Skip to content

Project APIs Docs #390

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 7 commits into from
Jun 19, 2025
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
384 changes: 384 additions & 0 deletions docs/resources/projects/settings/project-apis.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,384 @@
---
slug: project-apis
title: Project APIs
tags: [APIs, Projects]
keywords: [projects, apis, refactor code]
sidebar_position: 5
---

# Project API

The FlutterFlow **Project APIs** allow you to programmatically read, write, and validate YAML configuration files through REST endpoints. Using these APIs, you can automate project management tasks, integrate continuous integration and delivery (CI/CD) workflows, and apply bulk configuration updates without manual interactions with the FlutterFlow user interface.

:::warning

The Project API is currently in beta and may undergo changes that could affect functionality or compatibility.

:::

:::info[Prerequisites]

Before using the Project YAML API, make sure you have the following:

- **HTTP Client**: Use a tool like `curl`, [**Postman**](https://www.postman.com/), or an HTTP library in your preferred programming language (e.g., `axios`, `requests`).
- **Project Access**: You must have read access for GET/validation operations and an editor access for making updates to the project.
- **Paid Plan**: You need a paid [**FlutterFlow subscription plan**](https://www.flutterflow.io/pricing).

:::

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It might make sense to do a brief overview of what the YAML represents. Feel free to add/remove/tweak portions, but basically a "what/why" before getting into the "how"

## Background

### What are FlutterFlow Project YAMLs?

YAML (YAML Ain't Markup Language) is a human-readable data serialization format commonly used for configuration files. In FlutterFlow, **Project YAMLs represent the complete structural definition of your app** — essentially exposing the full project schema that powers your FlutterFlow application.

### What's Included in the Project Schema?

FlutterFlow's YAML files contain a comprehensive representation of your entire project, including:

- **UI Components & Pages**: Widget trees, page layouts, component hierarchies, and styling configurations
- **App Configuration**: Settings like app details, authentication methods, integrations (AdMob, Firebase, etc.)
- **Data Structures**: Database collections, API schemas, app state variables, and custom data types
- **Business Logic**: Actions, functions, conditional logic, and workflow definitions
- **Assets & Resources**: Custom code files, images references, fonts, and other project assets
- **Project Organization**: Folder structures, component libraries, and project metadata

### YAML vs. FlutterFlow UI

Every change you make in the FlutterFlow visual editor — from dragging a widget onto a page to configuring a database collection — is ultimately stored as structured data in these YAML files. The FlutterFlow UI provides an intuitive visual interface for editing this underlying schema, while the Project API gives you direct programmatic access to the same data.

### File Structure

FlutterFlow automatically partitions your project into logical YAML files for optimal performance and organization. Each file represents a specific aspect of your project (e.g., `app-state`, `ad-mob`, individual pages, collections, etc.), making it easy to target specific updates without affecting the entire project.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, just changed the title 'Background' to 'YAML Overview'

## Base URL

FlutterFlow provides different API endpoints for various environments. Use the appropriate base URL below depending on your needs:

#### Production:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: possible to put these (including enterprise) in tabs?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, done!

```jsx
https://api.flutterflow.io/v2/
```
#### Beta/Staging:
```jsx
https://api.flutterflow.io/v2-staging/
```

#### Enterprise:
- India: `https://api-enterprise-india.flutterflow.io/v2/`
- APAC: `https://api-enterprise-apac.flutterflow.io/v2/`
- US Central: `https://api-enterprise-us-central.flutterflow.io/v2/`
- Europe: `https://api-enterprise-europe.flutterflow.io/v2/`

## Authentication

All API endpoints require authentication using a Bearer token. You'll need to include your FlutterFlow API token in the Authorization header of each request. See [how to get the API Token](../../../accounts-billing/account-management.md#how-do-i-generate-an-api-token).

```jsx
Authorization: Bearer YOUR_API_TOKEN_HERE
```

## API Endpoints
Below is a list of available API endpoints with their methods and usage descriptions.

| Endpoint | Method | Purpose |
| --------------------------- | ------ | --------------------------------------------- |
| `/listPartitionedFileNames` | GET | List available YAML file names for a project |
| `/projectYamls` | GET | Export/download YAML files from a project |
| `/validateProjectYaml` | POST | Validate YAML content before applying changes |
| `/updateProjectYaml` | POST | Update project configuration via YAML |


### List File Names

Before you read or update project files, you need to know what YAML files are available. This endpoint returns a full list of file names associated with your FlutterFlow project.

