---
title: "List app catalog workflows"
method: GET
path: "/appCatalog/workflows"
tags: ["App Catalog"]
---

# List app catalog workflows

`GET /appCatalog/workflows`

## Request

- Base URL: `https://api.toriihq.com/v1.0`
- URL: `https://api.toriihq.com/v1.0/appCatalog/workflows`
- Auth: API key in header `Authorization`

Start here: the other app catalog workflow endpoints take these ids. Filter by `triggerType` or `idApp`.<br/><br/>Returns up to 25 workflows per page, and `total` across pages; while `nextCursor` is present, pass it as `cursor` for the next page.<br/><br/>`usedByPolicies[].idAccessRequestPolicy` is the policy `id` in the access request policies list.<br/><br/>
<p><ul><li>Rate limit: 500 requests per minute</li></ul></p>

## Query parameters

- `triggerType` 'requestAccess' | 'temporaryAccessExpired' | 'requestNewApp'
- `idApp` integer
- `size` integer
- `cursor` string

## Response `200`

Successful

- Model23
  - `workflows` AppCatalogWorkflow[], required
    - `id` integer, required: Read-only. Unique workflow identifier.
    - `name` string, required: Display name.
    - `triggerType` 'requestAccess' | 'temporaryAccessExpired' | 'requestNewApp', required: `requestAccess` = provisioning workflow and `temporaryAccessExpired` = deprovisioning workflow (both in the Access workflows tab); `requestNewApp` = new app request policy.
    - `idApp` integer: Access workflows only. The app this workflow provisions or deprovisions; null on the org default access workflows.
    - `isDefault` boolean: Read-only. Access workflows only. The org default access workflow for its trigger type. Cannot be deleted.
    - `actions` Model18, required: The action graph: `nodes` maps each node id to its action, and `idRootNode` is the first node, or null when the graph is empty. Action types and their fields come from `GET /v1.0/workflows/actions`. Send `{ "idRootNode": null, "nodes": {} }` to clear the graph; null is not accepted.
      - `idRootNode` string: The id of the first node, or null when the graph is empty.
      - `nodes` Nodes: The actions, keyed by node id.
    - `isValid` boolean, required: Read-only. Whether the actions graph passed validation.
    - `isActive` boolean: New app request policies only. Set through the activation endpoint. Access workflows have no activation state: they run whenever a policy that uses them fires.
    - `isDeleted` boolean, required: Read-only. Can only be true when fetched with includeDeleted.
    - `createdBy` integer, required: Read-only. The id of the user who created the workflow, null if no user did. Details in `resources.users`.
    - `creationTime` string, date, required: Read-only. When the workflow was created.
    - `usedByPolicies` Model19[]: Read-only. Access workflows only. The access request policies that use this workflow. On the org default workflows, only the policies of apps in the catalog. On other workflows, every policy that uses it, including policies whose app is no longer in the catalog.
      - `idAccessRequestPolicy` integer, required: The access request policy id: its `id` in the access request policies list.
      - `idApp` integer, required: The app the policy is for.
      - `name` string, required: The policy name. `Default access` for an unnamed policy, as in the access request policies list.
    - `executionsCount` integer, required: Read-only. How many times the workflow has run.
    - `latestExecution` LatestExecution, required: Read-only. The most recent run, or null if the workflow never ran.
      - `status` 'COMPLETED' | 'COMPLETED_WITH_ERRORS' | 'ERROR' | 'IN_PROGRESS' | 'STOPPED' | 'STOPPING', required: The run status.
      - `creationTime` string, date, required: When the run started.
      - `completionTime` string, date, required: When the run finished; null while it is still running.
  - `count` integer, required: The number of workflows in this page.
  - `total` integer, required: The number of workflows that match the filters, across all pages.
  - `nextCursor` string: Present when more workflows follow: pass it as `cursor` to get the next page. Absent on the last page.
  - `resources` Resources
    - `users` object
      - `number` Number
        - `id` integer, required
        - `firstName` string
        - `lastName` string
        - `email` string
        - `photoUrl` string
        - `isExternal` boolean
        - `lifecycleStatus` string
        - `isDeletedInIdentitySources` boolean
        - `userType` string
        - `isSupport` boolean
    - `apps` object
      - `number` Model22
        - `id` integer, required
        - `name` string
        - `imageUrl` string
        - `category` string

## Other responses

- `400`: Bad Request
- `403`: Forbidden

---

[API](https://skmtc.dev/toriihq/apis/torii-api-documentation.md) - [All operations](https://skmtc.dev/toriihq/apis/torii-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/toriihq/apis/torii-api-documentation/revisions/15fd1512591b?raw)