> ## Documentation Index
> Fetch the complete documentation index at: https://api-docs.helpyousponsor.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get an automation primitive schema

> Returns the selected operation input/output JSON Schemas, required scope, permission groups, feature flags and mutation decision metadata. The caller needs the primitive required_scope (or primitives:*) and the current Gratona permission groups. This endpoint only discovers the contract and does not execute it.



## OpenAPI

````yaml get /primitives/{name}/schema
openapi: 3.0.0
info:
  title: Gratona API
  description: >-
    REST API for the Gratona fundraising platform, including donor, donation,
    sponsorship, program, event, and integration workflows. Endpoints are
    organized by tag. Most endpoints require either a Passport bearer token or
    an issued API key — see the Security Schemes section.
  contact:
    name: Gratona Engineering
    url: https://gratona.com
    email: devs@gratona.com
  version: 1.0.0
servers:
  - url: https://api.gratona.com/v1
    description: Server Version 1.0.0
security: []
tags:
  - name: Auth
    description: >-
      Login, signup, logout, password reset, and email verification for admin
      users and donors.
  - name: Donors
    description: >-
      Donor records: CRUD, profile fields, household linkage, search, filters,
      merge, and duplicate detection.
  - name: Donations
    description: >-
      Individual donation records, recurring commitments, soft credits, refunds,
      designations, and exports.
  - name: Sponsorships
    description: >-
      Donor-to-entity commitment relationships, lifecycle transitions, and
      commitment-specific filters.
  - name: Entities
    description: >-
      Recipient records (children, families, projects, animals, etc.), their
      status, and entity-level fields.
  - name: Programs
    description: >-
      Program / campaign configuration: hierarchy, settings, and program-level
      metadata.
  - name: Forms
    description: >-
      Custom form builder (HysForm), form fields, standardized donor fields, and
      field migrations.
  - name: Trips
    description: >-
      Mission-trip management: trips, participants, budgets, tasks,
      e-signatures, fundraising milestones, and background checks.
  - name: Communications
    description: >-
      Email templates, SMS, newsletters, donor email manager, and per-donor
      notes.
  - name: Payments
    description: >-
      Payment-gateway management (Stripe, PayPal, Flutterwave, QuickBooks).
      Excludes inbound webhooks — see the Webhooks tag.
  - name: Reports
    description: Dashboards, analytics, scheduled reports, and exports.
  - name: Admin
    description: >-
      Client-account administration: users, groups/permissions, settings,
      integrations, and account lifecycle.
  - name: Donor Portal
    description: >-
      Endpoints consumed by the donor-facing portal (donor login, dashboard,
      donation history, messages).
  - name: Recipient Portal
    description: Endpoints consumed by the recipient-facing portal.
  - name: Public
    description: >-
      Unauthenticated public endpoints: donor signup, public trip pages,
      peer-to-peer campaigns, public checkout.
  - name: Webhooks
    description: >-
      Inbound webhooks from third parties (Stripe, PayPal, Flutterwave, Checkr,
      DropboxSign). Annotated minimally for reference; payload shapes are owned
      by the upstream provider.
  - name: Events
    description: >-
      Event setup, invitations, registration, ticketing, attendance and event
      reporting.
  - name: Journeys
    description: >-
      Journey graphs, activation, enrollment, message templates and event
      follow-up automations.
  - name: Tasks
    description: Workspace tasks, assignments, saved task views and record collaboration.
  - name: Fundraising
    description: >-
      Fundraising portfolios, stewardship plans, giving anniversaries and
      personal donor follow-up.
  - name: Impact Stories
    description: Story intake, review, assets, consent and publication workflows.
  - name: Integrations
    description: Workspace integration connections, mappings, synchronization and recovery.
  - name: Email Calendar
    description: Connected email/calendar accounts and donor interactions.
  - name: Spaces
    description: Workspace Spaces and collaborative Pages.
  - name: Library
    description: Workspace documents, source connections, files and analysis.
  - name: Intelligence
    description: Donor intelligence and Tali workspace workflows.
  - name: Automation
    description: >-
      V3 automation primitive discovery, input validation, invocation and Zapier
      contracts.
  - name: Schema
    description: V3 model, enum, capability and scope discovery.
  - name: Zapier
    description: Zapier automation connections, polling feeds and actions.
  - name: Files
    description: Files
  - name: Client
    description: Client
  - name: Payment Gateways
    description: Payment Gateways
  - name: Email Settings
    description: Email Settings
  - name: Admin Dashboard
    description: Admin Dashboard
  - name: Recipients
    description: Recipients
  - name: Historical Archived Updates
    description: Historical Archived Updates
  - name: Team & access
    description: Team & access
  - name: Settings
    description: Settings
  - name: Notifications
    description: Notifications
  - name: Participation
    description: Participation
  - name: Users
    description: Users
  - name: Wrapped
    description: Wrapped
  - name: Donor SignUp
    description: Donor SignUp
  - name: Frontend
    description: Frontend
  - name: User
    description: User
  - name: Workspace
    description: Workspace
paths:
  /primitives/{name}/schema:
    get:
      tags:
        - Automation
      summary: Get an automation primitive schema
      description: >-
        Returns the selected operation input/output JSON Schemas, required
        scope, permission groups, feature flags and mutation decision metadata.
