Building a custom extension

Overview

OpenAPI (formerly known as Swagger) is an open standard for describing and documenting REST APIs. An OpenAPI document defines the resources and operations that are supported by an API, including request parameters and response data, along with details such as server URLs and authentication methods.

An OpenAPI document describes a REST API in terms of paths and operations. A path identifies a particular resource that can be accessed by using the API (for example, a hotel reservation or a customer record). An operation defines a particular action that can be performed on that resource (such as creating, retrieving, updating, or deleting it).

The OpenAPI document specifies all of the details for each operation, including the HTTP method that is used, request parameters, the data included in the request body, and the structure of the response body.

For more information about the OpenAPI specification, see OpenAPI Specification.

When you create a custom extension, you import an OpenAPI document that describes the REST API of an external service. IBM® watsonx™ Assistant parses the OpenAPI document to identify the operations supported by the external service, along with information about the input parameters and response for each operation and supported authentication methods.

After this processing is complete, the custom extension becomes available as a new integration that you can connect to the assistant. Your assistant can then use the extension to send requests to the external service based on conversations with your customers. Values that are included in the response from the service are then mapped to action variables, which can be accessed by subsequent action steps.

(For more information about connecting a custom extension to an assistant, see Add a custom extension.)

Preparing the API definition

To create a custom extension, you need access to an OpenAPI document that describes the REST API you want to integrate with. Many third-party services publish OpenAPI documents that describe their APIs, which you can download and import. For an API that your company maintains, you can use standard tools to create an OpenAPI document that describes it.

The SwaggerHub website offers an OpenAPI 3.0 Tutorial, and tools to help you develop and validate your OpenAPI document. You can use the online Swagger editor to convert your OpenAPI document to the correct format and OpenAPI version.

The OpenAPI document must satisfy the following requirements and restrictions:

• The document must conform to the OpenAPI 3.0 specification. If you have an OpenAPI (or Swagger) document that uses an earlier version of the specification, you can use the online Swagger editor to convert it to OpenAPI 3.0.

• The document must be in JSON format (YAML is not supported). If you have a YAML document, you can use the online Swagger editor to convert it to JSON.

• The request body in the JSON script must be presented as an object. For example:

  {
      name: "Bob",
      hobbies: ["sleeping", "eating", "walking"]
  }
  

• The size of the document must not be more than 4 MB if you have a Plus or higher plan of watsonx Assistant. However, if you have an Enteprise plan with data isolation, the size of the document must not be more than 8 MB.

• The content-type must be application/json.

• To stream from an extension, the response content-type must be text/event-stream.

• Each operation must have a clear and concise summary. The summary text is used in the UI to describe the operations that are available from an action, so it should be short and meaningful to someone who is building an assistant.

• Relative URLs are currently not supported.

• Only Basic, Bearer, OAuth 2.0, and API key authentication are supported.

• For OAuth 2.0 authentication, Authorization Code, Client Credentials, Password, and custom grant types that starts with x- are supported. Note that x- is used by the IBM IAM authentication mechanism and by watsonx.

• Schemas that are defined by using anyOf, oneOf, and allOf are currently not supported.

Adhering to the response timeout limit

You must adhere to the response timeout limit, which is 30 seconds, while calling an external API. The timeout value for a custom extension is not configurable.

Building the custom extension

To build a custom extension based on the API definition, follow these steps:

1. Go to the Integrations page.

2. Scroll to the Extensions section and click Build custom extension.

3. Read the Get started information and click Next to continue.

4. In the Basic information step, specify the following information about the extension you are creating:

   • Extension name: A short, descriptive name for the extension (for example, CRM system or Weather service). This name that is displayed on the tile for the extension on the Integrations page, and in the list of available extensions in the action editor.
   • Extension description: A brief summary of the extension and what it does. The description is available from the Integrations page.

   Click Next.

5. In the Import OpenAPI step, click or drag to add the OpenAPI document that describes the REST API you want to integrate with.

   If you encounter an error when you try to import the JSON file, make sure the file satisfies all requirements listed in Preparing the API definition. Edit the file to correct errors or remove unsupported features. Click the X to clear the error message, and try the import again.

   After you import the file successfully, click Next.

6. In the Manage extension step, you can review and replace the imported OpenAPI document if required. For more information about replacing the OpenAPI document, see Replacing the OpenAPI document.

7. In the Authentication tab, you see information about the authentication methods that are defined in the OpenAPI document. Table. Fields in Authentication tab gives details about the fields in the Authentication tab:

   Field name	Description	Values
   Authentication type	The type of authentication set up in the OpenAPI script.	- OAuth 2.0 - Basic Auth - API key auth - Bearer auth
   Username	The username credential in the OpenAPI script.	For example, user
   Password	The password credential set up in the OpenAPI script.	For example, Password@123
   Servers	The link to the server that is defined in the Open API document to connect. to the API extension.	For example, https://custom-extension-server.xyz

8. The Review operations table shows the operations that the assistant is able to call from an action step. An operation is a request by using a particular HTTP method, such as GET or POST, on a particular resource.

   

    For each operation, a row in the table shows the following information:
   

   • Operation: A description of the operation, which is derived from either the summary (if present) or description in the OpenAPI file.
   • Method: The HTTP method used to send the API request for the operation.
   • Resource: The path to the resource the operation acts upon.

   To see more information about an operation, click the icon next to its row in the table. The following details are shown:

   • Request parameters: The list of input parameters defined for the operation, along with the type of each parameter and whether the parameter is required or optional.
   • Response properties: The properties of the response body that are mapped to variables the assistant can access.

9. If you are satisfied with the extension, click Finish.

   If you want to change something, delete the extension, edit the JSON file to make your changes, and repeat the import process.

The new extension is now available as a tile in the Extensions section of the integrations catalog, and you can add it to your assistant.