Pinecone

Return the API keys that belong to a project, with the roles each key carries. Secret values are never returned.

Issue a new API key for a project and return its secret value, which Pinecone shows only in this response.

Retrieve one API key by id, with its name, project and roles. The secret value is not returned.

Permanently revoke an API key so it can no longer authenticate requests.

Rename an API key or replace the set of roles it carries.

Return the organization’s cost usage export jobs, newest first, optionally filtered by status. Download links are omitte…

Start an export of the organization’s cost and usage data covering a range of UTC calendar days.

Retrieve one cost usage export by id, including its status and, once complete, a time-limited download link.

Return the organization’s invites with their status, expiry and processing time.

Invite a person to join the organization by email and set the roles they receive on acceptance.

Retrieve one invite by id, with its status, expiry and the time it was processed.

Revoke a pending invite so the emailed link no longer grants access.

Send the invitation email again for a pending invite and extend how long it stays valid.

Return the organizations the calling service account can administer, with each plan and payment status.

Retrieve one organization by id, including its plan, payment status and support tier.

Permanently delete an organization and every project inside it.

Change the display name of an organization. The plan, payment status and support tier are set by Pinecone and cannot be…

Return every project in the organization the service account belongs to, with each project’s pod ceiling and CMEK settin…

Create a project in the organization to hold indexes, API keys and project-scoped role bindings.

Retrieve one project by id, including its pod ceiling, CMEK setting and owning organization.

Permanently delete a project together with the indexes and API keys it contains.

Rename a project or change its pod ceiling and CMEK enforcement.

Return the role bindings in the organization, filtered by principal, resource scope or role, to audit who holds which ac…

Grant a role to a user, service account, API key or invite at organization or project scope.

Retrieve one role binding by id, showing the principal, the scope and the role it grants.

Revoke a role binding, removing the access it granted to its principal.

Return the organization’s service accounts with their OAuth client IDs. Client secrets are never returned.

Create a service account for machine-to-machine access and return its OAuth client secret, shown only in this response.

Retrieve one service account by id, with its name, OAuth client ID and timestamps.

Permanently delete a service account so its client credentials stop working.

Change the display name of a service account. Its OAuth client ID and role bindings are unaffected.

Issue a new OAuth client secret for a service account and invalidate the previous one immediately.

Return the users who are members of the organization, optionally filtered by email address.

Retrieve one organization member by id, with their name and email address.

Remove a user from the organization, revoking the access their role bindings granted.