Make an RPC call to an action

curl --request POST \
  --url https://api.stackone.com/actions/rpc \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --header 'x-account-id: <x-account-id>' \
  --data '
{
  "action": "create_employee",
  "path": {
    "id": "123"
  },
  "query": {
    "debug": false
  },
  "headers": {
    "Content-Type": "application/json"
  },
  "body": {
    "data": "example"
  },
  "defender_enabled": true,
  "defender_config": {
    "enabled": true,
    "block_high_risk": false,
    "use_tier1_classification": true,
    "use_tier2_classification": true
  }
}
'

import requests

url = "https://api.stackone.com/actions/rpc"

payload = {
    "action": "create_employee",
    "path": { "id": "123" },
    "query": { "debug": False },
    "headers": { "Content-Type": "application/json" },
    "body": { "data": "example" },
    "defender_enabled": True,
    "defender_config": {
        "enabled": True,
        "block_high_risk": False,
        "use_tier1_classification": True,
        "use_tier2_classification": True
    }
}
headers = {
    "x-account-id": "<x-account-id>",
    "Authorization": "Basic <encoded-value>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'x-account-id': '<x-account-id>',
    Authorization: 'Basic <encoded-value>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    action: 'create_employee',
    path: {id: '123'},
    query: {debug: false},
    headers: {'Content-Type': 'application/json'},
    body: JSON.stringify({data: 'example'}),
    defender_enabled: true,
    defender_config: {
      enabled: true,
      block_high_risk: false,
      use_tier1_classification: true,
      use_tier2_classification: true
    }
  })
};

fetch('https://api.stackone.com/actions/rpc', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.stackone.com/actions/rpc",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'action' => 'create_employee',
    'path' => [
        'id' => '123'
    ],
    'query' => [
        'debug' => false
    ],
    'headers' => [
        'Content-Type' => 'application/json'
    ],
    'body' => [
        'data' => 'example'
    ],
    'defender_enabled' => true,
    'defender_config' => [
        'enabled' => true,
        'block_high_risk' => false,
        'use_tier1_classification' => true,
        'use_tier2_classification' => true
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Basic <encoded-value>",
    "Content-Type: application/json",
    "x-account-id: <x-account-id>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.stackone.com/actions/rpc"

	payload := strings.NewReader("{\n  \"action\": \"create_employee\",\n  \"path\": {\n    \"id\": \"123\"\n  },\n  \"query\": {\n    \"debug\": false\n  },\n  \"headers\": {\n    \"Content-Type\": \"application/json\"\n  },\n  \"body\": {\n    \"data\": \"example\"\n  },\n  \"defender_enabled\": true,\n  \"defender_config\": {\n    \"enabled\": true,\n    \"block_high_risk\": false,\n    \"use_tier1_classification\": true,\n    \"use_tier2_classification\": true\n  }\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("x-account-id", "<x-account-id>")
	req.Header.Add("Authorization", "Basic <encoded-value>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.stackone.com/actions/rpc")
  .header("x-account-id", "<x-account-id>")
  .header("Authorization", "Basic <encoded-value>")
  .header("Content-Type", "application/json")
  .body("{\n  \"action\": \"create_employee\",\n  \"path\": {\n    \"id\": \"123\"\n  },\n  \"query\": {\n    \"debug\": false\n  },\n  \"headers\": {\n    \"Content-Type\": \"application/json\"\n  },\n  \"body\": {\n    \"data\": \"example\"\n  },\n  \"defender_enabled\": true,\n  \"defender_config\": {\n    \"enabled\": true,\n    \"block_high_risk\": false,\n    \"use_tier1_classification\": true,\n    \"use_tier2_classification\": true\n  }\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.stackone.com/actions/rpc")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["x-account-id"] = '<x-account-id>'
request["Authorization"] = 'Basic <encoded-value>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"action\": \"create_employee\",\n  \"path\": {\n    \"id\": \"123\"\n  },\n  \"query\": {\n    \"debug\": false\n  },\n  \"headers\": {\n    \"Content-Type\": \"application/json\"\n  },\n  \"body\": {\n    \"data\": \"example\"\n  },\n  \"defender_enabled\": true,\n  \"defender_config\": {\n    \"enabled\": true,\n    \"block_high_risk\": false,\n    \"use_tier1_classification\": true,\n    \"use_tier2_classification\": true\n  }\n}"

response = http.request(request)
puts response.read_body

{
  "next": "<string>",
  "data": {},
  "message": "Feedback successfully recorded",
  "submitted_at": "2025-10-08T11:44:16.123Z",
  "session_id": "30d37876-cb1a-4138-9225-197355e0b6c9"
}

