Upsert task — Brigg developers

Access & visibility

Allow tasks.UpsertTask on your API key. Resource read permissions: core:Task. Resource write permissions: core:Task.

Workspace access by default. Private member data requires approved member delegation through Brigg-Act-As; the key supplies permissions while private ownership and project boundaries remain enforced.

Set up authentication · Choose permissions

Request fields

Send a JSON object with the following fields. Required fields must be included; omit optional fields you do not need.

dataTaskRequired

The record's fields.

Task

Work and progress4 fields

titlestringRequired

Short description of the work to complete.

statusstringOptional

Work status: open, in_progress or done. A due date does not automatically change the status.

Allowed: "open", "in_progress", "done".

due_datestringOptional

Due date as YYYY-MM-DD, without a time zone or time of day.

descriptionstringOptional

Details of the work to complete.

Assignment and related records4 fields

assignee_refstringOptional

ID of a core:Person record. Find it with customers.ListPeople and use the top-level id. This is not an account ID or a display name.

parent_typestringOptional

Record type this task belongs to, such as core:Company.

parent_idstringOptional

ID of the record identified by parent_type.

company_refstringOptional

ID of a core:Company record. Find it with customers.ListCompanies and use the top-level id. This is not an account ID or a display name.

privatebooleanOptional

Defaults to false: the record is shared with the workspace. True assigns private ownership to the approved acting member and requires member delegation. This is independent of created_by provenance.

external_refobjectRequired

Permanent, case-sensitive source identity within this workspace, resource type and private/workspace scope. It is independent of API key rotation and retry receipt expiry.

Nested fields

namespacestringRequired

A stable name for the source system, such as crm-production.

At least 1 character.

idstringRequired

The record ID in that source system.

At least 1 character.

Sync with a permanent external reference

Choose a stable external_ref.namespace for your source system and put its record ID in external_ref.id. Matching is case-sensitive and scoped to this workspace, resource type and private/workspace ownership. The reference survives API key replacement and the 30-day retry receipt window. It does not match records by email or name.

Send the required create fields each time. A missing reference creates a record; an existing reference updates only supplied fields and preserves everything else. created tells you which happened. Use the same idempotency key when retrying a lost response and a new key for a later source change. Concurrent calls cannot create duplicate records. A deleted or inaccessible match is refused; the operation does not restore it or make a replacement.

Use the returned item.id with the regular update operation when you need unset or a conditional expected edit. Changing private chooses a different ownership scope; it does not transfer an existing record.

Response

Returns 200 OK with a JSON body.

Record metadata sits outside data. Timestamps created_at and updated_at are Unix milliseconds. Optional business fields may be absent; absence does not mean false or zero. A field accepts null only when its type includes null.

itemTaskRecordRequired

The requested record, including its metadata and data fields.

TaskRecord

idstringRequired

Stable core:Task record ID. Keep this top-level value when reading or referring to this record. Available actions are linked under Next steps; an ID does not imply the resource can be edited.

created_atnumberRequired

Time the record was created, in Unix milliseconds.

updated_atnumberRequired

Time the record most recently changed, in Unix milliseconds. Use with overlapping windows for incremental reads.

created_bystring or nullRequired

Account that originally created the record, or null for a workspace/system-originated record. This is provenance, not its current owner or a Person record ID.

privatebooleanRequired

True for a member-owned private record. An API key needs approved delegation to that owner; false alone does not bypass resource grants or other access rules.

dataTaskRequired

The record's fields.

Task

Work and progress4 fields

titlestringRequired

Short description of the work to complete.

statusstringOptional

Work status: open, in_progress or done. A due date does not automatically change the status.

Allowed: "open", "in_progress", "done".

due_datestringOptional

Due date as YYYY-MM-DD, without a time zone or time of day.

descriptionstringOptional

Details of the work to complete.

Assignment and related records4 fields

assignee_refstringOptional

ID of a core:Person record. Find it with customers.ListPeople and use the top-level id. This is not an account ID or a display name.

parent_typestringOptional

Record type this task belongs to, such as core:Company.

parent_idstringOptional

ID of the record identified by parent_type.

company_refstringOptional

ID of a core:Company record. Find it with customers.ListCompanies and use the top-level id. This is not an account ID or a display name.

createdbooleanRequired

True when this external reference created a record; false when it matched an existing record.

Errors & retries

Set BRIGG_REQUEST_ID once for each logical action. The samples send it as Idempotency-Key. Reuse the same value and body on retries, including after a timeout; a missing response does not prove the action failed.

For rate limits, follow the server’s retry guidance and back off. See HTTP errors and safe retries and limits.

HTTP status	Code	What to do
400	`invalid_json`	Send a JSON object with Content-Type: application/json.
400	`invalid_input`	Check the request fields and types. Supply a stable Idempotency-Key containing 1–200 characters.
401	`invalid_key`	The workspace API key is missing, invalid or revoked.
403	`forbidden`	Check the key’s operation and resource grants. If Brigg-Act-As is supplied, the key must be authorized to delegate to that member.
404	`not_found`	The requested operation or resource is not available to this credential.
429	`rate_limited`	Wait for Retry-After before retrying. Reuse the original Idempotency-Key.

Next steps

Download OpenAPI · Versioning & retirement

JSON schemas

Use the complete schemas for validation or client generation.

Full request JSON schema

{
  "type": "object",
  "properties": {
    "data": {
      "type": "object",
      "properties": {
        "title": {
          "type": "string",
          "description": "Short description of the work to complete."
        },
        "status": {
          "type": "string",
          "enum": [
            "open",
            "in_progress",
            "done"
          ],
          "description": "Work status: open, in_progress or done. A due date does not automatically change the status."
        },
        "due_date": {
          "type": "string",
          "description": "Due date as YYYY-MM-DD, without a time zone or time of day."
        },
        "assignee_ref": {
          "type": "string",
          "description": "ID of a `core:Person` record. Find it with [customers.ListPeople](/developers/reference/customers/ListPeople) and use the top-level `id`. This is not an account ID or a display name."
        },
        "description": {
          "type": "string",
          "description": "Details of the work to complete."
        },
        "parent_type": {
          "type": "string",
          "description": "Record type this task belongs to, such as core:Company."
        },
        "parent_id": {
          "type": "string",
          "description": "ID of the record identified by parent_type."
        },
        "company_ref": {
          "type": "string",
          "description": "ID of a `core:Company` record. Find it with [customers.ListCompanies](/developers/reference/customers/ListCompanies) and use the top-level `id`. This is not an account ID or a display name."
        }
      },
      "required": [
        "title"
      ],
      "additionalProperties": false,
      "description": "The record's fields.",
      "title": "Task"
    },
    "private": {
      "type": "boolean",
      "description": "Defaults to false: the record is shared with the workspace. True assigns private ownership to the approved acting member and requires member delegation. This is independent of created_by provenance."
    },
    "external_ref": {
      "type": "object",
      "description": "Permanent, case-sensitive source identity within this workspace, resource type and private/workspace scope. It is independent of API key rotation and retry receipt expiry.",
      "properties": {
        "namespace": {
          "type": "string",
          "minLength": 1,
          "description": "A stable name for the source system, such as crm-production."
        },
        "id": {
          "type": "string",
          "minLength": 1,
          "description": "The record ID in that source system."
        }
      },
      "required": [
        "namespace",
        "id"
      ],
      "additionalProperties": false
    }
  },
  "required": [
    "external_ref",
    "data"
  ],
  "additionalProperties": false,
  "examples": [
    {
      "external_ref": {
        "namespace": "crm-production",
        "id": "customer-1042"
      },
      "data": {
        "title": "Send project proposal",
        "status": "open",
        "due_date": "2026-11-13",
        "company_ref": "e_company_example",
        "description": "Prepare a proposal for the onboarding project."
      }
    }
  ]
}

