Table API
Turn on Expose to API on an entity and Management publishes a documented REST surface for it. The Table API screen renders the live, auto-generated OpenAPI 3 reference for every exposed entity — paths, sysparm_* query parameters, field schemas and the API-key / OAuth2 security schemes — plus a link to the raw spec.

Every call is authenticated and runs under the caller's own permissions — row visibility filters what a list returns and field projection strips fields the caller may not read — so the reference only ever describes what that caller may see. A caller authenticates with an API key or an OAuth2 bearer. The same entities also drive the per-entity table nodes in the WP-PFWorkflow editor.