CrystalSlate access

Enter your work email to confirm that your organization has active CrystalSlate access. Smartsheet permissions are checked after this step.

Contact admin
📋

Drop your Seat Type Report CSV here

or click to browse — export from Smartsheet Admin → Reports → Seat Type

Required columns: UserID · Name · Email · Seat Type · Billing · User Status
Last Activity (UTC) · Last Paid Activity (UTC) · # of Edits (Last 365 days) · # of Created Assets (Last 365 days) · # of Comments (Last 365 days)
Click Load groups to fetch from Smartsheet.

Select a group

Pick a group from the list on the left to view members or run a domain-based sync.

Inventory

Load workspaces to build the inventory.
Click Load workspaces to begin.

Select an asset

Click any workspace, folder, sheet, report, or dashboard in the tree to see its metadata, IDs, and (for sheets) column structure.

Sharing risk

Read-only asset exposure snapshot from the shared inventory model. Deep per-sheet sharing scans will plug into this tab later.

Any userRead-only
Loading…
Event Reporting isn't enabled on this Smartsheet plan. Smartsheet's GET /events endpoint is gated behind the Event Reporting add-on (Business and Enterprise plans). On plans without it, the endpoint returns 403 Forbidden and queries here will fail. The section and its UI are kept ready so it can be used immediately if Event Reporting is added to your plan in the future.

Filters

GET /events is paginated; the portal walks streamPosition until Max events is reached. Smartsheet retains audit events for ~7 days; anything older isn't accessible via this API.

Portal activity

Server-side record of write operations started from this portal. This complements Smartsheet Event Reporting and keeps portal actions visible even when Event Reporting is not enabled.

Endpoint health tester

Probes every Smartsheet API endpoint the portal calls. Read endpoints fire a real call; write endpoints fire a deliberately-invalid call against a fake id and treat any Smartsheet error code response as a healthy endpoint (proves the route exists). 404 with no errorCode field means the endpoint is missing — either deprecated or renamed.

Color key: OK WARN FAIL SKIP

Testing…

Connection

Token lives in browser memory for this session only — unless you opt in to encrypted save below. Organization name and validated domains are saved on this machine (browser localStorage, pinned to port 8765) so they persist across launches. Plan ID is saved only if you check the "Remember" box.

Smartsheet → Personal Settings → API Access → Generate new access token
Idle

Access diagnostics

Role, plan, and feature visibility checks for the current connection.

Appearance

Choose the portal theme for this browser. This setting is local to this machine.

Saved settings

Organization name, validated domains, and auto-sync groups are always saved on this machine. Plan ID and API token are saved only when you check the corresponding "Remember" box above. Token is encrypted via Windows DPAPI (tied to this Windows user account).

Pending actions:
Copied!
Working…