List your remote-asset imports
/api/v1/artifacts/importsList up to 100 import jobs per page with status, attempts, safe provenance, and published artifact IDs. Source URLs and credentials are never included.
Required access
Credentials: automation account, delegated token, user session, user API key
User API keys use the owner’s current permissions, subject to any key restrictions. Capability scopes below apply to automation account keys and delegated tokens.
Scope: runs:read
Only jobs owned by this exact calling identity in the active organization are returned; administrator status does not broaden access.
A user-owned key prefixed gsmc_uk_, bound to one organization. It follows its owner's current membership, role and resource permissions, optionally restricted to read-only access. No X-Org-Id header is needed; a conflicting organization is rejected. Credential creation, personal connection setup and human attestations require a signed-in session. Runs are private to the calling user; sharing an agent grants access to your own personal memory of it, never to the agent's own memory.
In: header
Query Parameters
1 <= value <= 100500 <= value <= 100000Header Parameters
Selects the active organization for a direct user session that has more than one membership. Automation account keys and delegated tokens are each bound to one organization and ignore it.
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
curl -X GET "https://example.com/api/v1/artifacts/imports" \ -H "Authorization: Bearer $GUEST_MACHINES_API_KEY"{ "imports": [ { "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "status": "queued", "source_kind": "url", "source_run_id": 0, "source_result_sequence": 0, "artifact_id": "b7bd6bbb-c7f1-4314-8742-2aeeeece9d12", "file_name": "string", "max_bytes": 0, "expected_media_type": "string", "expected_sha256": "string", "description": "string", "attempts": 0, "error_code": "string", "created_at": "2019-08-24T14:15:22Z", "updated_at": "2019-08-24T14:15:22Z", "completed_at": "2019-08-24T14:15:22Z" } ], "total": 0}Upload an artifact POST
Upload one immutable artifact for later attachment to a run. Send the file bytes directly as `application/octet-stream`; do not wrap them in JSON, base64, or multipart form data. A `201` means the server received exactly `X-Upload-Size` bytes, verified `X-Content-SHA256`, stored the bytes, and made the returned artifact ready for use.
Import a remote asset POST
Queue an HTTPS download with a byte limit and return its import job. Choose an explicit URL or an exact JSON pointer into an immutable MCP result payload. A 202 means the job was saved, not that the file is ready. Poll the job until it succeeds and returns an `artifact_id`.