> ## Documentation Index > Fetch the complete documentation index at: https://docs.flows.super.ai/llms.txt > Use this file to discover all available pages before exploring further. # Query a managed-DB table with exact-match filters > Run a parameterised SELECT against a managed-DB table. Supports a list of match clauses against columns. Each clause is either a 'whole' exact-match or a 'json_keys' match against keys inside a JSONB column. Clauses combine via `combinator` at the top level (AND or OR; defaults to AND). Returns rows ordered by `order_by` if provided, capped to `limit` (max 1000). The API surface is generic — ICL is the first consumer ("Write To Database" + ICL Retrieve tasks); future use cases reuse it without bespoke service methods. ## OpenAPI ````yaml /openapi/superai-flows-openapi.json post /api/integrations/database/managed/tables/{table_name}/query openapi: 3.1.0 info: description: >- SuperAI Flows is a workflow orchestration platform that enables you to design, deploy, and monitor automated workflows at scale. Build complex workflows using our declarative YAML DSL, execute them reliably, and integrate seamlessly with AI models, cloud storage, and enterprise systems. **Key Capabilities:** - **Workflow Management**: Define workflows as code with version control and automated execution - **Task Orchestration**: Chain together API calls, data processing, and AI operations - **Real-time Monitoring**: Track execution progress with WebSocket notifications and comprehensive logging - **Multi-tenant Architecture**: Organization-scoped resources with role-based access control **API Versioning and Breaking Changes:** We follow a strict compatibility policy to ensure your integrations remain stable: - **Non-breaking changes** (safe, no action required): - Adding new API endpoints - Adding new optional query parameters to existing endpoints - Adding new fields to API responses - Adding new values to existing enums - **Breaking changes** (requires client updates): - Removing or renaming API endpoints - Removing query parameters or request fields - Removing response fields - Changing field types or validation rules - Removing values from existing enums **Client Implementation Requirements:** Your API clients MUST be designed to gracefully handle additional fields in responses. We may add new fields to any response object without considering this a breaking change. Ensure your JSON parsers ignore unknown fields rather than raising errors. **Backward Compatibility Guarantee:** We commit to maintaining backward compatibility for all non-breaking changes. Breaking changes will be: - Announced at least 15 days in advance - Documented in our changelog with migration guide For the latest API updates and migration guides, see our changelog. title: SuperAI Flow Platform version: 0.1.0 servers: - description: Production server url: https://flows.super.ai security: [] tags: - description: >- Flow management operations for defining and organizing workflows. Flows represent workflow definitions with tasks, dependencies, and execution logic. They serve as reusable templates that can be executed multiple times with different inputs. **What is a flow?** A flow consists of: - **Tasks**: Individual units of work that perform specific actions - **Dependencies**: Relationships between tasks that define execution order - **Configuration**: Settings and parameters that control flow behavior **Use these endpoints to:** - Create new flow definitions from scratch or import from YAML - List and search existing flows in your organization - Retrieve detailed flow information including task definitions - Update flow configurations and task parameters - Delete flows that are no longer needed Flows are the foundation of your workflow automation—once defined, they can be executed via the flow-executions endpoints. name: flows x-displayName: Flows - description: >- Flow execution operations for running and monitoring workflows. Flow executions represent runtime instances of flows. When you execute a flow, a new flow execution is created with its own unique ID, status, and execution context. Each execution is independent and maintains its own state, input data, and results. **Key concepts:** - **Execution Status**: Tracks the lifecycle (running, completed, failed, cancelled) - **Run Number**: Sequential identifier for executions of the same flow - **Execution Context**: Contains input parameters, user information, and metadata - **Task Results**: Stores outputs from each task within the execution **Use these endpoints to:** - Start new flow executions with custom input parameters - Monitor execution progress and status in real-time - Retrieve execution history and detailed results - Filter and search executions by status, date, or flow - Cancel running executions when needed - Access task-level execution details and outputs Flow executions transform flow definitions into actual work and deliverable results. name: flow-executions x-displayName: Flow