diff --git a/.speakeasy/in.openapi.yaml b/.speakeasy/in.openapi.yaml
index 97b9c77f..06198ed5 100644
--- a/.speakeasy/in.openapi.yaml
+++ b/.speakeasy/in.openapi.yaml
@@ -39118,7 +39118,7 @@ paths:
       x-speakeasy-max-method-params: 5
   /analytics/meta:
     get:
-      description: 'Returns the available metrics, dimensions, filter operators, and granularities for the analytics query endpoint. [Management key](/docs/guides/overview/auth/management-api-keys) required.'
+      description: 'Returns the available metrics, dimensions, filter operators, and granularities for the analytics query endpoint. Workspace-scoped management keys are accepted. [Management key](/docs/guides/overview/auth/management-api-keys) required.'
       operationId: 'getAnalyticsMeta'
       responses:
         '200':
@@ -39262,7 +39262,7 @@ paths:
         - 'Analytics'
   /analytics/query:
     post:
-      description: 'Execute an analytics query with specified metrics, dimensions, filters, and time range. [Management key](/docs/guides/overview/auth/management-api-keys) required.'
+      description: 'Execute an analytics query with specified metrics, dimensions, filters, and time range. A workspace-scoped management key needs `activity:view_all` on its own workspace and reads only that workspace: it is refused a `workspace` filter naming another workspace, it excludes legacy rows with no workspace (including for the default workspace), and possible-cache metrics such as `possible_cached_tokens` return 400. [Management key](/docs/guides/overview/auth/management-api-keys) required.'
       operationId: 'queryAnalytics'
       requestBody:
         content: