Read one settings/integration domain by key, redacted server-side; without domain_key, list the domain catalog.
Covers configuration and integration surfaces that are not part of the
generic entity allowlist (webhooks, external connections, mail
accounts, number ranges, helpdesk config, …). Secret/transport fields
are always masked. Called without ``domain_key`` it returns the static
catalog of readable domains plus the audit-log enums for
read_activity_log — no weclapp call, no ERP data; all other arguments
are ignored in catalog mode.
Args:
domain_key: Exact catalog key (e.g. "webhook"). Omit to list the
catalog of valid domain keys and audit-log enums.
filters: Objects like {"field": "settingsKey", "op": "like", "value": "x"}.
properties: Field projection; secret fields stay masked even if requested. Ignored for projection-locked domains (e.g. mailAccount), which return a fixed safe field set.
entity_id: Fetch one record by id instead of the collection.
limit: Max collection rows (capped at 100).
Returns:
Domain mode: ``{source, domain_key, kind, title, results,
untrusted_content, redaction}``. Hidden key/value stores return
their ``value`` as a shape summary, never raw content. Catalog
mode: ``{source, domains, activity_log, redaction, usage}``.