Full response JSON schema

{
  "type": "object",
  "properties": {
    "item": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "description": "Stable core:Task record ID. Keep this top-level value when reading or referring to this record. Available actions are linked under Next steps; an ID does not imply the resource can be edited."
        },
        "created_at": {
          "type": "number",
          "description": "Time the record was created, in Unix milliseconds."
        },
        "updated_at": {
          "type": "number",
          "description": "Time the record most recently changed, in Unix milliseconds. Use with overlapping windows for incremental reads."
        },
        "created_by": {
          "type": [
            "string",
            "null"
          ],
          "description": "Account that originally created the record, or null for a workspace/system-originated record. This is provenance, not its current owner or a Person record ID."
        },
        "private": {
          "type": "boolean",
          "description": "True for a member-owned private record. An API key needs approved delegation to that owner; false alone does not bypass resource grants or other access rules."
        },
        "data": {
          "type": "object",
          "properties": {
            "title": {
              "type": "string",
              "description": "Short description of the work to complete."
            },
            "status": {
              "type": "string",
              "enum": [
                "open",
                "in_progress",
                "done"
              ],
              "description": "Work status: open, in_progress or done. A due date does not automatically change the status."
            },
            "due_date": {
              "type": "string",
              "description": "Due date as YYYY-MM-DD, without a time zone or time of day."
            },
            "assignee_ref": {
              "type": "string",
              "description": "ID of a `core:Person` record. Find it with [customers.ListPeople](/developers/reference/customers/ListPeople) and use the top-level `id`. This is not an account ID or a display name."
            },
            "description": {
              "type": "string",
              "description": "Details of the work to complete."
            },
            "parent_type": {
              "type": "string",
              "description": "Record type this task belongs to, such as core:Company."
            },
            "parent_id": {
              "type": "string",
              "description": "ID of the record identified by parent_type."
            },
            "company_ref": {
              "type": "string",
              "description": "ID of a `core:Company` record. Find it with [customers.ListCompanies](/developers/reference/customers/ListCompanies) and use the top-level `id`. This is not an account ID or a display name."
            }
          },
          "required": [
            "title"
          ],
          "additionalProperties": false,
          "description": "The record's fields.",
          "title": "Task"
        }
      },
      "required": [
        "id",
        "created_at",
        "updated_at",
        "created_by",
        "private",
        "data"
      ],
      "additionalProperties": false,
      "description": "The requested record, including its metadata and data fields.",
      "title": "TaskRecord"
    },
    "created": {
      "type": "boolean",
      "description": "True when this external reference created a record; false when it matched an existing record."
    }
  },
  "required": [
    "item",
    "created"
  ],
  "additionalProperties": false,
  "examples": [
    {
      "item": {
        "id": "e_task_example",
        "created_at": 1794301200000,
        "updated_at": 1794301200000,
        "created_by": "a_example",
        "private": false,
        "data": {
          "title": "Send project proposal",
          "status": "open",
          "due_date": "2026-11-13",
          "company_ref": "e_company_example",
          "description": "Prepare a proposal for the onboarding project."
        }
      },
      "created": true
    }
  ]
}

Try the request

Use your API key in a server environment.

Example scenarioAct as a memberRequires administrator-approved delegation.

Fictional values. Replace IDs and business details with values from your workspace.

Request

cURL

curl 'https://api.brigg.app/v1/operations/tasks.UpsertTask' \
  -H "Authorization: Bearer $BRIGG_API_KEY" \
  -H 'Content-Type: application/json' \
  -H "Idempotency-Key: $BRIGG_REQUEST_ID" \
  --data-raw '{
  "external_ref": {
    "namespace": "crm-production",
    "id": "customer-1042"
  },
  "data": {
    "title": "Send project proposal",
    "status": "open",
    "due_date": "2026-11-13",
    "company_ref": "e_company_example",
    "description": "Prepare a proposal for the onboarding project."
  }
}'

TypeScript

const requestId = process.env.BRIGG_REQUEST_ID;
if (!requestId) throw new Error("Set BRIGG_REQUEST_ID once per action and reuse it on retries.");

const response = await fetch("https://api.brigg.app/v1/operations/tasks.UpsertTask", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.BRIGG_API_KEY}`,
    "Content-Type": "application/json",
    "Idempotency-Key": requestId, // Create once per action; reuse on retries.
  },
  body: JSON.stringify({
    "external_ref": {
      "namespace": "crm-production",
      "id": "customer-1042"
    },
    "data": {
      "title": "Send project proposal",
      "status": "open",
      "due_date": "2026-11-13",
      "company_ref": "e_company_example",
      "description": "Prepare a proposal for the onboarding project."
    }
  }),
});
const result = await response.json();
if (!response.ok) throw new Error(`${response.status}: ${result.error} — ${result.message}`);
console.log(result);

Python

import json
import os
from urllib.request import Request, urlopen
from urllib.error import HTTPError

request_id = os.environ["BRIGG_REQUEST_ID"]  # Reuse for retries of this action.
payload = {
  "external_ref": {
    "namespace": "crm-production",
    "id": "customer-1042"
  },
  "data": {
    "title": "Send project proposal",
    "status": "open",
    "due_date": "2026-11-13",
    "company_ref": "e_company_example",
    "description": "Prepare a proposal for the onboarding project."
  }
}
request = Request(
    "https://api.brigg.app/v1/operations/tasks.UpsertTask",
    data=json.dumps(payload).encode("utf-8"),
    headers={
        "Authorization": f"Bearer {os.environ['BRIGG_API_KEY']}",
        "Content-Type": "application/json",
        "Idempotency-Key": request_id,  # Create once per action; reuse on retries.
    },
    method="POST",
)
try:
    with urlopen(request) as response:
        print(json.load(response))
except HTTPError as error:
    print(error.code, json.load(error))
    raise

cURL

curl 'https://api.brigg.app/v1/operations/tasks.UpsertTask' \
  -H "Authorization: Bearer $BRIGG_API_KEY" \
  -H 'Content-Type: application/json' \
  -H "Brigg-Act-As: $BRIGG_ACT_AS" \
  -H "Idempotency-Key: $BRIGG_REQUEST_ID" \
  --data-raw '{
  "external_ref": {
    "namespace": "crm-production",
    "id": "customer-1042"
  },
  "data": {
    "title": "Send project proposal",
    "status": "open",
    "due_date": "2026-11-13",
    "company_ref": "e_company_example",
    "description": "Prepare a proposal for the onboarding project."
  }
}'

