Export organization data

Outcome

Reads One-owned organization records with authentication credentials redacted and the global catalog excluded.

Before you start

• Verify the intended environment, authenticated identity and explicitly authorized ownership context.
• Discover the published settings:read permission and any required resource grant.

Discover the target

topolo whoami --json
topolo actions get app_topolo_one.organizations.data.export --detail --json

• organizationId: Exact active authorized organization id. Organization erasure/export covers One’s records in that whole organization.

Request

GET /api/organizations/{organizationId}/data

Inspect and test this action.

Input fields

Inspect nested fields.

Interpret the response

Inspect data.organizationId, all collection counts and the redaction flags. This export does not include another application’s records or Auth credentials.

Inspect the declared output schema and captured variants.

Worked examples

Actual exported One Worker with local Miniflare D1/KV. Authentication, application discovery, checkout, billing and remote widget providers are controlled synthetic responses; outbound access is sealed. No live provider outcome is established.

Save the reviewed input below as payload.json; substitute discovered identifiers and bind credential/resource context separately. CLI:

topolo actions validate app_topolo_one.organizations.data.export --data @payload.json --json
topolo actions plan app_topolo_one.organizations.data.export --data @payload.json --json
topolo actions call app_topolo_one.organizations.data.export --data @payload.json --detail --json

MCP planning and execution use the same reviewed input:

{
  "tool": "topolo_prepare_action",
  "arguments": {
    "actionId": "app_topolo_one.organizations.data.export",
    "input": {
      "organizationId": "org_int_1"
    }
  }
}

{
  "tool": "topolo_read_action",
  "arguments": {
    "actionId": "app_topolo_one.organizations.data.export",
    "input": {
      "organizationId": "org_int_1"
    },
    "detail": true
  }
}

Successful response · HTTP 200

Input · payload.json:

{
  "organizationId": "org_int_1"
}

Captured response:

{
  "data": {
    "organizationId": "org_int_1",
    "exportedAt": "2026-10-06T01:43:23.078Z",
    "authenticationCredentialsIncluded": false,
    "globalCatalogIncluded": false,
    "dashboardLayouts": [
      {
        "id": "dashboard_c601634a-eaba-43fb-bfe6-99ca40878d4c",
        "owner_user_id": "user_int_1",
        "organization_id": "org_int_1",
        "scope_type": "organization",
        "scope_id": "org_int_1",
        "name": "Fixture operations reviewed",
        "description": "",
        "visibility": "private",
        "is_default": 1,
        "widgets_json": "[]",
        "shared_user_ids_json": "[]",
        "created_at": "2026-10-06T01:43:23.046Z",
        "updated_at": "2026-10-06T01:43:23.061Z",
        "purpose": "custom",
        "time_context_json": "{\"range\":\"30d\",\"comparison\":\"none\",\"timezone\":\"UTC\"}",
        "contributions_json": "[]",
        "analyses_json": "[]"
      }
    ],
    "launches": [],
    "pushSubscriptions": [],
    "queuedMessages": [],
    "billingAccounts": [],
    "billingSubscriptions": [],
    "manualSeatDeliveries": [],
    "kv": {
      "userCaches": [
        {
          "key": "user:fixture_export",
          "value": {
            "orgId": "org_int_1",
            "access_token": "[REDACTED]",
            "name": "Fixture user"
          }
        }
      ],
      "widgetCaches": [],
      "workspaceMirrors": [],
      "workspaceChildren": []
    }
  }
}

Inspect data.organizationId, all collection counts and the redaction flags. This export does not include another application’s records or Auth credentials.

Refused request · HTTP 403 · organization_forbidden

Input · payload.json:

{
  "organizationId": "foreign_fixture"
}

Captured response:

{
  "error": "organization_forbidden"
}

Use the organization that belongs to the active authorized credential; never substitute another id.

Refused request · HTTP 401 · auth_error

Input · payload.json:

{
  "organizationId": "org_int_1"
}

Captured response:

{
  "error": "Token validation failed"
}

Authenticate using the required credential type for this action; service-only actions require the registered Auth service identity.

Verify the result

• Inspect data.organizationId, all collection counts and the redaction flags. This export does not include another application’s records or Auth credentials.

Errors and recovery

• organization_forbidden (HTTP 403): Use the organization that belongs to the active authorized credential; never substitute another id.
• auth_error (HTTP 401): Authenticate using the required credential type for this action; service-only actions require the registered Auth service identity.

These are observed local refusals; inspect the raw error body because one SDK code can represent several handler messages. Preserve the request id when available.

Recovery boundary

This read changes no owned data. Store the export only in an approved location.

Evidence

Actual exported One Worker with local Miniflare D1/KV. Authentication, application discovery, checkout, billing and remote widget providers are controlled synthetic responses; outbound access is sealed. No live provider outcome is established.