Project users, people, vendors, memberships, assignments, distribution groups, insurance, and permission operations. Generated from a point-in-time SHA-256 inventory of 610 official Procore OpenAPI resource documents retrieved 2026-07-20. This pack carries 60 of the suite's 2805 admitted operations. The vendor publishes the resources as separate moving documents, so this composition deliberately carries no misleading single-document OpenAPI pin. Enroll one production OAuth authorization-code connection for the fixed https://api.procore.com origin. Supply the documented Procore-Company-Id header when an operation requires it. Reads are uncached and are marked sensitive-read where the response can carry directory, financial, or personnel detail; every mutation requires approval, beta endpoints are labeled, and unsafe JSON response integers are preserved as strings. OAuth/token lifecycle, support PINs, BIM mint tokens, multipart-only requests, and the deferred beta Document Management v2 surface are excluded. No task, note, or project Source is claimed without the guide-mandated live field-path verification.