Facilio Assets API

openapi: 3.2.0
info:
  title: Facilio REST Assets API
  version: 5.0.0
  description: The Facilio REST API gives you programmatic access to Facilio's Connected CMMS — the unified platform for managing property operations at portfolio scale.
  contact:
    name: Facilio Support
    url: https://facilio.com
  license:
    name: Proprietary
servers:
- url: https://{region}.facilioapis.com/{app_name}/api/v5
  variables:
    region:
      description: Regional deployment
      default: us
      enum:
      - us
      - au
      - ae
      - uk
      - us-azure
      - sa
    app_name:
      description: '''maintenance'' for API Key, ''developer'' for OAuth2'
      default: maintenance
      enum:
      - maintenance
      - developer
security:
- apiKey: []
- oauth2: []
tags:
- name: Assets
  description: Assets represent the equipment, machines, and devices in your facilities — HVAC units, elevators, generators, fire panels, and more. Track their lifecycle, location, warranty, and maintenance history.
paths:
  /asset:
    get:
      tags:
      - Assets
      summary: List assets
      description: Returns a paginated list of assets. Supports filtering by any field (e.g. `?category=HVAC&site(is)=10`).
      operationId: listAssets
      parameters:
      - $ref: '#/components/parameters/page'
      - $ref: '#/components/parameters/pageSize'
      - $ref: '#/components/parameters/select'
      - $ref: '#/components/parameters/expand'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/count'
      - $ref: '#/components/parameters/view'
      - $ref: '#/components/parameters/changed'
      - name: sortBy
        in: query
        schema:
          type: string
          enum:
          - id
          - name
          - sysCreatedTime
          - sysModifiedTime
      - name: sortOrder
        in: query
        schema:
          type: string
          enum:
          - asc
          - desc
          default: asc
      responses:
        '200':
          description: List of assets
          content:
            application/json:
              example:
                success: true
                data:
                - id: 14
                  name: AHU-01
                  category: HVAC
                  type: Air Handling Unit
                  siteId:
                    id: 10
                  moduleState: Active
                  sysCreatedTime: '2026-01-15T10:00:00Z'
                - id: 15
                  name: AHU-02
                  category: HVAC
                  type: Air Handling Unit
                  siteId:
                    id: 10
                  moduleState: Active
                  sysCreatedTime: '2026-01-15T10:05:00Z'
                pagination:
                  page: 1
                  pageSize: 50
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      tags:
      - Assets
      summary: Create an asset
      description: Creates a new asset. Category and type accept picklist display names or IDs.
      operationId: createAsset
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - data
              properties:
                data:
                  $ref: '#/components/schemas/Asset'
            example:
              data:
                name: AHU-03
                category: HVAC
                type: Air Handling Unit
                siteId: 10
                manufacturer: Carrier
                model: 39M
                serialNumber: SN-2026-003
                warranty_info_asset: 2 year full warranty
      responses:
        '201':
          description: Asset created
          content:
            application/json:
              example:
                success: true
                data:
                  id: 16
                  name: AHU-03
                  category: HVAC
                  siteId:
                    id: 10
                    name: Headquarters
                  sysCreatedTime: '2026-02-14T10:00:00Z'
                message: Record created
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
  /asset/{id}:
    get:
      tags:
      - Assets
      summary: Get an asset
      description: Returns a single asset with all system and custom fields.
      operationId: getAsset
      parameters:
      - $ref: '#/components/parameters/recordId'
      - $ref: '#/components/parameters/select'
      - $ref: '#/components/parameters/expand'
      responses:
        '200':
          description: Asset details
          content:
            application/json:
              example:
                success: true
                data:
                  id: 14
                  name: AHU-01
                  description: Air Handling Unit in Building A
                  serialNumber: SN-2026-001
                  category: HVAC
                  type: Air Handling Unit
                  siteId:
                    id: 10
                    name: Headquarters
                  space:
                    id: 20
                    name: Mechanical Room
                  moduleState: Active
                  manufacturer: Carrier
                  model: 39M
                  department: Facilities
                  sysCreatedTime: '2026-01-15T10:00:00Z'
                  sysCreatedBy:
                    id: 1
                    name: Alex Johnson
                    email: alex.johnson@example.com
                  warranty_info_asset: 2 year full warranty
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    patch:
      tags:
      - Assets
      summary: Update an asset
      description: Updates an existing asset. Only included fields are changed.
      operationId: updateAsset
      parameters:
      - $ref: '#/components/parameters/recordId'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - data
              properties:
                data:
                  $ref: '#/components/schemas/Asset'
            example:
              data:
                name: AHU-01 (Updated)
                model: 39M-R2
      responses:
        '200':
          description: Asset updated
          content:
            application/json:
              example:
                success: true
                data:
                  id: 14
                  name: AHU-01 (Updated)
                message: Record updated
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    delete:
      tags:
      - Assets
      summary: Delete an asset
      description: Permanently deletes an asset.
      operationId: deleteAsset
      parameters:
      - $ref: '#/components/parameters/recordId'
      responses:
        '200':
          description: Asset deleted
          content:
            application/json:
              example:
                success: true
                message: Record deleted
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
  /asset/metadata:
    get:
      tags:
      - Assets
      summary: Get asset field schema
      description: Returns the field schema for the asset module, including all declared system fields and any org-specific custom fields with their data type, required/readOnly flags, and lookup targets.
      operationId: getAssetMetadata
      parameters:
      - $ref: '#/components/parameters/includeAllowedValues'
      responses:
        '200':
          description: Field schema retrieved successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModuleMetaResponse'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
components:
  parameters:
    search:
      name: search
      in: query
      description: Free-text search on the primary field (subject, name, etc.)
      schema:
        type: string
    select:
      name: select
      in: query
      description: Comma-separated field names to include in the response
      schema:
        type: string
    recordId:
      name: id
      in: path
      required: true
      description: Record ID
      schema:
        type: integer
        format: int64
    changed:
      name: changed
      in: query
      description: 'Delta sync: returns records created/modified after this UTC timestamp'
      schema:
        type: string
        format: date-time
    view:
      name: view
      in: query
      description: Saved view name
      schema:
        type: string
    includeAllowedValues:
      name: includeAllowedValues
      in: query
      description: 'When `true`, the metadata response adds `allowed_values` ([{label, value}]) on every picklist-capable field — `ENUM`, `SYSTEM_ENUM`, `MULTI_ENUM`, `STRING_SYSTEM_ENUM`, and `LOOKUP` fields targeting system picklist modules (status, priority, category, type, ...).