{
  "statusCode": 400,
  "message": "Bad Request",
  "timestamp": "2023-05-30T00:00:00.000Z",
  "data": {
    "statusCode": 400,
    "message": "Bad Request",
    "headers": {
      "content-type": "application/json",
      "x-request-id": "5678c28b211dace4e0a0f9171e6b88c5"
    }
  },
  "provider_errors": [
    {
      "status": 400,
      "url": "https://api.provider.com/v1/resource",
      "raw": {
        "message": "Invalid input parameters"
      },
      "headers": {
        "content-type": "application/json",
        "x-request-id": "5678c28b211dace4e0a0f9171e6b88c5"
      }
    }
  ]
}

{
  "statusCode": 401,
  "message": "Unauthorized",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 403,
  "message": "Forbidden resource",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 404,
  "message": "Not Found",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 408,
  "message": "Request timed out",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 409,
  "message": "Conflict",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 412,
  "message": "Account is suspended and cannot process requests",
  "timestamp": "2023-05-30T00:00:00.000Z",
  "errorCode": "AccountSuspendedError",
  "details": {
    "status": "suspended",
    "expiresAt": "2023-11-07T05:31:56Z",
    "statusReasons": [
      {
        "timestamp": "2023-11-07T05:31:56Z",
        "code": "<string>",
        "description": "<string>"
      }
    ]
  }
}

{
  "statusCode": 422,
  "message": "Unprocessable Entity",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 429,
  "message": "Too many requests",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 500,
  "message": "Internal server error",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 501,
  "message": "Not Implemented",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 502,
  "message": "Bad Gateway",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

POST

actions

rpc

Make an RPC call to an action

curl --request POST \
  --url https://api.stackone.com/actions/rpc \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --header 'x-account-id: <x-account-id>' \
  --data '
{
  "action": "create_employee",
  "path": {
    "id": "123"
  },
  "query": {
    "debug": false
  },
  "headers": {
    "Content-Type": "application/json"
  },
  "body": {
    "data": "example"
  },
  "defender_enabled": true,
  "defender_config": {
    "enabled": true,
    "block_high_risk": false,
    "use_tier1_classification": true,
    "use_tier2_classification": true
  }
}
'

import requests

url = "https://api.stackone.com/actions/rpc"

payload = {
    "action": "create_employee",
    "path": { "id": "123" },
    "query": { "debug": False },
    "headers": { "Content-Type": "application/json" },
    "body": { "data": "example" },
    "defender_enabled": True,
    "defender_config": {
        "enabled": True,
        "block_high_risk": False,
        "use_tier1_classification": True,
        "use_tier2_classification": True
    }
}
headers = {
    "x-account-id": "<x-account-id>",
    "Authorization": "Basic <encoded-value>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'x-account-id': '<x-account-id>',
    Authorization: 'Basic <encoded-value>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    action: 'create_employee',
    path: {id: '123'},
    query: {debug: false},
    headers: {'Content-Type': 'application/json'},
    body: JSON.stringify({data: 'example'}),
    defender_enabled: true,
    defender_config: {
      enabled: true,
      block_high_risk: false,
      use_tier1_classification: true,
      use_tier2_classification: true
    }
  })
};

fetch('https://api.stackone.com/actions/rpc', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.stackone.com/actions/rpc",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'action' => 'create_employee',
    'path' => [
        'id' => '123'
    ],
    'query' => [
        'debug' => false
    ],
    'headers' => [
        'Content-Type' => 'application/json'
    ],
    'body' => [
        'data' => 'example'
    ],
    'defender_enabled' => true,
    'defender_config' => [
        'enabled' => true,
        'block_high_risk' => false,
        'use_tier1_classification' => true,
        'use_tier2_classification' => true
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Basic <encoded-value>",
    "Content-Type: application/json",
    "x-account-id: <x-account-id>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.stackone.com/actions/rpc"

	payload := strings.NewReader("{\n  \"action\": \"create_employee\",\n  \"path\": {\n    \"id\": \"123\"\n  },\n  \"query\": {\n    \"debug\": false\n  },\n  \"headers\": {\n    \"Content-Type\": \"application/json\"\n  },\n  \"body\": {\n    \"data\": \"example\"\n  },\n  \"defender_enabled\": true,\n  \"defender_config\": {\n    \"enabled\": true,\n    \"block_high_risk\": false,\n    \"use_tier1_classification\": true,\n    \"use_tier2_classification\": true\n  }\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("x-account-id", "<x-account-id>")
	req.Header.Add("Authorization", "Basic <encoded-value>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.stackone.com/actions/rpc")
  .header("x-account-id", "<x-account-id>")
  .header("Authorization", "Basic <encoded-value>")
  .header("Content-Type", "application/json")
  .body("{\n  \"action\": \"create_employee\",\n  \"path\": {\n    \"id\": \"123\"\n  },\n  \"query\": {\n    \"debug\": false\n  },\n  \"headers\": {\n    \"Content-Type\": \"application/json\"\n  },\n  \"body\": {\n    \"data\": \"example\"\n  },\n  \"defender_enabled\": true,\n  \"defender_config\": {\n    \"enabled\": true,\n    \"block_high_risk\": false,\n    \"use_tier1_classification\": true,\n    \"use_tier2_classification\": true\n  }\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.stackone.com/actions/rpc")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["x-account-id"] = '<x-account-id>'
request["Authorization"] = 'Basic <encoded-value>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"action\": \"create_employee\",\n  \"path\": {\n    \"id\": \"123\"\n  },\n  \"query\": {\n    \"debug\": false\n  },\n  \"headers\": {\n    \"Content-Type\": \"application/json\"\n  },\n  \"body\": {\n    \"data\": \"example\"\n  },\n  \"defender_enabled\": true,\n  \"defender_config\": {\n    \"enabled\": true,\n    \"block_high_risk\": false,\n    \"use_tier1_classification\": true,\n    \"use_tier2_classification\": true\n  }\n}"

