coda
Integrates with Coda API to manage documents, tables, and pages, enhancing productivity and collaboration in workspace management.
Install this skill
or
0/100
Security score
The coda skill was audited on May 16, 2026 and we found 62 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 29
Curl to non-GitHub URL
SourceSKILL.md
| 29 | curl -s "https://coda.io/apis/v1/whoami" --header "Authorization: Bearer $CODA_TOKEN" | jq '{name, loginId, type, tokenName, scoped, workspace: .workspace.name}' |
medium line 39
Curl to non-GitHub URL
SourceSKILL.md
| 39 | curl -s "https://coda.io/apis/v1/docs?limit=25" --header "Authorization: Bearer $CODA_TOKEN" | jq '.items[] | {id, name, href, browserLink, ownerName}' |
medium line 64
Curl to non-GitHub URL
SourceSKILL.md
| 64 | curl -s -X POST "https://coda.io/apis/v1/docs" --header "Authorization: Bearer $CODA_TOKEN" --header "Content-Type: application/json" -d @/tmp/coda_doc.json | jq '{id, name, browserLink}' |
medium line 79
Curl to non-GitHub URL
SourceSKILL.md
| 79 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>" --header "Authorization: Bearer $CODA_TOKEN" | jq '{id, name, browserLink, workspace: .workspace.name, ownerName, updatedAt}' |
medium line 89
Curl to non-GitHub URL
SourceSKILL.md
| 89 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/pages?limit=50" --header "Authorization: Bearer $CODA_TOKEN" | jq '.items[] | {id, name, browserLink, contentType, isHidden}' |
medium line 99
Curl to non-GitHub URL
SourceSKILL.md
| 99 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/pages/<your-page-id>" --header "Authorization: Bearer $CODA_TOKEN" | jq '{id, name, subtitle, contentType, parent: .parent.name}' |
medium line 121
Curl to non-GitHub URL
SourceSKILL.md
| 121 | curl -s -X POST "https://coda.io/apis/v1/docs/<your-doc-id>/pages/<your-page-id>/export" --header "Authorization: Bearer $CODA_TOKEN" --header "Content-Type: application/json" -d @/tmp/coda_export.jso |
medium line 127
Curl to non-GitHub URL
SourceSKILL.md
| 127 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/pages/<your-page-id>/export/<your-request-id>" --header "Authorization: Bearer $CODA_TOKEN" | jq '{status, downloadLink}' |
medium line 143
Curl to non-GitHub URL
SourceSKILL.md
| 143 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/tables?limit=50" --header "Authorization: Bearer $CODA_TOKEN" | jq '.items[] | {id, name, tableType, rowCount, browserLink}' |
medium line 155
Curl to non-GitHub URL
SourceSKILL.md
| 155 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>" --header "Authorization: Bearer $CODA_TOKEN" | jq '{id, name, rowCount, displayColumn: .displayColumn.name}' |
medium line 165
Curl to non-GitHub URL
SourceSKILL.md
| 165 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>/columns" --header "Authorization: Bearer $CODA_TOKEN" | jq '.items[] | {id, name, display, format: .format.type}' |
medium line 175
Curl to non-GitHub URL
SourceSKILL.md
| 175 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>/rows?useColumnNames=true&limit=100" --header "Authorization: Bearer $CODA_TOKEN" | jq '.items[] | {id, name, values}' |
medium line 193
Curl to non-GitHub URL
SourceSKILL.md
| 193 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>/rows/<your-row-id>?useColumnNames=true" --header "Authorization: Bearer $CODA_TOKEN" | jq '{id, name, values}' |
medium line 231
Curl to non-GitHub URL
SourceSKILL.md
| 231 | curl -s -X POST "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>/rows?disableParsing=false" --header "Authorization: Bearer $CODA_TOKEN" --header "Content-Type: application/json" -d |
medium line 255
Curl to non-GitHub URL
SourceSKILL.md
| 255 | curl -s -X PUT "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>/rows/<your-row-id>" --header "Authorization: Bearer $CODA_TOKEN" --header "Content-Type: application/json" -d @/tmp/co |
medium line 273
Curl to non-GitHub URL
SourceSKILL.md
| 273 | curl -s -X DELETE "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>/rows" --header "Authorization: Bearer $CODA_TOKEN" --header "Content-Type: application/json" -d @/tmp/coda_delete.j |
medium line 285
Curl to non-GitHub URL
SourceSKILL.md