#### Endpoint
`GET /listPartitionedFileNames`

#### Query Parameters
`projectId` (required): The ID of the FlutterFlow project

#### Response
```jsx
{
"success":true,
"reason":null,
"value":{
"versionInfo": {
"partitionerVersion": 6,
"projectSchemaFingerprint": "abc123"
},
"fileNames": [
"folders",
"app-details",
"collections/id-yr7z6g5a",
"page/id-Scaffold_l9g6ilb6/page-widget-tree-outline/node/id-Column_174wuhc4",
"custom-file/id-MAIN/custom-file-code",
...
]
}
}
```

#### Example Usage
```jsx
curl -X GET \
'https://api.flutterflow.io/v2/listPartitionedFileNames?projectId=your-project-id' \
-H 'Authorization: Bearer YOUR_API_TOKEN'
```



### Download Project YAML

You can download specific or all YAML configuration files from your FlutterFlow project. This helps in understanding the current structure of the file before modifying it.

#### Endpoint
`GET /projectYamls`

#### Query Parameters
- `projectId` (required): The ID of the FlutterFlow project
- `fileName` (optional): Specific file to export (without extension). If not provided, all files are exported.

#### Response
Returns a zip file encoded as a base64 string. You will need to manually decode this base64 data into a downloadable .zip file. To do so, copy the value of `projectYamlBytes` and then you can use online tools such as [base64.guru](https://base64.guru/converter/decode/file) or [b64encode.com](https://b64encode.com/tools/base64-to-zip/) to convert and download the files.

```jsx
{
"success":true,
"reason":null,
"value":{
"versionInfo": {
"partitionerVersion": 6,
"projectSchemaFingerprint": "abc123"
},
Comment on lines +176 to +179

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

explain that this should be used for api versioning

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@victoriahuang1 I didn't get this! Could you please elaborate on this? How can it be used for api versioning?

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is how our APIs are versioned -- this is the version info.
If any part of this changes, that means that our API has been updated and the format of our responses has changed

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done! added.

"projectYamlBytes": "UEsDBAoAAAAAAKxV..."
}
}
```

#### Example Usage
```jsx
# Export all YAML files
curl -X GET \
'https://api.flutterflow.io/v2/projectYamls?projectId=your-project-id' \
-H 'Authorization: Bearer YOUR_API_TOKEN'

# Export specific file
curl -X GET \
'https://api.flutterflow.io/v2/projectYamls?projectId=your-project-id&fileName=ad-mob' \
-H 'Authorization: Bearer YOUR_API_TOKEN'
```

### Validate Project YAML

You must validate the YAML content before applying changes to ensure it's properly formatted and contains valid values.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@victoriahuang1 if a user does not validate the YAML content before attempting a change, will it always fail?

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No. But validating will ensure that your YAML can be accepted


#### Endpoint
`POST /validateProjectYaml`

#### Request Body
```jsx
{
"projectId": "your-project-id",
"fileKey": "ad-mob",
"fileContent": "showTestAds: false\nappId: \"your-app-id\""
}
```

:::info

- In the `fileContent` object, you must provide the **entire content** of the file.
- The YAML content must be passed as a **single-line string** with correct formatting and appropriate escaping for new lines and indentation. For example, in the `fileContent` object, you see the actual multiline YAML content, which is not allowed ❌.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: "For example, in the following fileContent object..."

