- accountCanBeDeletedWhether the grace period of deletion has ended and account can be deleted
- accountCanBeDeletedAtTimestamp when the account can be deleted.
- Given the space and the labels, returns the list of autoattachment targets. The list is not exhaustive, it only contains the 100 most recently updated targets.
- availableUserGroupsReturns all user groups that are reported by the identity provider when users log in to Spacelift.
- billedExternallyWhether the account is billed externally (not through Stripe)
- defaultPrivateWorkerPoolRunnerImageReturn default private worker pool runner image for the account
- defaultPublicWorkerPoolRunnerImageReturn default public worker pool runner image for the account
- hasSSOReturns true if the account has SSO enabled.
- idID of the account.
- integrationsCountIntegrationsCount!Returns counts of different types of integrations in the account.
- Returns true if the generic form is completed
- markedForDeletionTells if the account is marked for deletion.
- nameName of the account.
- notificationCountTotal number of new Notifications.
- oauthRedirectAllowedHostsReturns the account's custom OAuth2 redirect host allowlist
- onTrialUntilIf the account is on the trial period, this indicates the end of it.
- outgoingIPAddressesList of Spacelift's outgoing addresses.
- securityEmailReturns security email for the account
- spaceliftAwsAccountIdReturns the AWS account used by Spacelift during role assumption. This can be used for generating AssumeRole policies.
- typeAccountTypeType of the GitHub account.
- viewerUserCurrent user, if any.
- acceptedTermsAndConditionsAI@deprecated use spaceliftIntelligenceTermsAccepted
- Returns all AI integrations for the current account.
- aiIntegrations[AIIntegration!]!Returns all AI integrations for the current account.
- Returns available AI providers. If provider is specified, returns models for that provider only. If provider is not specified, returns all providers with their available models.
- Returns live Bedrock inference profiles for the given AWS integration. Each entry's id is the inference profile ID; name is the AWS-provided profile name. @deprecated use availableAIModels (provider: "Bedrock", providerIntegrationId, providerConfig.bedrock.region)
- Returns the live list of models available for the given (possibly unsaved) AI integration configuration, used to populate the model picker before the integration is saved. API-key providers (OpenAI/Anthropic/Google): pass provider + apiKey and, for self-hosted gateways, baseURL. Requires admin on the given space. Bedrock: pass provider + providerIntegrationId (the AWS integration) + providerConfig.bedrock.region.
- infraAssistantBuildModeEnabledInfraAssistantBuildModeEnabled determines whether Infra Assistant build mode is enabled.
- infraAssistantEnabledInfraAssistantEnabled determines whether Infra Assistant is enabled.
- latestTermsAndConditionsVersionAITermsAndConditionsVersion@deprecated use spaceliftIntelligenceTermsLatestVersion
- llmVendorLLMVendorllmVendor returns the selected LLM vendor for the account
- spaceliftIntelligenceEnabledSpaceliftIntelligenceEnabled determines whether Spacelift Intelligence is enabled for the account (true if any sub-feature is on).
- spaceliftIntelligenceTermsAcceptedSpaceliftIntelligenceTermsAccepted informs if the account has accepted the Spacelift Intelligence terms and conditions.
- spaceliftIntelligenceTermsLatestVersionTermsAndConditionsVersionSpaceliftIntelligenceTermsLatestVersion returns the latest version of the Spacelift Intelligence terms and conditions.
- Individual AnsibleHost by ID.
- Returns a list of related Ansible Hosts.
- Returns a list of related Ansible Tasks.
- hasAnsibleStacksTrue if the account has at least one Ansible stack
- searchAnsibleHosts allows to search ansibleHosts.
- Information about fields available for searching AnsibleHosts.
- searchAnsibleTasks allows to search AnsibleTasks.
- Information about fields available for searching AnsibleTasks.
- apiKeys[ApiKey!]!List of all API keys for the account.
- apiKeysManageableByNonHumansAccount-level setting indicating non-human sessions (API keys, Admin Stacks) can manage API keys.
- apiKeysManagedByNonRootAdminsAccount-level setting indicating if API keys can be managed by non-root admins.
- authorizationSchemeAuthorizationSchemeAuthorization scheme for the account
- auditTrailRetentionDaysHow many days built-in audit trails are stored
- auditTrailWebhookAuditTrailWebhookShow details of AuditTrailWebhook.
- Searches for audit trail entries.
- Information about fields available for searching audit trail entries.
- availableBillingAddons[BillingAddon!]!availableBillingAddons returns the list of available billing addons.
- availableSelfServicePlans[BillingPlan!]!availableSelfServicePlans returns the list of billing plans that can be bought via self-service.
