TextQL

TextQL RBAC Service API

RBAC service for managing roles, permissions, and access control

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 37

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /textql.rpc.public.rbac.RBACService/ApproveAccessRequest Approve an access request · ApproveAccessRequest #
Ask an LLM
“How do I grant a teammate's pending request to access a chat or dashboard?”
“Can an admin approve access requests through the API?”
Tell an agent
Approve access request {request}.
Grant the pending access request {request}.
POST /textql.rpc.public.rbac.RBACService/AssignPermissionToRole Add a single permission to a role · AssignPermissionToRole #
Ask an LLM
“How do I give a role one extra permission?”
“Can I add a single permission to a custom role without touching the others?”
Tell an agent
Add permission {permission} to role {role}.
Grant role {role} the single permission {permission}.
POST /textql.rpc.public.rbac.RBACService/AssignRoleToMember Assign a role to a member over RPC · AssignRoleToMember #
Ask an LLM
“How do I give a member a role through the RBAC service?”
“Can I make someone an admin by assigning them a role over Connect RPC?”
Tell an agent
Assign role {role} to member {member} via the RBAC service.
Use RBAC RPC to put member {member} in role {role}.
POST /textql.rpc.public.rbac.RBACService/CreateApiKey Create an API key for a member · CreateApiKey #
Ask an LLM
“How do I issue an API key on behalf of another member?”
“Can I create a key that expires and only assumes certain roles?”
Tell an agent
Create an API key named {name} for member {member}.
Issue an API key {name} for member {member} that expires in {expiry_seconds} seconds.
POST /textql.rpc.public.rbac.RBACService/CreatePersonalApiKey Create a personal API key · CreatePersonalApiKey #
Ask an LLM
“How do I create an API key for myself?”
“Can my personal key be limited to just some of my roles?”
Tell an agent
Create a personal API key named {name}.
Make me a personal key {name} that expires after {expiry_seconds} seconds and assumes roles {roles}.
POST /textql.rpc.public.rbac.RBACService/CreateRole Create a role over RPC · Role management #
Ask an LLM
“How do I define a new custom role through the RBAC service?”
“Can I add a description to a role when I create it over Connect RPC?”
Tell an agent
Create an RBAC-service role named {name}.
Via RBAC RPC, create role {name} described as {description}.
POST /textql.rpc.public.rbac.RBACService/CreateServiceAccount Create a service account · CreateServiceAccount #
Ask an LLM
“How do I set up a non-human service account for automation?”
“Can a service account be created with roles already assigned and an owner?”
Tell an agent
Create a service account named {name}.
Create service account {name} owned by member {owner} with roles {roles}.
POST /textql.rpc.public.rbac.RBACService/CreateServiceAccountApiKey Create an API key for a service account · CreateServiceAccountApiKey #
Ask an LLM
“How do I generate credentials for a service account?”
“Can a service account key be set to expire?”
Tell an agent
Create an API key named {name} for service account {service_account}.
Issue a key for service account {service_account} expiring in {expiry_seconds} seconds.
POST /textql.rpc.public.rbac.RBACService/DeleteRole Delete a role · DeleteRole #
Ask an LLM
“How do I remove a custom role I no longer use?”
“Can I delete a role from my organization?”
Tell an agent destructive · confirm first
Delete role {role}.
Remove the custom role {role} from the organization.
POST /textql.rpc.public.rbac.RBACService/DeleteServiceAccount Delete a service account · DeleteServiceAccount #
Ask an LLM
“How do I remove a service account that's no longer needed?”
“Can I decommission an automation account entirely?”
Tell an agent destructive · confirm first
Delete service account {member}.
Decommission the service account with member ID {member}.
POST /textql.rpc.public.rbac.RBACService/GetCurrentMemberRolesAndPermissions Get my roles and permissions · GetCurrentMemberRolesAndPermissions #
Ask an LLM
“Which roles and permissions do I currently hold?”
“What am I allowed to do in this TextQL organization?”
Tell an agent
List my own roles and permissions using Connect protocol version {protocol_version}.
Show every permission granted to me through my roles, timing out after {timeout_ms} ms.
POST /textql.rpc.public.rbac.RBACService/GetEmbedUserApiKey Get an embed user's API key · GetEmbedUserApiKey #
Ask an LLM
“How do I get the API key for an embedded user?”
“Where do I fetch credentials for an embed member?”
Tell an agent
Get the embed user API key for member {member}.
Fetch the embedded-user key belonging to member {member}.
POST /textql.rpc.public.rbac.RBACService/GetMemberRoles Get roles for several members · GetMemberRoles #
Ask an LLM
“Which roles do several members have, looked up in one call?”
“Can I check role assignments for a list of members at once?”
Tell an agent
Get the roles for members {members}.
Look up role assignments in bulk for member IDs {members}.
POST /textql.rpc.public.rbac.RBACService/GetObjectAccess See who has access to an object · GetObjectAccess #
Ask an LLM
“Who has access to a particular dashboard or chat?”
“How do I list the sharing grants on an object?”
Tell an agent
Show who can access {object_type} {object}.
List the access grants on the {object_type} with ID {object}.
POST /textql.rpc.public.rbac.RBACService/GetRole Get a role · GetRole #
Ask an LLM
“How do I look up a role's name, description and model settings?”
“What does a specific role look like?”
Tell an agent
Get role {role}.
Show the details of role {role}.
POST /textql.rpc.public.rbac.RBACService/GetRolePermissions List a role's permissions · GetRolePermissions #
Ask an LLM
“What permissions does a given role include?”
“How do I audit what a role is allowed to do?”
Tell an agent
List the permissions in role {role}.
Show what role {role} grants.
POST /textql.rpc.public.rbac.RBACService/HasObjectAccess Check whether someone can access an object · HasObjectAccess #
Ask an LLM
“Does a particular member have access to a given dashboard?”
“Can I test whether a role can reach a specific object?”
Tell an agent
Check whether member {member} has access to {object_type} {object}.
Tell me if role {role} can access {object_type} {object}.
POST /textql.rpc.public.rbac.RBACService/ListAccessRequests List access requests · ListAccessRequests #
Ask an LLM
“Which access requests are still pending approval?”
“Can I see who has asked for access to a specific object?”
Tell an agent
List access requests with status {status}.
Show the access requests for {object_type} {object}.
POST /textql.rpc.public.rbac.RBACService/ListApiKeys List API keys · ListApiKeys #
