Tasks

43 Endpunkte. Basis-URL: https://xapi.ambertech.cloud/api/v1

List tasks with filters and pagination#

GET/tasksToken

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`	Query	`string`	–
`processId`	Query	`string`	–
`process_id`Pflicht	Query	`string`	–
`parentTaskId`	Query	`string`	–
`parent_task_id`Pflicht	Query	`string`	–
`taskTypeId`	Query	`string`	–
`task_type_id`Pflicht	Query	`string`	–
`status`	Query	`string`	–
`statuses`Pflicht	Query	`string`	–
`status_id`Pflicht	Query	`string`	–
`status_ids`Pflicht	Query	`string`	–
`priority`	Query	`string`	–
`priorities`Pflicht	Query	`string`	–
`priority_id`Pflicht	Query	`string`	–
`priority_ids`Pflicht	Query	`string`	–
`ids`Pflicht	Query	`string`	–
`assignedTo`	Query	`string`	–
`assigned_to`Pflicht	Query	`string`	–
`reporter`Pflicht	Query	`string`	–
`search`	Query	`string`	–
`isOverdue`	Query	`string`	–
`is_overdue`Pflicht	Query	`string`	–
`dueBefore`	Query	`string`	–
`due_before`Pflicht	Query	`string`	–
`dueAfter`	Query	`string`	–
`due_after`Pflicht	Query	`string`	–
`created_after`Pflicht	Query	`string`	–
`created_before`Pflicht	Query	`string`	–
`withRelations`Pflicht	Query	`string`	–
`page`	Query	`string`	–
`pageSize`	Query	`string`	–
`page_size`Pflicht	Query	`string`	–
`sortBy`	Query	`string`	Column to sort the whole list by (key, summary, status, priority, due_date, created_at, updated_at, cf_<field_key>); default is the manual order
`sortDir`	Query	`string`	Werte: `ascdesc`

Antworten

200Paginated tasks returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Create a task#

POST/tasksToken

Request-Body`application/jsonCreateTaskDto`

Name	Typ	Beschreibung
`organizationId`	`string`	Accepted for legacy Next route compatibility; ignored.
`spaceId`	`string`	Legacy camelCase alias for space_id.
`space_id`	`string`	Space this task belongs to
`summary`Pflicht	`string`	Beispiel: `Fix login bug`
`description`	`string`	–
`task_type_id`Pflicht	`string`	Task type ID from task_hierarchy_configurations (required) Beispiel: `task`
`parent_task_id`	`string`	Parent task UUID
`process_id`	`string`	Linked process UUID
`status`	`string`	Beispiel: `open`
`status_id`	`string`	Configurable status UUID
`priority`	`string`	Beispiel: `medium`
`priority_id`	`string`	Configurable priority UUID
`assigned_to`	`string`	–
`reporter`	`string`	–
`due_date`	`string`	–
`start_date`	`string`	–
`end_date`	`string`	–
`estimated_time`	`number`	Estimated time in minutes
`duration`	`number`	Duration in minutes
`progress`	`number`	Progress 0-100
`estimated_cost`	`number`	–
`custom_field_values`	`object`	–
`labels`	`string[]`	–
`planned_budget`	`number`	Planned budget for this task
`sort_order`	`number`	–

Antworten

201Task created

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"summary":"Fix login bug","task_type_id":"task"}'

Get a task by ID#

GET/tasks/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`withRelations`	Query	`string`	–

Antworten

200Task returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Update a task#

PUT/tasks/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonUpdateTaskDto`

Name	Typ	Beschreibung
`organizationId`	`string`	Accepted for legacy Next route compatibility; ignored.
`summary`	`string`	–
`title`	`string`	Legacy alias for summary from older task screens.
`description`	`string`	–
`task_type_id`	`string`	–
`parent_task_id`	`object`	–
`process_id`	`object`	–
`space_id`	`string`	–
`status`	`string`	–
`status_id`	`object`	–
`priority`	`string`	–
`priority_id`	`object`	–
`assigned_to`	`object`	–
`reporter`	`object`	–
`due_date`	`object`	–
`start_date`	`object`	–
`end_date`	`object`	–
`estimated_time`	`number`	–
`actual_time`	`number`	–
`duration`	`number`	–
`progress`	`number`	–
`estimated_cost`	`number`	–
`actual_cost`	`number`	–
`custom_field_values`	`object`	–
`labels`	`string[]`	–
`planned_budget`	`number`	Planned budget for this task
`sort_order`	`number`	–
`resolution_id`	`object`	Resolution for this task, scoped to the caller org and required to be active. Send null to clear. Rejected together with a status change in the same request.

