# GET /api/v2/projects/{project}/tasks

List a project's tasks

- MCP id: projects.tasks.index
- Scope: api:read:kanban
- Permission: kanban::manage_self
- Rate cost: 1 unit, read bucket. `view=detail` makes it 3. Adds: `with_total=1` +2, `q` +2.
- Cache-Control: private, no-store

Returns the kanban tasks on one project, lowest board position first.

There is no organisation-wide collection of tasks (a kanban board is per-user), so this nested path is the only way to list them, and `filter[project_id]` / `filter[customer_id]` do not exist: the project is the path segment. Tasks are per-user, so `filter[user_id]` defaults to the authenticated user and naming another user requires `kanban::manage_for_others`; without that permission you also do not see the cards left unassigned in plnnrly. Listing additionally requires `projects::read` on the parent project: the declared `kanban::manage_self` is only part of the requirement. A trashed project answers `404` unless `trashed=with` is passed. The summary and detail views are identical on this resource.

## Parameters
- project (integer, path): The Project's numeric id. Accepts a soft-deleted record.
- view (string, optional): Which field set to render.
- per_page (integer 1 to 100, optional): Rows per page. At most 25 when `include` names a to-many relation; a larger value is 400 invalid-query-parameter.
- cursor (string, optional): Opaque keyset cursor from a previous page's links.next. Never construct one by hand.
- with_total (boolean, optional): Whether meta.page.total is counted for this request.
- filter[budget_id] (integer, optional): Budget the task is filed under. Combine with the project in the path to narrow a board to one budget. Operators: = in.
- filter[created_at] (timestamp (YYYY-MM-DDThh:mm:ssZ), optional): Creation timestamp. Pair with `sort=id` for a stable full export. Operators: = gte lt.
- filter[due_date] (date (YYYY-MM-DD), optional): Day the task is due. `null` reaches the cards left undated in plnnrly. Operators: = gte lte null.
- filter[is_billable] (boolean, optional): Whether time logged on this task is billable.
- filter[is_finished] (boolean, optional): Whether the task is done. Kept in step with `status` automatically, so `filter[is_finished]=true` and `filter[status]=finished` select the same rows.
- filter[status] (string, optional): Kanban column the card sits in. Operators: = ne in.
- filter[team_id] (integer, optional): Team the task is filed under. Only plnnrly itself assigns one, so tasks created through the API always match `filter[team_id][null]=true`. Operators: = in null.
- filter[updated_at] (timestamp (YYYY-MM-DDThh:mm:ssZ), optional): Last-write timestamp. Use for incremental sync. Operators: = gte lt.
- filter[user_id] (integer, optional): Whose board to return. Accepts the literal `me`, and defaults to the authenticated user; naming another user requires `kanban::manage_for_others`. Operators: = in null.
- q (string, optional): Free-text search over `description`. At most one substring match per request: `q` together with a `contains` filter is 400 invalid-query-parameter.
- sort (string, optional): Up to three keys, comma-separated, each optionally prefixed with `-` for descending.
- trashed (string, optional): Whether soft-deleted rows are included.
- X-Request-Id (header, optional): A correlation id of your own. It is recorded in our logs next to the server's request id but never returned: the response header always carries the server's id. A value that does not match the pattern is discarded silently, never rejected.
- If-None-Match (header, optional): The ETag a read is conditional on. A match is answered 304 with no body.

## Response 200
- id (integer, required): Unique identifier.
- budget_id (integer, required): Budget the task is filed under. This is the task's only link to a project (a task has no `project_id` of its own), and it is settable at create time only; a task cannot be re-budgeted through the API.
- user_id (integer or null, required, server-assigned): The employee the task belongs to. Always the authenticated user on create; not writable. Null on a task left unassigned in plnnrly.
- team_id (integer or null, required, server-assigned): Team the task is filed under. Nothing on the API path assigns it, so a task created through the API always carries `null`; plnnrly itself is the only place a team is set. Not writable, and there is no `team` object beside it.
- due_date (date (YYYY-MM-DD) or null, required): Day the task is due. Required when creating a task through the API, and clearable afterwards; tasks created in plnnrly may carry `null`.
- minutes (integer, required): Estimated effort, in minutes.
- description (string ≤ 255, required): Short description shown on the kanban card. This is the task's label and the only field `?q=` searches.
- comment (string or null ≤ 255, required): Optional longer comment on the card, capped at 255 characters.
- is_finished (boolean, required): Whether the task is done. Cross-synced with `status` on every write: setting `status` to finished sets this `true` and any other status sets it `false`, while setting this `false` on a finished task moves `status` back to active. `status` wins when both are sent.
- is_billable (boolean, required): Whether time logged on this task is billable. Defaults to `true` when a task is created through the API, regardless of the budget's own setting.
- status (string, required): Kanban column the card sits in.
- order_column (integer, required, server-assigned): Position on the kanban board, lowest first. Appended to the end of the board on create and changed when someone drags the card in plnnrly. Not writable.
- created_at (timestamp (YYYY-MM-DDThh:mm:ssZ), required): Creation timestamp.
- updated_at (timestamp (YYYY-MM-DDThh:mm:ssZ), required): Last-write timestamp; use for incremental sync.
- budget (Ref or BudgetSummary, required): The budget this task is filed under.
- user (Ref or UserSummary or null, required): The employee the task belongs to.
- links (TaskLinks, required)
  - self (url, required): The canonical URI of this record.

## Errors
- 403 forbidden-by-policy | insufficient-permission | insufficient-token-scope: Forbidden.
- 304 : Not modified.
- 400 idempotency-key-required | invalid-cursor | invalid-query-parameter | malformed-request | unsupported-parameter: Bad request.
- 401 token-expired | unauthenticated: Unauthenticated.
- 404 endpoint-not-found | resource-not-found: Not found.
- 406 not-acceptable: Not acceptable.
- 429 rate-limit-exceeded: Too many requests.
- 500 internal-error: Server error.
- 503 tenant-unavailable: Service unavailable.

## Example
```bash
curl -G \
  'https://<your-url>/api/v2/projects/1/tasks' \
  --data-urlencode 'filter[is_finished]=false' \
  --data-urlencode 'sort=due_date,order_column' \
  -H 'Authorization: Bearer <token>' \
  -H 'Accept: application/json'
```