How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

ProcessMaker Processes API

BPMN 2.0 process design and management

ProcessMaker Processes API is one of 10 APIs that ProcessMaker publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Processes. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and authentication docs.

This API exposes 14 operations across 11 paths, and defines 7 schemas. It is described by OpenAPI 3.2.0, at version 1.0.0.

Requests are made against a single base URL, https://{organization}.processmaker.net/api/1.0.

14 operations 11 paths 7 schemas 1 DELETE5 GET5 POST3 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0.0
Base URL
https://{organization}.processmaker.net/api
Authentication
HTTP Bearer
License
Resource Areas
1

Authentication & Security 1

ProcessMaker Processes API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (JWT) (bearerAuth). By default, every request must be authenticated.

Paths & Operations 14

Across 11 paths, the API surfaces 14 operations — 1 DELETE, 5 GET, 5 POST, 3 PUT. Each is listed below with its method, path, parameters, and response codes.

Processes 14

BPMN 2.0 process design and management

GET
/processes
Returns all processes that the user has access to
getProcesses 7 params → 200
POST
/processes
Save a new process
createProcess body → 201422
GET
/processes/{processId}
Get single process by ID
getProcessById 2 params → 200404
PUT
/processes/{processId}
Update a process
updateProcess 1 param body → 200404422
DELETE
/processes/{processId}
Delete a process
deleteProcess 1 param → 204404
PUT
/processes/{processId}/draft
Update a draft process
updateDraftProcess 1 param body → 200
PUT
/processes/{processId}/restore
Restore an inactive process
restoreProcess 1 param → 200
POST
/processes/{processId}/export
Export a single process by ID and return a URL to download it
exportProcess 1 param → 200
POST
/processes/import
Import a new process
importProcess body → 200
POST
/processes/import/validation
Validate a process import file
validateImport body → 200
GET
/processes/{processId}/start_events
Get start events of a process by ID
getStartEventsProcessById 2 params → 200
GET
/processes/{processId}/bpmn
Download the BPMN definition of a process
processBpmn 1 param → 200
GET
/start_processes
Returns the list of processes that the user can start
startProcesses 6 params → 200
POST
/process_events/{process_id}
Start a new process
triggerStartEvent 2 params body → 200

Schemas 7

The contract defines 7 schemas that model the data the API accepts and returns. The most detailed are ProcessEditable (10 properties), Metadata (8 properties), ProcessImport (3 properties), ProcessRequestEditable (3 properties). Each schema is shown below with its type and property counts.

ProcessRequestEditable
object
3 properties
ProcessImport
object
3 properties
ProcessCollection
object
2 properties
ProcessRequest
Process
Metadata
object
8 properties
ProcessEditable
object
10 properties 4 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

processmaker-processes-api-openapi.yml Raw ↑

Other APIs ProcessMaker publishes across the network.

ProcessMaker Environment Variables API
ProcessMaker Files API
ProcessMaker Groups API
ProcessMaker Notifications API
ProcessMaker Requests API
ProcessMaker Screens API
ProcessMaker Settings API
ProcessMaker Tasks API
ProcessMaker Users API
Where this information came from

This is an independent, third-party profile of ProcessMaker Processes API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.