Antworten

200Task updated

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/tasks/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"organizationId":"…","summary":"…","title":"…"}'

Quick actions: update_status, assign#

PATCH/tasks/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonPatchTaskDto`

Name	Typ	Beschreibung
`organizationId`	`string`	Accepted for legacy Next route compatibility; ignored.
`summary`	`string`	–
`title`	`string`	Legacy alias for summary from older task screens.
`description`	`string`	–
`task_type_id`	`string`	–
`parent_task_id`	`object`	–
`process_id`	`object`	–
`space_id`	`string`	–
`status`	`string`	–
`status_id`	`object`	–
`priority`	`string`	–
`priority_id`	`object`	–
`assigned_to`	`object`	–
`reporter`	`object`	–
`due_date`	`object`	–
`start_date`	`object`	–
`end_date`	`object`	–
`estimated_time`	`number`	–
`actual_time`	`number`	–
`duration`	`number`	–
`progress`	`number`	–
`estimated_cost`	`number`	–
`actual_cost`	`number`	–
`custom_field_values`	`object`	–
`labels`	`string[]`	–
`planned_budget`	`number`	Planned budget for this task
`sort_order`	`number`	–
`resolution_id`	`object`	Resolution for this task, scoped to the caller org and required to be active. Send null to clear. Rejected together with a status change in the same request.
`action`	`string`	Legacy action name. Omit to perform a normal partial update. Werte: `update_statusassignpartial_update`

Antworten

200Action applied

Beispiel (cURL)

curl -X PATCH "https://xapi.ambertech.cloud/api/v1/tasks/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"organizationId":"…","summary":"…","title":"…"}'

Delete a task (cascades comments, attachments, relations)#

DELETE/tasks/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200Task deleted

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/tasks/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

List attachments for a task#

GET/tasks/{id}/attachmentsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Task UUID

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/{id}/attachments" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Upload a file attachment for a task#

POST/tasks/{id}/attachmentsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Task UUID

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks/{id}/attachments" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Return JSON { data: { url } } for the signed download URL of an attachment#

GET/tasks/{id}/attachments/{attachmentId}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Task UUID
`attachmentId`Pflicht	Pfad	`string`	Attachment UUID

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/{id}/attachments/{attachmentId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Delete a task attachment#

DELETE/tasks/{id}/attachments/{attachmentId}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Task UUID
`attachmentId`Pflicht	Pfad	`string`	Attachment UUID

Antworten

200OK

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/tasks/{id}/attachments/{attachmentId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

List transitions available from the task's current status (engine-gated by conditions)#

GET/tasks/{id}/available-transitionsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200Available transitions for the calling user

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/{id}/available-transitions" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

List comments for a task#

GET/tasks/{id}/commentsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`sort`	Query	`string`	Werte: `oldestnewestupdated_descupdated_ascauthor_ascauthor_descmessage_ascmessage_desc`
`then`	Query	`string`	Ties for name/message sorts, in sequence, e.g. updated_desc,oldest

Antworten

200Comments returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/{id}/comments" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Add a comment to a task#

POST/tasks/{id}/commentsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonCreateCommentDto`

Name	Typ	Beschreibung
`content`Pflicht	`string`	–

Antworten

201Comment created

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks/{id}/comments" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"content":"…"}'

Update a comment (own: add-comments right; others: edit-others-comments right)#

PUT/tasks/{id}/comments/{commentId}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`commentId`Pflicht	Pfad	`string`	–

Request-Body`application/jsonUpdateCommentDto`

Name	Typ	Beschreibung
`content`Pflicht	`string`	–

Antworten

200Comment updated

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/tasks/{id}/comments/{commentId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"content":"…"}'

Delete a comment (own: delete-comments right; others: delete-others-comments right)#

DELETE/tasks/{id}/comments/{commentId}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`commentId`Pflicht	Pfad	`string`	–

Antworten

200Comment deleted

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/tasks/{id}/comments/{commentId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Generate a wiki page from task data#

POST/tasks/{id}/generate-wikiToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonGenerateWikiDto`

Name	Typ	Beschreibung
`include_description`	`boolean`	Standard: `true`
`include_comments`	`boolean`	Standard: `false`
`include_history`	`boolean`	Standard: `false`
`include_subtasks`	`boolean`	Standard: `false`
`include_custom_fields`	`boolean`	Standard: `false`
`include_attachments`	`boolean`	Standard: `false`
`include_relationships`	`boolean`	Standard: `false`
`parent_page_id`	`object`	–

