List onboarding flows
/onboarding-flowsLists onboarding flows, oldest first, and returns one page. A flow is the journey a respondent follows to join the platform: its forms, the routes between them and the classifications it earns. Flows belong to the whole tenant, so every token sees the same list, drafts included, and each flow carries its routes. Filter by filter[status], filter[user_type], filter[q] (name) and a filter[created_at] range. Use GET /onboarding-flows/{id} for one flow. It changes nothing.
Query parameters
- Default:
Page size (1–100). Defaults to 25; values are clamped to the range.
25 Opaque pagination cursor taken from a prior response's
meta.next_cursor.Comma-separated top-level fields to return.
idis always returned.Comma-separated fields to sort by: created_at, updated_at or name. Prefix a field with
-for descending. Defaults tocreated_at, oldest first. The record id is always the final tiebreak.Flows whose name contains this text, ignoring case.
- One of:
Only flows with this status: draft or published. Takes
[in]and[not_in]with a comma-separated list.draft,published - One of:
Only flows that can onboard this user type: investor or advisor. Without it, flows of every user type are listed. Takes
[in]and[not_in].investor,advisor Only flows created in a range, written
filter[created_at][gte]=2026-10-01. Takes gt, gte, lt and lte.
Responses
{
"data": [
{
"id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
"name": "string",
"status": "draft",
"expiry_type": "daily",
"mode_type": "continuous",
"user_types": [
"investor"
],
"routes": [
{}
],
"definition": {},
"form_count": 1,
"start_form_id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
"created_at": "2026-06-12T10:00:00+00:00",
"updated_at": "2026-06-12T10:00:00+00:00"
}
],
"meta": {
"limit": 1,
"next_cursor": "string",
"prev_cursor": "string"
}
}Authorization failed. error.code is one of org_disabled,
ip_blocked, missing_scope, scope_disabled, user_disabled.
The request can't be processed (HTTP 422): validation_failed with one ErrorDetail per
problem, or a code documented on the operation.
Examples
curl https://your-org-domain/kong/core/api/v2/onboarding-flows\
-H "Authorization: Bearer $HELM_API_KEY"\
-H "Content-Type: application/json"