Skip to main content
A workflow is server-side logic that runs securely away from the browser. Anything the client shouldn’t do — elevated database access, calling a third-party API with a secret key, a nightly job — belongs in a workflow. Each workflow is one file in an app’s src/api/ directory, defined with createEndpoint and typed Zod input/output. The frontend calls it through a generated, tRPC-like client. See the workflow reference for the full API.

​
Three triggers

Workflows run in an isolated cloud runtime — they use the database client, send email, call integrations with securely-stored secrets, and enforce permissions on every database call.