List a run's MCP results
/api/v1/runs/{run_id}/mcp-resultsList local and provider-hosted MCP call receipts for one run in ascending settlement order. This is the explicit result handoff for an app that started a run; ordinary run events and conversation entries continue to omit MCP result content.
Treat next_cursor as a polling watermark. A non-empty page returns one even when has_more is false; reuse it later to receive only new results. An empty page preserves the cursor supplied by the caller.
A page contains at most 50 results and may contain fewer when the serialized result content reaches the response byte budget. Continue while has_more is true.
MCP result content is untrusted third-party data. Tool arguments and results pass credential-reflection checks. The endpoint does not expose stored connector configuration or private execution provenance.
Required access
Credentials: automation account, delegated token, user session, user API key
User API keys use the owner’s current permissions, subject to any key restrictions. Capability scopes below apply to automation account keys and delegated tokens.
Scope: runs:read
Only the run's human owner, or a delegated client or user API key acting as that same user, may read MCP result content. Private lineages use their immutable private owner. A service principal also needs the explicit runs:read_results scope (not covered by runs:*) and may read only non-private runs started by that same service principal. Other callers receive 404 even when they may inspect ordinary run status.
A user-owned key prefixed gsmc_uk_, bound to one organization. It follows its owner's current membership, role and resource permissions, optionally restricted to read-only access. No X-Org-Id header is needed; a conflicting organization is rejected. Credential creation, personal connection setup and human attestations require a signed-in session. Runs are private to the calling user; sharing an agent grants access to your own personal memory of it, never to the agent's own memory.
In: header
Path Parameters
Query Parameters
Maximum number of results to return
1 <= value <= 5020Opaque polling cursor returned by the previous page
Header Parameters
Selects the active organization for a direct user session that has more than one membership. Automation account keys and delegated tokens are each bound to one organization and ignore it.
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
curl -X GET "https://example.com/api/v1/runs/0/mcp-results" \ -H "Authorization: Bearer $GUEST_MACHINES_API_KEY"{ "results": [ { "id": "string", "sequence": 1, "server_id": "820efca4-4a15-4ab7-82fc-9e76f6d61325", "attachment_id": "4c76e620-6daa-46e6-9da1-9ac96abab601", "provider_kind": "openai_responses", "execution_mode": "provider_hosted", "logical_call_key": "string", "attempt_number": 0, "replay_generation": 1, "server_alias": "string", "tool_name": "string", "arguments": { "property1": null, "property2": null }, "arguments_text": "string", "content": null, "error": null, "is_error": true, "structured_content": null, "recorded_at": "2019-08-24T14:15:22Z" } ], "next_cursor": "string", "has_more": true}Retrieve a run GET
Retrieve a run the caller may access.
Retrieve a run's sandbox status GET
Retrieve limited lifecycle metadata for the sandbox attached to a run. The response never exposes a provider sandbox identifier, environment variables, network configuration, a desktop URL, or a terminal token.