Antworten

201Wiki page generated

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks/{id}/generate-wiki" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"include_description":true,"include_comments":true,"include_history":true}'

Get change history for a task#

GET/tasks/{id}/historyToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200History entries returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/{id}/history" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Get the parent chain (breadcrumb) for a task#

GET/tasks/{id}/parent-chainToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200Parent chain returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/{id}/parent-chain" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

List relationships for a task#

GET/tasks/{id}/relationshipsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200Relationships returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/{id}/relationships" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Create a relationship from this task#

POST/tasks/{id}/relationshipsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonCreateRelationshipDto`

Name	Typ	Beschreibung
`organizationId`	`string`	Accepted for legacy Next route compatibility; ignored.
`source_id`	`string`	Legacy source entity UUID.
`target_id`Pflicht	`string`	Target entity UUID
`target_type`	`string`	Werte: `taskprocesswiki_page` Standard: `"task"`
`source_type`	`string`	Werte: `taskprocess` Standard: `"task"`
`relation_type_id`Pflicht	`string`	Relation type UUID

Antworten

201Relationship created

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks/{id}/relationships" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"target_id":"…","relation_type_id":"…"}'

Delete a relationship#

DELETE/tasks/{id}/relationships/{relationshipId}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`relationshipId`Pflicht	Pfad	`string`	–

Antworten

200Relationship deleted

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/tasks/{id}/relationships/{relationshipId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

List reminders for a task#

GET/tasks/{id}/remindersToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Task UUID

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/{id}/reminders" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Create a reminder for a task#

POST/tasks/{id}/remindersToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Task UUID

Request-Body`application/jsonCreateTaskReminderDto`

Name Typ Beschreibung

Name	Typ	Beschreibung
`remind_at`Pflicht	`string`	ISO 8601 datetime; must be in the future
`reminder_type`	`string`	Werte: `emailin_appboth` Standard: `"email"`
`message`	`object`	Optional reminder message

remind_atPflicht

string

ISO 8601 datetime; must be in the future

reminder_type

string

Werte: emailin_appboth

Standard: "email"

message

object

Optional reminder message

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks/{id}/reminders" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"remind_at":"…"}'

Update a task reminder#

PUT/tasks/{id}/reminders/{reminderId}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Task UUID
`reminderId`Pflicht	Pfad	`string`	Reminder UUID

Request-Body`application/jsonUpdateTaskReminderDto`

Name	Typ	Beschreibung
`remind_at`	`string`	ISO 8601 datetime; must be in the future
`reminder_type`	`string`	Werte: `emailin_appboth`
`message`	`object`	–
`is_sent`	`boolean`	–
`sent_at`	`object`	–

Antworten

200OK

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/tasks/{id}/reminders/{reminderId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"remind_at":"…","reminder_type":"email","message":{}}'

Delete a task reminder#

DELETE/tasks/{id}/reminders/{reminderId}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Task UUID
`reminderId`Pflicht	Pfad	`string`	Reminder UUID

Antworten

200OK

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/tasks/{id}/reminders/{reminderId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

List subtasks (direct children)#

GET/tasks/{id}/subtasksToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200Subtasks returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/{id}/subtasks" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Execute a specific transition on this task#

POST/tasks/{id}/transitions/{transitionId}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`transitionId`Pflicht	Pfad	`string`	–

Request-Body`application/jsonExecuteTransitionDto`

Name	Typ	Beschreibung
`screen_input`	`object`	Form values from the transition screen, if any
`expected_version`	`number`	Optimistic concurrency: caller's expected task.version. A mismatch raises 409 ConflictException.
`execution_id`	`string`	Idempotency key — re-running with the same key returns the cached result.

Antworten

200Transition executed; returns updated task
409Optimistic concurrency mismatch
422Validator failed or no path

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks/{id}/transitions/{transitionId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"screen_input":{},"expected_version":0,"execution_id":"…"}'

Get the current user task-watch state#

GET/tasks/{id}/watchToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/{id}/watch" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Watch a task as the current user#

PUT/tasks/{id}/watchToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/tasks/{id}/watch" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Stop watching a task as the current user#

DELETE/tasks/{id}/watchToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/tasks/{id}/watch" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Bulk delete tasks#

POST/tasks/bulk-deleteToken

Antworten

200Tasks deleted

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks/bulk-delete" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Bulk update tasks (status, priority, assignee, due date)#

POST/tasks/bulk-updateToken

Antworten

200Tasks updated

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks/bulk-update" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Get a task by its key (e.g. HR-T42)#

GET/tasks/by-key/{key}Token

Parameter

Name	Ort	Typ	Beschreibung
`key`Pflicht	Pfad	`string`	–

Antworten

200Task returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/by-key/{key}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Create a task in a space the caller can write to#

POST/tasks/mineToken

Creates a task in the target space only when the authenticated caller is an org admin/owner or an active member of that space holding the space-level create_tasks permission. Non-member, nonexistent, and cross-org all return an identical 404 (anti-probing). Backs the MCP task.create tool.

