API · MCP · Webhooks · OpenAPI 3.0

Talk to PathHub over REST

Generate AI project plans from your code, surface tasks in your own dashboards, listen to status changes via webhook. Works with AI agents (MCP), Zapier, Make, n8n, Power Automate or custom code.

32REST operations
59MCP tools
7Webhook events
120/minRate limit
HMAC-SHA256Signed

What you can do with the API

PathHub's logic isn't locked inside the app. Most in-app features are 1:1 available as a REST endpoint, AI features included.

Generate AI project plans from descriptions

POST a 1-2 sentence description, get back a full Path: phases, tasks, risks, budget, compliance, stakeholders.

Read & mutate tasks programmatically

List, sub-resources, PATCH on individual tasks. Status changes trigger webhooks: perfect for dashboards and automations.

Real-time events via webhooks

Seven events (task.status_changed, project.created, risk.added …), HMAC-signed, 3x retry with backoff.

AI chat & tools via API

RAG chat over your project documents, generate RACI/SWOT/risk matrices/Gantt, run autonomous agents: all via simple POST calls.

Export plans as Markdown

Full Path as Markdown: perfect for feeding plans into ChatGPT/Claude or pasting into Notion/Confluence.

Compliance library programmatically

GDPR, NIS2, ISO 27001, industry rules: all DE/AT/CH regulations, filterable by country, industry, and company size.

Connect AI agents: MCP server

PathHub AI has its own MCP server (Model Context Protocol). Claude, ChatGPT, Claude Code, Cursor, VS Code and other AI agents use PathHub directly as a tool: create plans, tick off tasks, maintain risks and costs, check compliance and have reports written.

Endpoint: https://app.pathhub.ai/mcp (Streamable HTTP)
Protocol: MCP 2026-07-28 (stateless, server/discover) and earlier versions back to 2024-11-05.
Authentication: OAuth 2.1 with PKCE, client ID metadata documents (CIMD) or dynamic client registration, already on the Free plan (200 calls per month). Clients discover everything via /.well-known/oauth-protected-resource; you sign in and pick a workspace and access level (read, write, ai). Alternatively, header Authorization: Bearer phk_live_… with an API key from the app (Pro and up).
Same rules as the API: permissions, quotas, webhooks and logging apply here too.
What you can tell your agent

“Create a PathHub plan for our ERP rollout with 180 employees, go-live in 9 months.”

“In the Path “CRM rollout”, tick off everything this status report marks as done and add the new risks.”

“Which mandatory compliance items are still open in my Paths, and which have too little lead time?”

“Book the €3,600 invoice against the budget line “External consulting”.”

Claude Code

Without --header you sign in through /mcp in your browser instead.

terminalbash
claude mcp add --transport http pathhub https://app.pathhub.ai/mcp \ --header "Authorization: Bearer phk_live_..."

Claude (web, desktop, app)

Settings → Connectors → Add custom connector. You then sign in to PathHub, no API key needed.

Connector URLURL
https://app.pathhub.ai/mcp

Cursor

In ~/.cursor/mcp.json or .cursor/mcp.json in the project.

mcp.jsonjson
{ "mcpServers": { "pathhub": { "url": "https://app.pathhub.ai/mcp", "headers": { "Authorization": "Bearer phk_live_..." } } } }

VS Code (Copilot)

In .vscode/mcp.json; the key is requested at start and not stored.

.vscode/mcp.jsonjson
{ "servers": { "pathhub": { "type": "http", "url": "https://app.pathhub.ai/mcp", "headers": { "Authorization": "Bearer ${input:pathhub-key}" } } }, "inputs": [{ "id": "pathhub-key", "type": "promptString", "description": "PathHub API key", "password": true }] }

ChatGPT

As a custom connector (developer mode, depending on your plan) with OAuth. Alternatively as a GPT action with the OpenAPI description.

