Skip to main content
A workflow is server-side logic that runs securely away from the browser. Anything the client shouldn’t do (elevated database access, calling a third-party API with a secret key, a nightly job) belongs in a workflow. Each workflow is one file in an app’s src/api/ directory, defined with createEndpoint and typed Zod input/output. The frontend calls it through a generated, tRPC-like client. See the workflow reference for the full API.

​
Three triggers

Workflows run in an isolated cloud runtime. They use the database client, send email, call integrations with securely-stored secrets, and enforce permissions on every database call.