Get what Visitors Did in a Workflow

Counts per block and per connection over a range of UTC days (the last 30 days when not given, up to 366), for one version or for all of them. Only counts: how many visitors reached a block, took a connection, or could not be moved on, and, where the visitor’s browser said why a block could not be shown, how many of those failures had each reason (failedReasons: a timeout, an error of the widget, a build that failed, or another reason). No visitor and no value a visitor typed is ever stored. For personal workspace, use ‘personal’ as workspaceId. For organization workspace, use the organization UUID as workspaceId. Any active member can read.

GET /workspaces/{workspaceId}/workflows/{workflowId}/stats

Get what Visitors Did in a Workflow

cURL

curl --request GET \
  --url https://api.widgetic.com/v1/workspaces/{workspaceId}/workflows/{workflowId}/stats \
  --header 'Authorization: Bearer <token>'

200

{
  "success": true,
  "data": {
    "workflowId": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
    "versionId": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
    "from": "Example from",
    "to": "Example to",
    "started": 42,
    "nodes": [
      "Example WorkflowCounter"
    ],
    "edges": [
      "Example WorkflowCounter"
    ],
    "failed": [
      "Example WorkflowCounter"
    ],
    "failedReasons": [
      "Example WorkflowFailureReasonCounter"
    ]
  },
  "meta": {
    "page": 1,
    "size": 20,
    "total": 135,
    "limit": 20,
    "offset": 0,
    "hasNextPage": true,
    "hasPreviousPage": false,
    "nextCursor": "<string>",
    "warnings": [
      "<string>"
    ]
  }
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

X-Managed-User-Id · string<uuid>

The id Widgetic gave the managed user (POST /managed-users). Makes this call for one of your managed users, so that a mistake in your own code cannot reach another customer's work. Send this header, or the other one, never both. Left out, the call works on your whole account, as it always has. With it, the call reaches only that user's compositions and workflows: a list shows only theirs, a composition or a workflow the call makes is filed under them, and one of another user, or one that does not exist, answers 404 (the same answer, so the call cannot be used to find out what another customer has). A managed user that is not yours answers 404 with MANAGED_USER_NOT_FOUND. An empty, repeated or malformed header is 400 with MANAGED_USER_SCOPE_INVALID; an empty header is never read as no header. A call that is about the whole account, such as the list of your managed users, is refused with 403 and MANAGED_USER_SCOPE_ROUTE_NOT_AVAILABLE: send it without the header. Only your API key can send it. The header is a limit the call asks for: whoever holds the key can leave it out, so for a credential that a customer's browser holds, use an editor session. An Idempotency-Key is kept apart for each managed user.

Example:

"3f2b8c1e-7a4d-4e0b-9c55-2d1a6b7e8f90"

X-Managed-User-External-Id · string

Your own id for the managed user (its externalId), when you do not keep Widgetic's. Makes this call for one of your managed users, so that a mistake in your own code cannot reach another customer's work. Send this header, or the other one, never both. Left out, the call works on your whole account, as it always has. With it, the call reaches only that user's compositions and workflows: a list shows only theirs, a composition or a workflow the call makes is filed under them, and one of another user, or one that does not exist, answers 404 (the same answer, so the call cannot be used to find out what another customer has). A managed user that is not yours answers 404 with MANAGED_USER_NOT_FOUND. An empty, repeated or malformed header is 400 with MANAGED_USER_SCOPE_INVALID; an empty header is never read as no header. A call that is about the whole account, such as the list of your managed users, is refused with 403 and MANAGED_USER_SCOPE_ROUTE_NOT_AVAILABLE: send it without the header. Only your API key can send it. The header is a limit the call asks for: whoever holds the key can leave it out, so for a credential that a customer's browser holds, use an editor session. An Idempotency-Key is kept apart for each managed user.

Required string length: 1 - 255

Example:

"customer-1042"

Path Parameters

workspaceId · string · required

The workspace: 'personal' for your own workspace, or the UUID of an organization. A call made for one of your managed users (X-Managed-User-Id) always uses 'personal': a managed user has no other workspace, and a call that names an organization is refused with 403.

workflowId · string<uuid> · required

The workflow's id

Query Parameters

versionId · string<uuid>

Count one version only

from · string

First UTC day (YYYY-MM-DD)

Example:

"2026-10-01"

to · string

Last UTC day (YYYY-MM-DD)

Example:

"2026-10-27"

Response

200

application/json

The counts

success · boolean · required

Example:

true

data · object · required

What visitors did in a range of days. Only counts: how many reached a block, took a connection, or failed to be moved on. No visitor and no value a visitor typed is ever stored.

Show child attributes

Example:

{
  "workflowId": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
  "versionId": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
  "from": "Example from",
  "to": "Example to",
  "started": 42,
  "nodes": ["Example WorkflowCounter"],
  "edges": ["Example WorkflowCounter"],
  "failed": ["Example WorkflowCounter"],
  "failedReasons": ["Example WorkflowFailureReasonCounter"]
}

meta · object

Extra information about the answer: where a page sits in a list, the cursor of the next page, or warnings about a call that succeeded with a caveat.

Show child attributes