ChatGPTSteps
Settings → Apps & Connectors → Create URL: https://app.pathhub.ai/mcp Authentication: OAuth GPT action (alternative): https://app.pathhub.ai/api/v1/openapi

Read

Paths, sections (phases, tasks, budget, risks, stakeholders, compliance, milestones), Markdown export, document search, compliance library, templates, company context, usage.

Edit

Paths, phases, tasks (incl. ticking off several at once), comments, risks, stakeholders, milestones, budget lines, cost bookings, compliance status, next steps, company context, webhooks.

AI

Create a complete plan (as a job, no timeouts), agents such as status report, weekly plan, risk scan or steering report, planning tools such as RACI, SWOT or work breakdown structure, recommendations, questions about a Path.

Prompt templates

Ready-made workflows agents can offer: plan_initiative, weekly_status, sync_status_update (apply a status report) and compliance_check.

Security: agents only see the workspace of the connection or key and can only do what the signed-in person is allowed to do. Destructive tools are flagged so the agent asks first. Phases that contain tasks are only deleted with explicit confirmation. Connections and keys can be disconnected or revoked in the app at any time. Overview with examples: PathHub for AI agents · all 74 tools.

Get started in 3 steps

From never tried to first successful call in under five minutes.

1

Create a key

In the app under Tools › Developers / API. Pick a scope (read, write or ai). The key is shown only once. Store it securely.

2

Send a request

Header Authorization: Bearer phk_live_…. Base URL: https://app.pathhub.ai/api/v1. Responses are always JSON or Markdown.

3

Subscribe to webhooks (optional)

POST to /v1/webhooks with your HTTPS URL. PathHub signs every delivery with HMAC-SHA256: verify snippet is in the docs.

Examples

Curl snippets for the most common use-cases: copy-paste ready without further explanation.

Generate a project plan

From a 1-sentence description to a full Path.

generate-plan.shcurl
curl -X POST https://app.pathhub.ai/api/v1/ai/generate-plan \ -H "Authorization: Bearer phk_live_..." \ -H "Content-Type: application/json" \ -d '{ "description": "Roll out an internal wiki, ~15 staff, 6 weeks.", "title": "Internal Wiki", "desired_timeline_weeks": 6, "locale": "en" }'

Tick a task

Also fires a task.status_changed webhook.

patch-task.shcurl
curl -X PATCH \ https://app.pathhub.ai/api/v1/tasks/<task_id> \ -H "Authorization: Bearer phk_live_..." \ -H "Content-Type: application/json" \ -d '{"checked": true}'

Create a webhook

Response includes secret just once. Save it now.

create-webhook.shcurl
curl -X POST https://app.pathhub.ai/api/v1/webhooks \ -H "Authorization: Bearer phk_live_..." \ -H "Content-Type: application/json" \ -d '{ "url": "https://example.com/webhook", "events": ["task.status_changed"] }'

Endpoints at a glance

32 operations, grouped by function. Full descriptions including request/response schemas live in the interactive reference.

GET/v1/projects
GET/v1/projects/{id}
GET/v1/projects/{id}/{resource}
GET/v1/projects/{id}/export
PATCH/v1/tasks/{id}
GET/v1/documents
POST/v1/documents/search
GET/v1/webhooks
POST/v1/webhooks
DELETE/v1/webhooks/{id}
POST/v1/ai/generate-plan
POST/v1/ai/projects/{id}/chat
POST/v1/ai/projects/{id}/tools/{tool}
POST/v1/ai/projects/{id}/agents/{task}
POST/v1/ai/projects/{id}/recommendations
GET/v1/ai/agents
GET/v1/compliance-rules
GET/v1/project-templates
GET/v1/usage
POST/v1/projects
PATCH/v1/projects/{id}
POST/v1/projects/{id}/{resource}
PATCH/v1/projects/{id}/{resource}/{itemId}
DELETE/v1/projects/{id}/{resource}/{itemId}
POST/v1/projects/{id}/budget/{itemId}/costs
GET/v1/tasks/{id}
DELETE/v1/tasks/{id}
POST/v1/tasks/{id}/comments
GET/v1/workspace
PATCH/v1/workspace
POST/v1/ai/plan-jobs
GET/v1/ai/plan-jobs/{id}

Works with any iPaaS platform

REST + Webhooks are generic enough that every major no-code tool can use them without a dedicated app.

