Space-delimited list of scopes. Allowed values: restlets, rest_webservices, suite_analytics, mcp; 'mcp' cannot be combined with others, and scopes must be enabled on the integration record.
statestring
Opaque CSRF token (22-1024 printable ASCII), unique per flow
promptstring
Controls user prompt behavior: 'none' (no prompt; not allowed with mcp), 'login' (account domain only), 'consent', 'login consent', or 'consent login'
client_idstring
Required
Integration record's client ID
redirect_uristring
Required
Redirect URI registered in the integration record (must match exactly)
response_typestring
Must be 'code' for the authorization code grant type
code_challengestring
PKCE code challenge (base64url-encoded SHA256 of the code_verifier). Required for public clients or when scope=mcp.
code_challenge_methodstring
Must be 'S256' when sending a code_challenge
Observable output
data
Required
Data from the action execution
errorstring
Error if any occurred during the execution of the action
successfulboolean
Required
Whether or not the action execution was successful or not