response = http.request(request)
puts response.read_body

{
  "next": "<string>",
  "data": {},
  "message": "Feedback successfully recorded",
  "submitted_at": "2025-10-08T11:44:16.123Z",
  "session_id": "30d37876-cb1a-4138-9225-197355e0b6c9"
}

{
  "statusCode": 400,
  "message": "Bad Request",
  "timestamp": "2023-05-30T00:00:00.000Z",
  "data": {
    "statusCode": 400,
    "message": "Bad Request",
    "headers": {
      "content-type": "application/json",
      "x-request-id": "5678c28b211dace4e0a0f9171e6b88c5"
    }
  },
  "provider_errors": [
    {
      "status": 400,
      "url": "https://api.provider.com/v1/resource",
      "raw": {
        "message": "Invalid input parameters"
      },
      "headers": {
        "content-type": "application/json",
        "x-request-id": "5678c28b211dace4e0a0f9171e6b88c5"
      }
    }
  ]
}

{
  "statusCode": 401,
  "message": "Unauthorized",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 403,
  "message": "Forbidden resource",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 404,
  "message": "Not Found",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 408,
  "message": "Request timed out",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 409,
  "message": "Conflict",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 412,
  "message": "Account is suspended and cannot process requests",
  "timestamp": "2023-05-30T00:00:00.000Z",
  "errorCode": "AccountSuspendedError",
  "details": {
    "status": "suspended",
    "expiresAt": "2023-11-07T05:31:56Z",
    "statusReasons": [
      {
        "timestamp": "2023-11-07T05:31:56Z",
        "code": "<string>",
        "description": "<string>"
      }
    ]
  }
}

{
  "statusCode": 422,
  "message": "Unprocessable Entity",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 429,
  "message": "Too many requests",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 500,
  "message": "Internal server error",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 501,
  "message": "Not Implemented",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

{
  "statusCode": 502,
  "message": "Bad Gateway",
  "timestamp": "2023-05-30T00:00:00.000Z"
}

Authorizations

Authorization

string

header

required

Basic authentication header of the form Basic <encoded-value>, where <encoded-value> is the base64-encoded string username:password.

Headers

x-account-id

string

required

The account identifier

x-connector-profile-id

string

Overrides the connector profile associated with the account for this request. The profile must exist in the same project and belong to the same connector as the account, otherwise the request is rejected with a 400 Bad Request.

Query Parameters

debug

boolean | null

Enable debug mode for the action execution

Example:

false

Body

application/json

action

string

required

The action to execute

Example:

"create_employee"

path

object | null

Path parameters for the action

Example:

{ "id": "123" }

query

object | null

Query parameters for the action

Show child attributes

headers

object | null

Headers for the action

Example:

{ "Content-Type": "application/json" }

body

object | null

Request body for the action

Example:

{ "data": "example" }

defender_enabled

boolean | null

deprecated

Override the account-level defender enabled setting for this request. Deprecated: use defender_config instead.

Example:

true

defender_config

object | null

Per-request defender configuration. Takes precedence over defender_enabled and project settings.

Show child attributes

Response

Action response.

string | null

Cursor for fetching the next page of results

data

object

The response data from the action RPC call

object
object[]

message

string | null

Success message. Only set by the stackone_submit_feedback action

Example:

"Feedback successfully recorded"

submitted_at

string | null

ISO 8601 timestamp of submission. Only set by the stackone_submit_feedback action

Example:

"2025-10-08T11:44:16.123Z"

session_id

string | null

Session id the feedback was attached to (join key); null when none was resolved. Only set by the stackone_submit_feedback action

Example:

"30d37876-cb1a-4138-9225-197355e0b6c9"

Accounts

Actions

Connect Sessions

Connector Profiles

Connectors

Data Sync

Logs

MCP

Webhooks

Make an RPC call to an action

Authorizations

Headers

Query Parameters

Body

Response