toolaby-app Grants API

The Grants API from toolaby-app — 2 operation(s) for grants.

Operations 3

GET /api/v1/tools/{slug}/grants List grants #
POST /api/v1/tools/{slug}/grants Create a grant #
DELETE /api/v1/tools/{slug}/grants/{id} Revoke a grant #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/toolaby-app:toolaby-app-grants-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

toolaby-app-grants-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Toolaby Grants API
  version: '2026-09-16'
  description: 'Look up whether a person holds a tool, and grant or revoke access. Keys are created under Configure → API and sent as a bearer token. Errors are `{ error: { type, message, param? } }`.'
servers:
- url: /
security:
- bearer: []
tags:
- name: Grants
paths:
  /api/v1/tools/{slug}/grants:
    get:
      tags:
      - Grants
      summary: List grants
      parameters:
      - schema:
          type: string
          pattern: ^[a-z0-9][a-z0-9-]{1,118}$
          example: invoice-grabber
          description: 'The tool id: the full one (acme--invoice-grabber) or the short one the dashboard shows (invoice-grabber).'
        required: true
        description: 'The tool id: the full one (acme--invoice-grabber) or the short one the dashboard shows (invoice-grabber).'
        name: slug
        in: path
      - schema:
          type: string
          format: email
          example: name@example.com
        required: true
        name: email
        in: query
      responses:
        '200':
          description: The address's grants and trials for the tool, newest first.
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/Grant'
                required:
                - data
        '400':
          description: A parameter is missing or wrong; `param` names it.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: No key, a malformed key, or a revoked one.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: 'The workspace''s plan does not allow it: on Hobby, 100 passes at once.'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: No such tool, grant or person in this workspace.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: More than a minute's requests (600 from this key, 1,200 from the workspace's keys, 2,400 from its owner's), or the workspace's 20,000 lookups in a day — or its owner's, across their workspaces.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Toolaby's fault, or it cannot count the workspace's additions just now. Retry.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      operationId: getApiV1ToolsBySlugGrants
      x-operation-id-source: derived
    post:
      tags:
      - Grants
      summary: Create a grant
      description: Grants access without payment. An unknown address gets an account; the grant applies when they sign in.
      parameters:
      - schema:
          type: string
          pattern: ^[a-z0-9][a-z0-9-]{1,118}$
          example: invoice-grabber
          description: 'The tool id: the full one (acme--invoice-grabber) or the short one the dashboard shows (invoice-grabber).'
        required: true
        description: 'The tool id: the full one (acme--invoice-grabber) or the short one the dashboard shows (invoice-grabber).'
        name: slug
        in: path
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/NewGrant'
      responses:
        '201':
          description: The grant.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Grant'
        '400':
          description: A parameter is missing or wrong; `param` names it.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: No key, a malformed key, or a revoked one.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: 'The workspace''s plan does not allow it: on Hobby, 100 passes at once.'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: No such tool, grant or person in this workspace.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: More than a minute's requests — 600 from this key, 1,200 from the workspace's keys together, 2,400 from its owner's — more than 30 pages of customers in a minute from the workspace, a tool's 1,000 grants in a day, or the workspace's 20,000 additions in a day.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Toolaby's fault, or it cannot count the workspace's additions just now. Retry.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      operationId: postApiV1ToolsBySlugGrants
      x-operation-id-source: derived
  /api/v1/tools/{slug}/grants/{id}:
    delete:
      tags:
      - Grants
      summary: Revoke a grant
      description: Ends the grant. The extension stops at its next check, within 15 minutes. Revoking twice succeeds.
      parameters:
      - schema:
          type: string
          pattern: ^[a-z0-9][a-z0-9-]{1,118}$
          example: invoice-grabber
          description: 'The tool id: the full one (acme--invoice-grabber) or the short one the dashboard shows (invoice-grabber).'
        required: true
        description: 'The tool id: the full one (acme--invoice-grabber) or the short one the dashboard shows (invoice-grabber).'
        name: slug
        in: path
      - schema:
          type: string
          format: uuid
        required: true
        name: id
        in: path
      responses:
        '200':
          description: Revoked.
          content:
            application/json:
              schema:
                type: object
                properties:
                  id:
                    type: string
                  tool:
                    type: string
                  revoked_at:
                    type: string
                  live:
                    type: boolean
                    enum:
                    - false
                required:
                - id
                - tool
                - revoked_at
                - live
        '400':
          description: A parameter is missing or wrong; `param` names it.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: No key, a malformed key, or a revoked one.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: 'The workspace''s plan does not allow it: on Hobby, 100 passes at once.'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: No such tool, grant or person in this workspace.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: More than a minute's requests — 600 from this key, 1,200 from the workspace's keys together, 2,400 from its owner's — more than 30 pages of customers in a minute from the workspace, a tool's 1,000 grants in a day, or the workspace's 20,000 additions in a day.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Toolaby's fault, or it cannot count the workspace's additions just now. Retry.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      operationId: deleteApiV1ToolsBySlugGrantsById
      x-operation-id-source: derived
components:
  schemas:
    NewGrant:
      type: object
      properties:
        email:
          type: string
          maxLength: 254
          format: email
          example: name@example.com
        days:
          type: integer
          minimum: 0
          maximum: 3650
          description: '1 to 3650. Absent or 0: until revoked.'
          example: 30
        note:
          type: string
          maxLength: 200
          example: Beta tester
      required:
      - email
    Error:
      type: object
      properties:
        error:
          type: object
          properties:
            type:
              type: string
              enum:
              - authentication_error
              - invalid_request_error
              - idempotency_error
              - plan_limit_error
              - not_found
              - rate_limit_error
              - api_error
            message:
              type: string
            param:
              type: string
          required:
          - type
          - message
      required:
      - error
    Grant:
      type: object
      properties:
        id:
          type: string
          format: uuid
        tool:
          type: string
        email:
          type: string
          format: email
          example: name@example.com
        kind:
          type: string
          enum:
          - grant
          - trial
        starts_at:
          type: string
        ends_at:
          type:
          - string
          - 'null'
          description: When the grant ends by itself. Null for a grant that lasts until revoked.
        revoked_at:
          type:
          - string
          - 'null'
        note:
          type:
          - string
          - 'null'
        created_at:
          type: string
        live:
          type: boolean
          description: Entitles the address now.
      required:
      - id
      - tool
      - email
      - kind
      - starts_at
      - ends_at
      - revoked_at
      - note
      - created_at
      - live
  securitySchemes:
    bearer:
      type: http
      scheme: bearer
      description: 'An API key from the dashboard: wk_test_… or wk_live_….'