listContactSuggestions
A contact's pending suggestion cards, newest first.
A contact's pending suggestion cards, newest first: what each proposes (action: a text or email reply and its words, a note, a task, a booking, a fix to the record), with how sure it is. dirtyAt set means the conversation moved on since it was written. The ids the suggestion ops below take.
curl https://server.goliathdata.com/api/v1/call \
-H "Authorization: Bearer $GOLIATH_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"operationId": "listContactSuggestions",
"variables": {
"contactId": "<contactId>"
}
}'import { GoliathClient } from '@goliath-data/sdk'
const goliath = new GoliathClient({
apiKey: process.env.GOLIATH_API_KEY!,
baseUrl: 'https://server.goliathdata.com',
})
const result = await goliath.contacts.listContactSuggestions({
contactId: '<contactId>'
})const res = await fetch('https://server.goliathdata.com/api/v1/call', {
method: 'POST',
headers: {
Authorization: `Bearer ${process.env.GOLIATH_API_KEY}`,
'Content-Type': 'application/json',
},
body: JSON.stringify({
operationId: 'listContactSuggestions',
variables: {
contactId: '<contactId>'
}
}),
})
const { data, errors } = await res.json()Variables
The example sends only what the schema requires. Some operations also need one of several optional variables (one filter or another, say); the description above says which.
Response
What comes back under data: a list shows as one entry, and a value as its type.
{
"data": {
"contactSuggestionQuery": {
"contactSuggestions": [
{
"id": "<ID>",
"contactId": "<ID>",
"status": "PENDING",
"confidence": 0,
"confidenceReason": "…",
"action": "…",
"createdAt": "2026-01-01T00:00:00.000Z",
"dirtyAt": "2026-01-01T00:00:00.000Z",
"pairedReplyId": "<ID>"
}
]
}
}
}Errors
unknown_variableA variable the operation does not declare. A typo is refused rather than silently dropped.
unauthorizedNo bearer header, or the key is invalid or revoked.
insufficient_scopeThe key lacks the scope the operation requires.
forbiddenA referenced record does not exist, was deleted, or is outside your organization. The gateway cannot tell those apart.
Behaviour
A read. It rejects an Idempotency-Key header with 400 bad_request.