- billingSubscriptionBillingSubscriptionShows Stripe Billing subscription details
- seatsSeats!Returns the seat limits and the number of in-use seats.
- tierBillingTierBilling tier of the account.
- tierFeaturesBillingTierFeatureThe list of features available based on the billing tier of the account.
- Returns a single blueprint.
- blueprintSchemaThe json schema of a blueprint.
- List of aws integrations that can be attached Stacks/Modules in given space.
- List of azure integrations that can be attached Stacks/Modules in given space.
- Details of a single AWS integration.
- Details of a single AWS integration looked up by the integration name.
- Lists any AWS integrations connected to the account. By default this excludes any integrations that were created via the stackIntegrationAwsCreate mutation. You can return all integrations by setting includeLegacy to true.
- awsIntegrationsEnabledIndicates whether the managed AWS integration functionality is enabled.
- Details of a single Azure integration. If the id is not provided, it will return the default Azure Integration.
- Details of a single Azure integration looked up by the integration name.
- azureIntegrations[AzureIntegration!]!Lists any Azure integrations connected to the account.
- azureIntegrationsEnabledIndicates whether the managed Azure integration functionality is enabled.
- List of contexts that can be attached Stacks/Modules in given space.
- Details of a single Context.
- contexts[Context!]!List of all the contexts in the account.
- Filter-dropdown suggestions scoped to the given space's contexts.
- externalIntegrations[ExternalIntegration!]!
- evaluateFeatureFlags returns the current value of the specified feature flags. This API is only available on Self-Hosted installations, and trying to use it on Spacelift SaaS will result in an empty array being returned.
- flowsIntegrationFlowsIntegrationReturns the Flows integration for the current account, if linked.
- flowsInstances[FlowsInstance!]!Returns all configured Flows instances available for linking.
- flowsProjects[FlowsProject!]!Returns the projects of the linked Flows organization, each with the Space role bindings currently assigned to it. Empty when no Flows org is linked.
- intentProjectActiveIntentProject
- intentProjects[IntentProject!]!
- Returns the underlying terraform-managed resources for a spacelift/module intent resource by walking its terraform state. Data sources are excluded. Cursor-paginated with first/after; at most 50 resources per page.
- Search managed entities with a set of predicates, ordering and paging.
- Search managed entities grouped by providers with a set of predicates, ordering and paging.
- Search managed entities grouped by stacks with a set of predicates, ordering and paging.
- Search managed entities grouped by types with a set of predicates, ordering and paging.
- Information about fields available for searching managed entities.
- messageQueueStats[MessageQueueStats!]!MessageQueueStats returns the current size of every message queue the backend is configured to use. Only available on Self-Hosted instances and can only be fetched by admins.
- metricsSpaceliftMetricsReturn the current value for a given metric.
- Return the values for a given metric in a given range.
- sharedModulesV2[ModuleShare!]!List of all the Modules shared with this account or with spaces inside the account.
- Details of a single Module.
- modules[Module!]!List of all the Modules managed by this account.
- Search Modules with a set of predicates, ordering and paging.
- Information about fields available for searching Modules.
- sharedModules[SharedModule!]!List of all the Modules shared with this account.
- Search Notifications with a set of predicates, ordering and paging.
- Information about fields available for searching Notifications.
- activeUserGuideProgressUserGuideProgressGet the currently active user guide progress for the user
- awarenessSourceSurveyAwarenessSourceSurvey
- completedUserGuides[UserGuideProgress!]!Retrieve all completed guides for the user
- genericFormsList[GenericFormDescription!]!Returns a list of available generic forms
- onboardingProgress[OnboardingProgress!]!Onboarding progress for all users on the account
- Retrieve a single user guide by ID
- userGuideCertificationList[UserGuideCertification!]!List all certificates for the account
- Retrieve a single user guide chapter by ID
- userGuideChapters[UserGuideChapter!]!List all user guide chapters
- Retrieve a single user guide group by ID
- userGuideGroups[UserGuideGroup!]!List all user guide groups
- userGuides[UserGuide!]!List all available user guides
- Returns search suggestions (predicate fields and possible values) for stacks eligible for OpenTofu vendor migration or rollback. Same surface as searchStacksSuggestions but scoped to the migration cohort selected by target: - target=OpenTofu: legacy Terraform stacks with terraform_workflow_tool=OPEN_TOFU (forward migration candidates). - target=Terraform: native OpenTofu stacks previously migrated by this flow (rollback candidates).