TypeScript

const actAs = process.env.BRIGG_ACT_AS;
if (!actAs) throw new Error("Set BRIGG_ACT_AS to an approved member account ID.");

const requestId = process.env.BRIGG_REQUEST_ID;
if (!requestId) throw new Error("Set BRIGG_REQUEST_ID once per action and reuse it on retries.");

const response = await fetch("https://api.brigg.app/v1/operations/tasks.UpsertTask", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.BRIGG_API_KEY}`,
    "Content-Type": "application/json",
    "Brigg-Act-As": actAs,
    "Idempotency-Key": requestId, // Create once per action; reuse on retries.
  },
  body: JSON.stringify({
    "external_ref": {
      "namespace": "crm-production",
      "id": "customer-1042"
    },
    "data": {
      "title": "Send project proposal",
      "status": "open",
      "due_date": "2026-11-13",
      "company_ref": "e_company_example",
      "description": "Prepare a proposal for the onboarding project."
    }
  }),
});
const result = await response.json();
if (!response.ok) throw new Error(`${response.status}: ${result.error} — ${result.message}`);
console.log(result);

Python

import json
import os
from urllib.request import Request, urlopen
from urllib.error import HTTPError

request_id = os.environ["BRIGG_REQUEST_ID"]  # Reuse for retries of this action.
payload = {
  "external_ref": {
    "namespace": "crm-production",
    "id": "customer-1042"
  },
  "data": {
    "title": "Send project proposal",
    "status": "open",
    "due_date": "2026-11-13",
    "company_ref": "e_company_example",
    "description": "Prepare a proposal for the onboarding project."
  }
}
request = Request(
    "https://api.brigg.app/v1/operations/tasks.UpsertTask",
    data=json.dumps(payload).encode("utf-8"),
    headers={
        "Authorization": f"Bearer {os.environ['BRIGG_API_KEY']}",
        "Content-Type": "application/json",
        "Brigg-Act-As": os.environ["BRIGG_ACT_AS"],
        "Idempotency-Key": request_id,  # Create once per action; reuse on retries.
    },
    method="POST",
)
try:
    with urlopen(request) as response:
        print(json.load(response))
except HTTPError as error:
    print(error.code, json.load(error))
    raise

200 OK Response example

{
  "item": {
    "id": "e_task_example",
    "created_at": 1794301200000,
    "updated_at": 1794301200000,
    "created_by": "a_example",
    "private": false,
    "data": {
      "title": "Send project proposal",
      "status": "open",
      "due_date": "2026-11-13",
      "company_ref": "e_company_example",
      "description": "Prepare a proposal for the onboarding project."
    }
  },
  "created": true
}

Illustrative values, not a live response.

The same external reference returns the same record ID. Use a new idempotency key for a later source change.

Request

cURL

curl 'https://api.brigg.app/v1/operations/tasks.UpsertTask' \
  -H "Authorization: Bearer $BRIGG_API_KEY" \
  -H 'Content-Type: application/json' \
  -H "Idempotency-Key: $BRIGG_REQUEST_ID" \
  --data-raw '{
  "external_ref": {
    "namespace": "crm-production",
    "id": "customer-1042"
  },
  "data": {
    "title": "Send project proposal",
    "status": "open",
    "due_date": "2026-11-13",
    "company_ref": "e_company_example",
    "description": "Prepare a proposal for the onboarding project."
  }
}'

TypeScript

const requestId = process.env.BRIGG_REQUEST_ID;
if (!requestId) throw new Error("Set BRIGG_REQUEST_ID once per action and reuse it on retries.");

const response = await fetch("https://api.brigg.app/v1/operations/tasks.UpsertTask", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.BRIGG_API_KEY}`,
    "Content-Type": "application/json",
    "Idempotency-Key": requestId, // Create once per action; reuse on retries.
  },
  body: JSON.stringify({
    "external_ref": {
      "namespace": "crm-production",
      "id": "customer-1042"
    },
    "data": {
      "title": "Send project proposal",
      "status": "open",
      "due_date": "2026-11-13",
      "company_ref": "e_company_example",
      "description": "Prepare a proposal for the onboarding project."
    }
  }),
});
const result = await response.json();
if (!response.ok) throw new Error(`${response.status}: ${result.error} — ${result.message}`);
console.log(result);

