Processes

34 Endpunkte. Basis-URL: https://xapi.ambertech.cloud/api/v1

List processes with filters + pagination#

GET/processesToken

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`	Query	`string`	–
`status`	Query	`string`	–
`requestType`	Query	`string`	–
`search`	Query	`string`	–
`page`	Query	`string`	–
`pageSize`	Query	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/processes" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Create a process#

POST/processesToken

Request-Body`application/jsonCreateProcessDto`

Name	Typ	Beschreibung
`space_id`Pflicht	`string`	Space this process belongs to
`title`Pflicht	`string`	Beispiel: `IT Security Risk Assessment`
`description`	`string`	–
`request_type`Pflicht	`string`	Werte: `RisikoGeschäftsprozessbewertungProzessbewertungServicebewertungAssetbewertungSchwachstelleMaßnahmeAssetgroup`
`status`	`string`	Werte: `activeinactivearchiveddraft` Standard: `"active"`
`hierarchy_level_id`	`string`	Hierarchy level ID from hierarchy-config
`parent_ids`	`string[]`	Parent process UUIDs (multi-parent)
`parent_id`	`string`	Legacy single parent process UUID
`assigned_to`	`string`	UUID of owner/assignee
`sort_order`	`number`	Beispiel: `0`
`vuln_c_p`	`number`	–
`vuln_c_i`	`number`	–
`vuln_i_p`	`number`	–
`vuln_i_i`	`number`	–
`vuln_a_p`	`number`	–
`vuln_a_i`	`number`	–
`action_c_p`	`number`	–
`action_c_i`	`number`	–
`action_i_p`	`number`	–
`action_i_i`	`number`	–
`action_a_p`	`number`	–
`action_a_i`	`number`	–
`custom_field_values`	`object`	–

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/processes" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"space_id":"…","title":"IT Security Risk Assessment","request_type":"Risiko"}'

GET /processes/{id}#

GET/processes/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/processes/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

PUT /processes/{id}#

PUT/processes/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonUpdateProcessDto`

Name	Typ	Beschreibung
`title`	`string`	–
`description`	`string`	–
`request_type`	`string`	Werte: `RisikoGeschäftsprozessbewertungProzessbewertungServicebewertungAssetbewertungSchwachstelleMaßnahmeAssetgroup`
`status`	`string`	Werte: `activeinactivearchiveddraft`
`hierarchy_level_id`	`object`	–
`parent_ids`	`string[]`	–
`parent_id`	`object`	–
`assigned_to`	`object`	–
`sort_order`	`number`	–
`vuln_c_p`	`number`	–
`vuln_c_i`	`number`	–
`vuln_i_p`	`number`	–
`vuln_i_i`	`number`	–
`vuln_a_p`	`number`	–
`vuln_a_i`	`number`	–
`action_c_p`	`number`	–
`action_c_i`	`number`	–
`action_i_p`	`number`	–
`action_i_i`	`number`	–
`action_a_p`	`number`	–
`action_a_i`	`number`	–
`custom_field_values`	`object`	–

Antworten

200OK

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/processes/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"title":"…","description":"…","request_type":"Risiko"}'

Quick actions: reorder, partial_update#

PATCH/processes/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonPatchProcessDto`

Name	Typ	Beschreibung
`action`Pflicht	`string`	Werte: `reorderpartial_update`
`items`	`ProcessReorderItemDto[]`	–

Antworten

200OK

Beispiel (cURL)

curl -X PATCH "https://xapi.ambertech.cloud/api/v1/processes/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"action":"reorder"}'

DELETE /processes/{id}#

DELETE/processes/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/processes/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

List attachments for a process#

GET/processes/{id}/attachmentsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Process UUID

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/processes/{id}/attachments" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Upload a file attachment for a process#

POST/processes/{id}/attachmentsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Process UUID

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/processes/{id}/attachments" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Get signed download URL for an attachment#

GET/processes/{id}/attachments/{attachmentId}Token

Parameter

Name	Ort	Typ	Beschreibung
`attachmentId`Pflicht	Pfad	`string`	Attachment UUID
`id`Pflicht	Pfad	`any`	Process UUID

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/processes/{id}/attachments/{attachmentId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Delete a process attachment#

