> This page is for Workspace app.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.cloudraker.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.cloudraker.com/_mcp/server.

# The caller’s inbox

GET https://api.cloudraker.com/workspace/inbox

One page of the caller’s own inbox rows — mentions, approvals, human tasks and unattended parks, plus `connector` rows for connections whose authorization broke — newest first, read from the `inbox_items` projection and the `connections` scan. That pair is ONE reader, shared with `GET /me/work`, so a broken connection is the same item with the same id on both surfaces (R6-A1); its id is the connection id and `POST /workspace/inbox/{itemId}/read` dismisses it. `connector` rows ride the first page only — they are synthesized, so they take no part in the cursor walk — but they always count toward `totalCount` and `unreadCount`. **Authorization:** no per-row check exists or is needed: a row is written FOR one user, so the `userId` filter IS the scope. `status` is `open` (the default) or `all`, and `open` means NOT DONE, not unread: a `mention` leaves it the moment it is read, while an `approval`, `task` or `parked` row that has been read stays until the work behind it closes; `limit` is 1-50 (default 25); `starting_after` takes the previous page’s `nextCursor`. Both are ENFORCED: a bad value is 400 `validation_failed`, not a silent fallback to the defaults (R7C-04).

Reference: https://docs.cloudraker.com/workspace/api/inbox/list-workspace-inbox

## Authentication

- `Authorization` header (bearer token, required) — Bearer authentication of the form `Bearer <token>`, where token is your auth token.

## Request

### Query parameters

- `status` (enum, optional) — `open` (default) or `all`. `open` means NOT DONE, not unread: reading a `mention` resolves it and drops it from this listing, while a read `approval`, `task` or `parked` row stays until the work behind it closes.
  - Allowed values: `open`, `all`
- `limit` (integer, optional) — Page size, 1-50 (default 25). Page one leads with the caller’s broken-connection rows (`kind: connector`), which are synthesized rather than stored, and the stored page shrinks to keep the total inside `limit` — at least one stored row always comes through, so a caller whose broken connections alone fill the page receives them plus that row.
- `starting_after` (string, optional) — The previous page’s `nextCursor` — `<ISO-8601 timestamp>|<row id>` (a bare timestamp is still accepted). Anything else is 400 `validation_failed`.

## Response

### 200

One page of inbox items.

- `data` (list of WorkspaceInboxItem, required)
- `nextCursor` (string, required, nullable)
- `unreadCount` (integer, required) — Unread rows across every page, the badge number. Never counts a resolved (`done`) row, whatever `status` asked for, and includes the synthesized broken-connector rows.
- `totalCount` (integer, required) — Rows across every page in the SAME set this call pages over: `status=open` (the default) counts unresolved rows only, `status=all` counts resolved rows too. Includes the synthesized broken-connector rows.

## Errors

### 400 Bad Request Error

`validation_failed` — a bad `status` or `limit`.

- `any`

## Types

### WorkspaceInboxItem

- `id` (string, required)
- `userId` (string, required)
- `kind` (enum, required)
  - Allowed values: `approval`, `human_task`, `question`, `mention`, `parked`, `run_attention`, `connector`
- `sessionId` (string, required, nullable)
- `turnId` (string, required, nullable)
- `refId` (string, required, nullable)
- `title` (string, required)
- `body` (string, required, nullable)
- `status` (enum, required)
  - Allowed values: `open`, `read`, `done`
- `createdAt` (string, required)
- `updatedAt` (string, required)
- `readAt` (string, required, nullable)
- `document` (WorkspaceInboxItemDocument, optional, nullable)
- `unread` (boolean, optional)
- `audience` (enum, optional)
  - Allowed values: `space`, `user`
- `spaceId` (string, optional, nullable)
- `assignee` (string, optional, nullable)
- `claimedBy` (string, optional, nullable)
- `taskStatus` (string, optional, nullable)
- `runId` (string, optional, nullable)
- `threadId` (string, optional, nullable)
- `runCreatedAt` (string, optional, nullable)
- `playbookName` (string, optional, nullable)
- `startedBy` (string, optional, nullable)
- `runStatus` (string, optional, nullable)
- `failureAt` (string, optional, nullable)
- `initializationPending` (boolean, optional)
- `legacyImportPending` (boolean, optional)
- `unattended` (boolean, optional, nullable)
- `connectionId` (string, optional, nullable)
- `reauthUrl` (string, optional, nullable)
- `brokenCode` (string, optional, nullable)

### WorkspaceInboxItemDocument

- `artifactId` (string, required)
- `threadId` (string, required)

## Examples

**Response**

```json
{
  "data": [
    {
      "id": "string",
      "userId": "string",
      "kind": "approval",
      "sessionId": "string",
      "turnId": "string",
      "refId": "string",
      "title": "string",
      "body": "string",
      "status": "open",
      "createdAt": "string",
      "updatedAt": "string",
      "readAt": "string",
      "document": {
        "artifactId": "string",
        "threadId": "string"
      },
      "unread": true,
      "audience": "space",
      "spaceId": "string",
      "assignee": "string",
      "claimedBy": "string",
      "taskStatus": "string",
      "runId": "string",
      "threadId": "string",
      "runCreatedAt": "string",
      "playbookName": "string",
      "startedBy": "string",
      "runStatus": "string",
      "failureAt": "string",
      "initializationPending": true,
      "legacyImportPending": true,
      "unattended": true,
      "connectionId": "string",
      "reauthUrl": "string",
      "brokenCode": "string"
    }
  ],
  "nextCursor": "string",
  "unreadCount": 1,
  "totalCount": 1
}
```

**SDK Code**

```python
import requests

url = "https://api.cloudraker.com/workspace/inbox"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.json())
```

```javascript
const url = 'https://api.cloudraker.com/workspace/inbox';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```go
package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.cloudraker.com/workspace/inbox"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

```ruby
require 'uri'
require 'net/http'

url = URI("https://api.cloudraker.com/workspace/inbox")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body
```

```java
import com.mashape.unirest.http.HttpResponse;
import com.mashape.unirest.http.Unirest;

HttpResponse<String> response = Unirest.get("https://api.cloudraker.com/workspace/inbox")
  .header("Authorization", "Bearer <token>")
  .asString();
```

```php
<?php
require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('GET', 'https://api.cloudraker.com/workspace/inbox', [
  'headers' => [
    'Authorization' => 'Bearer <token>',
  ],
]);

echo $response->getBody();
```

```csharp
using RestSharp;

var client = new RestClient("https://api.cloudraker.com/workspace/inbox");
var request = new RestRequest(Method.GET);
request.AddHeader("Authorization", "Bearer <token>");
IRestResponse response = client.Execute(request);
```

```swift
import Foundation

let headers = ["Authorization": "Bearer <token>"]

let request = NSMutableURLRequest(url: NSURL(string: "https://api.cloudraker.com/workspace/inbox")! as URL,
                                        cachePolicy: .useProtocolCachePolicy,
                                    timeoutInterval: 10.0)
request.httpMethod = "GET"
request.allHTTPHeaderFields = headers

let session = URLSession.shared
let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in
  if (error != nil) {
    print(error as Any)
  } else {
    let httpResponse = response as? HTTPURLResponse
    print(httpResponse)
  }
})

dataTask.resume()
```