Workflow actions
The steps you keep rebuilding, ready to drop in.
6 official actions with 48 functions — loan schedules and percentiles, slugs and fuzzy matching, business-day SLAs and fiscal periods, group-by and joins, IBAN and national ID checks, UUIDs and signed tokens. Install one and it appears in the workflow designer's Custom actions palette with a typed input panel, and its outputs show up in the data picker with their types.
Crypto & IDs
ut_crypto
UUID v4/v7 and ULIDs, SHA hashes, HMAC webhook signatures with a stored secret, base64/hex/URL encoding, random and one-time codes, and HS256 JWTs.
UUID · ULID · Hash · HMAC signature · Encode · Decode · +4 more
10 functions Uses secrets
Data transform
ut_data
Select by JSON path, map, filter, sort, group and aggregate, pivot, de-duplicate and join lists of records, and convert CSV to JSON and back.
Select (JSON path) · Map fields · Filter · Sort · Group & aggregate · Pivot · +5 more
11 functions Pure computation
Dates & business calendar
ut_dates
Business days around holidays, SLA due times in working hours across time zones and DST, durations and ages, recurring schedules and fiscal periods.
Add business days · SLA due time · Duration / age · Convert time zone · Next occurrences · Fiscal period
6 functions Pure computation
Math & statistics
ut_math
Safe formulas with variables, exact rounding, statistics and percentiles, compound interest, loan schedules and unit conversion in one workflow step.
Evaluate formula · Round · Statistics · Percentile · Compound interest · Loan schedule · +1 more
7 functions Pure computation
Text toolkit
ut_text
Slugs, case conversion, {{placeholder}} templates, truncation, extraction, fuzzy matching, word counts and masking for workflow text.
Slugify · Change case · Fill template · Truncate · Extract between · Similarity / fuzzy match · +2 more
8 functions Pure computation
Validation & formatting
ut_validate
Validate IBAN, BIC, cards, emails, phones, postcodes and national IDs with check digits; format and parse numbers, money and phone numbers by locale.
Validate · Validate many · Format number · Format currency · Parse number · Format phone
6 functions Pure computation
Security
Your workflow runs the code. It never touches your server.
Custom actions run tenant code, so they run it somewhere it cannot hurt anything:
A separate JavaScript engine
Each run gets a fresh QuickJS engine compiled to WebAssembly: no Node APIs, no process, environment, files, sockets, timers or database — only what the action is handed. Not node:vm, not new Function.
Hard limits
Memory and stack are capped per run, CPU is interrupted at the deadline (an endless loop stops), and every value crossing the boundary is JSON with a size limit.
Capabilities by approval
HTTP only to hosts the manifest declares and an administrator approves, through the egress guard. Data tables only as granted. Files only when given as inputs. Secrets only by declared name, encrypted at rest.
Versioned and signed
Every version is immutable with a SHA-256; gallery packages are signed with the UserTasks Gallery key. A kill switch turns an action off everywhere at once, and deleting one a workflow uses is refused.
Install
From the gallery to a running step in a minute
Step 1
Install
In the app: Extensibility → Workflow actions → Browse gallery (or Automations → Packages → Browse gallery → Workflow actions). Or download the .utpkg here and import it.
Step 2
Use
Drag the action from the designer's Custom actions palette, pick a function, fill its inputs with values or {{data}}. A sample workflow comes with every action.
Step 3
Test
Save & Test shows the typed outputs in the data panel and the run log (version, duration, host calls). Extensibility → Manage → Test runs one function on its own.
Need something else? Build any action with the starter kit and the @usertasks/action helper.