# flow2act · Generate a draft with AI

Suggest a validated document. An administrator must review and save it explicitly.

DeutschlandGPT uses a verified EU-hosted configured model. Supports approval, acknowledgment, notification, document fields and approved/rejected/completed ends. This does not publish or execute anything.

AI is disabled by default per organization and environment. An administrator must explicitly enable external AI processing under Organization → Privacy. Never include credentials or confidential personal information. Local keyword search remains available with smart=false.

## POST /v1/ai/flow-suggestions

Authentication: FLOW2ACT_ACCESS_TOKEN from flow2act sign-in
Required tenant header: X-Organization-Id.
Required user permissions: Administrator or Sandbox developer required. The API checks current membership, roles, key scopes and resource permissions on every request. Documentation visibility grants no access.

## Input parameters
- prompt (string, required): min length 12 · max length 3000
- locale (string, optional): en | de · default "en"

## Request example (replace example IDs)

```sh
curl -X POST "https://api.flow2act.com/v1/ai/flow-suggestions" \
  -H "authorization: Bearer $FLOW2ACT_ACCESS_TOKEN" \
  -H "x-organization-id: 10000000-0000-4000-8000-000000000001" \
  -H "content-type: application/json" \
  --data-raw '{
  "prompt": "Operations approves every production deployment. Ask for environment and release version.",
  "locale": "en"
}'
```

## Response excerpt

```json
{
  "questions": [],
  "warnings": []
}
```

Source: /docs/generate-flow
Full schemas: /docs/openapi.json