- Create a new Feature Flags SDK API key for an environment. Use Server keys for backend SDKs and Client keys for frontend or mobile SDKs.
- Retrieve all Feature Flags SDK API keys for a specific environment, including their type, name, and metadata.
- Retrieve detailed metadata for a specific SDK API key, including its type, name, and expiration status.
- Delete an SDK API key, immediately revoking access for all Feature Flag SDKs that use it.
- Create a new environment in a project to serve as a deployment target for feature flag targeting and release management.
- Update an existing environment by replacing all fields. Provide complete values for every field, not just the ones being changed, as this is a full replacement operation.
- Retrieve a paginated list of all environments in a project, providing the environment identifiers needed for feature flag and deployment actions.
- Retrieve full details for a specific environment by its identifier, including name, type, tags, and configuration metadata.
- Delete an environment from a project, permanently removing all environment-specific feature flag states, targeting rules, and variation maps.
- Retrieve all feature flags for a project with optional filtering by name, kind, status, and pagination support.
- Create a new feature flag in a project with specified variations, kind, and default serving behavior.
- Retrieve a single feature flag by identifier with full configuration details including variations, targeting rules, and environment state.
- Modify a feature flag using instruction-based patching to toggle state, update targeting rules, add targets to variations, or change serving configuration.
- Delete a feature flag by identifier, removing it from the project and all SDK evaluations.
- List all feature flags that depend on the specified flag as a prerequisite.
- Restore a previously deleted feature flag back to active state with its original configuration.
- List the attribute schema of an FME traffic type.
- Create or fully overwrite an attribute on an FME traffic type.
- Create or replace several attributes on an FME traffic type in one call.
- Partially update an attribute on an FME traffic type.
- Delete an attribute from an FME traffic type.
- List FME change requests for a project or environment.
- Get one FME change request by ID.
- Submit an FME change request for a feature flag or segment.
- Approve, reject or withdraw an FME change request.
- List the FME environments in a project.
- Create an FME environment in a project.
- Update an FME environment with JSON Patch operations.
- Delete an FME environment from a project.
- Create a server-side or client-side SDK API key for an FME environment.
- Revoke an FME SDK API key.
- List the FME feature flags in a project.
- Get one FME feature flag by name.
- Create an FME feature flag for a traffic type.
- Update an FME feature flag description, tags or rollout status with JSON Patch operations.
- Replace the tags on an FME feature flag.
- Archive an FME feature flag.
- Restore an archived FME feature flag.
- Delete an FME feature flag from all environments.
- List the feature flag definitions (targeting) in an FME environment.
- Get the definition (targeting) of one FME feature flag in an environment.
- Configure an FME feature flag in an environment.
- Fully replace the definition of an FME feature flag in an environment.
- Update the definition of an FME feature flag in an environment with JSON Patch operations.
- Remove an FME feature flag definition from an environment.
- Kill an FME feature flag in an environment.
- Restore a killed FME feature flag in an environment.
- Reseed the bucketing of an FME feature flag in an environment.
- List the flag sets in an FME project.
- Get one FME flag set by ID.
- Create a flag set in an FME project.
- Delete an FME flag set.
- Create or overwrite several identities (keys and attribute values) in an FME environment.
- Create or fully overwrite one identity in an FME environment.
- Update some attribute values of one identity in an FME environment.
- Delete one identity from an FME environment.
- List the large segments in an FME project.
- List the large segments enabled in an FME environment.
- Get one FME large segment by name.
- Create a large segment for a traffic type.
- Enable a large segment in an FME environment.
- Deactivate a large segment in an FME environment.
- Delete a large segment from an FME project.
- List FME projects (formerly workspaces) with their FME workspace IDs.
- List the rollout statuses available in an FME project.
- List the rule-based segments in an FME project.
- List the rule-based segment definitions in an FME environment.
- Get one FME rule-based segment by name.
- Create a rule-based segment for a traffic type.
- Enable a rule-based segment in an FME environment.
- Set the rules and exclusions of a rule-based segment in an FME environment.
- Remove a rule-based segment definition from an FME environment.
- Delete a rule-based segment from an FME project.
- List the standard segments in an FME project.
- List the standard segments enabled in an FME environment.
- Create a standard segment for a traffic type.
- Enable a standard segment in an FME environment.
- Deactivate a standard segment in an FME environment.
- Delete a standard segment from an FME project.
- List the keys in a standard segment in an FME environment.
- Add keys to a standard segment in an FME environment.
- Remove keys from a standard segment in an FME environment.
- List the traffic types defined in an FME project.
- Create a traffic type in an FME project.
- Delete an FME traffic type.
- Retrieve information about the API key owner mapped to the StackOne IAM credentials schema.
- List Harness user groups mapped to the StackOne IAM unified group schema.
- Retrieve a single Harness user group by identifier, mapped to the StackOne IAM unified group schema.
- List Harness organizations within the account, mapped to the StackOne IAM unified organization schema.
- Retrieve a single Harness organization by identifier, mapped to the StackOne IAM unified organization schema.
- List Harness roles (both built-in and custom) mapped to the StackOne IAM unified role schema.
- Retrieve a single Harness role by identifier, mapped to the StackOne IAM unified role schema.
- List Harness users mapped to the StackOne IAM unified user schema, followed by account-level pending invitations with status pending. Returns each user's UUID, email, name, status, and MFA flag; when expand contains "roles", role assignments include both roles assigned directly to the user and roles inherited through user-group membership.
- Retrieve a single Harness user by UUID, or a pending invitation by the invitation_ id unified_list_users returns, mapped to the StackOne IAM unified user schema. When expand contains "roles", role assignments include both roles assigned directly to the user and roles inherited through user-group membership.
- Retrieve a paginated list of pending invitations at account, organization, or project scope, showing who has been invited but has not yet accepted.