Request-Body`application/jsonMineCreateTaskDto`

Name	Typ	Beschreibung
`spaceIdOrKey`Pflicht	`string`	Target space UUID or key (org-scoped). Required.
`summary`Pflicht	`string`	Beispiel: `Fix login bug`
`description`	`string`	–
`priority`	`string`	Beispiel: `medium`
`assigneeId`	`string`	Assignee public.users.id (org member)
`dueDate`	`string`	ISO-8601 due date
`labels`	`string[]`	–
`parentTaskId`	`string`	Parent task UUID or key (org-scoped, must be in the same space). Hierarchy compatibility is validated backend-side.
`taskTypeId`	`string`	Task hierarchy level id (e.g. "story", "sub_task") for the new task. Must be an active type for the space and hierarchy-compatible with the parent. Defaults to the space's task-level type.

Antworten

201Task created
401Not authenticated
404Space not found or not writable

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks/mine" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"spaceIdOrKey":"…","summary":"Fix login bug"}'

Get one accessible task by UUID or key#

GET/tasks/mine/{taskIdOrKey}Token

Resolves a task by UUID or key and returns it only when the caller can access its space (or org-level tasks with org can_view_tasks). Non-member, nonexistent, and cross-org all return an identical 404 (anti-probing). Backs the MCP task.get tool.

Parameter

Name	Ort	Typ	Beschreibung
`taskIdOrKey`Pflicht	Pfad	`string`	Task UUID or key
`includeComments`	Query	`boolean`	–
`commentLimit`	Query	`number`	–

Antworten

200Accessible task returned
401Not authenticated
404Task not found or not accessible

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/mine/{taskIdOrKey}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Update a task the caller can edit (optimistic-locked)#

PATCH/tasks/mine/{taskIdOrKey}Token

Updates whitelisted fields of a task only when the caller holds the space-level edit_tasks permission in the task’s space. Requires expectedVersion; a stale value returns 409 with the current version. Non-member, nonexistent, and cross-org all return an identical 404 (anti-probing). Backs the MCP task.update tool.

Parameter

Name	Ort	Typ	Beschreibung
`taskIdOrKey`Pflicht	Pfad	`string`	Task UUID or key

Request-Body`application/jsonMineUpdateTaskDto`

Name	Typ	Beschreibung
`expectedVersion`Pflicht	`number`	Expected current task version for optimistic locking.
`summary`	`string`	–
`description`	`string`	–
`priority`	`string`	–
`assigneeId`	`string`	Assignee public.users.id (org member)
`dueDate`	`object`	ISO-8601 due date, or null to clear it.
`labels`	`string[]`	–

Antworten

200Task updated
401Not authenticated
404Task not found or not writable
409Optimistic version conflict

Beispiel (cURL)

curl -X PATCH "https://xapi.ambertech.cloud/api/v1/tasks/mine/{taskIdOrKey}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"expectedVersion":0}'

Comment on a task the caller can comment on#

POST/tasks/mine/{taskIdOrKey}/commentsToken

Adds a comment only when the caller holds the space-level add_comments_tasks permission in the task’s space. Non-member, nonexistent, and cross-org all return an identical 404 (anti-probing). Backs the MCP task.comment tool.

Parameter

Name	Ort	Typ	Beschreibung
`taskIdOrKey`Pflicht	Pfad	`string`	Task UUID or key

Request-Body`application/jsonMineAddCommentDto`

Name	Typ	Beschreibung
`content`Pflicht	`string`	Comment content (max 10000 chars)

Antworten

201Comment created
401Not authenticated
404Task not found or not writable

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks/mine/{taskIdOrKey}/comments" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"content":"…"}'

Search tasks the current user can access#

GET/tasks/mine/searchToken

Returns tasks the authenticated caller can read in their active organization (member spaces with view_tasks, org admin/owner, or org-level tasks with org can_view_tasks). Never cross-org, never a non-member space. Result is never null. Backs the MCP task.search tool.