- Returns a paginated list of stacks eligible for OpenTofu vendor migration or rollback. This is the "preview" counterpart to openTofuMigrate: same eligible cohort and same predicate surface, but returns the matching stacks instead of enqueueing them.
- Searches the OpenTofu migration queue (opentofu_migration_stacks table). Powers the dashboard widget, per-stack migration status checks, and the in-progress UI. Uses the same SearchInput envelope as other search queries; predicates apply to the queue row fields (state, createdAt, updatedAt, stack.*).
- Details of a single Plugin.
- Details of a single Plugin Template.
- pluginTemplates[PluginTemplate!]!List of all the plugin templates in the account.
- plugins[Plugin!]!List of all the plugins in the account.
- List of policies that can be attached to Stacks/Modules in given space.
- intentPolicyInputSchemaReturns the input schema that intent policies receive for evaluation.
- Details of a single Policy.
- policyRuntimePolicyRuntimeDetails!List Policy Runtime Details
- policies[Policy!]!List of all the polices in the account.
- Paginated policies created in or inherited by the given space.
- Filter-dropdown suggestions scoped to the given space's policies.
- Returns API keys with RBAC access to the space, directly or via an ancestor space, searchable by name.
- Returns the available search fields and their possible values for apiKeysWithAccessToSpace.
- roles[Role!]!Returns all roles for the account that are accessible by the requester.
- Returns stacks that can act in the space. RESIDING lists the space's own stacks; ALL_WITH_ACCESS additionally lists every stack whose self-read or explicit role binding reaches the space, whether that is on the space itself, an ancestor (propagates down), or an inheriting descendant (read propagates up).
- Returns the available search fields and their possible values for stacksWithAccessToSpace.
- Returns users with RBAC access to the space, directly or via an ancestor space, searchable by username.
- Returns the available search fields and their possible values for usersWithAccessToSpace.
- Lists the users currently holding access to a space through live sessions. The login-policy counterpart of usersWithAccessToSpace: returns an empty page for MANAGED_USERS accounts. Requires space admin.
- Returns the available search fields and their possible values for userSessionsWithAccessToSpace.
- Lists API keys currently holding access to a space through live sessions. The login-policy counterpart of apiKeysWithAccessToSpace: returns an empty page for MANAGED_USERS accounts. Requires space admin.
- Returns the available search fields and their possible values for apiKeySessionsWithAccessToSpace.
- Returns IdP groups with RBAC access to the space, directly or via an ancestor space, searchable by group name.
- Returns the available search fields and their possible values for userGroupsWithAccessToSpace.
- Details of a single Run by ID, without needing to know the stack.
- runLogRetentionDaysAmount of days that run logs will be retained for
- Paginated, account-wide run history ordered newest-first. Scope the window with a TimeInRange predicate on the `createdAt` field. Paginate with either input.after (keyset cursor, sequential) or offset (random-access, for loading pages concurrently), not both. offset skips that many rows in the ordered result; use input.first as the page size and SearchRunsOutput.total to compute the page count. Offset paging trades keyset's stability for random access, so pages can skip or repeat rows if runs are created or deleted mid-scan.
- searchRunsSuggestions returns the filterable fields and their possible values for the searchRuns query.
- Details of a single Scan.
- Details of a single ScanRun.
- scimSettingsScimOauthClientSCIM settings, if the account has SCIM provisioning configured.
- debugInfoDebugInfo!Info about git build related data, self-hosted licence. Not valid in SaaS.
- enforceMFAEnforceMFA determines whether MFA is required for all users in the account.
- securityKeys[SecurityKey!]!Returns list of the security keys in the account.
- sessions[Session!]!List of all the active sessions in the account. NOTE: this functionality is not available in the Starter tier. An empty array will be returned for Starter tier accounts.
- slackAppConfigSlackAppConfigReturns the instance-wide Slack App config information for a Self-Hosted instance. This is used by the Spacelift Slack integration to integrate with your Slack workspace. Always returns null on SaaS.
- slackAppManifestReturns the app manifest that should be used when creating a Slack App to integrate Spacelift with Slack. This is only useful on Self-Hosted instances. Always returns empty on SaaS.
- slackIntegrationSlackIntegrationShows the details of the integration between your Slack workspace and your Spacelift account.
- allowNonRootAdminSpaceCreationAccount-level setting indicating if non-root admins can create subspaces.
- Details of a single Space.
- Details of all the spaces in the Account accessible for the user.
- oidcSettingsOIDCSettingsOIDC settings, if the account is using OIDC-based SSO.
- oidcSubjectTemplateReturn the OIDC subject template for the account
- samlSettingsSAMLSettingsSAML settings, if the account is using SAML-based SSO.
