> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getcliq.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Get an artifact

> Returns an artifact's details and a fresh presigned download link, read from CliqHub.
Agents use it to open `cliq://artifacts/<id>` references from earlier phases.

No credential is needed from this machine. From another host, send `Authorization: Bearer` with a dispatch token CliqHub signed for this daemon or a `cliq_tok_…` personal token of a user in the daemon's realm; this only works once the daemon is connected to CliqHub. See [Authentication](/daemon-api/overview#authentication).



## OpenAPI

````yaml /openapi/daemon-by-tag/daemon-artifacts.yaml post /v1/artifacts/get_by_id
openapi: 3.1.0
info:
  title: cliqd API
  version: 1.9.48
  description: >-
    HTTP API of `cliqd`, the local Cliq daemon. Generated from the daemon source
    by `scripts/generate_daemon_openapi.mjs` — do not edit by hand. See the
    [overview](/daemon-api/overview).
servers:
  - url: http://127.0.0.1:4900
    description: Local daemon (default port; `CLIQ_DAEMON_PORT` changes it)
security: []
tags:
  - name: Daemon Artifacts
    description: >-
      Files a run produces (reports, patches, screenshots), stored by CliqHub.
      An agent uploads

      them through its daemon while the run is going; anyone who can see the run
      reads them

      from CliqHub. Both endpoints call CliqHub directly, so the daemon must be
      signed in.
paths:
  /v1/artifacts/get_by_id:
    post:
      tags:
        - Daemon Artifacts
      summary: Get an artifact
      description: >-
        Returns an artifact's details and a fresh presigned download link, read
        from CliqHub.

        Agents use it to open `cliq://artifacts/<id>` references from earlier
        phases.


        No credential is needed from this machine. From another host, send
        `Authorization: Bearer` with a dispatch token CliqHub signed for this
        daemon or a `cliq_tok_…` personal token of a user in the daemon's realm;
        this only works once the daemon is connected to CliqHub. See
        [Authentication](/daemon-api/overview#authentication).
      operationId: daemon_post_artifacts_get_by_id
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                artifact_id:
                  description: Hub artifact id
                  type:
                    - string
                    - number
              required:
                - artifact_id
              additionalProperties: {}
            examples:
              default:
                value:
                  artifact_id: 8f7e6d5c-4b3a-4291-8e7f-6a5b4c3d2e1f
      responses:
        '200':
          description: Success.
          content:
            application/json:
              schema:
                type: object
                required:
                  - ok
                  - data
                properties:
                  ok:
                    type: boolean
                    const: true
                  data:
                    $ref: '#/components/schemas/Artifact'
              example:
                ok: true
                data:
                  artifact_id: 8f7e6d5c-4b3a-4291-8e7f-6a5b4c3d2e1f
                  run_id: 0c8d7e6f-5a4b-4c3d-9e2f-1a0b9c8d7e6f
                  phase: review
                  name: review.md
                  description: Findings from the review phase
                  mime_type: text/markdown
                  size_bytes: 2048
                  download_url: https://files.cliqhub.io/a/8f7e6d5c?sig=…
                  created_at: 1759834480000
        '400':
          description: >-
            `PAYLOAD_INVALID` — The body (query string for `GET`) fails the
            request schema. `details` lists each issue.


            `BAD_REQUEST` — The body is not valid JSON or is larger than the
            route allows (10 MB; artifact uploads more).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorReply'
              examples:
                PAYLOAD_INVALID:
                  summary: PAYLOAD_INVALID
                  value:
                    ok: false
                    error:
                      code: PAYLOAD_INVALID
                      message: 'artifact_id: artifact_id is required'
                      details:
                        - path: artifact_id
                          message: artifact_id is required
                BAD_REQUEST:
                  summary: BAD_REQUEST
                  value:
                    ok: false
                    error:
                      code: BAD_REQUEST
                      message: >-
                        Request body could not be read: Unexpected token } in
                        JSON at position 12
        '401':
          description: >-
            `UNAUTHORIZED` — A caller on another host sent no `Authorization:
            Bearer` token, or one that does not verify (expired, wrong
            audience).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorReply'
              examples:
                UNAUTHORIZED:
                  summary: UNAUTHORIZED
                  value:
                    ok: false
                    error:
                      code: UNAUTHORIZED
                      message: Missing or invalid Authorization Bearer token
        '403':
          description: >-
            `WEB_REQUEST_REFUSED` — The request carries an `Origin` header (it
            came from a web page).


            `HOST_NOT_LOCAL` — A loopback caller addressed a `Host` other than
            localhost (DNS rebinding guard).


            `LOCAL_ONLY` — The daemon isn't connected to CliqHub (no dispatch
            key) and the caller is on another host.


            `FORBIDDEN` — A `cliq_tok_…` token's user is not in this daemon's
            realm ACL, or the ACL is not loaded yet.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorReply'
              examples:
                WEB_REQUEST_REFUSED:
                  summary: WEB_REQUEST_REFUSED
                  value:
                    ok: false
                    error:
                      code: WEB_REQUEST_REFUSED
                      message: cliqd doesn't accept requests from web pages
                HOST_NOT_LOCAL:
                  summary: HOST_NOT_LOCAL
                  value:
                    ok: false
                    error:
                      code: HOST_NOT_LOCAL
                      message: cliqd only answers requests addressed to localhost
                LOCAL_ONLY:
                  summary: LOCAL_ONLY
                  value:
                    ok: false
                    error:
                      code: LOCAL_ONLY
                      message: >-
                        This cliqd isn't connected to CliqHub yet, so from
                        another machine it only accepts a local token (minted by
                        tokens/create on the machine running cliqd)
                FORBIDDEN:
                  summary: FORBIDDEN
                  value:
                    ok: false
                    error:
                      code: FORBIDDEN
                      message: Access denied — identity not in realm ACL
        '404':
          description: >-
            `NOT_FOUND` — CliqHub has no artifact with this id, or the signed-in
            user cannot see its run.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorReply'
              examples:
                NOT_FOUND:
                  summary: NOT_FOUND
                  value:
                    ok: false
                    error:
                      code: NOT_FOUND
                      message: >-
                        Artifact '8f7e6d5c-4b3a-4291-8e7f-6a5b4c3d2e1f' not
                        found
        '422':
          description: '`HUB_NOT_CONFIGURED` — This daemon is not signed in to CliqHub.'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorReply'
              examples:
                HUB_NOT_CONFIGURED:
                  summary: HUB_NOT_CONFIGURED
                  value:
                    ok: false
                    error:
                      code: HUB_NOT_CONFIGURED
                      message: Hub session not configured — run `cliq login` first
        '500':
          description: >-
            `INTERNAL_ERROR` — CliqHub could not be reached, or another
            unexpected fault. The cause is in the cliqd log.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorReply'
              examples:
                INTERNAL_ERROR:
                  summary: INTERNAL_ERROR
                  value:
                    ok: false
                    error:
                      code: INTERNAL_ERROR
                      message: >-
                        cliqd hit an unexpected error (request 7f3a…). Details
                        are in the cliqd log.
        '502':
          description: >-
            `HUB_REQUEST_FAILED` — CliqHub refused the request for another
            reason.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorReply'
              examples:
                HUB_REQUEST_FAILED:
                  summary: HUB_REQUEST_FAILED
                  value:
                    ok: false
                    error:
                      code: HUB_REQUEST_FAILED
                      message: 'Hub artifacts/get_by_id failed: HTTP 403'
      security:
        - {}
        - DaemonBearer: []
components:
  schemas:
    Artifact:
      type: object
      required:
        - artifact_id
        - run_id
        - phase
        - name
        - description
        - mime_type
        - size_bytes
        - download_url
        - created_at
      properties:
        artifact_id:
          type: string
          example: 8f7e6d5c-4b3a-4291-8e7f-6a5b4c3d2e1f
        run_id:
          type: string
          format: uuid
          example: 0c8d7e6f-5a4b-4c3d-9e2f-1a0b9c8d7e6f
        phase:
          type: string
          example: review
        name:
          type: string
          example: review.md
        description:
          type:
            - string
            - 'null'
          example: Findings from the review phase
        mime_type:
          type: string
          example: text/markdown
        size_bytes:
          type: integer
          example: 2048
        download_url:
          type: string
          format: uri
          description: A fresh presigned download link.
          example: https://files.cliqhub.io/a/8f7e6d5c?sig=…
        created_at:
          type: integer
          format: int64
          description: Epoch milliseconds.
          example: 1759834480000
    ErrorReply:
      type: object
      description: >-
        Every failure. Switch on `error.code` — it is stable; `message` is for
        people and may change.
      required:
        - ok
        - error
      properties:
        ok:
          type: boolean
          const: false
        error:
          type: object
          required:
            - code
            - message
          properties:
            code:
              type: string
              description: Stable error code. See [Errors](/daemon-api/errors).
              example: TEAM_NOT_FOUND
            message:
              type: string
              description: What went wrong and, where possible, what to do.
              example: Team 'acme/code-review' not found
            details:
              description: >-
                Structured detail when there is some: the list of schema issues
                for `PAYLOAD_INVALID`, the agent problems for
                `TEAM_AGENT_CONFIG_REQUIRED`, …
  securitySchemes:
    DaemonBearer:
      type: http
      scheme: bearer
      description: >-
        Not needed from the same machine. From another host: a dispatch JWT
        CliqHub signed for this daemon, or a `cliq_tok_…` personal token whose
        user is in the daemon's realm.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.