--- title: Mode API Integration on Truto slug: mode category: Analytics canonical: "https://truto.one/integrations/detail/mode/" --- # Mode API Integration on Truto **Category:** Analytics **Status:** Generally available ## Unified APIs ### Unified User Directory API - **Groups** — Groups are a collection of users in the source application. In some applications, they might also be called Teams. - **Roles** — The Role object represents a role of a User. - **Users** — The User object represents a User. ## How it works 1. **Link your customer's Mode account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Mode.** The Proxy API is a 1-to-1 mapping of the Mode API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Automate Mode user provisioning and deprovisioning** — SaaS companies building identity governance or SaaS management platforms need to sync employee lifecycle events to Mode — automatically creating accounts when analysts join and revoking access the moment they leave, preventing unauthorized access to sensitive data warehouse connections. - **Enforce least-privilege access across analytics tools** — Security and compliance platforms can pull Mode's user directory, group memberships, and role assignments to audit who holds Admin privileges, flag over-provisioned accounts, and enforce the Principle of Least Privilege across a customer's entire SaaS stack. - **Sync IdP groups to Mode for connection-level access control** — IT automation platforms can map identity provider groups to Mode Groups, ensuring that database connection access and report collection visibility stay perfectly aligned with organizational roles — without manual configuration inside Mode. - **Enable just-in-time privileged access to analytics data** — Cloud access management tools can temporarily add engineers to privileged Mode Groups when they request access to sensitive production data, then automatically revoke that group membership after a defined time window expires. - **Consolidate analytics license management** — SaaS spend management platforms can enumerate Mode users, detect inactive accounts still consuming paid seats, and trigger deprovisioning workflows to reclaim licenses and reduce costs. ## What you can build - **Automated Mode user lifecycle sync** — Provision and deprovision Mode user accounts in real time based on HR system or IdP events, using Truto's Unified User Directory API for Users. - **Cross-platform group membership reconciliation** — Continuously sync group memberships between your customers' identity providers and Mode Groups to keep report collection and database connection access aligned. - **Admin privilege audit dashboard** — Surface a real-time view of all Mode users with Admin roles so security teams can spot over-privileged accounts and take corrective action from your product. - **Time-bound privileged group access grants** — Let end users request temporary membership in sensitive Mode Groups and automatically revoke access after a configurable TTL, enforcing zero-standing-privilege policies. - **Inactive user detection and license reclamation** — Identify Mode users who haven't been active and trigger automated deprovisioning or downgrade workflows to optimize license spend. - **Unified role normalization across BI tools** — Map Mode's role model (Admin, Member, etc.) into your product's standardized permission taxonomy alongside other analytics platforms using Truto's Unified Roles resource. ## FAQs ### What Unified APIs does Truto support for Mode? Mode is supported through Truto's Unified User Directory API, which covers Users, Groups, and Roles resources. This lets you manage identity and access across Mode alongside other SaaS applications through a single API. ### Are there pre-built Truto tools for Mode? No pre-built tools are available yet. Mode tools are built on request — reach out to the Truto team and they'll scope and build the specific operations you need. ### How does authentication work for Mode integrations? Mode's API supports token-based authentication using API tokens tied to a user account. Truto handles the credential storage and token management so your end users can connect their Mode workspace without you building custom auth flows. ### Can I manage Mode Groups and their memberships through Truto? Yes. The Unified User Directory API includes a Groups resource, which maps to Mode's Groups — the mechanism that governs access to database connections and report collections. You can list, create, and manage group memberships programmatically. ### Does Mode support SCIM provisioning? Mode offers SCIM support on enterprise plans for automated user provisioning and deprovisioning. Truto's Unified User Directory API can work with Mode's REST API and SCIM endpoints to provide consistent user lifecycle management. ### What kind of rate limits should I expect from Mode's API? Mode applies rate limits to its REST API, though specific thresholds depend on your plan. Truto handles pagination and request throttling automatically, so you don't need to manage retry logic or rate limit backoff in your application code.