Ask an LLM
“Which API keys exist in my organization, including revoked ones?”
“How do I find the keys that belong to a service account?”
Tell an agent
List API keys matching {search_term}.
Show the API keys for service account {service_account}, including revoked keys.
POST /textql.rpc.public.rbac.RBACService/ListPermissions List all available permissions · Permission management #
Ask an LLM
“What permissions exist that I can add to roles?”
“Is there a catalog of every permission in the system?”
Tell an agent
List all available permissions using Connect protocol version {protocol_version}.
Show the full permission catalog, with a {timeout_ms} ms timeout.
POST /textql.rpc.public.rbac.RBACService/ListRoles List roles over RPC · ListRoles #
Ask an LLM
“Which roles are defined, fetched through the RBAC service?”
“Can I enumerate roles with the Connect RPC interface?”
Tell an agent
List RBAC-service roles using Connect protocol version {protocol_version}.
Enumerate roles over RPC with a {timeout_ms} ms timeout.
POST /textql.rpc.public.rbac.RBACService/ListServiceAccounts List service accounts · ListServiceAccounts #
Ask an LLM
“Which service accounts does my organization have?”
“Can I search service accounts by name?”
Tell an agent
List service accounts matching {search_term}.
Show {page_size} service accounts per page.
POST /textql.rpc.public.rbac.RBACService/RejectAccessRequest Reject an access request · SCIM group-mapping migration tooling: one-time rolegroup conversion, internal… #
Ask an LLM
“How do I deny someone's request for access?”
“Can I give a reason when rejecting an access request?”
Tell an agent destructive · confirm first
Reject access request {request}.
Deny access request {request} with reason {reason}.
POST /textql.rpc.public.rbac.RBACService/RemovePermissionFromRole Remove a single permission from a role · RemovePermissionFromRole #
Ask an LLM
“How do I take one permission away from a role?”
“Can I strip a single permission from a custom role?”
Tell an agent destructive · confirm first
Remove permission {permission} from role {role}.
Revoke the single permission {permission} from role {role}.
POST /textql.rpc.public.rbac.RBACService/RemoveRoleFromMember Remove a role from a member over RPC · Member role assignment #
Ask an LLM
“How do I take a role away from someone through the RBAC service?”
“Can I unassign a role from a member over Connect RPC?”
Tell an agent destructive · confirm first
Via the RBAC service, remove role {role} from member {member}.
Unassign role {role} from member {member} using RBAC RPC.
POST /textql.rpc.public.rbac.RBACService/RequestAccess Request access to an object · RequestAccess #
Ask an LLM
“How do I ask for access to a dashboard someone else owns?”
“Can I include a justification when requesting access?”
Tell an agent
Request {access_type} access to {object_type} {object}.
Ask for access to {object_type} {object} with justification {justification}.
POST /textql.rpc.public.rbac.RBACService/RevokeApiKey Revoke an API key · Object sharing and access control #
Ask an LLM
“How do I disable an API key that may be compromised?”
“Can I revoke a key so it stops working immediately?”
Tell an agent destructive · confirm first
Revoke API key {api_key}.
Permanently disable the API key {api_key}.
POST /textql.rpc.public.rbac.RBACService/RevokeObjectAccess Revoke access to an object · RevokeObjectAccess #
Ask an LLM
“How do I stop a member from seeing a dashboard I shared?”
“Can I unshare an object from an entire role?”
Tell an agent destructive · confirm first
Revoke member {member}'s access to {object_type} {object}.
Unshare {object_type} {object} from role {role}.
POST /textql.rpc.public.rbac.RBACService/RotateApiKey Rotate an API key · RotateApiKey #
Ask an LLM
“How do I rotate an API key to get a fresh secret?”
“Can I replace a key's secret without creating a brand new key?”
Tell an agent destructive · confirm first
Rotate API key {api_key}.
Issue a new secret for API key {api_key}.
POST /textql.rpc.public.rbac.RBACService/SetRolePermissions Bulk add and remove a role's permissions · Bulk add/remove permissions on a role in one call, producing a single audit… #
Ask an LLM
“Can I add and remove several permissions on a role in one edit?”
“How do I change a role's permissions with a single audit entry?”
Tell an agent
On role {role}, add permissions {add} and remove permissions {remove}.
Bulk-grant permissions {add} to role {role} in one change.
POST /textql.rpc.public.rbac.RBACService/ShareObject Share an object with a member · Describe what a key is allowed to do #
Ask an LLM
“How do I share a dashboard with a specific colleague?”
“Can a share expire automatically after a date?”
Tell an agent
Share {object_type} {object} with member {member} as {access_type}.
Give member {member} access to {object_type} {object} until {expires_at}.
POST /textql.rpc.public.rbac.RBACService/ShareObjectWithRole Share an object with a role · Group management. Internal only #
Ask an LLM
“Can I share a chat with everyone who holds a certain role?”
“How do I grant a whole role access to one object?”
Tell an agent
Share {object_type} {object} with role {role} as {access_type}.
Grant everyone in role {role} access to {object_type} {object}.
POST /textql.rpc.public.rbac.RBACService/UpdateObjectAccess Change an existing access grant · UpdateObjectAccess #
Ask an LLM
“Can I downgrade someone's existing access on a shared object?”
“How do I extend the expiry of an access grant?”
Tell an agent
Change access grant {access} to {access_type}.
Set access grant {access} to expire at {expires_at}.
POST /textql.rpc.public.rbac.RBACService/UpdateObjectVisibility Make an object public or private · UpdateObjectVisibility #
Ask an LLM
“How do I make a dashboard visible to the whole organization?”
“Can I switch a shared object back to private?”
Tell an agent
Set the visibility of {object_type} {object} to public {is_public}.
Make {object_type} {object} private.
POST /textql.rpc.public.rbac.RBACService/UpdateRole Update a role over RPC · UpdateRole #
Ask an LLM
“Can I restrict which models a role may use through the RBAC service?”
“How do I change a role's default model over Connect RPC?”
Tell an agent
Via RBAC RPC, rename role {role} to {name}.
Set the RBAC-service default model of role {role} to {default_model}.
POST /textql.rpc.public.rbac.RBACService/WhoAmI Identify the current caller · Get current member roles and permissions #
Ask an LLM
“Which member or key am I authenticated as right now?”
“How can I confirm whose identity my API key resolves to?”
Tell an agent
Tell me who I am authenticated as, using Connect protocol version {protocol_version}.
Run a whoami check with a {timeout_ms} ms timeout.

