Aiven organizations, application users, identity providers, domains, groups, invitations, governance access, and permissions. Generated from Aiven's hash-locked official OpenAPI 3.0.1 snapshot (aedf71cf0f9d…) and carries 51 of the suite's 399 nondeprecated operations. The mutable vendor URL must retain the reviewed byte length and SHA-256 before regeneration. Pick the Aiven connection whose Authorization header contains the complete aivenv1 token value for api.aiven.io. Wire paths carry /v1 while the documentary path alias strips that server prefix before proof. Four optional repeated query filters whose item schemas are absent are omitted because the closed request-schema gate cannot express arrays. JSON bodies remain verbatim, unsafe response integers remain exact strings, binary downloads become private file_refs, reads are uncached and not approval-gated, and every mutation requires approval. No infrastructure container or runtime execution is misrepresented as a task, note, or project Source.