Bonita Web REST API
The Bonita Web REST API exposes every Bonita Runtime feature reachable over HTTP — BPM (processes, cases, tasks, activities, flow nodes, timers, messages, signals), identity (users, groups, roles, memberships, profiles, custom user information), applications and pages, the Business Data Model and business data queries, documents and comments, and platform/license administration. It is described by a single first-party OpenAPI 3.0.2 document (153 paths, 224 operations, 162 schemas) that Bonitasoft treats as the single source of truth for the HTTP surface and publishes as an open-source repository, a versioned GitHub release asset, and a live ReDoc reference at api-documentation.ofelia.com.
Bonita Web REST API is published by Bonitasoft on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include BPM, Workflows, Process Automation, Identity, and Business Data. The published artifact set on APIs.io includes an OpenAPI specification, an API reference, and API documentation.
This API exposes 224 operations across 153 paths, organized into 75 resource areas, and defines 162 schemas. It is described by OpenAPI 3.0.2, at version 1.0.9.
Requests are made against a single base URL, http://localhost:8080/bonita.
Metadata
The identity and technical contract details declared by the specification.
Authentication & Security 3
Bonita Web REST API declares
3 security schemes
for authenticating requests.
An API key is passed in the cookie as JSESSIONID (bonita_auth).
An API key is passed in the header as X-Bonita-API-Token (bonita_token).
It accepts HTTP bearer tokens (bearer_auth).
By default, every request must be authenticated.
bonita_auth— To call the REST API, you must first log on with a user registered in the Engine database. Please refer to the [Login API](operation/login) operations section.bonita_token— To call the REST API, you must first log on with a user registered in the Engine database. Please refer to the [Login API](operation/login) operations section.bearer_auth—  When Bonita runtime is configured for SSO with openID Connect it is possible To call the REST…
Paths & Operations 224
Across 153 paths, the API surfaces 224 operations — 25 DELETE, 122 GET, 45 POST, 32 PUT. They span 75 resource areas, including Authentication, Application, ApplicationMenu, ApplicationPage, BusinessDataQuery, Business Data Operations, BDM, BDMAccessControl, and 67 more. Each is listed below with its method, path, parameters, and response codes.
Authentication
Manage applications. This enables you to build a consistent functional applicative environment for users to interact with business processes and business data from one place.
Manage the set of menus in an application. This set of menus enables a user to navigate to the application pages. There are two types of menu item: A top-level item appears in the…
An application page is a custom page that has been associated with an application. Use this resource to manage application pages and define the paths used to access them. This lis…
BDM Rest APIs allow to query Bonita Business Data.
BDM Rest APIs allow to create / update / delete / import in bulk Bonita Business Data.
Show status or install or update the Business Data Model. Installing or updating a BDM needs to be done in two successive steps: 1. Upload a BDM file 2. Install/Update the previou…
BDM Access control is available to protect the BDM. You can use this API to get the access control status (lastUpdatedBy, lastUpdateDate...).
Configure how Bonita automatically deletes obsolete business data. A retention rule applies to a specific business object type and defines when its instances become eligible for d…
Delegate human tasks from one user (the delegator) to another (the delegate) for a bounded period and a whitelist of processes. Delegation grants the delegate visibility and execu…
Activity
ArchivedActivity
HumanTask
ManualTask
Task
UserTask
ArchivedHumanTask
ArchivedManualTask
ArchivedUserTask
ArchivedTask
ActivityVariable
ArchivedActivityVariable
ProcessInstanceVariable
ArchivedProcessInstanceVariable
ProcessInstanceDocument
ArchivedProcessInstanceDocument
Actor
ActorMember
ProcessInstance
ArchivedProcessInstance
ProcessInstanceInfo
ProcessInstanceComment
ArchivedProcessInstanceComment
Deploy and manage process definitions. In addition, you can instantiate a process, which will create a new process instance (case).
ProcessInfo
Diagram
ProcessParameter
ProcessResolutionProblem
ProcessSupervisor
ProcessConnectorDependency
ConnectorFailure
ConnectorInstance
ArchivedConnectorInstance
FlowNode
ArchivedFlowNode
Failure leading a BPM entity instance to a failed state This Web REST API is available in Enterprise editions only, since version 10.3 (2025.1).
Archived version of the Failure leading a BPM entity instance to a failed state. This Web REST API is available in Enterprise editions only, since version 10.3 (2025.1).
TimerEventTrigger
Message
CustomUserDefinition
CustomUserValue
CustomUser
ProfessionalContactData
The group a user belongs to. Groups have a hierarchy (subgroups can be created inside a group).
Manage membership of users. There is a membership when a user belongs to a group and a role. Use this resource to add, search, and delete memberships.
Role
User
The Platform API resources require a platform session. In order to get one, log in as the platform administrator using the platform login service.
Handle the license information. This requires a platform session. Log in using the platform login service. This Web REST API is available in Enterprise editions only, since versio…
Use the page resource to access custom pages, UI Designer pages, layouts or forms and REST API extensions.
Profile
ProfileEntry
ProfileMember
Theme
Access log entries recorded by the Bonita Engine during execution. Logs capture actions performed on the platform such as process deployments, task executions, or configuration ch…
I18nlocale
I18nTranslation
Session
Handle the platform information. This Web REST API is available since version 10.2 (2024.3). Most of the information returned is only for Subscription editions.
Supports any type of files, used to upload a file before submitting a process or task form with a document in its contract.
Schemas 162
The contract defines 162 schemas that model the data the API accepts and returns. The most detailed are DelegatedTask (25 properties), ArchivedActivity (22 properties), AbstractTask (22 properties), FlowNode (22 properties). Each schema is shown below with its type and property counts.
Specification
The full machine-readable OpenAPI contract behind this narrative.
Source
This is an independent, third-party profile of Bonita Web REST API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.