DELETE/processes/{id}/attachments/{attachmentId}Token

Parameter

Name	Ort	Typ	Beschreibung
`attachmentId`Pflicht	Pfad	`string`	Attachment UUID
`id`Pflicht	Pfad	`any`	Process UUID

Antworten

200OK

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/processes/{id}/attachments/{attachmentId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

List comments for a process (with user details)#

GET/processes/{id}/commentsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Process UUID

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/processes/{id}/comments" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Add a comment to a process#

POST/processes/{id}/commentsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Process UUID

Request-Body`application/jsonCreateProcessCommentDto`

Name	Typ	Beschreibung
`content`Pflicht	`string`	Comment content — supports HTML (max 10000 chars)

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/processes/{id}/comments" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"content":"…"}'

Update a process comment (author only)#

PUT/processes/{id}/comments/{commentId}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Process UUID
`commentId`Pflicht	Pfad	`string`	Comment UUID

Request-Body`application/jsonUpdateProcessCommentDto`

Name	Typ	Beschreibung
`content`Pflicht	`string`	Updated comment content — supports HTML (max 10000 chars)

Antworten

200OK

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/processes/{id}/comments/{commentId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"content":"…"}'

Delete a process comment (author only)#

DELETE/processes/{id}/comments/{commentId}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Process UUID
`commentId`Pflicht	Pfad	`string`	Comment UUID

Antworten

200OK

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/processes/{id}/comments/{commentId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Get process diagram#

GET/processes/{id}/diagramToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Process UUID

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/processes/{id}/diagram" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Upsert process diagram (create or update)#

PUT/processes/{id}/diagramToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	Process UUID

Request-Body`application/jsonUpsertDiagramDto`

Name	Typ	Beschreibung
`xml`Pflicht	`string`	draw.io XML content for the diagram
`previewSvg`	`string`	SVG preview string

Antworten

200OK

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/processes/{id}/diagram" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"xml":"…"}'

Get change history for a process#

GET/processes/{id}/historyToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/processes/{id}/history" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

GET /processes/{id}/relationships#

GET/processes/{id}/relationshipsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/processes/{id}/relationships" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Add a parent-child relationship (the :id is the child)#

POST/processes/{id}/relationshipsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonCreateProcessRelationshipDto`

Name	Typ	Beschreibung
`parent_process_id`Pflicht	`string`	Parent process UUID
`relation_type_id`	`string`	Relation type UUID (from relation_types)
`relationship_type`	`string`	Relationship kind (text label)

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/processes/{id}/relationships" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"parent_process_id":"…"}'

DELETE /processes/{id}/relationships/{relationshipId}#

DELETE/processes/{id}/relationships/{relationshipId}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`relationshipId`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/processes/{id}/relationships/{relationshipId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Get a process by its key (e.g. HR-P42)#

GET/processes/by-key/{key}Token

Parameter

Name	Ort	Typ	Beschreibung
`key`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/processes/by-key/{key}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

GET /spaces/{spaceId}/processes#

GET/spaces/{spaceId}/processesToken

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–
`status`Pflicht	Query	`string`	–
`request_type`Pflicht	Query	`string`	–
`requestType`Pflicht	Query	`string`	–
`search`Pflicht	Query	`string`	–
`page`Pflicht	Query	`string`	–
`pageSize`Pflicht	Query	`string`	–
`withParents`Pflicht	Query	`string`	–
`with_parents`Pflicht	Query	`string`	–
`page_size`Pflicht	Query	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

POST /spaces/{spaceId}/processes#

POST/spaces/{spaceId}/processesToken

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

GET /spaces/{spaceId}/processes/{processId}#

GET/spaces/{spaceId}/processes/{processId}Token

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–
`processId`Pflicht	Pfad	`string`	–
`withParents`Pflicht	Query	`string`	–
`with_parents`Pflicht	Query	`string`	–
`tree`Pflicht	Query	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes/{processId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

PUT /spaces/{spaceId}/processes/{processId}#

PUT/spaces/{spaceId}/processes/{processId}Token

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–
`processId`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes/{processId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

DELETE /spaces/{spaceId}/processes/{processId}#

DELETE/spaces/{spaceId}/processes/{processId}Token

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–
`processId`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes/{processId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