Executions - description: >- Task execution operations for tracking individual task runs within flow executions. Task executions represent individual task runs within a flow execution. Each task in a flow execution has its own task execution record that tracks its lifecycle, inputs, outputs, and status. **What is tracked:** - **Status**: Current state (pending, running, completed, failed, skipped) - **Input/Output**: Data passed to and produced by the task - **Timing**: Start time, end time, and duration - **Errors**: Failure details and error messages - **Tags**: Metadata and categorization **Use these endpoints to:** - Query task execution status for debugging - Retrieve task outputs for analysis - Debug task failures with detailed error information - Track task performance and timing - Monitor task execution progress within flows Task executions provide granular visibility into workflow execution, essential for debugging and optimization. name: task-executions x-displayName: Task Executions - description: >- Task executor operations for discovering available task types and their capabilities. Task executors define the available task types that can be used in flow definitions. Each executor specifies its input schema, execution behavior, and capabilities. This endpoint enables programmatic discovery of task types for building flows dynamically. **What task executors provide:** - **Input Schema**: JSON Schema defining required and optional parameters - **Output Schema**: Expected output structure and data types - **Description**: Human-readable explanation of functionality - **Agent Prompts**: Instructions for AI-powered flow generation **Use these endpoints to:** - Discover available task types for flow building - View task input/output schemas for validation - Understand task capabilities and requirements - Build flow builder UIs with dynamic task lists - Enable AI agents to select appropriate tasks Task executors enable dynamic, flexible workflow creation by providing a registry of available operations. name: task-executors x-displayName: Task Executors - description: >- Task output operations for storing and retrieving task execution results. Task outputs store the results produced by task executions in a structured, queryable format. While task executions track the full lifecycle (input, output, error, status), task outputs focus specifically on the final output data formatted for display, analysis, and downstream consumption. **Key characteristics:** - **Summary Field**: Structured output data ready for consumption - **Historical Record**: Permanent storage of task results - **Queryable**: Filter and search outputs by task, execution, or flow - **Linked**: Connected to parent flow execution and task execution **Use these endpoints to:** - Store task results after successful execution - Retrieve outputs for specific tasks or entire executions - Query historical outputs for analysis and reporting - Access formatted results for display in dashboards - Feed outputs to downstream tasks or external systems Task outputs provide the data foundation for workflow analytics, debugging, and result visualization. name: task-outputs x-displayName: Task Outputs - description: >- Task data operations for flow validation, schema discovery, and dynamic configuration. The task-data endpoint analyzes flow definitions to extract task output schemas, dynamic configuration options, and validation errors. This is essential for building flow configuration UIs, validating flows before execution, and understanding task data structures. **Primary Use Cases:** - **Flow Builder UI**: Get task output schemas for validating downstream task inputs - **Schema Discovery**: Understand the structure of data each task produces - **Dynamic Configuration**: Retrieve runtime-dependent options (e.g., available spreadsheets, database tables) - **Flow Validation**: Validate flow definitions programmatically before saving or executing - **Custom Integrations**: Build tools that work with SuperAI Flows programmatically **What You Get:** - **Output Schemas**: JSON Schema definitions for each task's output structure - **Dynamic Data**: Runtime-dependent configuration options (dropdown choices, conditional fields) - **Validation Errors**: Detailed error messages for invalid flow definitions **How It Works:** 1. Submit a flow definition in SuperAI Flows DSL format 2. The endpoint validates the structure and loads each task executor 3. For each task, it extracts the output schema and any dynamic configuration data 4. Returns all schemas, dynamic data, and any validation errors encountered **Key Concepts:** - **Output Schema**: JSON Schema describing the structure of data a task produces - **Dynamic Data**: Configuration options that depend on user credentials or external state (e.g., list of Google Sheets accessible with your credentials) - **Validation Levels**: Basic (structure only) vs Full (includes semantic validation) **Integration Notes:** - The flow builder frontend