Connect Cadenio to your entire stack

curl -G https://api.cadenio.com/runs \
  -H "Authorization: Bearer sk_live_..." \
  -d status=RUNNING \
  -d limit=20

HTTP/1.1 200 OK

{
  "data": [
    {
      "id": "3ed4dcf7-a102-4327-81ab-723b34d8a6b5",
      "publicId": "r_3ytXrD6WA7",
      "title": "Vendor Onboarding - ACME Corp",
      "status": "RUNNING",
      "templateId": "6795dfb5-15de-4f41-8a96-b83830526ca6",
      "ownerUserId": "2bc947d9-114d-4c7f-9d18-6af9cfa2393c",
      "scheduledDateLocal": "2026-07-24",
      "createdAt": "2026-07-24T14:22:00Z",
      "completedAt": null
    }
  ],
  "total": 1,
  "hasMore": false
}

// id is the UUID you use in every other endpoint. publicId is a short,
// human-friendly identifier (only runs have one) meant for display in UI/PDFs.

curl -X POST https://api.cadenio.com/runs \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "templateId": "6795dfb5-15de-4f41-8a96-b83830526ca6",
    "title": "Vendor Onboarding - ACME Corp"
  }'

HTTP/1.1 201 Created

{
  "id": "3ed4dcf7-a102-4327-81ab-723b34d8a6b5",
  "publicId": "r_3ytXrD6WA7",
  "title": "Vendor Onboarding - ACME Corp",
  "status": "RUNNING",
  "templateId": "6795dfb5-15de-4f41-8a96-b83830526ca6",
  "templateVersionId": "fbc7dd41-334e-416b-8ddd-acb053aa0dd9",
  "ownerUserId": "2bc947d9-114d-4c7f-9d18-6af9cfa2393c",
  "createdAt": "2026-07-24T14:22:00Z"
}

curl -X PATCH \
  https://api.cadenio.com/runs/tasks/22074d71-5767-48cf-ad21-88be0b52911c/status \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{ "status": "COMPLETED" }'

HTTP/1.1 204 No Content

curl -X PATCH \
  https://api.cadenio.com/runs/tasks/22074d71-5767-48cf-ad21-88be0b52911c/due-date \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{ "dueAt": "2026-08-01T17:00:00Z", "dueAtHasTime": true }'

HTTP/1.1 204 No Content

curl -X PATCH \
  https://api.cadenio.com/runs/tasks/22074d71-5767-48cf-ad21-88be0b52911c/assignee \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{ "assigneeId": "2bc947d9-114d-4c7f-9d18-6af9cfa2393c" }'

HTTP/1.1 204 No Content

curl -X POST https://api.cadenio.com/execution/entries \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{ "runTaskId": "22074d71-5767-48cf-ad21-88be0b52911c" }'

HTTP/1.1 201 Created

{
  "id": "4abc71a1-4c8d-4ac0-ae3d-4333f33ad886",
  "runTaskId": "22074d71-5767-48cf-ad21-88be0b52911c",
  "createdByUserId": "2bc947d9-114d-4c7f-9d18-6af9cfa2393c",
  "createdAt": "2026-07-24T17:28:10Z",
  "fieldValues": []
}

curl -X POST https://api.cadenio.com/execution/field-values \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "executionEntryId": "4abc71a1-4c8d-4ac0-ae3d-4333f33ad886",
    "runTaskFieldId": "607ebeee-afd1-4834-8c9d-e5019e1373ad",
    "value": "42"
  }'

HTTP/1.1 201 Created

{ "autoFilledFields": [] }

// autoFilledFields lists any other field the platform derived from this
// write (e.g. a lookup field populated from a linked data source row).

curl -X POST https://api.cadenio.com/execution/entries/complete \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{ "executionEntryId": "4abc71a1-4c8d-4ac0-ae3d-4333f33ad886" }'

HTTP/1.1 204 No Content

// Completing the last required, visible task in a run auto-completes the
// run itself — no separate call to POST /runs/:id/complete is needed.

curl -X POST https://api.cadenio.com/webhooks \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Sync to ERP",
    "url": "https://your-system.com/hooks/cadenio",
    "enabledEvents": ["run.completed", "task.overdue"]
  }'

POST https://your-system.com/hooks/cadenio
content-type: application/json
x-flow-timestamp: 1785005000000
x-flow-signature: 6f9b1c...  (hex HMAC-SHA256)

{
  "event": "run.completed",
  "deliveryId": "9b1e2c3d-...",
  "timestamp": "2026-07-24T16:05:00Z",
  "orgId": "0c861a32-d927-47d7-a8f5-861a4adf28ed",
  "data": {
    "runId": "3ed4dcf7-a102-4327-81ab-723b34d8a6b5",
    "templateId": "6795dfb5-15de-4f41-8a96-b83830526ca6"
  }
}

const crypto = require("crypto");

function isValid(req, secret) {
  const timestamp = req.headers["x-flow-timestamp"];
  const signature = req.headers["x-flow-signature"];
  const body = JSON.stringify(req.body); // raw body, exactly as received
  const expected = crypto
    .createHmac("sha256", secret)
    .update(`${timestamp}.${body}`)
    .digest("hex");
  return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));
}

// The signing secret is a single org-wide value (WEBHOOK_SIGNING_SECRET),
// shared across all of your org's webhooks — not returned per-webhook by
// this endpoint. Find it under Settings → Integrations → Webhooks.