GET /spaces/{spaceId}/processes/{processId}/attachments#

GET/spaces/{spaceId}/processes/{processId}/attachmentsToken

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–
`processId`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes/{processId}/attachments" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

POST /spaces/{spaceId}/processes/{processId}/attachments#

POST/spaces/{spaceId}/processes/{processId}/attachmentsToken

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–
`processId`Pflicht	Pfad	`string`	–

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes/{processId}/attachments" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

GET /spaces/{spaceId}/processes/{processId}/attachments/{attachmentId}#

GET/spaces/{spaceId}/processes/{processId}/attachments/{attachmentId}Token

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–
`attachmentId`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes/{processId}/attachments/{attachmentId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

DELETE /spaces/{spaceId}/processes/{processId}/attachments/{attachmentId}#

DELETE/spaces/{spaceId}/processes/{processId}/attachments/{attachmentId}Token

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–
`attachmentId`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes/{processId}/attachments/{attachmentId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

GET /spaces/{spaceId}/processes/{processId}/diagram#

GET/spaces/{spaceId}/processes/{processId}/diagramToken

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–
`processId`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes/{processId}/diagram" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

PUT /spaces/{spaceId}/processes/{processId}/diagram#

PUT/spaces/{spaceId}/processes/{processId}/diagramToken

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–
`processId`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes/{processId}/diagram" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

GET /spaces/{spaceId}/processes/by-key/{key}#

GET/spaces/{spaceId}/processes/by-key/{key}Token

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–
`key`Pflicht	Pfad	`string`	–
`withParents`Pflicht	Query	`string`	–
`with_parents`Pflicht	Query	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes/by-key/{key}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

POST /spaces/{spaceId}/processes/reorder#

POST/spaces/{spaceId}/processes/reorderToken

Parameter

Name	Ort	Typ	Beschreibung
`spaceId`Pflicht	Pfad	`string`	–

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/processes/reorder" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Processes

List processes with filters + pagination#

Parameter

Antworten

Create a process#

Request-Bodyapplication/jsonCreateProcessDto

Antworten

GET /processes/{id}#

Parameter

Antworten

PUT /processes/{id}#

Parameter

Request-Bodyapplication/jsonUpdateProcessDto

Antworten

Quick actions: reorder, partial_update#

Parameter

Request-Bodyapplication/jsonPatchProcessDto

Antworten

DELETE /processes/{id}#

Parameter

Antworten

List attachments for a process#

Parameter

Antworten

Upload a file attachment for a process#

Parameter

Antworten

Get signed download URL for an attachment#

Parameter

Antworten

Delete a process attachment#

Parameter

Antworten

List comments for a process (with user details)#

Parameter

Antworten

Add a comment to a process#

Parameter

Request-Bodyapplication/jsonCreateProcessCommentDto

Antworten

Update a process comment (author only)#

Parameter

Request-Bodyapplication/jsonUpdateProcessCommentDto

Antworten

Delete a process comment (author only)#

Parameter

Antworten

Get process diagram#

Parameter

Antworten

Upsert process diagram (create or update)#

Parameter

Request-Bodyapplication/jsonUpsertDiagramDto

Antworten

Get change history for a process#

Parameter

Antworten

GET /processes/{id}/relationships#

Parameter

Antworten

Add a parent-child relationship (the :id is the child)#

Parameter

Request-Bodyapplication/jsonCreateProcessRelationshipDto

Antworten

DELETE /processes/{id}/relationships/{relationshipId}#

Parameter

Antworten

Get a process by its key (e.g. HR-P42)#

Parameter

Antworten

GET /spaces/{spaceId}/processes#

Parameter

Antworten

POST /spaces/{spaceId}/processes#

Parameter

Antworten

GET /spaces/{spaceId}/processes/{processId}#

Parameter

Antworten

PUT /spaces/{spaceId}/processes/{processId}#

Request-Body`application/jsonCreateProcessDto`

Request-Body`application/jsonUpdateProcessDto`

Request-Body`application/jsonPatchProcessDto`

Request-Body`application/jsonCreateProcessCommentDto`

Request-Body`application/jsonUpdateProcessCommentDto`

Request-Body`application/jsonUpsertDiagramDto`

Request-Body`application/jsonCreateProcessRelationshipDto`