uses this endpoint to power the task configuration UI - Flows API uses this validation internally when creating/updating flows - Response includes validation errors even on HTTP 200 - always check `validation_errors` field - May make external API calls to fetch dynamic data, so response time varies (100ms-2s typical) **Related Endpoints:** - `GET /task-executors`: List available task executor types and their schemas - `POST /flows`: Create flow (uses task-data validation internally) - `PUT /flows/{flow_id}`: Update flow (uses task-data validation internally) name: task-data x-displayName: Task Data - description: >- Task tag operations for categorizing and organizing tasks with metadata. Task tags provide metadata and categorization for tasks within flow executions. Tags enable flexible organization, filtering, and grouping of tasks beyond their structural relationships. **What tags enable:** - **Categorization**: Group related tasks across different flows - **Filtering**: Query executions by tag criteria - **Metadata**: Attach custom key-value pairs to tasks - **Organization**: Create logical groupings for reporting **Use these endpoints to:** - Manage task labels and categories - Add organizational metadata to tasks - Query tasks by tag criteria - Build custom views and dashboards Task tags provide flexible organization capabilities that enhance workflow management and analysis. name: task-tags x-displayName: Task Tags - description: >- Integration operations for connecting flows to external services and platforms. Integrations enable your workflows to interact with third-party services, databases, storage systems, and communication platforms. They provide a unified interface for managing credentials, testing connections, and configuring service-specific features. **Supported integration types:** - **Databases**: PostgreSQL, MySQL, and other SQL databases - **Storage**: SFTP, cloud storage, and file systems - **Communication**: Email (SMTP, SES), webhooks, notifications - **Collaboration**: SharePoint, Google Drive, document management - **Custom**: Plugin architecture for extending functionality **Key concepts:** - **Credentials**: Securely stored authentication information per integration - **Plugins**: Modular integration implementations with discovery and registration - **OAuth Flows**: Automated authorization for third-party services - **Webhooks**: Inbound event handling from external platforms - **Connection Testing**: Validate credentials and connectivity before use **Use these endpoints to:** - Configure and manage integration credentials - Test connections to external services - Handle OAuth authorization flows for cloud services - Set up and manage webhooks for inbound events - Discover available integration capabilities - Access integration-specific features (folders, schemas, etc.) Integrations bridge your workflows with the external world, enabling powerful automation across your entire technology stack. name: integrations x-displayName: Integrations - description: >- Authentication operations for user authentication, authorization, and session management. Authentication endpoints handle user identity verification, token generation, and access control throughout the platform. The system uses JWT (JSON Web Token) based authentication managed through core.flows.super.ai. **Authentication flow:** 1. Obtain credentials from your account at core.flows.super.ai 2. Authenticate to receive JWT access token and refresh token 3. Include access token in API requests via Authorization header 4. API validates tokens and extracts user identity and organization context 5. Tokens expire after 1 hour and must be refreshed **Key concepts:** - **Bearer Tokens**: Short-lived JWT tokens (1 hour) used for API requests - **Anon-Key**: Long-lived API key used to authenticate to the authentication API. - **Refresh Tokens**: Long-lived tokens used to obtain new access tokens - **Protected Routes**: Most endpoints require valid authentication - **Public Endpoints**: Limited whitelisted paths accessible without auth **Getting started with authentication:** 1. **Obtain your Anonymous Key** (public endpoint - no authentication required): ```bash curl https://flows.super.ai/api/auth/anon-key ``` 2. **Authenticate** to receive your tokens: ```bash curl -X POST 'https://core.flows.super.ai/auth/v1/token?grant_type=password' \ -H 'Content-Type: application/json' \ -H 'apikey: ANON_KEY' \ -d '{"email": "you@example.com", "password": "your-password"}' ``` This will return a JWT access token and refresh token. **Human verification:** when `GET /api/auth/captcha-config` reports `"enabled": true`, this environment requires a human-verification token on the direct password grant, and the command above returns 400 without one. Add the solved challenge token to the body: ```json {"email": "you@example.com", "password": "your-password", "gotrue_meta_security": {"captcha_token": "TOKEN_FROM_THE_WIDGET"}} ``` Obtaining such a token requires rendering the challenge in a browser, so non-interactive API consumers should prefer a service-role integration, which is exempt from human verification. 