/workspaces/{workspace_id}/domains/{domain} Drop a claimed domain #
POST /v1/workspaces/{workspace_id}/domains/{domain}/verify Verify a domain #
GET /v1/me/joinable-workspaces Workspaces you can join (retired) #
POST /v1/invitations/preview What an invitation is for #
POST /v1/invitations/accept Accept an invitation #
GET /v1/workspaces/{workspace_id}/groups Groups #
POST /v1/workspaces/{workspace_id}/groups Create a group #
PATCH /v1/workspaces/{workspace_id}/groups/{group_id} Rename a group #
DELETE /v1/workspaces/{workspace_id}/groups/{group_id} Delete a group #
GET /v1/workspaces/{workspace_id}/groups/{group_id}/members A group's members #
POST /v1/workspaces/{workspace_id}/groups/{group_id}/members Add a member to a group #
DELETE /v1/workspaces/{workspace_id}/groups/{group_id}/members/{user_id} Remove a member from a group #
GET /v1/workspaces/{workspace_id}/audit The workspace's audit log #
GET /v1/workspaces/{workspace_id}/audit/export Download the audit log #
GET /v1/workspaces/{workspace_id}/sso The workspace's single sign-on connection #
PUT /v1/workspaces/{workspace_id}/sso Connect an identity provider (OpenID Connect or SAML 2.0) #
DELETE /v1/workspaces/{workspace_id}/sso Remove single sign-on #
GET /v1/workspaces/{workspace_id}/scim The workspace's SCIM provisioning #
POST /v1/workspaces/{workspace_id}/scim/token Create or replace the SCIM token #
DELETE /v1/workspaces/{workspace_id}/scim/token Turn SCIM provisioning off #
GET /v1/workspaces/{workspace_id}/policy The workspace's security policy #
PUT /v1/workspaces/{workspace_id}/policy Change the workspace's security policy #
GET /v1/workspaces/{workspace_id}/audit/stream Where audit events are streamed #
PUT /v1/workspaces/{workspace_id}/audit/stream Stream audit events to an endpoint #
DELETE /v1/workspaces/{workspace_id}/audit/stream Stop streaming audit events #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/granite-md/openapi/granite-md-workspaces-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/granite-md/json-schema/granite-md-ssoconnection-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/granite-md:granite-md-workspaces-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

granite-md-workspaces-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Granite Workspaces API
  version: 1.0.0
  summary: REST API for Granite clients, bots, and integrations.
  description: 'Conventions (apply to every operation; see PLAN.md 3.2 and 3.6):


    - **Base URL** `https://api.granite.md`. All public operations live under `/v1`.

    After Phase 6 ships, `/v1` changes are additive only.

    - **Errors** use RFC 9457 problem details (`application/problem+json`, schema `Problem`).

    The `type` URI is `https://granite.md/problems/`; `code` refines it for programmatic handling.

    Every response carries `X-Request-ID`, also echoed as `request_id` in problems.

    - **Pagination** is cursor based. List operations accept `cursor` and `limit` and return

    `{ "items": [...], "next_cursor": "..." }`. `next_cursor` is absent on the last page.

    Cursors are opaque; clients must not parse or build them.

    - **Idempotency**: non-idempotent `POST` operations accept an `Idempotency-Key` header

    (1-255 printable ASCII). Repeating a request with the same key and body within 24 hours

    returns the original response; the same key with a different body returns `409` with

    code `idempotency_key_reused`.

    - **IDs** are UUIDv7 strings. **Timestamps** are RFC 3339 in UTC.

    - **Authentication**: `Authorization: Bearer ` with a session access token,

    a personal API token (`gr_pat_...`), or an OAuth access token. Scopes are listed per operation.

    - **Rate limits**: each personal API token may make 600 requests a minute. Over the limit

    the API answers `429` with code `token_rate_limited` and a `Retry-After` header (seconds).'
  license:
    name: Proprietary
    identifier: LicenseRef-Proprietary
servers:
- url: https://api.granite.md
  description: Production
- url: http://localhost:8080
  description: Local development
security:
- bearerAuth: []
tags:


# --- truncated at 32 KB (45 KB total) ---
# Full source: https://artifacts.apis.io/granite-md/openapi/granite-md-workspaces-api-openapi.yml