diff --git a/backend/app/api/v1/tasks.py b/backend/app/api/v1/tasks.py
new file mode 100644
index 0000000..b107c7a
--- /dev/null
+++ b/backend/app/api/v1/tasks.py
@@ -0,0 +1,102 @@
+"""Task endpoints."""
+from fastapi import APIRouter, Depends, HTTPException
+from sqlalchemy.orm import Session
+from typing import List, Optional
+from app.database import get_db
+from app.schemas.task import (
+    TaskCreate, TaskUpdate, TaskAssign, TaskExecute, TaskResponse, TaskExecutionResult,
+)
+from app.services.task_service import TaskService
+from app.services.execution_service import ExecutionService
+from app.api.deps import get_current_user, require_roles
+from app.core.permissions import Role
+from app.models.user import User
+
+router = APIRouter(prefix="/tasks")
+
+
+@router.get("", response_model=List[TaskResponse])
+def list_tasks(
+    project_id: Optional[int] = None,
+    status: Optional[str] = None,
+    assignee_id: Optional[int] = None,
+    skip: int = 0, limit: int = 100,
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db),
+):
+    return TaskService.list_tasks(db, user.tenant_id, project_id, status, assignee_id, skip, limit)
+
+
+@router.post("", response_model=TaskResponse, status_code=201)
+def create_task(
+    project_id: int,
+    req: TaskCreate,
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db),
+):
+    return TaskService.create_task(db, user.tenant_id, project_id, req)
+
+
+@router.get("/{task_id}", response_model=TaskResponse)
+def get_task(
+    task_id: int,
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db),
+):
+    t = TaskService.get_task(db, user.tenant_id, task_id)
+    if not t:
+        raise HTTPException(status_code=404, detail="Task not found")
+    return t
+
+
+@router.put("/{task_id}", response_model=TaskResponse)
+def update_task(
+    task_id: int,
+    req: TaskUpdate,
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db),
+):
+    try:
+        return TaskService.update_task(db, user.tenant_id, task_id, req)
+    except ValueError as e:
+        raise HTTPException(status_code=404, detail=str(e))
+
+
+@router.delete("/{task_id}")
+def delete_task(
+    task_id: int,
+    user: User = Depends(require_roles(Role.SUPER_ADMIN, Role.TENANT_ADMIN, Role.PROJECT_MANAGER)),
+    db: Session = Depends(get_db),
+):
+    if TaskService.delete_task(db, user.tenant_id, task_id):
+        return {"success": True, "message": f"Task #{task_id} deleted"}
+    raise HTTPException(status_code=404, detail="Task not found")
+
+
+@router.post("/{task_id}/assign", response_model=TaskResponse)
+def assign_task(
+    task_id: int,
+    req: TaskAssign,
+    user: User = Depends(require_roles(Role.SUPER_ADMIN, Role.TENANT_ADMIN, Role.PROJECT_MANAGER)),
+    db: Session = Depends(get_db),
+):
+    try:
+        return TaskService.assign_task(db, user.tenant_id, task_id, req)
+    except ValueError as e:
+        raise HTTPException(status_code=404, detail=str(e))
+
+
+@router.post("/{task_id}/execute", response_model=TaskExecutionResult)
+def execute_task(
+    task_id: int,
+    req: TaskExecute,
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db),
+):
+    try:
+        return ExecutionService.execute(
+            db, user.tenant_id, task_id, req.override_input
+        )
+    except Exception as e:
+        status_code = getattr(e, 'status_code', 500)
+        raise HTTPException(status_code=status_code, detail=str(e))