home / skills / 224-industries / webflow-skills / webflow-enterprise-api

webflow-enterprise-api skill

safe

This skill helps you manage Webflow Enterprise workspace and site configurations by listing, creating, updating, and deleting enterprise resources.

npx playbooks add skill 224-industries/webflow-skills --skill webflow-enterprise-api

Review the files below or copy the command above to add this skill to your agents.

Files (8)

SKILL.md

4.1 KB

---
name: webflow-enterprise-api
description: Webflow Enterprise API endpoints for workspace management, audit logs, site activity, 301 redirects, robots.txt, and well-known files. Use when working with Enterprise-only Webflow API endpoints that require an Enterprise workspace.
license: MIT
metadata:
  author: "Ben Sabic"
  repository: "https://github.com/224-industries/webflow-skills"
  url: "https://skills.224ai.au/webflow-enterprise-api.skill"
  version: "1.0.0"
  keywords: "ai, agent, skill, enterprise, workspace management, site activity, audit logs, 301 redirects, robots-txt, well-known files, webflow api"
---

# Webflow Enterprise API

Enterprise-only API endpoints for managing Webflow workspaces and site configurations. All endpoints require an Enterprise workspace and appropriate token scopes.

## Endpoints Overview

| Endpoint | Method | Scope | Description |
|----------|--------|-------|-------------|
| `/workspaces/{id}/audit_logs` | GET | `workspace_activity:read` | Workspace audit logs |
| `/sites/{id}/activity_logs` | GET | `site_activity:read` | Site activity logs |
| `/sites/{id}/redirects` | GET | `sites:read` | List 301 redirect rules |
| `/sites/{id}/redirects` | POST | `sites:write` | Create a 301 redirect |
| `/sites/{id}/redirects/{rid}` | PATCH | `sites:write` | Update a 301 redirect |
| `/sites/{id}/redirects/{rid}` | DELETE | `sites:write` | Delete a 301 redirect |
| `/sites/{id}/robots_txt` | GET | `site_config:read` | Get robots.txt configuration |
| `/sites/{id}/robots_txt` | PUT | `site_config:write` | Replace robots.txt configuration |
| `/sites/{id}/robots_txt` | PATCH | `site_config:write` | Update robots.txt configuration |
| `/sites/{id}/robots_txt` | DELETE | `site_config:write` | Delete robots.txt rules |
| `/sites/{id}/well_known` | PUT | `site_config:write` | Upload a well-known file |
| `/sites/{id}/well_known` | DELETE | `site_config:write` | Delete well-known files |
| `/workspaces/{id}/sites` | POST | `workspace:write` | Create a new site |
| `/sites/{id}` | PATCH | `sites:write` | Update a site |
| `/sites/{id}` | DELETE | `sites:write` | Delete a site |
| `/sites/{id}/plan` | GET | `sites:read` | Get site hosting plan |

All endpoints use `https://api.webflow.com/v2` as the base URL and require `Authorization: Bearer <token>`.

## Important Notes

- All endpoints require an **Enterprise workspace** — they will return errors on non-Enterprise plans
- Use workspace API tokens (not site tokens) for workspace-level endpoints
- Rate limits apply — check the `X-RateLimit-Remaining` response header
- Pagination is available via `limit` and `offset` query parameters on list endpoints

## Reference Documentation

Each reference file includes YAML frontmatter with `name`, `description`, and `tags` for searchability. Use the search script in `scripts/search_references.py` to find relevant references.

### Audit & Activity

- **[references/workspace-audit-logs.md](references/workspace-audit-logs.md)**: Workspace audit logs — login/logout, role changes, membership, invitations
- **[references/site-activity-logs.md](references/site-activity-logs.md)**: Site activity logs — design changes, publishing, CMS, branches, libraries

### Site Configuration

- **[references/301-redirects.md](references/301-redirects.md)**: 301 redirect rules for a site — list, create, update, and delete
- **[references/robots-txt.md](references/robots-txt.md)**: Robots.txt crawler rules and sitemap URL — get, replace, update, and delete
- **[references/well-known-files.md](references/well-known-files.md)**: Upload files to the .well-known directory

### Workspace Management

- **[references/workspace-management.md](references/workspace-management.md)**: Create, update, delete sites, and get site plans within a workspace

### Searching References

```bash
# List all references with metadata
python scripts/search_references.py --list

# Search by tag (exact match)
python scripts/search_references.py --tag <tag>

# Search by keyword (across name, description, tags, and content)
python scripts/search_references.py --search <query>
```

## Scripts

- **`scripts/search_references.py`**: Search reference files by tag, keyword, or list all with metadata

Overview

This skill exposes Enterprise-only Webflow API endpoints for managing workspaces, audit and site activity logs, site-level configuration (301 redirects, robots.txt, well-known files), and site lifecycle actions. It targets Enterprise workspaces and requires workspace-scoped tokens and appropriate API scopes to operate. Use it to automate governance, compliance, redirects, and site configuration across an Enterprise environment.

How this skill works

The skill wraps Webflow Enterprise endpoints under the v2 base URL and performs authenticated requests with Authorization: Bearer <token>. It inspects and modifies workspace audit logs, site activity logs, redirect rules, robots.txt contents, and .well-known files, and it can create, update, or delete sites when operating with workspace:write scope. List endpoints support pagination via limit and offset and all responses should be checked for rate-limit headers.

When to use it

Automating audit and activity monitoring for Enterprise workspaces and sites.
Bulk managing or syncing 301 redirects across many sites.
Programmatically updating robots.txt or uploading .well-known files for security and verification.
Creating, updating, or decommissioning sites within an Enterprise workspace.
Extracting site plan or usage information for billing or reporting workflows.

Best practices

Use workspace API tokens (not site tokens) for workspace-level endpoints and ensure required scopes are granted.
Respect rate limits: inspect X-RateLimit-Remaining and implement retry/backoff logic.
Paginate list calls using limit and offset to avoid large payloads and timeouts.
Validate Enterprise plan availability before calling endpoints; non-Enterprise workspaces return errors.
Use idempotent operations where possible (check existing redirects or robots.txt before creating duplicates).

Example use cases

Scheduled job that pulls workspace audit logs daily and ships them to a SIEM for compliance.
Admin tool that lists site activity logs to show recent publishes, branch merges, and CMS changes.
Script to deploy consistent robots.txt rules and sitemap URLs across multiple Enterprise sites.
Bulk redirect manager that creates, updates, or removes 301 rules during a site migration.
Automated onboarding flow that creates new sites in a workspace and uploads required .well-known verification files.

FAQ

Can I use site tokens with these endpoints?

No. Workspace-level endpoints require workspace API tokens. Site tokens do not grant access to Enterprise workspace operations.

What happens if my workspace is not Enterprise?

Enterprise-only endpoints will return errors on non-Enterprise plans. Confirm the workspace plan before calling these APIs.