Add some more details to Tom V's correct answer...
CONTEXT
Surrounding the input parameter with double square brackets [[IDs]]
is parameter substitution, which treats the input as a parameter ONLY. In order to pass a string variable in the input parameter, you must use the double angle brackets <<IDs>>
which allows for string substitution.
But be WARNED, string substitution can expose your database to SQL injection so be sure to sanitize the input and secure the services using string substitution.
EXAMPLE
Input Parameter:
IDs (STRING)
[the value can have a space but MUST be comma separated to return multiple values]
IDs = 26,504
Output Parameter:
result (Infotable)
[in my example an Infotable is returned, but the output can be any data type]
Query:
SELECT * FROM Cookies WHERE id IN (<<IDs>>);
(Referenced article can be found here)
image shows id casting