> ## Documentation Index
> Fetch the complete documentation index at: https://developers.logicgate.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get a list of all steps

> All steps that are active and attached to a workflow will be returned.



## OpenAPI

````yaml GET /api/v1/steps
openapi: 3.1.0
info:
  title: Risk Cloud API
  description: >-
    The Risk Cloud API is a collection of RESTful API endpoints that empower you
    and your team to directly integrate, automate, and build with the Risk
    Cloud. Risk Cloud API endpoint payloads are JSON based, with some endpoints
    supporting exports in CSV and XSLX formats for flexible integration.


    This API documentation showcases our Risk Cloud API v1, containing a variety
    of endpoints with continued support for enabling integrations with the Risk
    Cloud.


    Visit the [LogicGate Risk Cloud Developer
    Portal](https://www.logicgate.com/developer/) to get started with building
    your custom integration with quick start guides, usage guides, release
    notes, and more. Or download the [v1 OpenAPI
    specification](/legacy-openapi.json).


    Explore our [Risk Cloud API v2](https://docs.logicgate.com/v2/index.html)
    endpoints and documentation as well. [Risk Cloud API
    v2](https://docs.logicgate.com/v2/index.html) is our collection of API-First
    endpoints that are tailor made for our developer users, offer concise and
    highly documented details, are supported by a [Postman
    collection](https://www.postman.com/logicgate-postman/workspace/logicgate-risk-cloud-api/collection/29257227-de8d264b-6eeb-4177-bea6-2da0a8cabffc)
    and [v2 OpenAPI specification](https://github.com/LogicGateTech/openapi),
    and contain our latest API endpoint releases.
  contact:
    name: developer-relations@logicgate.com
    email: developer-relations@logicgate.com
  version: v2026.11.0
servers:
  - url: https://{subdomain}.logicgate.com
    description: Your Risk Cloud environment.
    variables:
      subdomain:
        description: Your Risk Cloud environment's subdomain (e.g. `qa`).
        default: your-instance
security:
  - ApiToken: []
  - basic: []
tags:
  - name: Authentication
    description: >-
      Getting Started: How to create an [API Access
      Token](https://www.logicgate.com/developer/risk-cloud-api-authentication/)
      to begin integrating with the Risk Cloud API
  - name: Attachment
    description: Endpoints for uploading, downloading, and retrieving record attachments.
  - name: Field
    description: Endpoints for creating, updating, and querying fields.
  - name: Principal
    description: >-
      Endpoints for the authenticated principal to view and manage their own
      details.
  - name: Record Audit
    description: Endpoints for retrieving record audit history and productivity data.
  - name: Step
    description: Endpoints for retrieving steps and the steps a user can access.
  - name: Table Report
    description: Endpoints for retrieving and managing table reports.
  - name: User Group
    description: Endpoints for managing user groups and their membership.
externalDocs:
  description: Developer Portal
  url: https://www.logicgate.com/developer/
paths:
  /api/v1/steps:
    get:
      tags:
        - Step
      summary: Get a list of all steps.
      description: All steps that are active and attached to a workflow will be returned.
      operationId: findAll_4
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Step_ExtendedStepSummary'
        '401':
          description: Unauthorized
components:
  schemas:
    Step_ExtendedStepSummary:
      type: object
      description: An entity to store details about a specific step within a workflow
      discriminator:
        propertyName: stepType
      oneOf:
        - $ref: '#/components/schemas/Origin_ExtendedStepSummary'
        - description: >-
            And other types: Chain_ExtendedStepSummary, End_ExtendedStepSummary,
            Origin_ExtendedStepSummary, Chain_ExtendedStepSummary,
            End_ExtendedStepSummary
      properties:
        stepType:
          type: string
          description: >-
            Step type. Advisory on writes. The server resolves the persisted
            step's type from the step id and ignores any client-supplied value.
          enum:
            - ORIGIN
            - CHAIN
            - END
        name:
          type: string
          description: Step name.
        description:
          type: string
          description: Description of the step.
        priority:
          type: integer
          format: int32
          description: >-
            Determines the step's place in the workflow. Priority is in
            descending order with 0 being the first step.
        userGroupOperationType:
          type: string
          description: >-
            Determine how users are able to interact with user groups on the
            step. By default, new steps will allow FULL_ACCESS user group
            editing.
          enum:
            - FULL_ACCESS
            - ADD_ONLY
            - READ_ONLY
        xpos:
          type: integer
          format: int32
          description: Vertical position of the step on the process screen.
