Version
GET

List use cases

/v1/projects/{project}/use-cases in the Use Cases API.

curl "https://api.example.test/v1/projects/$PROJECT_ID/use-cases?status=approved" \  -H "Authorization: Bearer $TOKEN"

The use cases of one project in the project's order, 25 per page (per_page 1 to 100), each with its actor persona's name and without its steps, which the single read carries. sort_by takes number, reference, title, status, priority, frequency, position, created_at or updated_at. status, priority and persona_id narrow the page to one value each, and search to the use cases whose reference, title or goal contain the words.

GET
/v1/projects/{project}/use-cases

Requires ability

The token must hold this ability, or the call is refused with 403.

Runs the same action from an agent, behind the same ability.

Authorization

bearerToken
AuthorizationBearer <token>

A personal access token minted in the app under Account Settings, then API Tokens, sent as Authorization: Bearer zg_live_…. The token carries the abilities each endpoint lists under Requires ability and is frozen to one team, and optionally to one project, at mint time.

In: header

Path Parameters

project*string

The project, bound by the middleware.

Formatuuid

Query Parameters

status?|

Narrow to one status: draft, in_review, approved or deprecated. An unknown status is refused.

priority?|

Narrow to one MoSCoW priority: must, should, could or wont.

persona_id?|

Narrow to the use cases one persona acts in.

Formatuuid
search?|

Words the reference, the title or the goal must contain, up to 120 characters.

Lengthlength <= 120
page?integer

The 1-based page to return. A page past the last answers an empty data array with meta.total still filled, so a loop can stop without guessing.

Range1 <= value
Default1
per_page?integer

Rows per page, 1 to 100. A higher value clamps to the cap silently. Defaults to 25.

Range1 <= value <= 100
Default25
sort_by?string

The column to order by. Defaults to created_at; a column the endpoint does not offer falls back to the default rather than failing.

Default"created_at"
sort_direction?string

asc or desc. Defaults to desc.

Default"desc"

Value in

  • "asc"
  • "desc"
limit?integer

Alias of per_page, kept for clients that send it. per_page wins when both are sent.

Range1 <= value <= 100

Responses

200OK

One page of use cases with their actors; the steps are read one use case at a time.

401Unauthorized

The request carries no bearer token, or one that is revoked, malformed, or minted for another environment (a zg_test_ token on production).

403Forbidden

The token is valid but does not carry the ability this endpoint requires; error.context.required_ability names the one to grant. An endpoint that also checks who registered a row answers FORBIDDEN with the same status, and says so in its own description.

404Not found

An id in the path names nothing the token can see. TENANT_MISMATCH: the project sits outside the token's scope:project: allow-list, or the token carries no team scope. Both answer 404 rather than 403 so that existence outside the token's scope cannot be inferred.

422Validation failed

The payload broke a rule, and error.fields maps each offending key to its messages. A refusal from the domain, such as a role code already taken or a team the caller does not own, uses the same code with error.message saying why and no fields. On this endpoint: VALIDATION_FAILED: when status or priority is not one of its values, persona_id is not a uuid, or search is longer than 120 characters.

429Too many requests

The token has spent its 300 requests a minute or 10,000 an hour; Retry-After says when the next one is accepted.

How is this guide?

Last updated on