        The caller needs the primitive required_scope (or primitives:*) and the
        current Gratona permission groups. This endpoint only discovers the
        contract and does not execute it.
      operationId: eb4f2937d381a0c31080991189e0ed7a
      parameters:
        - name: name
          in: path
          description: >-
            Exact dot-separated operation name returned by primitive discovery;
            route names accept lowercase letters, underscores and dots.
          required: true
          schema:
            type: string
            pattern: ^[a-z._]+$
          example: donors.list
      responses:
        '200':
          description: Primitive metadata and JSON Schemas.
          content:
            application/json:
              schema:
                properties:
                  success:
                    description: The operation was found and is discoverable.
                    type: boolean
                    example: true
                  data:
                    $ref: '#/components/schemas/V3PrimitiveSchema'
                type: object
        '401':
          description: Authentication is missing, invalid or no longer eligible.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UnauthorizedResponse'
        '403':
          description: >-
            Required scope, permission group, feature or workspace access is
            missing.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/V3AccessDenied'
        '404':
          description: The named primitive is not registered.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/V3DiscoveryError'
      security:
        - bearerAuth: []
        - apiKeyAuth: []
      servers:
        - url: https://api.gratona.com/v3
          description: Gratona V3 automation API
components:
  schemas:
    V3PrimitiveSchema:
      properties:
        name:
          description: Registered operation identifier.
          type: string
          example: donors.list
        description:
          description: Business purpose of this primitive.
          type: string
          example: List donors in the authenticated organization.
        category:
          description: Operation category.
          type: string
          example: donors
        is_mutation:
          description: Whether invocation changes records.
          type: boolean
          example: false
        side_effect_class:
          description: Read or write consequence classification.
          type: string
          example: read
        approval_class:
          description: Required human-intent or approval classification.
          type: string
          example: none
        decision_requirements:
          description: Domain choices required before a mutation may execute.
          type: array
          items:
            type: object
            additionalProperties: {}
        mutation_targets:
          description: >-
            Argument paths mapped to canonical target types. An empty map is
            serialized as an empty array.
          oneOf:
            - type: object
              additionalProperties:
                type: string
            - type: array
              items: {}
              maxItems: 0
        required_feature_flags:
          description: Organization feature flags required by the operation.
          type: array
          items:
            type: string
        required_scope:
          description: Credential scope for the operation.
          type: string
          example: primitives:donors:list
        required_permissions:
          description: Legacy permission alternatives declared by the operation.
          type: array
          items:
            type: string
        required_permission_groups:
          description: Each group requires at least one current permission.
          type: array
          items:
            type: array
            items:
              type: string
        input:
          description: JSON Schema for the complete invocation input.
          type: object
          additionalProperties: {}
        output:
          description: JSON Schema for the operation-specific result data.
          type: object
          additionalProperties: {}
      type: object
    UnauthorizedResponse:
      title: UnauthorizedResponse
      description: >-
        Returned with HTTP 401 when the request lacks a valid Passport bearer
        token, a valid `X-HYS-API-Key`, or a valid session. The body is the
        simple `{message, status}` envelope emitted by `AuthenticateApiOrKey`.
      required:
        - message
        - status
      properties:
        message:
          description: >-
            Always the literal string `Unauthorized` from the `auth.api_or_key`
            middleware. Login endpoints return `Invalid Credentials` instead.
          type: string
          example: Unauthorized
        status:
          type: string
          example: error
      type: object
    V3AccessDenied:
      description: >-
        Scope/primitive denials or the authentication middleware
        workspace-access denial.
      oneOf:
        - $ref: '#/components/schemas/V3DiscoveryError'
        - $ref: '#/components/schemas/ErrorResponse'
    V3DiscoveryError:
      description: >-
        V3 discovery errors; primitive failures may additionally include data,
        warnings and meta.
      required:
        - success
        - errors
      properties:
        success:
          description: False when discovery or authorization fails.
          type: boolean
          example: false
        errors:
          description: Structured operation errors.
          type: array
          items:
            properties:
              code:
                description: Machine-readable failure code.
                type: string
                example: INSUFFICIENT_SCOPE
              message:
                description: Human-readable explanation.
                type: string
                example: Required scope is missing.
              required_scope:
                description: Required scope when reported by the guard.
                type: string
                example: schema:read
              available_scopes:
                description: Credential scopes when reported by the schema guard.
                type: array
                items:
                  type: string
              required_permission_groups:
                description: Permission alternatives grouped by required access boundary.
                type: array
                items:
                  type: array
                  items:
                    type: string
            type: object
      type: object
    ErrorResponse:
      title: ErrorResponse
      description: >-
        Generic error envelope used by most controllers. Most error responses
        pair a human-readable `message` with `status: error`. Some endpoints
        additionally include `errors` (validator errors), `error` (legacy
        single-error string), `code`, or domain-specific context fields.
      required:
        - message
      properties:
        message:
          description: Human-readable error message.
          type: string
          example: Something went wrong. Please try again.
        status:
          description: >-
            Always the literal string `error` for failures. Some endpoints omit
            this field.
          type: string
          example: error
        error:
          description: Legacy single error code/string used by older endpoints.
          type: string
          example: invalid_request
          nullable: true
        code:
          description: >-
            Optional application-level error code (not all endpoints populate
            this).
          type: string
          example: DONOR_NOT_FOUND
          nullable: true
      type: object
  securitySchemes:
    bearerAuth:
      type: http
      description: Passport bearer token authentication for legacy admin sessions.
      scheme: bearer
      bearerFormat: JWT
    apiKeyAuth:
      type: apiKey
      description: Gratona API key sent with the compatibility header X-HYS-API-Key.
      name: X-HYS-API-Key
      in: header

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.