# GET /api/v2/workflows/{workflow}

Read a workflow

- MCP id: workflows.show
- Scope: api:read:workflows
- Permission: workflows::read
- Needs the sprints feature on your organisation
- Rate cost: 1 unit, read bucket.
- Cache-Control: private, no-store

Returns one workflow.

The summary and detail views are identical on this resource: every field is small enough for a list row, and nothing is includable, so `include` is rejected. Read the workflow's statuses through `links.statuses`, and its transitions through `GET /api/v2/workflow-transitions?filter[workflow_id]={id}`.

## Parameters
- workflow (integer, path): The Workflow's numeric id.
- view (string, optional): Which field set to render.
- X-Request-Id (header, optional): A correlation id of your own. It is recorded in our logs next to the server's request id but never returned: the response header always carries the server's id. A value that does not match the pattern is discarded silently, never rejected.
- If-None-Match (header, optional): The ETag a read is conditional on. A match is answered 304 with no body.

## Response 200
- id (integer, required): Unique identifier.
- name (string ≤ 255, required): Workflow name as shown in the UI, e.g. `Standard`.
- order (integer, required, server-assigned): Display position; set by dragging in plnnrly and not writable. API-created workflows are created at 0 and fall back to the id tiebreaker.
- created_at (timestamp (YYYY-MM-DDThh:mm:ssZ), required): Creation timestamp.
- updated_at (timestamp (YYYY-MM-DDThh:mm:ssZ), required): Last-write timestamp; use for incremental sync.
- statuses_count (integer ≥ 0, required): Number of statuses in this workflow.
- links (WorkflowLinks, required)
  - self (url, required): The canonical URI of this record.
  - statuses (url, required): Statuses in this workflow, in workflow order.

## Errors
- 403 forbidden-by-policy | insufficient-permission | insufficient-token-scope: Forbidden.
- 304 : Not modified.
- 400 idempotency-key-required | invalid-cursor | invalid-query-parameter | malformed-request | unsupported-parameter: Bad request.
- 401 token-expired | unauthenticated: Unauthenticated.
- 404 endpoint-not-found | resource-not-found: Not found.
- 406 not-acceptable: Not acceptable.
- 429 rate-limit-exceeded: Too many requests.
- 500 internal-error: Server error.
- 503 tenant-unavailable: Service unavailable.

## Example
```bash
curl -X GET \
  'https://<your-url>/api/v2/workflows/1' \
  -H 'Authorization: Bearer <token>' \
  -H 'Accept: application/json'
```