Skip to content

Get artifact

GET
/api/v1/artifacts/{artifact_id}

Inspect immutable artifact metadata and current availability.

Credential scopes: artifacts:read

Resource authority: Artifact creator, or current administrator of a run that produced or accepted the exact artifact dependency. Unrelated standalone uploads remain private.

Retry: Repeat GET using the same resource identity; each request rechecks current credential and resource authority.

Guards: Knowing an artifact UUID grants no authority.

Retain: Artifact UUID and published version/size/SHA-256; never retain capability URLs.

Specific failures: 403 insufficient_scope; 404 not_found: missing or unauthorized artifact; 503 artifact_unavailable

Next action: Use content only when ready; keep immutable identities. Worked workflow

artifact_id
required
string format: uuid

Artifact identity readable by its creator or a current administrator of an accepting/producing run.

Immutable metadata, current availability and optional verified content evidence. No storage keys or temporary URLs.

Media typeapplication/json
object
artifact_id
required
string format: uuid
availability
required

Metadata availability is separate from a producing run’s historical outcome. Ready means an exact version was verified and published. HTTP downloads and file-input authorization remain separate operations.

string
Allowed values: pending ready unavailable expired
availability_updated_at
required
string
created_at
required

UTC with PostgreSQL microsecond precision.

string
created_by_user_id
required
string format: uuid
description
required

Description supplied by trusted application code; ownership is never supplied. Scientific metadata uses the same bounded, exact JSON storage profile as inputs.

object
logical_name
required
string
media_type
required

A bare type/subtype, without parameters or wildcards.

string
scientific_metadata
required

An object of scientific annotations, not executable schema/file instructions.

storage_destination_id
required

An opaque service-selected destination identity, not a storage URL.

string
provenance
required
One of:
object
kind
required
string
Allowed values: user_upload
content
One of:
null
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

Query parameters are not accepted.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

Active user credential required.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

The credential does not permit this operation (insufficient_scope).

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

Invalid, unknown or unauthorized artifact; unrelated standalone uploads remain private.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

413: the request body exceeds the configured size limit.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

Artifact records unavailable.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

An HTTP request failed; inspect the stable error code and request ID.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

Documentation 205dcb3116ea · public sources 8c70356d340f · built .Download documentation identity.