Dashboards

22 Endpunkte. Basis-URL: https://xapi.ambertech.cloud/api/v1

List dashboards with optional filters#

GET/dashboardsToken

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`	Query	`string`	–
`includeOrgLevel`	Query	`string`	–
`default`	Query	`string`	–
`is_default`	Query	`string`	–
`status`	Query	`string`	–
`visibility`	Query	`string`	–
`search`	Query	`string`	–
`page`	Query	`string`	–
`pageSize`	Query	`string`	–

Antworten

200Paginated dashboards returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/dashboards" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Create a dashboard#

POST/dashboardsToken

Request-Body`application/jsonCreateDashboardDto`

Name	Typ	Beschreibung
`organizationId`	`string`	Accepted for legacy Next route compatibility; ignored.
`name`Pflicht	`string`	Beispiel: `My Dashboard`
`description`	`string`	–
`space_id`	`string`	Space UUID — null for org-level dashboard
`is_default`	`boolean`	Standard: `false`
`layout_config`	`object`	Grid layout config
`status`	`string`	Werte: `draftactivearchived` Standard: `"active"`
`visibility`	`string`	Werte: `privatespaceorganization` Standard: `"private"`

Antworten

201Dashboard created

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/dashboards" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name":"My Dashboard"}'

Get a dashboard by ID#

GET/dashboards/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200Dashboard returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/dashboards/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Update a dashboard#

PUT/dashboards/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonUpdateDashboardDto`

Name	Typ	Beschreibung
`organizationId`	`string`	Accepted for legacy Next route compatibility; ignored.
`name`	`string`	–
`description`	`string`	–
`space_id`	`string`	–
`is_default`	`boolean`	–
`layout_config`	`object`	–
`status`	`string`	Werte: `draftactivearchived`
`visibility`	`string`	Werte: `privatespaceorganization`

Antworten

200Dashboard updated

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/dashboards/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"organizationId":"…","name":"…","description":"…"}'

Dashboard actions: set_default or archive#

PATCH/dashboards/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonPatchDashboardDto`

Name Typ Beschreibung

organizationId

string

Accepted for legacy Next route compatibility; ignored.

actionPflicht

string

Action to perform

Werte: set_defaultarchive

Antworten

200Action applied

Beispiel (cURL)

curl -X PATCH "https://xapi.ambertech.cloud/api/v1/dashboards/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"action":"set_default"}'

Soft-delete a dashboard (cannot delete default)#

DELETE/dashboards/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200Dashboard deleted

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/dashboards/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

List dashboard permissions#

GET/dashboards/{id}/permissionsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200Permissions returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/permissions" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Grant a dashboard permission#

POST/dashboards/{id}/permissionsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonCreatePermissionDto`

Name	Typ	Beschreibung
`organizationId`	`string`	Accepted for legacy Next route compatibility; ignored.
`target_type`Pflicht	`string`	Werte: `usergrouprolebase_role`
`target_id`	`string`	Target UUID — required when target_type is user\|group\|role
`base_role`	`string`	Required when target_type is base_role Werte: `owneradminmemberviewer`
`permission_level`Pflicht	`string`	Werte: `vieweditmanage`

Antworten

201Permission granted

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/permissions" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"target_type":"user","permission_level":"view"}'

Update a permission level#

PUT/dashboards/{id}/permissions/{pid}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`pid`Pflicht	Pfad	`string`	–

Request-Body`application/jsonUpdatePermissionDto`

Name	Typ	Beschreibung
`organizationId`	`string`	Accepted for legacy Next route compatibility; ignored.
`permission_level`Pflicht	`string`	Werte: `vieweditmanage`
`is_active`	`boolean`	Accepted for legacy Next route compatibility.