        Default `false` keeps the original metadata payload (no enrichment, no extra DB calls).

        Use this to discover acceptable write values without round-tripping `GET /picklist/{moduleName}/{fieldName}` for every picklist field.

        '
      schema:
        type: boolean
        default: false
    count:
      name: count
      in: query
      description: Include total record count in response
      schema:
        type: boolean
        default: false
    expand:
      name: expand
      in: query
      description: 'Comma-separated lookup field names to expand on **list** endpoints (max 5).

        Expanded objects follow the same rules as single-record GET (see **Lookup fields in responses** in the API overview).

        '
      schema:
        type: string
    page:
      name: page
      in: query
      description: Page number (1-based)
      schema:
        type: integer
        default: 1
    pageSize:
      name: pageSize
      in: query
      description: Records per page (max 200)
      schema:
        type: integer
        default: 50
        maximum: 200
  responses:
    NotFound:
      description: Record or module not found
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            success: false
            error:
              code: RECORD_NOT_FOUND
              message: Record with the given ID was not found
    Unauthorized:
      description: Missing or invalid authentication credentials
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            success: false
            error:
              code: UNAUTHORIZED
              message: Missing or invalid authentication credentials
    BadRequest:
      description: Validation error — missing required fields, invalid field values, or malformed request body
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            success: false
            error:
              code: VALIDATION_ERROR
              message: 'Required field(s) missing: name'
  schemas:
    Asset:
      type: object
      description: 'Asset. Custom fields: `{field_name}_asset`.'
      properties:
        id:
          type: integer
          readOnly: true
          description: Unique record ID
        name:
          type: string
          description: Asset name (sortable)
        description:
          type: string
          description: Asset description
        serialNumber:
          type: string
          description: Manufacturer serial number
        tagNumber:
          type: string
          description: Internal tag number
        qrVal:
          type: string
          description: QR code value
        category:
          type: string
          description: Category — picklist value (e.g. 'HVAC') or ID
        type:
          type: string
          description: Type — picklist value or ID
        siteId:
          type: integer
          description: Site where the asset is located — represents a building, campus, or facility in your portfolio
        space:
          type: integer
          description: Space ID where the asset is located
        moduleState:
          type: string
          description: Status — pass `status` value (e.g. 'Active') or numeric ID. Use `GET /picklist/asset/moduleState` for valid values.
        manufacturer:
          type: string
          description: Manufacturer name
        model:
          type: string
          description: Model name/number
        department:
          type: string
          description: Department — picklist value or ID
        purchasedDate:
          type: string
          format: date-time
          description: Purchase date
        warrantyExpiryDate:
          type: string
          format: date-time
          description: Warranty expiry date
        operationalStatus:
          type: string
          readOnly: true
          description: Operational status
        connected:
          type: boolean
          readOnly: true
          description: Whether connected to IoT
        sysCreatedTime:
          type: string
          format: date-time
          readOnly: true
          description: Creation timestamp (sortable)
        sysModifiedTime:
          type: string
          format: date-time
          readOnly: true
          description: Last modified (sortable)
        sysCreatedBy:
          readOnly: true
          description: Created by
          allOf:
          - $ref: '#/components/schemas/User'
        sysModifiedBy:
          readOnly: true
          description: Modified by
          allOf:
          - $ref: '#/components/schemas/User'
      additionalProperties:
        description: Custom fields (e.g. warranty_info_asset)
    ModuleMetaResponse:
      type: object
      description: Response body for GET /{moduleName}/metadata.
      properties:
        success:
          type: boolean
        data:
          type: object
          properties:
            module:
              $ref: '#/components/schemas/FacilioModule'
            fields:
              type: array
              description: 'Ordered list of fields for the module.

