> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.muchau.com.br/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.muchau.com.br/_mcp/server.

# Listar flows

GET https://dev.muchau.com.br/api/flows/

Retorna uma lista paginada de WhatsApp Flows.

Reference: https://docs.muchau.com.br/api/reference/flows/listar-flows

## Authentication

- `Authorization` header (bearer token, required) — API Key in the format `mk_live_<43-chars>`. Obtain from the Dashboard or `POST /auth/api-keys`.

## Request

### Query parameters

- `numberId` (string, required) — WhatsApp Number ID to list flows for

## Response

### 200

Default Response

- `data` (list of ApiFlowsGetResponsesContentApplicationJsonSchemaDataItems, required) — List of flows

## Errors

### 401 Unauthorized Error

Default Response

- `error` (ApiFlowsGetResponsesContentApplicationJsonSchemaError, required)

## Types

### ApiFlowsGetResponsesContentApplicationJsonSchemaDataItems

- `id` (string, required) — Unique identifier of the flow in the Muchaw platform
- `developerId` (string, required) — ID of the developer who owns this flow
- `wabaId` (string, required) — WhatsApp Business Account ID this flow belongs to
- `metaFlowId` (string, required) — Flow ID assigned by Meta
- `name` (string, required) — Flow name
- `status` (enum, required) — Current lifecycle status of the flow
  - Allowed values: `DRAFT`, `PUBLISHED`, `DEPRECATED`
- `categories` (list of string, required) — Flow categories
- `jsonVersion` (string, required, nullable) — Version of the flow JSON spec
- `endpointUrl` (string, required, nullable) — HTTPS endpoint URL for data exchange
- `publicKeyConfigured` (boolean, required) — Whether a public key is configured for this flow
- `createdAt` (string, required) — ISO 8601 datetime when the flow was created
- `updatedAt` (string, required) — ISO 8601 datetime when the flow was last updated

### ApiFlowsGetResponsesContentApplicationJsonSchemaError

- `code` (string, required) — Machine-readable error code (e.g., UNAUTHORIZED, NOT_FOUND, VALIDATION_ERROR)
- `message` (string, required) — Human-readable error description
- `status` (integer, required) — HTTP status code
- `meta` (ApiFlowsGetResponsesContentApplicationJsonSchemaErrorMeta, optional)
- `error_shield` (ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShield, optional)

### ApiFlowsGetResponsesContentApplicationJsonSchemaErrorMeta

- `meta_code` (integer, required)
- `meta_message` (string, required)
- `meta_subcode` (integer, required, nullable)
- `type` (string, required, nullable)
- `fbtrace_id` (string, required, nullable)
- `error_data` (any, optional)

### ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShield

- ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShield0
- ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShield1

### ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShield0

- `matched` (boolean, required)
- `entry_id` (string, required)
- `category` (enum, required)
  - Allowed values: `template`, `number`, `messaging`, `flow`, `permission`, `rate_limit`, `other`
- `severity` (enum, required)
  - Allowed values: `informational`, `recoverable`, `blocking`, `critical`
- `actor` (enum, required)
  - Allowed values: `developer`, `end_client`, `muchau`
- `human_message` (ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf0HumanMessage, required)
- `action` (ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf0Action, required)
- `action_url` (string, required, nullable)
- `docs_url` (string, required)
- `copy_text` (ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf0CopyText, required)
- `version` (integer, required)
- `last_updated` (string, required)

### ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShield1

- `matched` (boolean, required)
- `note` (ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf1Note, required)

### ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf0HumanMessage

- `pt` (string, required)
- `en` (string, required)

### ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf0Action

- `pt` (string, required)
- `en` (string, required)

### ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf0CopyText

- `pt` (string, required, nullable)
- `en` (string, required, nullable)

### ApiFlowsGetResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf1Note

- `pt` (string, required)
- `en` (string, required)

## Examples

**Request**

```json
{}
```

**Response**

```json
{
  "data": [
    {
      "id": "flow_8a7f3c2d9b1e4f6a9c0d123456789abc",
      "developerId": "dev_4f2e1a9b8c7d6e5f4321abcd98765432",
      "wabaId": "123456789012345",
      "metaFlowId": "meta_flow_9876543210abcdef",
      "name": "Customer Support Flow",
      "status": "PUBLISHED",
      "categories": [
        "support",
        "automation"
      ],
      "jsonVersion": "1.2",
      "endpointUrl": "https://api.example.com/webhooks/flow-callback",
      "publicKeyConfigured": true,
      "createdAt": "2024-05-10T09:15:00Z",
      "updatedAt": "2024-06-01T16:45:00Z"
    }
  ]
}
```

**SDK Code**

```python
import requests

url = "https://dev.muchau.com.br/api/flows/"

querystring = {"numberId":"numberId"}

payload = {}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.get(url, json=payload, headers=headers, params=querystring)

print(response.json())
```

```javascript
const url = 'https://dev.muchau.com.br/api/flows/?numberId=numberId';
const options = {
  method: 'GET',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: '{}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```go
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://dev.muchau.com.br/api/flows/?numberId=numberId"

	payload := strings.NewReader("{}")

	req, _ := http.NewRequest("GET", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

```ruby
require 'uri'
require 'net/http'

url = URI("https://dev.muchau.com.br/api/flows/?numberId=numberId")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{}"

response = http.request(request)
puts response.read_body
```

```java
import com.mashape.unirest.http.HttpResponse;
import com.mashape.unirest.http.Unirest;

HttpResponse<String> response = Unirest.get("https://dev.muchau.com.br/api/flows/?numberId=numberId")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{}")
  .asString();
```

```php
<?php
require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('GET', 'https://dev.muchau.com.br/api/flows/?numberId=numberId', [
  'body' => '{}',
  'headers' => [
    'Authorization' => 'Bearer <token>',
    'Content-Type' => 'application/json',
  ],
]);

echo $response->getBody();
```

```csharp
using RestSharp;

var client = new RestClient("https://dev.muchau.com.br/api/flows/?numberId=numberId");
var request = new RestRequest(Method.GET);
request.AddHeader("Authorization", "Bearer <token>");
request.AddHeader("Content-Type", "application/json");
request.AddParameter("application/json", "{}", ParameterType.RequestBody);
IRestResponse response = client.Execute(request);
```

```swift
import Foundation

let headers = [
  "Authorization": "Bearer <token>",
  "Content-Type": "application/json"
]
let parameters = [] as [String : Any]

let postData = JSONSerialization.data(withJSONObject: parameters, options: [])

let request = NSMutableURLRequest(url: NSURL(string: "https://dev.muchau.com.br/api/flows/?numberId=numberId")! as URL,
                                        cachePolicy: .useProtocolCachePolicy,
                                    timeoutInterval: 10.0)
request.httpMethod = "GET"
request.allHTTPHeaderFields = headers
request.httpBody = postData as Data

let session = URLSession.shared
let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in
  if (error != nil) {
    print(error as Any)
  } else {
    let httpResponse = response as? HTTPURLResponse
    print(httpResponse)
  }
})

dataTask.resume()
```