API DocsOffice Capabilities

Office Capabilities

A versioned inventory of Office API operations, explicit limits and unsupported provider adapters.

This read-only endpoint exposes a versioned capability manifest for the anymize Office API. Clients can detect features without assuming product parity with Google Workspace or Microsoft 365.

No product-parity claim

A GA status applies only within the declared limits. The manifest remains deliberately incomplete and separates the anymize API from external product capabilities.

Endpoint

GET/api/v1/office/capabilities?provider=anymize

Authenticate with an existing session or an anymize API key as a Bearer token. The endpoint reads no documents and makes no Google or Microsoft provider request.

Parameter	Type	Default	Description
`provider`Required	`anymize \| google \| microsoft`	-	Required exactly once. Selects the manifest to describe, but does not connect to that provider.

Request

1curl "https://app.anymize.ai/api/v1/office/capabilities?provider=anymize" \
2  -H "Authorization: Bearer YOUR_API_KEY"

Response contract

schemaVersion versions the response shape. manifestVersion identifies the immutable capability snapshot and changes with statuses, limits or reasons. Capability IDs remain stable.

200200 OK, abbreviated anymize manifest

{
  "schemaVersion": "1.0.0",
  "manifestVersion": "2026-08-27.1",
  "scope": "anymize.office.workspace.v1",
  "provider": "anymize",
  "transport": "native",
  "makesProviderRequests": false,
  "coverage": {
    "target": "declared_subset",
    "complete": false,
    "productParityClaim": false
  },
  "capabilities": [
    {
      "id": "spreadsheets.read.xlsx",
      "domain": "spreadsheets",
      "status": "ga",
      "limits": [
        {
          "key": "format",
          "value": "xlsx"
        },
        {
          "key": "maxSheets",
          "value": 50,
          "unit": "sheets"
        },
        {
          "key": "maxRowsPerRead",
          "value": 500,
          "unit": "rows"
        },
        {
          "key": "formulaValues",
          "value": "local-evaluation-with-cache-fallback"
        },
        {
          "key": "sheetTabs",
          "value": "visible-only"
        },
        {
          "key": "sheetProtectionPreflight",
          "value": true
        }
      ],
      "reason": {
        "code": "MEASURED_AVAILABLE",
        "summary": "The native OOXML projection reads bounded worksheet windows and evaluates formulas locally when possible."
      }
    }
  ]
}

The production response contains the complete ordered declared subset. The example shows one entry only.

Limits are normative. New entries now cover path resolution, resumable uploads, search, previews, delta sync, remote mounts, shares, workspace comments, spreadsheet search and analysis.

Capability statuses

Status	Contract
`ga`	The explicitly bounded API slice is implemented and covered by production tests.
`preview`	A safe subset is usable, while scope or edge cases remain intentionally incomplete.
`unsupported`	The API does not perform the operation. Its reason and limits explain the gap.

Google and Microsoft comparison

This matrix separates the current anymize contract from officially documented product capabilities. It is a planning reference, not a claim that provider adapters are already available.

Capability	anymize	Google	Microsoft	Practical gap	Official docs
File lifecycle	GA	GA	GA	anymize covers workspace files. Shared Drives, sites and drive selection need provider adapters.	Google Microsoft
Resumable upload	GA	GA	GA	anymize supports sessions up to 50 MiB. Provider-native sessions and larger files are missing.	Google Microsoft
Delta and triggers	Partial	GA	GA	anymize has a lossless pull cursor. Push webhooks and provider delta are missing.	Google Microsoft
Sharing and permissions	Partial	GA	GA	User and group roles are available. Public links, expiry and provider-native permissions are missing.	Google Microsoft
Spreadsheets	Partial	GA	GA	The XLSX slice is deliberately bounded. Sessions, table objects, charts, pivots and broad batch updates are missing.	Google Microsoft
Comments	Partial	GA	Partial	Workspace threads are sidecar data and do not round-trip as native Office comments.	Google Microsoft
SharePoint Lists	Unavailable	Not comparable	GA	Lists, columns, CRUD and delta are not yet available as an anymize contract.	Microsoft
Approvals	Unavailable	GA	Preview	Google is generally available. Microsoft approval creation remains beta and delegated.	Google Microsoft

Provider adapters

provider=anymize describes native workspace operations. Google and Microsoft manifests remain transport: not_implemented and make no provider request. This does not claim those products lack the feature.

200200 OK, abbreviated Microsoft manifest

{
  "schemaVersion": "1.0.0",
  "manifestVersion": "2026-08-27.1",
  "scope": "anymize.office.workspace.v1",
  "provider": "microsoft",
  "transport": "not_implemented",
  "makesProviderRequests": false,
  "coverage": {
    "target": "declared_subset",
    "complete": false,
    "productParityClaim": false
  },
  "capabilities": [
    {
      "id": "spreadsheets.read.xlsx",
      "domain": "spreadsheets",
      "status": "unsupported",
      "limits": [
        {
          "key": "providerRequests",
          "value": 0,
          "unit": "requests"
        }
      ],
      "reason": {
        "code": "PROVIDER_ADAPTER_NOT_IMPLEMENTED",
        "summary": "The microsoft product may support this operation, but the anymize Office API has no microsoft adapter for it."
      }
    }
  ]
}

Sensible next releases

Complete shared-storage selection for Google Shared Drives, OneDrive and SharePoint document libraries.
Provider-native upload sessions, delta cursors, webhooks, resume and idempotent retries.
Sharing and permissions plus SharePoint Lists with ETag-based concurrency.
Broader Sheets and Excel operations with batch updates and persistent workbook sessions.

Errors and caching

401 UNAUTHORIZED when no valid session or Bearer key is present.
400 INVALID_PROVIDER when provider is missing, repeated or invalid.
Successful responses use Cache-Control: private, no-store.