| name | airtable |
| description | Read and write Airtable bases, tables, and records directly via the REST API and curl — CRUD, filterByFormula, upserts, pagination.
Use when: "найди записи в airtable", "добавь строку в airtable", "обнови запись в airtable", "query my airtable base", "add a record to airtable", "update airtable rows"
|
Airtable — Bases, Tables & Records
Work with Airtable's REST API directly via curl in Bash. No MCP server, no OAuth flow, no Python SDK — just curl and a personal access token.
Prerequisites
- Create a Personal Access Token (PAT) at https://airtable.com/create/tokens (tokens start with
pat...).
- Grant these scopes (minimum):
data.records:read — read rows
data.records:write — create / update / delete rows
schema.bases:read — list bases and tables
- Important: in the same token UI, add each base you want to access to the token's Access list. PATs are scoped per-base — a valid token on the wrong base returns
403.
- Store the token as the
AIRTABLE_API_KEY environment variable (e.g. export it from your shell profile or a secrets file like ~/.config/openai_key.sh):
export AIRTABLE_API_KEY=pat_your_token_here
Note: legacy key... API keys were deprecated Feb 2024. Only PATs and OAuth tokens work now.
API Basics
- Endpoint:
https://api.airtable.com/v0
- Auth header:
Authorization: Bearer $AIRTABLE_API_KEY
- All requests use JSON (
Content-Type: application/json for any POST/PATCH/PUT body).
- Object IDs: bases
app..., tables tbl..., records rec..., fields fld.... IDs never change; names can. Prefer IDs in automations.
- Rate limit: 5 requests/sec/base.
429 → back off. Burst on a single base will be throttled.
Base curl pattern:
curl -s "https://api.airtable.com/v0/$BASE_ID/$TABLE?maxRecords=5" \
-H "Authorization: Bearer $AIRTABLE_API_KEY" | python3 -m json.tool
-s suppresses curl's progress bar — keep it set for every call so the output stays clean. Pipe through python3 -m json.tool (always present) or jq (if installed) for readable JSON.
Common Queries
List bases the token can see
curl -s "https://api.airtable.com/v0/meta/bases" \
-H "Authorization: Bearer $AIRTABLE_API_KEY" | python3 -m json.tool
List tables + schema for a base
curl -s "https://api.airtable.com/v0/meta/bases/$BASE_ID/tables" \
-H "Authorization: Bearer $AIRTABLE_API_KEY" | python3 -m json.tool
Use this BEFORE mutating — confirms exact field names and IDs, surfaces options.choices for select fields, and shows primary-field names.
List records (first 10)
curl -s "https://api.airtable.com/v0/$BASE_ID/$TABLE?maxRecords=10" \
-H "Authorization: Bearer $AIRTABLE_API_KEY" | python3 -m json.tool
Get a single record
curl -s "https://api.airtable.com/v0/$BASE_ID/$TABLE/$RECORD_ID" \
-H "Authorization: Bearer $AIRTABLE_API_KEY" | python3 -m json.tool
Filter records (filterByFormula)
Airtable formulas must be URL-encoded. Let Python stdlib do it — never hand-encode:
FORMULA="{Status}='Todo'"
ENC=$(python3 -c 'import sys, urllib.parse; print(urllib.parse.quote(sys.argv[1], safe=""))' "$FORMULA")
curl -s "https://api.airtable.com/v0/$BASE_ID/$TABLE?filterByFormula=$ENC&maxRecords=20" \
-H "Authorization: Bearer $AIRTABLE_API_KEY" | python3 -m json.tool
Useful formula patterns:
- Exact match:
{Email}='user@example.com'
- Contains:
FIND('bug', LOWER({Title}))
- Multiple conditions:
AND({Status}='Todo', {Priority}='High')
- Or:
OR({Owner}='alice', {Owner}='bob')
- Not empty:
NOT({Assignee}='')
- Date comparison:
IS_AFTER({Due}, TODAY())
Sort + select specific fields
curl -s "https://api.airtable.com/v0/$BASE_ID/$TABLE?sort%5B0%5D%5Bfield%5D=Priority&sort%5B0%5D%5Bdirection%5D=asc&fields%5B%5D=Name&fields%5B%5D=Status" \
-H "Authorization: Bearer $AIRTABLE_API_KEY" | python3 -m json.tool
Square brackets in query params MUST be URL-encoded (%5B / %5D).
