- Where the pair comes from. An account Owner copies both from the Builder under Settings > API (Next-Gen apps: Settings > API & Code > API). The same page shows the plan’s daily call limit.
- Field names, not labels. Knack stores each column as
field_1,field_2, and so on.applications.getandobjects.getreturn each field’s key beside its name, so read those first to learn whichfield_Nto send. - Read-only mirrors. Every value comes back twice:
field_23is the display string andfield_23_rawis the typed form. Only the plainfield_Nis writable; the plugin rejects a_rawor_htmlkey in a write rather than sending it. - A missing record is not a 404. Knack answers 200 with an empty records list for an id that does not exist, and 200 with
{}for an object key that is not in the app.records.getandobjects.getraise on those answers, so a missing record cannot look like one with no fields. - Filters need their index. Knack reads
filters[0][field],filters[0][operator]andfilters[0][value]. The unindexed form is silently ignored and returns every record, so the plugin builds the indexed names itself. - Rate limits. 10 requests a second for every plan, answered as a 429 whose body is the plain text
Rate limit exceeded. A short window is retried; a 429 that saysPlan Limit Exceeded, or a reset more than a minute away, is the daily plan allowance and fails immediately. - HIPAA apps are not supported. The plugin calls
api.knack.com. Apps moved to Knack’s HIPAA environment before July 1, 2026 must useusgc-api.knack.com, so their requests are rejected. - Records only, not app structure. The plugin reads tables and fields, and writes records. Creating tables or fields is not part of the REST API.
- Webhooks. The plugin does not receive webhooks; Knack exposes no subscription call.
- 8 typed API operations
Setup
1
Install
2
Add the plugin
corsair.ts
multiTenancy: true, scope calls with corsair.withTenant(id). See Quick start for KEK + Hub keys, and Multi-tenancy for account isolation.3
Choose authentication
- API Key (Recommended)
No setup required yet. When you make your first request as a tenant, Corsair prompts for the API key.More: API Key
4
Connect a tenant
Mint a connect link and send the tenant to it. Hub hosts the page and delivers the result to your app — see Connect / OAuth.
Example API calls
List the tables in the appWhat’s next
API reference
Every
knack.api.* operation with input and output types.Connect / OAuth
createLink, Hub delivery, and tenant connect flows.
Use with agents
Expose this plugin’s operations as MCP tools.