Python

import json
import os
from urllib.request import Request, urlopen
from urllib.error import HTTPError

request_id = os.environ["BRIGG_REQUEST_ID"]  # Reuse for retries of this action.
payload = {
  "external_ref": {
    "namespace": "crm-production",
    "id": "customer-1042"
  },
  "data": {
    "title": "Send project proposal",
    "status": "open",
    "due_date": "2026-11-13",
    "company_ref": "e_company_example",
    "description": "Prepare a proposal for the onboarding project."
  }
}
request = Request(
    "https://api.brigg.app/v1/operations/tasks.UpsertTask",
    data=json.dumps(payload).encode("utf-8"),
    headers={
        "Authorization": f"Bearer {os.environ['BRIGG_API_KEY']}",
        "Content-Type": "application/json",
        "Idempotency-Key": request_id,  # Create once per action; reuse on retries.
    },
    method="POST",
)
try:
    with urlopen(request) as response:
        print(json.load(response))
except HTTPError as error:
    print(error.code, json.load(error))
    raise

cURL

curl 'https://api.brigg.app/v1/operations/tasks.UpsertTask' \
  -H "Authorization: Bearer $BRIGG_API_KEY" \
  -H 'Content-Type: application/json' \
  -H "Brigg-Act-As: $BRIGG_ACT_AS" \
  -H "Idempotency-Key: $BRIGG_REQUEST_ID" \
  --data-raw '{
  "external_ref": {
    "namespace": "crm-production",
    "id": "customer-1042"
  },
  "data": {
    "title": "Send project proposal",
    "status": "open",
    "due_date": "2026-11-13",
    "company_ref": "e_company_example",
    "description": "Prepare a proposal for the onboarding project."
  }
}'

TypeScript

const actAs = process.env.BRIGG_ACT_AS;
if (!actAs) throw new Error("Set BRIGG_ACT_AS to an approved member account ID.");

const requestId = process.env.BRIGG_REQUEST_ID;
if (!requestId) throw new Error("Set BRIGG_REQUEST_ID once per action and reuse it on retries.");

const response = await fetch("https://api.brigg.app/v1/operations/tasks.UpsertTask", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.BRIGG_API_KEY}`,
    "Content-Type": "application/json",
    "Brigg-Act-As": actAs,
    "Idempotency-Key": requestId, // Create once per action; reuse on retries.
  },
  body: JSON.stringify({
    "external_ref": {
      "namespace": "crm-production",
      "id": "customer-1042"
    },
    "data": {
      "title": "Send project proposal",
      "status": "open",
      "due_date": "2026-11-13",
      "company_ref": "e_company_example",
      "description": "Prepare a proposal for the onboarding project."
    }
  }),
});
const result = await response.json();
if (!response.ok) throw new Error(`${response.status}: ${result.error} — ${result.message}`);
console.log(result);

Python

import json
import os
from urllib.request import Request, urlopen
from urllib.error import HTTPError

request_id = os.environ["BRIGG_REQUEST_ID"]  # Reuse for retries of this action.
payload = {
  "external_ref": {
    "namespace": "crm-production",
    "id": "customer-1042"
  },
  "data": {
    "title": "Send project proposal",
    "status": "open",
    "due_date": "2026-11-13",
    "company_ref": "e_company_example",
    "description": "Prepare a proposal for the onboarding project."
  }
}
request = Request(
    "https://api.brigg.app/v1/operations/tasks.UpsertTask",
    data=json.dumps(payload).encode("utf-8"),
    headers={
        "Authorization": f"Bearer {os.environ['BRIGG_API_KEY']}",
        "Content-Type": "application/json",
        "Brigg-Act-As": os.environ["BRIGG_ACT_AS"],
        "Idempotency-Key": request_id,  # Create once per action; reuse on retries.
    },
    method="POST",
)
try:
    with urlopen(request) as response:
        print(json.load(response))
except HTTPError as error:
    print(error.code, json.load(error))
    raise

200 OK Response example

{
  "item": {
    "id": "e_task_example",
    "created_at": 1794301200000,
    "updated_at": 1794301200000,
    "created_by": "a_example",
    "private": false,
    "data": {
      "title": "Send project proposal",
      "status": "open",
      "due_date": "2026-11-13",
      "company_ref": "e_company_example",
      "description": "Prepare a proposal for the onboarding project."
    }
  },
  "created": false
}

Illustrative values, not a live response.