Use a named view
curl -s "https://api.airtable.com/v0/$BASE_ID/$TABLE?view=Grid%20view&maxRecords=50" \
-H "Authorization: Bearer $AIRTABLE_API_KEY" | python3 -m json.tool
Views apply their saved filter + sort server-side.
Writing Records
Creating, updating, upserting, or deleting records? Build the request bodies from writing-records.md — write shape per field type, single/batch create, PATCH vs PUT, upserts by merge field, deletes, typecast, write-specific pitfalls. Read-only tasks skip it.
Pagination
List endpoints return at most 100 records per page. If the response includes "offset": "...", pass it back on the next call. Loop until the field is absent:
OFFSET=""
while :; do
URL="https://api.airtable.com/v0/$BASE_ID/$TABLE?pageSize=100"
[ -n "$OFFSET" ] && URL="$URL&offset=$OFFSET"
RESP=$(curl -s "$URL" -H "Authorization: Bearer $AIRTABLE_API_KEY")
echo "$RESP" | python3 -c 'import json,sys; d=json.load(sys.stdin); [print(r["id"], r["fields"].get("Name","")) for r in d["records"]]'
OFFSET=$(echo "$RESP" | python3 -c 'import json,sys; d=json.load(sys.stdin); print(d.get("offset",""))')
[ -z "$OFFSET" ] && break
done
Typical Workflow
- Confirm auth.
curl -s -o /dev/null -w "%{http_code}\n" https://api.airtable.com/v0/meta/bases -H "Authorization: Bearer $AIRTABLE_API_KEY" — expect 200.
- Find the base. List bases (step above) OR ask the user for the
app... ID directly if the token lacks schema.bases:read.
- Inspect the schema.
GET /v0/meta/bases/$BASE_ID/tables — cache the exact field names and primary-field name locally in the session before mutating anything.
- Read before you write. For "update X where Y",
filterByFormula first to resolve the rec... ID, then PATCH /v0/$BASE_ID/$TABLE/$RECORD_ID. Never guess record IDs.
- Batch writes. Combine related creates into one 10-record POST to stay under the 5 req/sec budget.
- Destructive ops. Deletions can't be undone via API. If the user says "delete all Xs", echo back the filter + record count and confirm before firing.
Pitfalls
filterByFormula MUST be URL-encoded. Field names with spaces or non-ASCII also need encoding ({My Field} → %7BMy%20Field%7D). Use Python stdlib (pattern above) — never hand-escape.
- Empty fields are omitted from responses. A missing
"Assignee" key doesn't mean the field doesn't exist — it means this record's value is empty. Check the schema (step 3) before concluding a field is missing.
- Per-base token scoping. A
403 on one base while another works means the token's Access list doesn't include that base — not a scope or auth issue. Send the user to https://airtable.com/create/tokens to grant it.
- Rate limits are per base, not per token. 5 req/sec on
baseA and 5 req/sec on baseB is fine; 6 req/sec on baseA alone will throttle. Monitor the Retry-After header on 429.
Important Notes
- Always use Bash with
curl. Do NOT use a web-fetch tool (it can't send auth headers) or a browser (needs UI auth and is slow).
- Make sure
AIRTABLE_API_KEY is exported in the environment before running curl calls (see Prerequisites).
- Escape curly braces in formulas carefully. In a heredoc body,
{Status} is literal. In a shell argument, {Status} is safe outside {...} brace-expansion context — but pass dynamic strings through python3 urllib.parse.quote before splicing into a URL.
- Pretty-print with
python3 -m json.tool (always present) rather than jq (optional). Only reach for jq when you need filtering/projection.
- Pagination is per-page, not global. Airtable's 100-record cap is a hard limit; there is no way to bump it. Loop with
offset until the field is absent.
- Read the
errors array on non-2xx responses — Airtable returns structured error codes like AUTHENTICATION_REQUIRED, INVALID_PERMISSIONS, MODEL_ID_NOT_FOUND, INVALID_MULTIPLE_CHOICE_OPTIONS that tell you exactly what's wrong.