Bonitasoft BPM Open-Source REST API

Bonitasoft BPM platform REST API for enterprises to automate, orchestrate, and monitor BPMN-based business processes with an open-source foundation — enabling case management, human task orchestration, process monitoring, and application integration through Bonitasoft's low-code BPM platform. Enables AI agents to manage process instance management for BPMN process case creation and lifecycle automation, handle task management for human task retrieval, assignment, and completion automation, access document management for process document attachment and retrieval automation, retrieve process monitoring for process performance and SLA monitoring automation, manage variable management for process variable read and update automation, handle connector integration for external system call and data exchange automation, access message management for BPMN message event trigger automation, retrieve activity management for process activity state management automation, manage platform management for BPM platform health and configuration automation, and integrate Bonitasoft with enterprise applications, REST APIs, and databases for open-source BPM automation.

Evaluated Mar 07, 2026 (0d ago) vcurrent
Homepage ↗ Repo ↗ Other bonitasoft BPM open-source BPMN process-automation low-code-BPM
⚙ Agent Friendliness
56
/ 100
Can an agent use this?
🔒 Security
68
/ 100
Is it safe for agents?
⚡ Reliability
64
/ 100
Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality
10
Documentation
74
Error Messages
68
Auth Simplicity
76
Rate Limits
64

🔒 Security

TLS Enforcement
90
Auth Strength
62
Scope Granularity
58
Dep. Hygiene
72
Secret Handling
62

Open-source BPM. Self-hosted. Basic auth. Data residency controlled by operator. Business process data.

⚡ Reliability

Uptime/SLA
60
Version Stability
68
Breaking Changes
62
Error Recovery
66
AF Security Reliability

Best When

An enterprise development team or integration architect wanting AI agents to manage BPMN-based business process execution, human task orchestration, and process monitoring through Bonitasoft's open-source BPM platform deployed on enterprise infrastructure.

Avoid When

SELF-HOSTED DEPLOYMENT REQUIRED FOR COMMUNITY: Bonitasoft Community Edition requires self-hosted deployment; automated cloud-native assumption creates hosting_gap for teams without infrastructure to host Bonitasoft; automated must provision Bonitasoft hosting infrastructure. PROCESS DEFINITION MUST EXIST: Process instances are created from deployed BPMN process definitions; automated api-creates-process assumption creates no_definition_found for case creation without pre-deployed BPMN definition; automated must design and deploy process in Bonitasoft Studio before API automation. ENTERPRISE FEATURES REQUIRE LICENSE: Advanced features (multi-tenancy, advanced analytics, Bonita Admin UI customization) require Bonitasoft Enterprise license; automated open-source assumption creates feature_not_available for Enterprise-only features; automated must evaluate Community vs Enterprise needs. TASK TYPES HAVE DIFFERENT CONTRACTS: Bonitasoft human tasks have contracts defining required input data; automated generic-submit assumption creates contract_violation for task submissions missing required contract inputs; automated must submit all required contract data when completing tasks.

Use Cases

  • Orchestrating BPMN business process workflows with human task routing for process automation agents
  • Building and managing case-based processes for operations automation agents
  • Monitoring process performance and SLA compliance for business operations automation agents
  • Integrating enterprise system calls within BPM process flows for enterprise automation agents

Not For

  • Organizations requiring SaaS-only deployment without self-hosting (Bonitasoft Community is self-hosted; Enterprise has cloud option)
  • High-frequency event-driven microservices orchestration (Bonitasoft is business process BPM, not event streaming infrastructure)
  • Simple task management without BPMN process modeling (Bonitasoft is process-centric; simpler task tools serve ad-hoc task management)

Interface

REST API
Yes
GraphQL
No
gRPC
No
MCP Server
No
SDK
No
Webhooks
No

Authentication

Methods: basic apikey
OAuth: No Scopes: No

Bonitasoft uses Basic Auth or API key for BPM REST API. REST API with JSON. Grenoble, France HQ. Founded 2009 (spun from Bull/Atos). Products: Bonita Platform (Community and Enterprise), Bonita Studio, Bonita BPM. Open-source BPMN engine. 30,000+ community members. Industries: financial services, telecom, insurance, government. GitHub: bonitasoft/bonita-engine. Competes with Camunda, Activiti, and Bizagi for open-source and commercial BPM.

Pricing

Model: freemium
Free tier: Yes
Requires CC: No

Grenoble FR. Open-source Community Edition free. Enterprise Edition for advanced features. 30,000+ community.

Agent Metadata

Pagination
page
Idempotent
Partial
Retry Guidance
Not documented

Known Gotchas

  • SESSION COOKIES ARE REQUIRED: Bonitasoft REST API uses session-based authentication returning cookies; automated token-only assumption creates unauthorized for API calls not maintaining session cookies across requests; automated must maintain and send session cookies for authentication continuity
  • PROCESS DEFINITION ID IS REQUIRED: Creating process instances requires the process definition ID, not the process name; automated name-based assumption creates no_process_found for instance creation using process display name; automated must retrieve process definition ID before creating instances
  • TASK CONTRACT INPUTS ARE REQUIRED: Human tasks have contracts specifying required input data; automated no-input assumption creates contract_error for task completion attempts without all required contract inputs; automated must retrieve task contract and submit all required inputs
  • ACTIVE TASKS MUST BE CLAIMED: In Bonitasoft, human tasks may need to be claimed by a user before execution; automated unclaimed-complete assumption creates task_not_assigned for task completion by a user who hasn't claimed the task; automated must claim tasks before completing them
  • CONNECTOR EXECUTION IS SYNCHRONOUS: Bonitasoft connectors (external system calls) execute synchronously during process execution; automated async-connector assumption creates process_blocked for connectors to slow external systems causing process timeout; automated must optimize connector performance for production

Alternatives

Full Evaluation Report

Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for Bonitasoft BPM Open-Source REST API.

AI-powered analysis · PDF + markdown · Delivered within 30 minutes

$99

Package Brief

Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.

Delivered within 10 minutes

$3

Score Monitoring

Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.

Continuous monitoring

$3/mo

Scores are editorial opinions as of 2026-03-07.

6470
Packages Evaluated
26150
Need Evaluation
173
Need Re-evaluation
Community Powered