bazaar_lookup_hashLook up a malware sample on MalwareBazaar by hash.
feodo_botnet_ipsFeodo Tracker active botnet C2 IP list - Emotet, Dridex, TrickBot, QakBot, BumbleBee, Pikabot, IcedID. Companion feed to URLhaus / MalwareBazaar / ThreatFox; same auth key.
threatfox_search_iocLook up an IOC (URL, domain, IP, hash) in ThreatFox.
urlhaus_lookup_hostAll URLhaus entries hosted on a given host or IP.
urlhaus_lookup_urlCheck a URL against URLhaus' malicious-URL database.
aic_artists_searchSearch Art Institute of Chicago artists/agents.
aic_artworkFetch one AIC artwork by ID.
aic_searchSearch Art Institute of Chicago artworks.
airnow_current_by_latlonCurrent observed AQI nearest to a lat/lon.
airnow_current_by_zipCurrent observed AQI at the nearest reporting area for a US ZIP.
airnow_forecast_by_latlonMulti-day AQI forecast for a coordinate.
airnow_forecast_by_zipMulti-day AQI forecast for a US ZIP.
airnow_historical_by_zipHistorical observed AQI at the nearest reporting area for a US ZIP on a specific date.
airtable_add_base_collaboratorAdd a user or group collaborator to a base with a permission level (Enterprise admin).
airtable_add_workspace_collaboratorAdd a user or group collaborator to a workspace (Enterprise admin).
airtable_api_deleteLow-level DELETE against any Airtable Web API path (escape hatch).
airtable_api_getLow-level GET against any Airtable Web API path (escape hatch).
airtable_api_patchLow-level PATCH against any Airtable Web API path (escape hatch).
airtable_api_postLow-level POST against any Airtable Web API path (escape hatch).
airtable_create_audit_log_requestCreate a v1 audit-log export request producing a gzipped file (DEPRECATED).
airtable_create_baseCreate a new base in a workspace with initial tables and fields.
airtable_create_commentCreate a comment on a record, optionally as a threaded reply.
airtable_create_fieldCreate a new field (column) in a table.
airtable_create_recordCreate one record from a JSON object of field values (single-record helper).
airtable_create_recordsCreate one or up to 10 records in a single request.
airtable_create_tableCreate a new table in a base, pre-populating its fields.
airtable_create_webhookCreate a webhook on a base with a change specification.
airtable_create_workspaceCreate a new workspace inside an enterprise account (Enterprise admin).
airtable_create_workspace_inviteCreate an invite link for a workspace (Enterprise admin; body per invite-link model).
airtable_delete_base_collaboratorRemove a collaborator (user or group) from a base (Enterprise admin).
airtable_delete_base_sharePermanently delete a base share link (irreversible) (Enterprise admin).
airtable_delete_commentDelete a comment from a record (non-admins can delete only their own).
airtable_delete_recordDelete a single record by its record ID (hard delete, not recoverable via API).
airtable_delete_recordsDelete up to 10 records in one request.
airtable_delete_viewDelete a view from a base. Requires an Enterprise Scale plan.
airtable_delete_webhookPermanently delete a webhook from a base (its payloads become inaccessible).
airtable_delete_workspaceDelete a workspace by ID (restorable via Trash within retention) (Enterprise admin).
airtable_delete_workspace_collaboratorRemove a collaborator from a workspace (Enterprise admin; blocked for the sole owner).
airtable_delete_workspace_inviteDelete an outstanding workspace invite link (Enterprise admin).
airtable_enable_disable_webhook_notificationsEnable or disable outbound notification pings for a webhook.
airtable_enterprise_create_descendantCreate a descendant enterprise account under a root Enterprise Hub account (Hub admin).
airtable_enterprise_delete_user_by_idPermanently delete a single enterprise user by ID (Enterprise admin).
airtable_enterprise_delete_users_by_emailBulk-delete enterprise users by email (Enterprise admin).
airtable_enterprise_get_change_eventsList enterprise change events (DLP/audit) for a time window, newest first (Enterprise Scale).
airtable_enterprise_get_user_by_idGet a single enterprise user by their user ID (Enterprise).
airtable_enterprise_grant_admin_accessBulk-grant enterprise admin access to one or more users (Enterprise admin).
airtable_enterprise_list_personal_access_tokensList PATs of administered users under a root enterprise account (Enterprise admin; beta path).
airtable_enterprise_list_usersList or batch-get enterprise users by id/email, with filtering and pagination (Enterprise).
airtable_enterprise_logout_userForce-logout an enterprise user, invalidating all active sessions (Enterprise admin).
airtable_enterprise_manage_userUpdate an enterprise user's state, email, or name (Enterprise admin).
airtable_enterprise_manage_user_membershipBulk claim or unclaim enterprise users (managed/unmanaged membership) (Enterprise admin).