        ypos:
          type: integer
          format: int32
          description: Horizontal position of the step on the process screen.
        isPublic:
          type: boolean
          description: >-
            Allows a step to become a public step. Public steps allow for a
            shareable public record link to be generated in the step edit
            screen. Public steps do not require any login credentials.
        commentsEnabled:
          type: boolean
          description: Allows comments to be displayed on a step.
        documentsEnabled:
          type: boolean
          description: Allows documents to be generated on a step.
        externalUserMfaRequired:
          type: boolean
          description: >-
            Whether or not to require MFA for external users to access this
            step.
        uxriEnabled:
          type: boolean
          description: Whether or not to enable UXRI on the step.
        autofillEnabled:
          type: boolean
          description: Whether or not to enable autofill on the step.
        sla:
          $ref: '#/components/schemas/ServiceLevelAgreement_ExtendedStepSummary'
          description: Object containing all SLA information.
        workflow:
          $ref: '#/components/schemas/Workflow_ExtendedStepSummary'
          description: Workflow that the step belongs to.
        assignableUserType:
          type: string
          description: >-
            Determine what users are able to be assigned to a record. By
            default, new records will allow APP_USERS as assignees.
          enum:
            - APP_AND_EXTERNAL_USERS
            - APP_USERS
            - EXTERNAL_USERS
        id:
          type: string
        end:
          type: boolean
        contains:
          description: Circular reference to Step_ExtendedStepSummary
          writeOnly: true
        origin:
          type: boolean
        chain:
          type: boolean
      required:
        - assignableUserType
        - autofillEnabled
        - commentsEnabled
        - description
        - documentsEnabled
        - externalUserMfaRequired
        - id
        - isPublic
        - name
        - priority
        - sla
        - stepType
        - userGroupOperationType
        - uxriEnabled
        - workflow
        - xpos
        - ypos
    Origin_ExtendedStepSummary:
      allOf:
        - description: Circular reference to Step_ExtendedStepSummary
    ServiceLevelAgreement_ExtendedStepSummary:
      type: object
      properties:
        enabled:
          type: boolean
        duration:
          type: integer
          format: int64
      required:
        - duration
        - enabled
    Workflow_ExtendedStepSummary:
      type: object
      description: >-
        An entity that contains information about a set of steps within a
        particular application.
      discriminator:
        propertyName: workflowType
      oneOf:
        - $ref: '#/components/schemas/ControlWorkflow_ExtendedStepSummary'
        - description: 'And other types: JiraWorkflow_ExtendedStepSummary'
      properties:
        id:
          type: string
        name:
          type: string
          description: Name of the workflow.
        description:
          type: string
          description: Description of the workflow.
          maxLength: 2000
          minLength: 0
        recordPrefix:
          type: string
          description: Name to be used for every record created from the workflow.
        allowGroups:
          type: boolean
          description: Nodes created in the workflow are allowed user groups.
        requireGroups:
          type: boolean
          description: Nodes created in the workflow require user groups.
        sla:
          $ref: '#/components/schemas/ServiceLevelAgreement_ExtendedStepSummary'
          description: Object containing all SLA information.
        allowAec:
          type: boolean
          description: Enables automated evidence collection.
        allowRcsa:
          type: boolean
          description: Allow Risk & Control Self-Assessments.
        workflowType:
          type: string
          enum:
            - WORKFLOW
            - JIRA_WORKFLOW
            - CONTROL_WORKFLOW
            - ANALYSIS_WORKFLOW
        contains:
          description: Circular reference to Workflow_ExtendedStepSummary
          writeOnly: true
        canSelect:
          description: Circular reference to Workflow_ExtendedStepSummary
          writeOnly: true
        pluralizedRecordPrefix:
          type: string
      required:
        - allowAec
        - allowGroups
        - allowRcsa
        - description
        - id
        - name
        - recordPrefix
        - requireGroups
        - sla
        - workflowType
    ControlWorkflow_ExtendedStepSummary:
      allOf:
        - description: Circular reference to Workflow_ExtendedStepSummary
        - type: object
          properties:
            recordCount:
              type: integer
              format: int32
            centralFramework:
              type: boolean
      required:
        - allowAec
        - centralFramework
        - id
        - recordCount
        - requireGroups
        - workflowType
  securitySchemes:
    ApiToken:
      type: http
      scheme: bearer
      bearerFormat: API Token
    basic:
      type: http
      scheme: basic

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.