Antworten

200Permission updated

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/permissions/{pid}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"permission_level":"view"}'

Revoke a dashboard permission#

DELETE/dashboards/{id}/permissions/{pid}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`pid`Pflicht	Pfad	`string`	–

Antworten

200Permission revoked

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/permissions/{pid}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

List widgets for a dashboard#

GET/dashboards/{id}/widgetsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200Widgets returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/widgets" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Add a widget to a dashboard#

POST/dashboards/{id}/widgetsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonCreateWidgetDto`

Name	Typ	Beschreibung
`organizationId`	`string`	Accepted for legacy Next route compatibility; ignored.
`widget_type`Pflicht	`string`	Werte: `heatmaplistflowchartstatscalendarrecent_activitycustomtablehtml_texttextprocesscountdownfiltertime_tracking_personaltime_tracking_teamresource_planningautomation_run_analyticsspace_storage_usagefile_explorer_list`
`title`	`string`	–
`position`Pflicht	`WidgetPositionDto`	Grid position {x, y, w, h, minW?, minH?}
`config`	`object`	Widget-specific config JSONB
`data_source_type`	`string`	Werte: `processtasklistfilter`
`data_source_id`	`string`	–
`auto_refresh`	`boolean`	Standard: `false`
`refresh_interval`	`number`	Refresh interval in seconds Standard: `300`
`sort_order`	`number`	Standard: `0`

Antworten

201Widget created

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/widgets" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"widget_type":"heatmap","position":"…"}'

Get a single widget#

GET/dashboards/{id}/widgets/{wid}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`wid`Pflicht	Pfad	`string`	–

Antworten

200Widget returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/widgets/{wid}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Update a widget#

PUT/dashboards/{id}/widgets/{wid}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`wid`Pflicht	Pfad	`string`	–

Request-Body`application/jsonUpdateWidgetDto`

Name	Typ	Beschreibung
`organizationId`	`string`	Accepted for legacy Next route compatibility; ignored.
`widget_type`	`string`	Werte: `heatmaplistflowchartstatscalendarrecent_activitycustomtablehtml_texttextprocesscountdownfiltertime_tracking_personaltime_tracking_teamresource_planningautomation_run_analyticsspace_storage_usagefile_explorer_list`
`title`	`string`	–
`position`	`WidgetPositionDto`	–
`config`	`object`	–
`data_source_type`	`string`	Werte: `processtasklistfilter`
`data_source_id`	`string`	–
`auto_refresh`	`boolean`	–
`refresh_interval`	`number`	–
`sort_order`	`number`	–

Antworten

200Widget updated

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/widgets/{wid}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"organizationId":"…","widget_type":"heatmap","title":"…"}'

Soft-delete a widget#

DELETE/dashboards/{id}/widgets/{wid}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`wid`Pflicht	Pfad	`string`	–

Antworten

200Widget deleted

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/widgets/{wid}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Fetch widget data (saved_filter / custom_query / simple modes)#

GET/dashboards/{id}/widgets/{wid}/dataToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`wid`Pflicht	Pfad	`string`	–
`spaceId`	Query	`string`	–
`offset`Pflicht	Query	`string`	–

Antworten

200Widget data returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/widgets/{wid}/data" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Set filter widget targets#

PATCH/dashboards/{id}/widgets/{wid}/filter-targetsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`wid`Pflicht	Pfad	`string`	–

Antworten

200Filter targets updated

Beispiel (cURL)

curl -X PATCH "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/widgets/{wid}/filter-targets" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Get layout positions for all widgets#

GET/dashboards/{id}/widgets/layoutToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200Layout returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/widgets/layout" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Bulk-update widget positions#

PATCH/dashboards/{id}/widgets/layoutToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonUpdateLayoutDto`

Name	Typ	Beschreibung
`items`	`LayoutItemDto[]`	Array of widget positions to update
`positions`	`LayoutItemDto[]`	Array of widget positions to update

Antworten

200Layout updated

Beispiel (cURL)

curl -X PATCH "https://xapi.ambertech.cloud/api/v1/dashboards/{id}/widgets/layout" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"items":[],"positions":[]}'

Get legacy-compatible risk heatmap matrix data#

GET/dashboards/heatmapToken

Parameter

Name	Ort	Typ	Beschreibung
`organizationId`	Query	`string`	Accepted for legacy Next route compatibility; ignored.
`matrixSize`	Query	`string`	Matrix size (2–5), default 5
`showIssueCount`	Query	`string`	"false" to hide issue count, default true
`title`	Query	`string`	Heatmap title
`requestTypes`	Query	`string`	Comma-separated request types
`status`	Query	`string`	Comma-separated status values, default "active"
`coloringMode`	Query	`string`	"individual-cells" or "risk-level" (default)
`cellFontSize`	Query	`string`	Cell font size: small\|medium\|large\|xlarge
`spaceId`	Query	`string`	Filter by space UUID