| 285 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/mutationStatus/<your-request-id>" --header "Authorization: Bearer $CODA_TOKEN" | jq '{completed, warning}' |
medium line 295
Curl to non-GitHub URL
SourceSKILL.md
| 295 | curl -s "https://coda.io/apis/v1/resolveBrowserLink?url=<url-encoded-coda-link>" --header "Authorization: Bearer $CODA_TOKEN" | jq '{type, resource: .resource.id, href: .resource.href}' |
medium line 326
Curl to non-GitHub URL
SourceSKILL.md
| 326 | curl -s "https://coda.io/apis/v1/docs?limit=50" --header "Authorization: Bearer $CODA_TOKEN" | jq '{items: (.items | length), nextPageToken}' |
medium line 329
Curl to non-GitHub URL
SourceSKILL.md
| 329 | curl -s "https://coda.io/apis/v1/docs?limit=50&pageToken=<your-page-token>" --header "Authorization: Bearer $CODA_TOKEN" |
low line 8
External URL reference
SourceSKILL.md
| 8 | If requests fail, run `zero doctor check-connector --env-name CODA_TOKEN` or `zero doctor check-connector --url https://coda.io/apis/v1/whoami --method GET` |
low line 13
External URL reference
SourceSKILL.md
| 13 | https://coda.io/apis/v1 |
low line 29
External URL reference
SourceSKILL.md
| 29 | curl -s "https://coda.io/apis/v1/whoami" --header "Authorization: Bearer $CODA_TOKEN" | jq '{name, loginId, type, tokenName, scoped, workspace: .workspace.name}' |
low line 34
External URL reference
SourceSKILL.md
| 34 | Docs: https://coda.io/developers/apis/v1#operation/whoami |
low line 39
External URL reference
SourceSKILL.md
| 39 | curl -s "https://coda.io/apis/v1/docs?limit=25" --header "Authorization: Bearer $CODA_TOKEN" | jq '.items[] | {id, name, href, browserLink, ownerName}' |
low line 50
External URL reference
SourceSKILL.md
| 50 | Docs: https://coda.io/developers/apis/v1#operation/listDocs |
low line 64
External URL reference
SourceSKILL.md
| 64 | curl -s -X POST "https://coda.io/apis/v1/docs" --header "Authorization: Bearer $CODA_TOKEN" --header "Content-Type: application/json" -d @/tmp/coda_doc.json | jq '{id, name, browserLink}' |
low line 72
External URL reference
SourceSKILL.md
| 72 | Docs: https://coda.io/developers/apis/v1#operation/createDoc |
low line 79
External URL reference
SourceSKILL.md
| 79 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>" --header "Authorization: Bearer $CODA_TOKEN" | jq '{id, name, browserLink, workspace: .workspace.name, ownerName, updatedAt}' |
low line 82
External URL reference
SourceSKILL.md
| 82 | Docs: https://coda.io/developers/apis/v1#operation/getDoc |
low line 89
External URL reference
SourceSKILL.md
| 89 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/pages?limit=50" --header "Authorization: Bearer $CODA_TOKEN" | jq '.items[] | {id, name, browserLink, contentType, isHidden}' |
low line 92
External URL reference
SourceSKILL.md
| 92 | Docs: https://coda.io/developers/apis/v1#operation/listPages |
low line 99
External URL reference
SourceSKILL.md
| 99 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/pages/<your-page-id>" --header "Authorization: Bearer $CODA_TOKEN" | jq '{id, name, subtitle, contentType, parent: .parent.name}' |
low line 102
External URL reference
SourceSKILL.md
| 102 | Docs: https://coda.io/developers/apis/v1#operation/getPage |
low line 121
External URL reference
SourceSKILL.md
| 121 | curl -s -X POST "https://coda.io/apis/v1/docs/<your-doc-id>/pages/<your-page-id>/export" --header "Authorization: Bearer $CODA_TOKEN" --header "Content-Type: application/json" -d @/tmp/coda_export.jso |
low line 127
External URL reference
SourceSKILL.md
| 127 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/pages/<your-page-id>/export/<your-request-id>" --header "Authorization: Bearer $CODA_TOKEN" | jq '{status, downloadLink}' |
low line 136
External URL reference
SourceSKILL.md
| 136 | Docs: https://coda.io/developers/apis/v1#tag/Pages/operation/beginContentExport |
low line 143
External URL reference
SourceSKILL.md
| 143 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/tables?limit=50" --header "Authorization: Bearer $CODA_TOKEN" | jq '.items[] | {id, name, tableType, rowCount, browserLink}' |
low line 148
External URL reference
SourceSKILL.md