airtable_enterprise_move_user_groupsMove up to 100 user groups between Enterprise Hub accounts in the same org (Hub admin).
airtable_enterprise_revoke_admin_accessBulk-revoke directly-assigned enterprise admin access from one or more users (Enterprise admin).
airtable_enterprise_revoke_personal_access_tokensRevoke up to 100 PATs of administered users (Enterprise admin; beta path).
airtable_get_audit_log_eventsList enterprise audit log events (v2), with rich filtering and cursor pagination (Enterprise).
airtable_get_audit_log_requestGet status and download URLs for a v1 audit-log export request (DEPRECATED).
airtable_get_baseGet metadata for a single base, optionally including collaborators and more.
airtable_get_base_schemaRetrieve the full schema of a base: all tables, their fields, and views.
airtable_get_current_userReturn the user ID (and, with user.email:read, the email and OAuth scopes) of the current token.
airtable_get_enterprise_accountRetrieve enterprise account details (Enterprise): workspace IDs, user IDs, and more.
airtable_get_recordRetrieve a single record by its record ID.
airtable_get_user_groupRetrieve a user group by ID (Enterprise). Optionally include its collaborations.
airtable_get_view_metadataRetrieve metadata for a single view by ID.
airtable_get_workspaceRetrieve workspace metadata, optionally including collaborators and invite links.
airtable_list_audit_log_requestsList v1 audit-log export requests (DEPRECATED; prefer airtable_get_audit_log_events).
airtable_list_base_sharesList all share links for a base with their state, type, and access restrictions (Enterprise admin).
airtable_list_basesList all bases the token can access (up to 1000 per page).
airtable_list_block_installationsList all custom extension (block) installations on a base.
airtable_list_commentsList all comments on a record, with pagination.
airtable_list_recordsList records from a table with filtering, sorting, pagination, and field projection.
airtable_list_records_postList records via a POST body to avoid the 16k-char URL limit on big formulas.
airtable_list_tablesList the tables and typed field schema for a base (alias of airtable_get_base_schema).
airtable_list_viewsList all views across all tables in a base.
airtable_list_webhook_payloadsRetrieve accumulated change payloads for a webhook (cursor pagination).
airtable_list_webhooksList all webhooks registered on a base (max 10 per base).
airtable_manage_base_shareEnable or disable an existing base share link (Enterprise admin; no create-share exists).
airtable_move_baseMove a base from one workspace to another within an enterprise account (Enterprise admin).
airtable_move_workspacesMove up to 100 workspaces between Enterprise Hub accounts in the same org (Enterprise admin).
airtable_oauth_authorize_urlBuild the Airtable OAuth 2.0 authorization URL to start user consent (no network call).
airtable_oauth_exchange_tokenExchange an OAuth authorization code for access + refresh tokens.
airtable_oauth_refresh_tokenRefresh an OAuth access token using a refresh token.
airtable_queryQuery records from a table with an optional Airtable-formula filter (simple helper).
airtable_refresh_webhookExtend a webhook's expiration by 7 days from now (only non-expired webhooks).
airtable_replace_recordDestructively replace a single record (PUT), clearing all fields not included.
airtable_replace_recordsDestructively replace up to 10 records (PUT), clearing all unspecified fields.
airtable_scim_create_groupProvision a new managed group via SCIM (Enterprise SSO; displayName must be unique).
airtable_scim_create_userProvision a new managed user via SCIM (Enterprise SSO).
airtable_scim_delete_groupDelete a managed group via SCIM (Enterprise SSO).
airtable_scim_delete_userDeprovision and delete a managed user via SCIM (Enterprise SSO).
airtable_scim_get_groupRetrieve a single managed group by SCIM group ID (Enterprise SSO).
airtable_scim_get_service_provider_configRetrieve SCIM 2.0 service provider metadata (supported features/capabilities) (Enterprise SSO).
airtable_scim_get_userRetrieve a single managed user by Airtable SCIM user ID (Enterprise SSO).
airtable_scim_list_groupsList managed groups as SCIM Group objects (Enterprise SSO).
airtable_scim_list_usersList managed users as SCIM User objects (Enterprise SSO).
airtable_scim_patch_groupPartially update a managed group's attributes/membership via SCIM PatchOp (Enterprise SSO).
airtable_scim_patch_userPartially update a managed user via SCIM PatchOp operations (Enterprise SSO).
airtable_scim_update_groupFully replace a managed group's SCIM attributes including membership (PUT) (Enterprise SSO).
airtable_scim_update_userFully replace a managed user's SCIM attributes (PUT; active=false deprovisions) (Enterprise SSO).
airtable_sync_csv_dataReplace a synced table's contents by pushing CSV to its Sync API endpoint.
airtable_update_base_collaborator_permissionUpdate the permission level of an existing base collaborator (Enterprise admin).
// Catalog generated 2026-09-21 from the live source