- Return the stack the run belongs to.
- Search Stacks with a set of predicates, ordering and paging.
- Information about fields available for searching Stacks.
- Details of a single Stack.
- stacks[Stack!]!List of all the stacks in the account.
- Details of a single BlueprintDeployment.
- blueprintV2SchemaThe json schema of a blueprint v2.
- Returns a single blueprint group details.
- Returns a single template details.
- Details of a single TemplateDeployment.
- templateSchemaThe json schema of a template.
- Parse a template and return its inputs and any validation errors.
- gpgKeys[GPGKey!]!List the GPG keys used to sign binaries.
- Details of a single Terraform provider.
- terraformProviders[TerraformProvider!]!List of all Terraform providers managed by this account.
- Details of a single saved filter
- List of saved filters
- uiConfigGetGet the stored UI configuration for the user. If no configuration is stored, empty string will be returned.
- List of data points containing information about the account's usage along with some metadata. AspectInput is used to specify the aspect of the usage to be returned. The data points are returned in reverse chronological order.
- usageUsage!Usage for the last 30 days.
- workerUsageWorkerUsage!Private worker usage statistics for the current billing cycle.
- Run-minutes over a window of completed UTC days, served from the run_minutes_by_day rollup on both SaaS and self-hosted.
- Details about a single managed user.
- Details about a single user group.
- Managed user group integration specified by id.
- List of managed user group integrations. Allows for optional integrationType parameter to get integrations of specific type only.
- managedUserGroups[ManagedUserGroup!]!List of user groups in this account.
- managedUsers[ManagedUser!]!List of users that were invited or logged into the account.
- List of VCS integrations that can be attached Stacks/Modules in given space.
- Shows Azure DevOps Repos integration details.
- azureDevOpsWebhooksEndpointEndpoint for incoming Azure DevOps webhooks.
- Shows Bitbucket Cloud integration details.
- bitbucketCloudWebhooksEndpointEndpoint for incoming Bitbucket Cloud webhooks.
- Shows Bitbucket Datacenter integration details.
- bitbucketDatacenterWebhooksEndpointEndpoint for incoming Bitbucket Datacenter webhooks.
- Shows Blob Storage integration details.
- List of branches for a given repository.
- GitHub Enterprise Integration settings. If the id is not provided, it will return the default GitHub Enterprise Integration.
- The webhooks endpoint to use in your GitHub Enterprise App
- githubIntegrationGithubIntegrationBuild-in GitHub Integration settings.
- Shows Gitlab integration details. If the id is not provided, it will return the default Gitlab Integration.
- gitlabWebhooksEndpointEndpoint for incoming Gitlab webhooks.
- installationIdID of the GitHub App installation linked to the current account.
- providersVCSProviderList of all the VCS providers available in the account.
- List of all the VCS providers available in a specific space.
- Get a single Repo by ID
- Get the revision history of a specific file in a Repo
- List all Repos in a space
- List of repositories available to the account. Optional filter param can be applied for the results returned from VCS.
- Get a revision by repo ID and SHA (returns latest if SHA not provided)
- Search Repo files with filtering, ordering, and pagination
- Get field suggestions for Repo file search
- Search Repos with filtering and ordering
- Get field suggestions for Repo search
- Search Revisions with filtering, ordering, and pagination
- Get field suggestions for Revision search
- Details of a single VCSAgentPool.
- vcsAgentPools[VCSAgentPool!]!List of all the VCSAgentPools in the account.
- vcsEventTriggeredRunsLimitMaximum number of runs triggered by a VCS event for this account.
- Get VCS integrations by provider and id
- Runs a test to check whether the VCS integration is configured correctly
- vcsIntegrations[VCSIntegration!]!List of all VCS integrations available in the account.
- kubectlVersionsList of all supported kubectl versions.
- Given version constraints, calculate the latest version that satisfies it.
- Returns all OpenTofu features and whether they are supported for the given version constraint.
- openTofuVersionsList of all supported OpenTofu versions.
- Given version constraints, calculate the latest version that satisfies it.
- terraformVersionsList of all supported Terraform versions.
- Given version constraints, calculate the latest version that satisfies it. NOTE: the only valid values for the "tool" parameter are TERRAFORM_FOSS or OPEN_TOFU, and when no tool is specified it defaults to TERRAFORM_FOSS.
- terragruntVersionsList of all supported Terragrunt versions.
- List of worker pools that can be attached Stacks/Modules in given space.
- publicWorkerPoolPublicWorkerPoolShows public worker pool details
- Details of a single WorkerPool.
- workerPools[WorkerPool!]!List of all the WorkerPools in the account.