| 148 | Docs: https://coda.io/developers/apis/v1#operation/listTables |
low line 155
External URL reference
SourceSKILL.md
| 155 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>" --header "Authorization: Bearer $CODA_TOKEN" | jq '{id, name, rowCount, displayColumn: .displayColumn.name}' |
low line 158
External URL reference
SourceSKILL.md
| 158 | Docs: https://coda.io/developers/apis/v1#operation/getTable |
low line 165
External URL reference
SourceSKILL.md
| 165 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>/columns" --header "Authorization: Bearer $CODA_TOKEN" | jq '.items[] | {id, name, display, format: .format.type}' |
low line 168
External URL reference
SourceSKILL.md
| 168 | Docs: https://coda.io/developers/apis/v1#operation/listColumns |
low line 175
External URL reference
SourceSKILL.md
| 175 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>/rows?useColumnNames=true&limit=100" --header "Authorization: Bearer $CODA_TOKEN" | jq '.items[] | {id, name, values}' |
low line 186
External URL reference
SourceSKILL.md
| 186 | Docs: https://coda.io/developers/apis/v1#operation/listRows |
low line 193
External URL reference
SourceSKILL.md
| 193 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>/rows/<your-row-id>?useColumnNames=true" --header "Authorization: Bearer $CODA_TOKEN" | jq '{id, name, values}' |
low line 196
External URL reference
SourceSKILL.md
| 196 | Docs: https://coda.io/developers/apis/v1#operation/getRow |
low line 231
External URL reference
SourceSKILL.md
| 231 | curl -s -X POST "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>/rows?disableParsing=false" --header "Authorization: Bearer $CODA_TOKEN" --header "Content-Type: application/json" -d |
low line 236
External URL reference
SourceSKILL.md
| 236 | Docs: https://coda.io/developers/apis/v1#operation/upsertRows |
low line 255
External URL reference
SourceSKILL.md
| 255 | curl -s -X PUT "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>/rows/<your-row-id>" --header "Authorization: Bearer $CODA_TOKEN" --header "Content-Type: application/json" -d @/tmp/co |
low line 258
External URL reference
SourceSKILL.md
| 258 | Docs: https://coda.io/developers/apis/v1#operation/updateRow |
low line 273
External URL reference
SourceSKILL.md
| 273 | curl -s -X DELETE "https://coda.io/apis/v1/docs/<your-doc-id>/tables/<your-table-id>/rows" --header "Authorization: Bearer $CODA_TOKEN" --header "Content-Type: application/json" -d @/tmp/coda_delete.j |
low line 276
External URL reference
SourceSKILL.md
| 276 | Docs: https://coda.io/developers/apis/v1#operation/deleteRows |
low line 285
External URL reference
SourceSKILL.md
| 285 | curl -s "https://coda.io/apis/v1/docs/<your-doc-id>/mutationStatus/<your-request-id>" --header "Authorization: Bearer $CODA_TOKEN" | jq '{completed, warning}' |
low line 288
External URL reference
SourceSKILL.md
| 288 | Docs: https://coda.io/developers/apis/v1#operation/getMutationStatus |
low line 295
External URL reference
SourceSKILL.md
| 295 | curl -s "https://coda.io/apis/v1/resolveBrowserLink?url=<url-encoded-coda-link>" --header "Authorization: Bearer $CODA_TOKEN" | jq '{type, resource: .resource.id, href: .resource.href}' |
low line 298
External URL reference
SourceSKILL.md
| 298 | Docs: https://coda.io/developers/apis/v1#operation/resolveBrowserLink |
low line 302
External URL reference
SourceSKILL.md
| 302 | - **Doc ID**: the 10-character code after `_d` in a Coda URL. `https://coda.io/d/My-Doc_dABC123xyz0/...` → doc ID is `ABC123xyz0`. |
low line 326
External URL reference
SourceSKILL.md
| 326 | curl -s "https://coda.io/apis/v1/docs?limit=50" --header "Authorization: Bearer $CODA_TOKEN" | jq '{items: (.items | length), nextPageToken}' |
low line 329
External URL reference
SourceSKILL.md
| 329 | curl -s "https://coda.io/apis/v1/docs?limit=50&pageToken=<your-page-token>" --header "Authorization: Bearer $CODA_TOKEN" |
low line 340
External URL reference
SourceSKILL.md
| 340 | - API root: https://coda.io/developers/apis/v1 |
low line 341
External URL reference
SourceSKILL.md
| 341 | - API token settings: https://coda.io/account (Account Settings → API Settings) |
Scanned on May 16, 2026
View Security Dashboard