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done!


```jsx
{
"projectId": "ecommerce-flow-app-ie7nl6",
"fileKey": "app-state",
"fileContent": "fields:
- parameter:
identifier:
name: myAppState
key: hg7j8z0y
dataType:
scalarType: String
description: "Stores the current user session state"
persisted: false"
}
```

Now, here’s how the YAML content should be passed (i.e., as single line string ✅).

```jsx
{
"projectId": "ecommerce-flow-app-ie7nl6",
"fileKey": "app-state",
"fileContent": "fields:\n - parameter:\n identifier:\n name: myAppState\n key: hg7j8z0y\n dataType:\n scalarType: String\n description: \"Stores the current user session state\"\n persisted: false"
}
```

:::

#### Response
- **Success (200):** YAML is valid - `{"success": true, "reason": null, "value": ""}`
- **Error with validation details:**
```jsx
{
"validationErrors": [
{
"message": "Expected bool value",
"fileKey": "ad-mob",
"yamlLocation": {
"line": 1,
"column": 15
}
}
]
}
```

#### Example Usage
```jsx
curl -X POST \
'https://api.flutterflow.io/v2/validateProjectYaml' \
-H 'Authorization: Bearer YOUR_API_KEY' \
-H 'Content-Type: application/json' \
-d '{
"projectId": "your-project-id",
"fileKey": "ad-mob",
"fileContent": "showTestAds: false"
}'
```


### Update Project YAML

This endpoint allows you to overwrite existing files in your FlutterFlow project by submitting updated YAML content.

#### Endpoint
`POST /updateProjectYaml`

#### Request Body
```jsx
{
"projectId": "your-project-id",
"fileKeyToContent": {
"ad-mob": "showTestAds: false",
}
}
```
:::info
- In the `fileKeyToContent` object, you must provide the **entire content** of the file.
- The YAML content must be passed as a **single-line string** with correct formatting and appropriate escaping for newlines and indentation. For example, in the `fileKeyToContent` object, you see the actual multiline YAML content, which is not allowed ❌.

```jsx
{
"projectId": "ecommerce-flow-app-ie7nl6",
"fileKeyToContent": {
"app-state": "fields:
- parameter:
identifier:
name: myAppState
key: hg7j8z0y
dataType:
scalarType: String
description: "Stores the current user session state"
persisted: false"
}
}
```
Now, here’s how the YAML content should be passed (i.e., as single line string ✅).
```jsx
{
"projectId": "ecommerce-flow-app-ie7nl6",
"fileKeyToContent": {
"app-state": "fields:\n - parameter:\n identifier:\n name: myAppState\n key: hg7j8z0y\n dataType:\n scalarType: String\n description: \"Stores the current user session state\"\n persisted: false"
}
}
```

:::

#### Response
- **Success (200):** `{"success": true, "reason": null, "value": ""}`
- **Error (400):** Validation errors or malformed request.
- **Error (403):** Insufficient permissions or project locked.
- **Error (404):** Project or user not found.

#### Example Usage

This example updates the `ad-mob` file and adds/updates app state variables.

```jsx
curl -X POST \
'https://api.flutterflow.io/v2/updateProjectYaml' \
-H 'Authorization: Bearer YOUR_API_TOKEN' \
-H 'Content-Type: application/json' \
-d '{
"projectId": "your-project-id",
"fileKeyToContent": {
"ad-mob": "showTestAds: false",
"app-state": "fields:\n - parameter:\n identifier:\n name: myAppState\n key: hg7j8z0y\n dataType:\n scalarType: String\n description: \"Stores the current user session state\"\n persisted: false\n - parameter:\n identifier:\n name: userPreferences\n key: abc123xy\n dataType:\n scalarType: JSON\n description: \"User settings and preferences\"\n persisted: true"
}
}'
```
## API Usage Example

Let’s walk through a practical example of updating an app state variable using the Project APIs.

