Create an artifact download URL
/api/v1/artifacts/{artifact_id}/download-urlCreate an artifact download URL
The returned URL is short-lived and carries its own authorization. Fetch it without an Authorization header, and request a fresh one instead of storing it.
When the artifact has download_only=true, the URL forces attachment disposition and application/octet-stream; clients must not fetch it into an inline viewer.
Required access
Credentials: automation account, delegated token, user session, user API key
User API keys use the owner’s current permissions, subject to any key restrictions. Capability scopes below apply to automation account keys and delegated tokens.
Scope: runs:read
Run-produced output is authorized through its producing run. Caller uploads are authorized through their private owner or organization-shared visibility.
A user-owned key prefixed gsmc_uk_, bound to one organization. It follows its owner's current membership, role and resource permissions, optionally restricted to read-only access. No X-Org-Id header is needed; a conflicting organization is rejected. Credential creation, personal connection setup and human attestations require a signed-in session. Runs are private to the calling user; sharing an agent grants access to your own personal memory of it, never to the agent's own memory.
In: header
Path Parameters
uuidHeader Parameters
Selects the active organization for a direct user session that has more than one membership. Automation account keys and delegated tokens are each bound to one organization and ignore it.
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/api/v1/artifacts/497f6eca-6276-4993-bfeb-53cbbbba6f08/download-url" \ -H "Authorization: Bearer $GUEST_MACHINES_API_KEY"{ "artifact_id": "b7bd6bbb-c7f1-4314-8742-2aeeeece9d12", "url": "string", "expires_at": "2019-08-24T14:15:22Z"}