- Retrieve a single pending invitation by its invite ID, returning the full invite details including email, role bindings, invite type, and approval status.
- Retrieve a paginated list of pending (not yet accepted) user invitations with aggregated role assignment details, with optional filtering by name, email, role, and resource group.
- Resend the invitation email for a pending invite that has not yet been accepted, optionally updating the invite's role bindings and user group assignments.
- Delete a pending invitation by its identifier, permanently canceling the invitation so the invitee can no longer accept it.
- Retrieve a paginated list of all organizations accessible under the authenticated account, with optional filtering by identifiers, search term, and sort order.
- Retrieve the full details of a single organization by its unique identifier, including name, description, tags, and metadata.
- Create a new organization in the Harness account with a unique identifier, name, and optional description and tags.
- Replace all fields of an existing organization. Provide values for every field, not just the fields being changed, as this performs a full replacement.
- Permanently delete an organization and all its contained resources, including projects, feature flags, targets, and segments.
- Create a new project within an organization to serve as a container for feature flags, targets, segments, and other module resources.
- Update an existing project by replacing all fields. Provide the complete project object with every field, not just the changed ones.
- Retrieve a paginated list of all projects the authenticated user is a member of, with optional filtering by organization, module type, and search term.
- Retrieve the full details of a specific project by its unique identifier, including enabled modules, color, and tags.
- Permanently delete a project and all its contained resources including feature flags, targets, segments, and environments. This action is irreversible.
- Retrieve a paginated list of role assignments at a given scope, showing which principals (users, user groups, service accounts) hold which roles on which resource groups.
- Retrieve the full details of a single role assignment by its identifier, including the assigned role, resource group, principal, scope, and management flags.
- Assign a role to a principal (user, user group, or service account) within a resource group at a specific scope, granting that principal the role's permissions.
- Remove a role assignment, revoking the assigned role's permissions from the principal (user, user group, or service account) at the specified scope.
- Retrieve a paginated list of roles with their permissions, scope levels, and assignment counts, with optional filtering by name and management type.
- Retrieve the full details of a single role including its permission identifiers, allowed scope levels, and management metadata.
- Create a custom role with specific permissions and allowed scope levels for fine-grained access control.
- Update a role's name, permissions, scope levels, description, and tags via full replacement. Requires all fields to be provided.
- Permanently delete a role by its identifier. Returns the deleted role object on success.
- Create a new target group (segment) with explicit target inclusion/exclusion and rule-based targeting clauses for a given project and environment.
- Modify a target group using instruction-based patch operations to add or remove included and excluded targets.
- Retrieve all target groups (segments) for an environment with optional filtering by name or identifier and configurable sorting and pagination.
- Retrieve full details for a specific target group including its included/excluded targets, targeting rules, and version metadata.
- Delete a target group (segment) permanently from the specified environment, removing all target associations.
- Retrieve all feature flags that reference the specified target group in their targeting rules.
- Retrieve service accounts at account, organization, or project scope, resolving a service account's name or email to the identifier required by role assignment actions.
- Create a service account at account, organization, or project scope, usable as a SERVICE_ACCOUNT principal in role assignments.
- Delete a service account by identifier, removing its role assignments and API keys.
- Retrieve a single service account by identifier, including its token count and role assignment metadata.
- Update a service account's name, email, description, or tags by replacing the full object.
- Create a new tag for organizing and categorizing feature flags within a project. Tags are auto-created when attached to feature flags, but this action lets you pre-define them.
- Retrieve all tags available for categorizing feature flags in a given project and environment. Returns one row per tag-to-flag association, so entries repeat; de-duplicate client-side.
- Retrieve a specific tag by identifier. Returns only the tag's identifier and name; to find which flags use the tag, call list_features with the tags filter.
- Delete a tag and automatically remove it from all feature flags it was associated with.
- Create a new feature flag target representing a user, service, or entity for flag evaluation in a specific environment.
- Perform a full replacement update of a target, replacing its name, attributes, and all associations.
- Retrieve a paginated list of all feature flag targets for a specific environment, with optional filtering and sorting.
- Retrieve the full details for a specific target, including its custom attributes and associated segments.
- Permanently remove a target from the environment, stopping all feature flag evaluations for this target.
- Retrieve all target groups (segments) that a specific target belongs to, including both explicit and rule-based memberships.
- Retrieve a paginated list of user groups at account, organization, or project scope, with optional filtering by name, scope inheritance, and SSO group linkage.
- Retrieve the full details of a single user group by its identifier, including the member user list, notification configurations, and SSO linking status.
- Create a new user group at account, organization, or project scope with optional initial members, notification channels, and SSO linking.
- Update an existing user group via full replacement (PUT). All fields must be provided, not just the changed ones -- omitted optional fields will be cleared.
- Permanently delete a user group by its identifier. Member users are not deleted from the account.
- Add a single user to an existing user group by their user UUID and group identifier. The user inherits all role assignments associated with the group.
- Remove a single user from a user group by their user UUID and group identifier. The user's individual role assignments are not affected.
- Retrieve a paginated list of users in the account, organization, or project scope, with optional filtering by name, email, specific UUIDs, and parent scope inheritance.
- Retrieve users enriched with their role assignment metadata, including role names, resource groups, scope levels, and management flags, with optional filtering by role or resource group.
- Retrieve a single user's full profile and role assignments by UUID, including every role binding with its resource group, scope level, and management flags.
- Invite one or more users to the account, organization, or project by email address, with optional role bindings and user group assignments at time of invitation.
- Update the authenticated caller's user profile by replacing the full user object. Call get_user first, then resend all fields.
- Remove a user from the specified account, organization, or project scope, revoking all their role assignments and access at that scope without deleting their Harness account.
No matching actions