First, we use the `/listPartitionedFileNames` endpoint to check if the `app-state` file exists in the project. Once confirmed, we call the `/projectYamls` endpoint to download the YAML file. The API returns a base64-encoded string representing a zip file, which we decode and download using tools like [Base64 to ZIP](https://b64encode.com/tools/base64-to-zip/).
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Our of curiosity, if it doesn't exist, does making the same call create it?

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You can create new files when uploading file contents via the update endpoint


![image]

Next, we open the `app-state.yaml` file and update the `enableDarkMode` variable by setting its `persisted` value to `true`. We then convert the updated YAML into a properly escaped single line string and validate it using the `/validateProjectYaml` endpoint. If validation succeeds, we send the final update using the `/updateProjectYaml` endpoint.

![image]

## Error Handling
This section outlines how the API handles errors, including common HTTP response codes and detailed validation feedback for YAML processing issues.

### Common Error Responses
This table outlines the most common HTTP status codes and their meanings, helping you identify and resolve API issues more effectively.

| Status Code | Description | Example Response |
| ----------- | -------------------------------------------- | -------------------------------------------------------- |
| 400 | Bad Request - Invalid JSON or malformed YAML | `"Failed to update project: ad-mob:Expected bool value"` |
| 403 | Forbidden - Insufficient permissions | `"You do not have write access to this project"` |
| 404 | Not Found - Project or user doesn't exist | `"Project not found"` |
| 500 | Internal Server Error | `"Unknown error"` |

### Validation Errors
When YAML validation fails, you'll receive detailed error information:

```jsx
{
"validationErrors": [
{
"message": "Unknown field name 'showTestAdsasssdaf'",
"fileKey": "ad-mob",
"yamlLocation": {
"line": 1,
"column": 1
}
}
]
}
```


## Best Practices

- **Always Validate First**: Before updating project YAMLs, use the validation endpoint to ensure your changes are valid:

```jsx
# 1. Validate the YAML
curl -X POST 'https://api.flutterflow.io/v2/validateProjectYaml' \
-H 'Authorization: Bearer YOUR_API_KEY' \
-H 'Content-Type: application/json' \
-d '{"projectId": "project-id", "fileKey": "ad-mob", "fileContent": "showTestAds: false"}'

# 2. If validation passes, apply the changes
curl -X POST 'https://api.flutterflow.io/v2/updateProjectYaml' \
-H 'Authorization: Bearer YOUR_API_KEY' \
-H 'Content-Type: application/json' \
-d '{"projectId": "project-id", "fileKeyToContent": {"ad-mob": "showTestAds: false"}}'
```


- **Handle Project Locks**: Projects may be temporarily locked during other operations. If you receive a 403 error mentioning `Project is locked due to ongoing changes. Please try again later.`, wait and retry.

- **Batch Updates**: You can update multiple files in a single request by including multiple entries in `fileKeyToContent`:

```jsx
{
"projectId": "your-project-id",
"fileKeyToContent": {
"ad-mob": "showTestAds: false",
"app-settings": "appName: \"Updated Name\"",
"authentication": "enableEmailAuth: true"
}
}
```


## Rate Limits

Please be mindful of API rate limits. If you're making many requests, implement appropriate delays between calls to avoid being rate-limited.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@victoriahuang1 can you confirm if there are rate limits? If so, it would be great to document them explicitly.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@michael-mcroskey they will be forwarded to our default API rate limits. Lmk if you want us to set custom rate limits for these specific endpoints

rule {
    action  = "throttle"
    preview = false
    # Should have lower priority than the other API methods.
    priority    = 999
    description = "other API methods"

    match {
      expr {
        expression = "!request.path.contains(\"/cf/\")"
      }
    }

    rate_limit_options {
      ban_duration_sec = 0
      conform_action   = "allow"
      enforce_on_key   = "HTTP_HEADER"
      # Header name with auth token
      enforce_on_key_name = "authorization"
      exceed_action       = "deny(429)"

      rate_limit_threshold {
        count        = 30
        interval_sec = 300
      }
    }
  }