Inspect Insights organization inventory

Return database row counts and object metadata for the authenticated organization in this environment.

Outcome

Return database row counts and object metadata for the authenticated organization in this environment.

Before you start

Verify the exact identity, environment and approved organization with topolo whoami before discovering this action.
Inspect the credential-scoped action and canonical resource discovery. Examples use synthetic resources; replace their handles only with separately verified targets.
Validate the complete input and review the action plan. Mutation and organization-inventory actions require explicit confirmation; a successful shape check does not prove a runtime grant.
organizationId must equal the authenticated organization. A workspace context does not narrow this organization-wide operation.

Discover the target

topolo whoami --json
topolo apps get topolo-insights --json
topolo actions get app_topolo_insights.organizations.data.export --detail --json
topolo resources topolo-insights --json

Request

GET /api/organizations/{organizationId}/data · permission privacy:read · confirmation required.

Inspect schemas and test this action in the signed action console. The complete field schema is also available through CLI/MCP action discovery.

Effects and scope

Requires privacy:read, organizationId equal to the authenticated organization, and confirmation despite GET being read-only. A workspace selection does not narrow this organization-wide inventory.
Schema version 2 reports counts for 20 Insights tables and key/size metadata for raw archives and generated reports. It includes no row values, object bytes or collection secrets; it is not a downloadable data backup.
R2 listing follows the environment/organization prefix and paginates internally. Auth identity, Analytics Engine data points, external collectors/copies and other environment prefixes are outside this inventory.
The reported retention text is metadata; these local fixtures do not prove a running deletion schedule or completeness of platform-wide personal-data export.

Interpret the response

Check application topolo-insights, schemaVersion 2, organizationId and exportedAt.
Inspect all 20 stores.database counts plus rawEventArchives/generatedReports key/size arrays. Preserve the inventory for assessment; it cannot restore erased records.

Worked requests and responses

Actual exported Insights worker, all nine migrated D1 scripts and isolated local R2. Auth identity/grants/archive transport, queue delivery and Analytics Engine sink are synthetic; local queue processing is called explicitly. Notify and Nexus are disabled. No live website, provider, paid usage or deployed data erasure is tested. Successful and refused captures below are separate examples. A refused response is a boundary, not a successful task.

permission-refusals · refusal 1 · HTTP 403

Actual exported Insights worker, all nine migrated D1 scripts and isolated local R2. Auth identity/grants/archive transport, queue delivery and Analytics Engine sink are synthetic; local queue processing is called explicitly. Notify and Nexus are disabled. No live website, provider, paid usage or deployed data erasure is tested. Selected synthetic workspace: ws_insights_merge. Fixture handles authorize no live request.

Input · payload.json:

{
  "organizationId": "organization_example"
}

CLI:

topolo actions validate app_topolo_insights.organizations.data.export --data @payload.json --json
topolo actions plan app_topolo_insights.organizations.data.export --data @payload.json --confirm --json

Captured raw Worker result

{
  "success": false,
  "error": {
    "code": "action_permission_required",
    "message": "Action \"organizations.data.export\" requires permission \"privacy:read\".",
    "action": "organizations.data.export"
  }
}

HTTP 403. The credential lacks the declared action permission. Inspect credential-scoped discovery in the same approved context; workspace role does not replace the permission.

CLI/MCP adds its transport envelope; CLI --detail retains the full action result.

privacy · refusal 2 · HTTP 403

Actual exported Insights worker, all nine migrated D1 scripts and isolated local R2. Auth identity/grants/archive transport, queue delivery and Analytics Engine sink are synthetic; local queue processing is called explicitly. Notify and Nexus are disabled. No live website, provider, paid usage or deployed data erasure is tested. Selected synthetic workspace: ws_insights_merge. Fixture handles authorize no live request.

Input · payload.json:

{
  "organizationId": "org_other"
}

CLI:

topolo actions validate app_topolo_insights.organizations.data.export --data @payload.json --json
topolo actions plan app_topolo_insights.organizations.data.export --data @payload.json --confirm --json

Captured raw Worker result

{
  "error": "organization_forbidden"
}

HTTP 403. Use the authenticated organization id discovered through whoami; selecting a workspace does not authorize another organization.

CLI/MCP adds its transport envelope; CLI --detail retains the full action result.

privacy · success 3 · HTTP 200

Actual exported Insights worker, all nine migrated D1 scripts and isolated local R2. Auth identity/grants/archive transport, queue delivery and Analytics Engine sink are synthetic; local queue processing is called explicitly. Notify and Nexus are disabled. No live website, provider, paid usage or deployed data erasure is tested. Selected synthetic workspace: ws_insights_merge. Fixture handles authorize no live request.