3. **Use the access token** in your requests: ```bash curl -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \ https://flows.super.ai/api/flows ``` **Token management:** - Access tokens expire after 1 hour - Use refresh tokens to obtain new access tokens without re-authenticating - Store tokens securely and never commit them to version control All API endpoints (except whitelisted public paths) require authentication. Include your bearer token in the Authorization header: `Bearer ` name: auth x-displayName: Authentication - description: >- User profile operations for viewing and updating account information. Profile endpoints allow authenticated users to view and update their own account information and preferences. These endpoints operate on the currently authenticated user (determined from the JWT token) and do not require specifying a user ID. **Account information includes:** - **Personal Details**: First name, last name, email - **Organization**: Associated organization and role - **Status**: Account status and permissions - **Metadata**: Created/updated timestamps **Use these endpoints to:** - Retrieve current user information for display - Update personal details (name, preferences) - View organization membership and role - Access account metadata Profile endpoints provide self-service account management capabilities, reducing the need for administrative intervention for routine updates. **Note:** All profile endpoints are protected and automatically scope to the authenticated user. Email and organization changes require admin privileges. name: profile x-displayName: Profile - description: >- Model operations for querying available AI models and their configurations. Model endpoints provide information about the AI models available through the platform. These endpoints enable discovery of models, their capabilities, and regional availability. **Key features:** - **Model Discovery**: List all available AI models - **Regional Filtering**: Query models by geographic region (EU, Global) - **Model Metadata**: Access model information including provider, location, and capabilities **Use these endpoints to:** - Discover available AI models for your workflows - Filter models by region for compliance or latency requirements - Retrieve model metadata for configuration and selection - Build dynamic model selection UIs **Regional filtering:** - `eu`: Models deployed in European regions (West Europe, France Central, Germany, Sweden) - `global`: Models deployed in US and other global regions Model endpoints enable intelligent model selection and routing based on your requirements for compliance, performance, and cost. name: models x-displayName: Models - description: >- File download operations for retrieving files from gs:// storage URIs. When Super.AI Flows processes documents, task outputs often include file references as `gs://` URIs pointing to Google Cloud Storage. These endpoints let you download those files without needing to understand GCS internals or parse storage URLs. **The problem these endpoints solve:** Previously, downloading a file required: 1. Recognizing the URL as a GCS reference 2. Parsing out the file key from the URI 3. Calling a separate endpoint to get a signed URL 4. Downloading using that signed URL **Now it's simple:** Pass the `gs://` URI exactly as received and get your file. **Two ways to download:** 1. **Direct download** (`GET /files/download`): Returns a redirect to the file. Perfect for curl with `-L` flag. ``` curl -L -H "X-API-Key: saf_xxx" "https://flows.super.ai/api/files/download?uri=gs://..." -o file.pdf ``` 2. **Resolve first** (`POST /files/resolve`): Returns a JSON response with the download URL. Better for programmatic use and sensitive files (keeps URI out of logs). ``` curl -X POST "https://flows.super.ai/api/files/resolve" \ -H "X-API-Key: saf_xxx" \ -H "Content-Type: application/json" \ -d '{"uri": "gs://..."}' ``` **Security:** - Files are organization-scoped: you can only download files from flows your organization owns - URIs are validated to prevent path traversal attacks - Download URLs expire after 1 hour **Common use cases:** - Download processed documents from completed flow executions - Retrieve extracted data files from task outputs - Integrate file downloads into automated pipelines name: files x-displayName: Files - description: >- Human review task operations for creating and managing human-in-the-loop review workflows. name: human-review-tasks x-displayName: Human Review Tasks - description: >- Push data from external systems to a flow execution's waiting 'Wait for Webhook' task. A 2xx acknowledgment means the data is durably stored; identical redeliveries are idempotent. name: webhook-data x-displayName: Webhook Data - description: >- Service account operations for managing programmatic API access credentials. name: service-accounts x-displayName: Service Accounts - description: >- Organization operations for viewing credit balance and organization-scoped information. name: organizations x-displayName: Organizations - description: >- Worker group operations for organizing an organization's members into groups. Restricted to organization admins. name: worker-groups x-displayName: Worker Groups - description: Single Sign-On operations for configuring SAML-based SSO authentication. name: sso x-displayName: SSO - description: >- Plugin operations for managing integration plugin instances, OAuth flows, and webhooks. name: plugins x-displayName: Plugins paths: /api/integrations/database/managed/tables/{table_name}/query: post: tags: - integrations summary: Query a managed-DB table with exact-match filters description: >- Run a parameterised SELECT against a managed-DB table. Supports a list of match clauses against columns. Each clause is either a 'whole' exact-match or a 'json_keys' match against keys inside a JSONB column. Clauses combine via `combinator` at the top level (AND or OR; defaults to AND). Returns rows ordered by `order_by` if provided, capped to `limit` (max 1000). The API surface is generic — ICL is the first consumer ("Write To Database" + ICL Retrieve tasks); future use cases reuse it without bespoke service methods. operationId: >- query_managed_database_table_api_integrations_database_managed_tables__table_name__query_post parameters: - in: path name: table_name required: true schema: pattern: ^[a-zA-Z_][a-zA-Z0-9_]{0,62}$ title: Table Name type: string requestBody: content: application/json: schema: $ref: '#/components/schemas/QueryTableRequest' required: true responses: '200': content: application/json: schema: $ref: '#/components/schemas/QueryTableResponse' description: Query executed successfully '400': content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' description: Invalid query payload '401': content: application/json: examples: invalid_token: summary: Invalid or expired token value: error: code: unauthorized message: Invalid authentication token request_id: 01K8KACP7D2XFGHJ9KLM4NPQR8 missing_token: summary: Missing authentication token value: error: code: unauthorized message: Authentication required request_id: 01K8KABR6S16YETA2SZPVBS9SP schema: $ref: '#/components/schemas/ErrorResponse' description: Unauthorized - Missing or invalid authentication credentials '404': content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' description: Table not found '422': content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' description: Invalid value for column type / unknown column '500': content: application/json: examples: internal_error: summary: Internal server error value: error: code: internal_error message: Internal server error request_id: 01K8KABR6S16YETA2SZPVBS9SP repository_error: summary: Database error value: error: code: repository_error message: Database operation failed request_id: 01K8KACP7D2XFGHJ9KLM4NPQR8 schema: $ref: '#/components/schemas/ErrorResponse' description: Internal Server Error - An unexpected error occurred security: - BearerAuth: [] - APIKeyAuth: [] components: schemas: QueryTableRequest: description: >- Request to query a managed-DB table with exact-match clauses and a row limit. properties: combinator: default: AND description: >- How top-level match clauses join. 'AND' requires every clause to match; 'OR' returns rows that satisfy at least one clause. enum: - AND - OR title: Combinator type: string limit: default: 100 description: Max rows to return maximum: 1000 minimum: 1 title: Limit type: integer matches: description: >- List of match clauses combined by `combinator` at the top level. Empty list returns all rows up to limit. items: discriminator: mapping: is_null: '#/components/schemas/IsNullMatch' json_keys: '#/components/schemas/JsonKeysMatch' whole: '#/components/schemas/WholeMatch' propertyName: mode oneOf: - $ref: '#/components/schemas/WholeMatch' - $ref: '#/components/schemas/IsNullMatch' - $ref: '#/components/schemas/JsonKeysMatch' title: Matches type: array order_by: anyOf: - discriminator: mapping: column: '#/components/schemas/OrderByColumn' random: '#/components/schemas/OrderByRandom' propertyName: kind oneOf: - $ref: '#/components/schemas/OrderByColumn' - $ref: '#/components/schemas/OrderByRandom' - type: 'null' description: >- How to order results. Either a column with direction (kind='column') or a SQL-level random sample (kind='random'). Defaults to no ORDER BY clause. title: Order By title: QueryTableRequest type: object QueryTableResponse: description: Response containing matched rows from a managed-DB table. properties: columns: description: Column names items: type: string title: Columns type: array row_count: description: Number of rows returned minimum: 0 title: Row Count type: integer rows: description: Matched rows as dicts keyed by column name items: additionalProperties: true type: object title: Rows type: array table_name: description: Table name