Antworten

200Heatmap data returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/dashboards/heatmap" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Generate legacy-compatible risk heatmap matrix data#

POST/dashboards/heatmapToken

Request-Body`application/jsonGenerateHeatmapBodyDto`

Name	Typ	Beschreibung
`organizationId`	`string`	Accepted for legacy Next route compatibility; ignored.
`config`	`object`	Accepted for legacy Next route compatibility; full config object.
`matrixSize`	`number`	Matrix size (2–5)
`showIssueCount`	`boolean`	–
`title`	`string`	–
`requestTypes`	`string[]`	–
`status`	`string[]`	–
`coloringMode`	`string`	Werte: `risk-levelindividual-cells`
`cellFontSize`	`string`	Werte: `smallmediumlargexlarge`
`spaceId`	`string`	–
`useCustomColors`	`boolean`	–
`customColors`	`string[]`	–
`individualCellColors`	`object`	–
`individualCellTexts`	`object`	–
`individualCellForegroundColors`	`object`	–

Antworten

200Heatmap data returned

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/dashboards/heatmap" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"organizationId":"…","config":{},"matrixSize":0}'

Get legacy-compatible heatmap risk summary for the organisation#

GET/dashboards/risk-summaryToken

Parameter

Name	Ort	Typ	Beschreibung
`organizationId`	Query	`string`	Accepted for legacy Next route compatibility; ignored.
`requestTypes`	Query	`string`	Comma-separated request types
`status`	Query	`string`	Comma-separated status values, default "active"
`spaceId`	Query	`string`	Filter by space UUID

Antworten

200Risk summary returned

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/dashboards/risk-summary" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Dashboards

List dashboards with optional filters#

Parameter

Antworten

Create a dashboard#

Request-Bodyapplication/jsonCreateDashboardDto

Antworten

Get a dashboard by ID#

Parameter

Antworten

Update a dashboard#

Parameter

Request-Bodyapplication/jsonUpdateDashboardDto

Antworten

Dashboard actions: set_default or archive#

Parameter

Request-Bodyapplication/jsonPatchDashboardDto

Antworten

Soft-delete a dashboard (cannot delete default)#

Parameter

Antworten

List dashboard permissions#

Parameter

Antworten

Grant a dashboard permission#

Parameter

Request-Bodyapplication/jsonCreatePermissionDto

Antworten

Update a permission level#

Parameter

Request-Bodyapplication/jsonUpdatePermissionDto

Antworten

Revoke a dashboard permission#

Parameter

Antworten

List widgets for a dashboard#

Parameter

Antworten

Add a widget to a dashboard#

Parameter

Request-Bodyapplication/jsonCreateWidgetDto

Antworten

Get a single widget#

Parameter

Antworten

Update a widget#

Parameter

Request-Bodyapplication/jsonUpdateWidgetDto

Antworten

Soft-delete a widget#

Parameter

Antworten

Fetch widget data (saved_filter / custom_query / simple modes)#

Parameter

Antworten

Set filter widget targets#

Parameter

Antworten

Get layout positions for all widgets#

Parameter

Antworten

Bulk-update widget positions#

Parameter

Request-Bodyapplication/jsonUpdateLayoutDto

Antworten

Get legacy-compatible risk heatmap matrix data#

Parameter

Antworten

Generate legacy-compatible risk heatmap matrix data#

Request-Bodyapplication/jsonGenerateHeatmapBodyDto

Antworten

Get legacy-compatible heatmap risk summary for the organisation#

Parameter

Antworten

Request-Body`application/jsonCreateDashboardDto`

Request-Body`application/jsonUpdateDashboardDto`

Request-Body`application/jsonPatchDashboardDto`

Request-Body`application/jsonCreatePermissionDto`

Request-Body`application/jsonUpdatePermissionDto`

Request-Body`application/jsonCreateWidgetDto`

Request-Body`application/jsonUpdateWidgetDto`

Request-Body`application/jsonUpdateLayoutDto`

Request-Body`application/jsonGenerateHeatmapBodyDto`