Input · payload.json:

{
  "organizationId": "org_insights_fixture"
}

CLI:

topolo actions validate app_topolo_insights.organizations.data.export --data @payload.json --json
topolo actions plan app_topolo_insights.organizations.data.export --data @payload.json --confirm --json
topolo actions call app_topolo_insights.organizations.data.export --data @payload.json --confirm --detail --json

MCP tool and arguments:

{
  "tool": "topolo_call_action",
  "arguments": {
    "actionId": "app_topolo_insights.organizations.data.export",
    "input": {
      "organizationId": "org_insights_fixture"
    },
    "confirm": true
  }
}

Captured raw Worker result

{
  "schemaVersion": 2,
  "application": "topolo-insights",
  "organizationId": "org_insights_fixture",
  "exportedAt": "2026-10-04T08:52:49.420Z",
  "stores": {
    "database": {
      "workspace_settings": 3,
      "sources": 1,
      "collection_sites": 2,
      "collection_site_salts": 0,
      "event_definitions": 3,
      "subject_tokens": 3,
      "saved_dashboards": 1,
      "dashboard_widgets": 1,
      "saved_queries": 0,
      "metric_rollups": 1,
      "funnels": 0,
      "cohorts": 0,
      "alerts": 0,
      "reports": 0,
      "export_jobs": 0,
      "erasure_jobs": 0,
      "ingestion_receipts": 2,
      "ingestion_rejections": 6,
      "analytics_activity": 2,
      "audit_events": 0
    },
    "rawEventArchives": [
      {
        "key": "documentation-fixture/org_insights_fixture/ws_insights_workflow/2026/10/04/08/9ffdb071-19a7-48ad-aae9-71ddc62dfb18.json.gz",
        "size": 411
      },
      {
        "key": "documentation-fixture/org_insights_fixture/ws_insights_workflow/2026/10/04/08/b73db700-3d1e-4393-bb58-bdb0938d0896.json.gz",
        "size": 416
      }
    ],
    "generatedReports": [
      {
        "key": "documentation-fixture/org_insights_fixture/synthetic-report.json",
        "size": 2
      }
    ]
  },
  "retention": {
    "policy": "Workspace retention applies to first-party event archives and derived analytics records.",
    "exclusions": [
      "Topolo Auth organization and workspace identity are platform-owned and are not erased by Insights."
    ]
  }
}

HTTP 200. Check application topolo-insights, schemaVersion 2, organizationId and exportedAt. Inspect all 20 stores.database counts plus rawEventArchives/generatedReports key/size arrays. Preserve the inventory for assessment; it cannot restore erased records.

CLI/MCP adds its transport envelope; CLI --detail retains the full action result.

privacy · success 4 · HTTP 200

Actual exported Insights worker, all nine migrated D1 scripts and isolated local R2. Auth identity/grants/archive transport, queue delivery and Analytics Engine sink are synthetic; local queue processing is called explicitly. Notify and Nexus are disabled. No live website, provider, paid usage or deployed data erasure is tested. Selected synthetic workspace: ws_insights_merge. Fixture handles authorize no live request.

Input · payload.json:

{
  "organizationId": "org_insights_fixture"
}

CLI:

topolo actions validate app_topolo_insights.organizations.data.export --data @payload.json --json
topolo actions plan app_topolo_insights.organizations.data.export --data @payload.json --confirm --json
topolo actions call app_topolo_insights.organizations.data.export --data @payload.json --confirm --detail --json

MCP tool and arguments:

{
  "tool": "topolo_call_action",
  "arguments": {
    "actionId": "app_topolo_insights.organizations.data.export",
    "input": {
      "organizationId": "org_insights_fixture"
    },
    "confirm": true
  }
}

Captured raw Worker result

{
  "schemaVersion": 2,
  "application": "topolo-insights",
  "organizationId": "org_insights_fixture",
  "exportedAt": "2026-10-04T08:52:49.586Z",
  "stores": {
    "database": {
      "workspace_settings": 0,
      "sources": 0,
      "collection_sites": 0,
      "collection_site_salts": 0,
      "event_definitions": 0,
      "subject_tokens": 0,
      "saved_dashboards": 0,
      "dashboard_widgets": 0,
      "saved_queries": 0,
      "metric_rollups": 0,
      "funnels": 0,
      "cohorts": 0,
      "alerts": 0,
      "reports": 0,
      "export_jobs": 0,
      "erasure_jobs": 0,
      "ingestion_receipts": 0,
      "ingestion_rejections": 0,
      "analytics_activity": 0,
      "audit_events": 0
    },
    "rawEventArchives": [],
    "generatedReports": []
  },
  "retention": {
    "policy": "Workspace retention applies to first-party event archives and derived analytics records.",
    "exclusions": [
      "Topolo Auth organization and workspace identity are platform-owned and are not erased by Insights."
    ]
  }
}

CLI/MCP adds its transport envelope; CLI --detail retains the full action result.

Verify the outcome

Check application topolo-insights, schemaVersion 2, organizationId and exportedAt.
Inspect all 20 stores.database counts plus rawEventArchives/generatedReports key/size arrays. Preserve the inventory for assessment; it cannot restore erased records.

Errors and recovery

action_permission_required (HTTP 403): The credential lacks the declared action permission. Inspect credential-scoped discovery in the same approved context; workspace role does not replace the permission.
organization_forbidden (HTTP 403): Use the authenticated organization id discovered through whoami; selecting a workspace does not authorize another organization.

Only observed refusals are listed. This does not promise that external dependencies or every invalid payload have been exhaustively exercised.

Recovery boundary

This action does not change Insights records. Resolve the reported identity, permission, workspace or source problem in the approved context, then repeat the same read. A read result is not permission to modify its resources.

app_topolo_insights.organizations.data.erase: Erase this environment’s Insights organization rows and archive/report objects, then report verification counts.

Inspect Insights organization inventory

Outcome

Before you start

Discover the target

Request

Effects and scope

Interpret the response

Worked requests and responses

permission-refusals · refusal 1 · HTTP 403

privacy · refusal 2 · HTTP 403

privacy · success 3 · HTTP 200

privacy · success 4 · HTTP 200

Verify the outcome

Errors and recovery

Recovery boundary

Related actions

Evidence and limits