Parameter

Name	Ort	Typ	Beschreibung
`query`	Query	`string`	–
`spaceIdOrKey`	Query	`string`	–
`statuses`	Query	`string`	–
`priorities`	Query	`string`	–
`assignedTo`	Query	`string`	–
`dueBefore`	Query	`string`	–
`dueAfter`	Query	`string`	–
`sortBy`	Query	`string`	–
`limit`	Query	`number`	–
`cursor`	Query	`string`	–

Antworten

200Accessible tasks returned
401Not authenticated

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/mine/search" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Current data for task ids the caller can read; others are returned as missing#

POST/tasks/picker/lookupToken

Request-Body`application/jsonTaskPickerLookupDto`

Keine Felder dokumentiert.

Antworten

200OK

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks/picker/lookup" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'

Search one accessible space’s tasks (paged)#

GET/tasks/picker/searchToken

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/picker/search" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Spaces whose tasks the caller can pick (member + view_tasks, Tasks module on)#

GET/tasks/picker/spacesToken

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/picker/spaces" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Get task tree for a process (nested ITaskTreeNode[])#

GET/tasks/treeToken

Parameter

Name	Ort	Typ	Beschreibung
`processId`Pflicht	Query	`string`	–
`spaceId`	Query	`string`	–
`rootTaskId`	Query	`string`	–

Antworten

200Task tree returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/tasks/tree" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Create a task with file attachments in one request#

POST/tasks/with-attachmentsToken

Request-Body`multipart/form-dataCreateTaskWithAttachmentsDto`

Name	Typ	Beschreibung
`payload`Pflicht	`string`	JSON-encoded CreateTaskDto — multipart carries every non-file field as text.
`tokens`	`string[]`	One placeholder token per uploaded file, in the same order as `files`.

Antworten

201Task created

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/tasks/with-attachments" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -F "file=@./datei.pdf"

Tasks

List tasks with filters and pagination#

Parameter

Antworten

Create a task#

Request-Bodyapplication/jsonCreateTaskDto

Antworten

Get a task by ID#

Parameter

Antworten

Update a task#

Parameter

Request-Bodyapplication/jsonUpdateTaskDto

Antworten

Quick actions: update_status, assign#

Parameter

Request-Bodyapplication/jsonPatchTaskDto

Antworten

Delete a task (cascades comments, attachments, relations)#

Parameter

Antworten

List attachments for a task#

Parameter

Antworten

Upload a file attachment for a task#

Parameter

Antworten

Return JSON { data: { url } } for the signed download URL of an attachment#

Parameter

Antworten

Delete a task attachment#

Parameter

Antworten

List transitions available from the task's current status (engine-gated by conditions)#

Parameter

Antworten

List comments for a task#

Parameter

Antworten

Add a comment to a task#

Parameter

Request-Bodyapplication/jsonCreateCommentDto

Antworten

Update a comment (own: add-comments right; others: edit-others-comments right)#

Parameter

Request-Bodyapplication/jsonUpdateCommentDto

Antworten

Delete a comment (own: delete-comments right; others: delete-others-comments right)#

Parameter

Antworten

Generate a wiki page from task data#

Parameter

Request-Bodyapplication/jsonGenerateWikiDto

Antworten

Get change history for a task#

Parameter

Antworten

Get the parent chain (breadcrumb) for a task#

Parameter

Antworten

List relationships for a task#

Parameter

Antworten

Create a relationship from this task#

Parameter

Request-Bodyapplication/jsonCreateRelationshipDto

Antworten

Delete a relationship#

Parameter

Antworten

List reminders for a task#

Parameter

Antworten

Create a reminder for a task#

Parameter

Request-Bodyapplication/jsonCreateTaskReminderDto

Antworten

Update a task reminder#

Parameter

Request-Bodyapplication/jsonUpdateTaskReminderDto

Request-Body`application/jsonCreateTaskDto`

Request-Body`application/jsonUpdateTaskDto`

Request-Body`application/jsonPatchTaskDto`

Request-Body`application/jsonCreateCommentDto`

Request-Body`application/jsonUpdateCommentDto`

Request-Body`application/jsonGenerateWikiDto`

Request-Body`application/jsonCreateRelationshipDto`

Request-Body`application/jsonCreateTaskReminderDto`

Request-Body`application/jsonUpdateTaskReminderDto`

Request-Body`application/jsonExecuteTransitionDto`

Request-Body`application/jsonMineCreateTaskDto`

Request-Body`application/jsonMineUpdateTaskDto`

Request-Body`application/jsonMineAddCommentDto`

Request-Body`application/jsonTaskPickerLookupDto`

Request-Body`multipart/form-dataCreateTaskWithAttachmentsDto`