title: Table Name type: string required: - table_name - columns - rows - row_count title: QueryTableResponse type: object ErrorResponse: description: |- Standard API error response structure. All error responses from the API follow this format, ensuring consistent error handling for API consumers. Example: { "error": { "message": "Flow not found", "code": "not_found" }, "request_id": "01K8KABR6S16YETA2SZPVBS9SP" } examples: - error: code: not_found message: Resource not found request_id: 01K8KABR6S16YETA2SZPVBS9SP properties: error: $ref: '#/components/schemas/ErrorDetail' request_id: anyOf: - type: string - type: 'null' description: >- Unique request identifier in ULID format for debugging and support. Example: 01K8KABR6S16YETA2SZPVBS9SP title: Request Id required: - error title: ErrorResponse type: object IsNullMatch: additionalProperties: false description: >- Match clause for NULL values: `"col" IS NULL`. Use this in place of trying to match `value: null` — `WHERE col = NULL` is always false in SQL. properties: column: description: Column that must be NULL examples: - completed_at pattern: ^[a-zA-Z_][a-zA-Z0-9_]{0,62}$ title: Column type: string mode: const: is_null default: is_null title: Mode type: string required: - column title: IsNullMatch type: object JsonKeysMatch: additionalProperties: false description: 'Match clause against keys inside a JSONB column: `"col"->>''k'' = :param`.' properties: column: description: JSONB column whose keys to match examples: - metadata pattern: ^[a-zA-Z_][a-zA-Z0-9_]{0,62}$ title: Column type: string combinator: default: AND description: How key/value pairs combine within this clause. enum: - AND - OR title: Combinator type: string keys: description: JSON key/value pairs to match. At least one required. items: $ref: '#/components/schemas/KeyValue' minItems: 1 title: Keys type: array mode: const: json_keys default: json_keys title: Mode type: string required: - column - keys title: JsonKeysMatch type: object WholeMatch: additionalProperties: false description: 'Exact-match clause on a column value: `"col" = :param`.' properties: column: description: Column to match against examples: - task_id pattern: ^[a-zA-Z_][a-zA-Z0-9_]{0,62}$ title: Column type: string mode: const: whole default: whole title: Mode type: string value: anyOf: - type: string - type: integer - type: number - type: boolean description: Value the column must equal (non-null). title: Value required: - column - value title: WholeMatch type: object OrderByColumn: additionalProperties: false description: Order by a named column in ASC or DESC direction. properties: column: description: Column to order by examples: - created_at pattern: ^[a-zA-Z_][a-zA-Z0-9_]{0,62}$ title: Column type: string direction: default: ASC enum: - ASC - DESC title: Direction type: string kind: const: column default: column title: Kind type: string required: - column title: OrderByColumn type: object OrderByRandom: additionalProperties: false description: >- Order by `random()` for uniform random sampling across the matched pool. Pushing the randomisation into Postgres is the only way to get a uniform sample over the whole matched pool — a client-side shuffle on a heap-prefix would be biased. properties: kind: const: random default: random title: Kind type: string title: OrderByRandom type: object ErrorDetail: description: |- Standard error detail structure. This model matches the error format returned by the centralized exception handlers in app/api/errors/handlers.py. properties: code: anyOf: - type: string - type: 'null' description: Machine-readable error code for programmatic handling title: Code details: anyOf: - items: type: string type: array - items: additionalProperties: true type: object type: array - additionalProperties: true type: object - type: 'null' description: >- Additional error context, validation errors, or debugging information title: Details message: description: Human-readable error message title: Message type: string required: - message title: ErrorDetail type: object KeyValue: description: One JSON key/value pair inside a json_keys match clause. properties: key: description: JSON key inside the target column examples: - document_type pattern: ^[a-zA-Z_][a-zA-Z0-9_]{0,62}$ title: Key type: string value: anyOf: - type: string - type: integer - type: number - type: boolean description: Exact value to match against the JSON key title: Value required: - key - value title: KeyValue type: object securitySchemes: BearerAuth: bearerFormat: JWT description: >- JWT Bearer token authentication. Include your access token in the Authorization header as: `Bearer YOUR_ACCESS_TOKEN` Example: ``` Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9... ``` scheme: bearer type: http APIKeyAuth: description: >- API key authentication. Include your API key in the X-API-Key header as: `X-API-Key YOUR_API_KEY` Example: ``` X-API-Key: saf_1234567890 ``` in: header name: X-API-Key type: apiKey ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.