Zapier
Make
n8n
Power Automate
Custom code (Node, Python, Go, …)

Real-world use cases: how other teams wire up PathHub

Six typical automations: each one buildable in 10–15 minutes in your no-code tool of choice.

Zapier

Weekly status report into Slack every Monday

When: Monday 9 AM (schedule) → PathHub: POST /v1/ai/projects/{id}/agents/status_report → Then: Slack channel post with Markdown render

Saves the PM an hour every week. The lead sees the status before asking.

Make

Sales form → project plan

When: new Typeform / HubSpot response → PathHub: POST /v1/ai/generate-plan with description from form field → Then: onboarding Path for the new customer

Sales closes. PM has the full plan 2 minutes later in the right workspace.

Power Automate

Alert new risks in Microsoft Teams

When: webhook risk.added → PathHub: sends HMAC-signed JSON → Then: Adaptive Card in Teams channel

Critical risks show up immediately, not only at the next status meeting.

Trello

Sync PathHub tasks to Trello

When: webhook task.created → PathHub: task data in payload → Then: Trello card on the "Backlog" board

For the execution team that already lives in Trello: planning stays in PathHub, doing in Trello.

n8n (self-hosted)

Weekly report as PDF via email

When: Friday 4 PM (cron) → PathHub: GET /v1/projects/{id}/export?format=markdown → Then: Markdown → PDF (Node) → email to steering committee

No file on US servers. Everything runs on-prem or in your own cloud.

Custom code

Count phase completions in a BI dashboard

When: webhook phase.completed → PathHub: event payload → your service → Then: insert into BigQuery / Snowflake

Portfolio KPIs across every project: PM throughput, risk burn-down, phase cycle time.

FAQ

The most common questions about tiers, limits and security.

Which tiers include API access?
API access is included in Pro (2,000 calls/month) and Max (20,000 calls/month). The Free plan does not include API access. Enterprise quotas on request.
How does the AI quota work with the API?
AI calls (plan generation, chat, tools, agents) count both against the API request quota and against the workspace's shared AI quota (50/month on Pro, 500/month on Max). Pure read calls (projects, tasks, compliance) only count against the API limit.
Do I need to write custom code to connect PathHub?
No. The REST API works with Zapier, Make, n8n and Power Automate. Custom code (Node, Python, Go etc.) is only needed for deeper behaviour: e.g. custom mappings into internal systems.
Are webhooks signed?
Yes. Every webhook delivery is signed with HMAC-SHA256. The header X-PathHub-Signature: t=<unix_ts>,v1=<mac> carries timestamp and signature. A ready-to-use Node.js verify snippet lives in the full docs. Replay protection: reject deliveries older than 5 minutes.
What happens if I exceed the rate limit?
Requests beyond 120/minute receive HTTP 429 with code rate_limit_exceeded. Monthly quotas reset at the start of each month. Check current usage anytime via GET /v1/usage.
Are API keys bound to a workspace?
Yes. Each key belongs to exactly one workspace and only sees its data. If you have multiple workspaces (e.g. several clients), create one key per workspace. Keys can be revoked at any time.
Is there an official OpenAPI spec?
Yes: /api/v1/openapi serves the full OpenAPI 3.0 YAML. Directly importable into Postman, Insomnia, Stoplight, or as a source for code generators.

Connect PathHub now

Start free, upgrade to Pro anytime to enable the API. No setup, no waiting.

Create API key ›