Documentation

📖
Documentation
https://docs.textql.com/api-reference/v2/introduction
📖
APIReference
https://docs.textql.com/api-reference/v2/introduction
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/textql/refs/heads/main/authentication/textql-authentication.yml
📖
RateLimits
https://raw.githubusercontent.com/api-evangelist/textql/refs/heads/main/rate-limits/textql-rate-limits.yml
📖
Documentation
https://docs.textql.com/api-reference/introduction
📖
APIReference
https://docs.textql.com/api-reference/introduction

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/textql/refs/heads/main/openapi/textql-rbac-service-api-openapi.yml

Other Resources

🔗
OAuthScopes
https://raw.githubusercontent.com/api-evangelist/textql/refs/heads/main/scopes/textql-scopes.yml
🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/textql/refs/heads/main/errors/textql-problem-types.yml
🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/textql/refs/heads/main/conventions/textql-conventions.yml
🔗
DataModel
https://raw.githubusercontent.com/api-evangelist/textql/refs/heads/main/data-model/textql-data-model.yml
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/textql/refs/heads/main/asyncapi/textql-webhooks.yml
🔗
Deprecation
https://raw.githubusercontent.com/api-evangelist/textql/refs/heads/main/lifecycle/textql-lifecycle.yml
🔗
Conformance
https://raw.githubusercontent.com/api-evangelist/textql/refs/heads/main/conformance/textql-conformance.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/textql:textql-rbac-service-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

textql-rbac-service-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: TextQL RBAC Service API
  version: 1.0.0
  description: 'TextQL public API. Generated from protobuf service definitions; internal

    endpoints are excluded via google.api.visibility / file_visibility.'
servers:
- url: https://app.textql.com/rpc/public
security:
- apiKey: []
tags:


# --- truncated at 32 KB (111 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/textql/refs/heads/main/openapi/textql-rbac-service-api-openapi.yml