Skip to content

Business Processes API

This content is not available in your language yet.

Manage your organization’s business processes, their criticality levels, and relationships to assets, risks, and vendors.

Get a paginated list of all business processes.

Terminal window
curl --location GET \
--url "https://kordon-app.com/api/v1/business-processes/" \
--header "Authorization: Bearer YOUR-TOKEN"

Example Response

Status: 200

{
"data": [
{
"id": "5a35e67e-f6b7-488d-86a2-6d7943ea6119",
"assets": [
{
"id": "1ac63eb0-6012-4f8a-b46a-d8e0b1dea3e8",
"state": "live",
"title": "CRM"
}
],
"created_at": "2025-11-10T07:14:58+00:00",
"criticality": "medium",
"currency": null,
"description": "<p>Important business process</p>",
"labels": [],
"monetary_value": 1,
"owner": {
"id": "fbe8dc76-b1a8-4ce2-866d-15f90c9a20f6",
"active": true,
"color": "#52C41A",
"kind": "person",
"name": "Linus Caldwell"
},
"permissions": {
"update": true,
"destroy": true,
"connect": true,
"changelog": true
},
"risks": [],
"tasks": [],
"title": "Sales",
"updated_at": "2025-11-13T15:43:45+00:00",
"vendors": []
}
],
"meta": {
"total_count": 1,
"page": 1,
"permissions": {
"create": true
},
"per_page": 10
}
}

Retrieve a specific business process by ID.

Terminal window
curl --location GET \
--url "https://kordon-app.com/api/v1/business-processes/5a35e67e-f6b7-488d-86a2-6d7943ea6119" \
--header "Authorization: Bearer YOUR-TOKEN"

Example Response

Status: 200

{
"data": {
"id": "5a35e67e-f6b7-488d-86a2-6d7943ea6119",
"assets": [
{
"id": "1ac63eb0-6012-4f8a-b46a-d8e0b1dea3e8",
"state": "live",
"title": "CRM"
}
],
"created_at": "2025-11-10T07:14:58+00:00",
"criticality": "medium",
"currency": "USD",
"description": "<p>Important business process</p>",
"labels": [],
"monetary_value": 100000,
"owner": {
"id": "fbe8dc76-b1a8-4ce2-866d-15f90c9a20f6",
"active": true,
"color": "#52C41A",
"kind": "person",
"name": "Linus Caldwell"
},
"permissions": {
"update": true,
"destroy": true,
"connect": true,
"changelog": true
},
"risks": [],
"tasks": [],
"title": "Sales",
"updated_at": "2025-11-13T15:43:45+00:00",
"vendors": []
}
}

Create a new business process.

Required Parameters:

  • title - Business process title
  • owner_id - User ID of the process owner

Optional Parameters:

  • description - Detailed description of the business process (HTML supported)
  • criticality - Criticality level (low, medium, or high)
  • monetary_value - Financial value associated with the process
  • currency - Currency code (e.g., “USD”, “EUR”, “GBP”)
Terminal window
curl --location POST \
--url "https://kordon-app.com/api/v1/business-processes/" \
--header "Authorization: Bearer YOUR-TOKEN" \
--header "Content-Type: application/json" \
--data '{
"business_process": {
"title": "Customer Onboarding",
"owner_id": "fbe8dc76-b1a8-4ce2-866d-15f90c9a20f6",
"criticality": "high",
"monetary_value": 250000,
"currency": "USD",
"description": "<p>Process for onboarding new customers</p>"
}
}'

Update an existing business process.

Terminal window
curl --location PATCH \
--url "https://kordon-app.com/api/v1/business-processes/5a35e67e-f6b7-488d-86a2-6d7943ea6119" \
--header "Authorization: Bearer YOUR-TOKEN" \
--header "Content-Type: application/json" \
--data '{
"criticality": "high",
"monetary_value": 500000
}'

Example Response

Status: 200

The response will include the full data of the updated business process.

Remove a business process.

Terminal window
curl --location DELETE \
--url "https://kordon-app.com/api/v1/business-processes/5a35e67e-f6b7-488d-86a2-6d7943ea6119" \
--header "Authorization: Bearer YOUR-TOKEN"

Example Response

Status: 200

{
"data": {
"id": "5a35e67e-f6b7-488d-86a2-6d7943ea6119"
}
}

Available criticality levels:

  • low - Low business impact
  • medium - Medium business impact
  • high - High business impact

Business processes can be related to:

  • Assets - Information assets used or produced by the process
  • Vendors - Third-party vendors involved in the process
  • Controls - Controls that govern or protect the process
  • Risks - Risks that could disrupt or impact the process

The permissions object indicates what actions the current user can perform:

  • update - Can modify the business process
  • destroy - Can delete the business process
  • connect - Can link the business process to other objects
  • changelog - Can view the business process’s change history