                Standard Facilio modules return built-in fields first, followed by any fields your organization added.

                Custom modules return all fields.

                '
              items:
                $ref: '#/components/schemas/FacilioField'
    FacilioModule:
      type: object
      description: A single entry in the module catalogue returned by GET /modules.
      properties:
        name:
          type: string
          description: Module name used in all API paths (e.g. `workorder`, `custom_employees`)
        displayName:
          type: string
          description: Human-readable module label (e.g. `Work Orders`, `Employees`)
        description:
          type: string
          description: Module description as configured in Facilio Setup. Omitted when blank.
        isCustom:
          type: boolean
          description: '`true` for modules created by your organization; `false` for standard Facilio modules'
    FacilioField:
      type: object
      description: Schema descriptor for a single field within a module.
      properties:
        name:
          type: string
          description: Field name used in API requests and responses (e.g. `subject`, `po_reference_workorder`)
        displayName:
          type: string
          description: Human-readable field label
        dataType:
          type: string
          description: 'Field data type. Common values:

            `STRING`, `NUMBER`, `DECIMAL`, `BOOLEAN`,

            `DATE`, `DATE_TIME`,

            `BIG_STRING` (large text, excluded from list responses),

            `LOOKUP` (reference to another record — see `lookupModuleName`),

            `MULTI_LOOKUP` (multi-reference — see `lookupModuleName`),

            `ENUM`, `SYSTEM_ENUM`, `STRING_SYSTEM_ENUM` (picklist types)

            '
          example: STRING
        required:
          type: boolean
          description: '`true` if this field must be provided on record creation'
        readOnly:
          type: boolean
          description: '`true` if this field cannot be set or modified via the API (e.g. auto-generated system fields)'
        isCustom:
          type: boolean
          description: '`true` for fields added by your organization; `false` for standard built-in fields'
        sortable:
          type: boolean
          description: '`true` if this field can be used as a `sortBy` value on the list API'
        lookupModuleName:
          type: string
          description: Present only on `LOOKUP` and `MULTI_LOOKUP` fields. The name of the target module (e.g. `site`, `users`, `ticketstatus`).
        max_length:
          type: integer
          description: 'Maximum number of characters accepted by the V5 write API for text-style fields.

            Present only when the field''s `dataType` is one of:

            `STRING` (255), `LARGE_TEXT` (2000), `BIG_STRING` (32000).

            Omitted for all other data types.

            '
          example: 255
        allowed_values:
          type: array
          description: 'List of acceptable write values for picklist-capable fields. Present **only when the request includes `?includeAllowedValues=true`** AND the field is one of:

            `ENUM`, `SYSTEM_ENUM`, `MULTI_ENUM`, `STRING_SYSTEM_ENUM`, or a `LOOKUP` targeting a system picklist module (e.g. `ticketstatus`, `ticketpriority`, `ticketcategory`, `tickettype`).

            Each entry uses `{label, value}`; the `value` is the canonical form accepted by create/update payloads.

            '
          items:
            type: object
            properties:
              label:
                type: string
                description: Display label as shown in the UI
              value:
                type: string
                description: Canonical value accepted by create/update for this field and filtering
    User:
      type: object
      description: 'Expanded object for lookups to the `users` module.

        On list API, user lookups return `{id}` only unless `?expand=` includes that field.

        When expanded (single-record GET, create/update responses, or list with `expand`): fixed set `id`, `name`, `email`, `phone` (see **Lookup fields in responses**).

        '
      properties:
        id:
          type: integer
          format: int64
          description: User ID
        name:
          type: string
          description: User's full name
        email:
          type: string
          description: User's email address
        phone:
          type: string
          description: Phone number when present
    Error:
      type: object
      description: Error response
      properties:
        success:
          type: boolean
          example: false
        error:
          type: object
          properties:
            code:
              type: string
              description: Machine-readable error code
            message:
              type: string
              description: Human-readable error message
  securitySchemes:
    apiKey:
      type: apiKey
      in: header
      name: x-api-key
      description: Personal access token
    oauth2:
      type: oauth2
      description: Supports authorization_code and password grant types
      flows:
        authorizationCode:
          authorizationUrl: https://us.facilioapis.com/identity/oauth2/authorize
          tokenUrl: https://us.facilioapis.com/identity/oauth2/token
          refreshUrl: https://us.facilioapis.com/identity/oauth2/token
          scopes: {}
        password:
          tokenUrl: https://us.facilioapis.com/identity/oauth2/token
          refreshUrl: https://us.facilioapis.com/identity/oauth2/token
          scopes: {}