Get session

curl --request GET \
  --url https://api.recursion.labelbox.com/managed-agents/v1/sessions/{session_id} \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.recursion.labelbox.com/managed-agents/v1/sessions/{session_id}"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.recursion.labelbox.com/managed-agents/v1/sessions/{session_id}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.recursion.labelbox.com/managed-agents/v1/sessions/{session_id}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.recursion.labelbox.com/managed-agents/v1/sessions/{session_id}"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.recursion.labelbox.com/managed-agents/v1/sessions/{session_id}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "access_policy": "admin_only",
  "active_handoff": {
    "access_expires_at": "2026-02-18T09:30:00.000Z",
    "deadline_at": "2026-02-18T09:30:00.000Z",
    "handoff_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
    "reason": "example",
    "requested_at": "2026-02-18T09:30:00.000Z",
    "state": "awaiting_user",
    "wake_cause": "example"
  },
  "agent_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "agent_snapshot": {
    "key": "example"
  },
  "agent_version_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "computer_use": true,
  "concurrency_slot_held": true,
  "config": {
    "key": "example"
  },
  "created_at": "2026-02-18T09:30:00.000Z",
  "credential_refs": [
    {
      "credential_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
      "vault_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d"
    }
  ],
  "credential_refs_configured": true,
  "effective_model": "example",
  "environment_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "execution_state": "provisioning",
  "external_source_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "external_source_type": "example",
  "failure": {
    "at": "2026-02-18T09:30:00.000Z",
    "category": "transient",
    "code": "example",
    "message": "example",
    "phase": "example",
    "retryable": true
  },
  "forked_at_event_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "kind": "api_call",
  "last_activity_at": "2026-02-18T09:30:00.000Z",
  "metadata": {
    "key": "example"
  },
  "model_ref_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "model_snapshot": {
    "key": "example"
  },
  "organization_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "parent_session_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "root_session_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "sandbox_instance_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "sandbox_provider": "example",
  "session_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "session_path": "example",
  "source_refs": {
    "key": "example"
  },
  "status": "active",
  "stop_reason": "example",
  "tenant_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "updated_at": "2026-02-18T09:30:00.000Z",
  "user_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "vault_ids": [
    "example"
  ],
  "wake_at": "2026-02-18T09:30:00.000Z"
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "forbidden",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "bad_gateway",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "gateway_timeout",
  "message": "<string>",
  "details": {}
}

GET

managed-agents

sessions

{session_id}

Get session

curl --request GET \
  --url https://api.recursion.labelbox.com/managed-agents/v1/sessions/{session_id} \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.recursion.labelbox.com/managed-agents/v1/sessions/{session_id}"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.recursion.labelbox.com/managed-agents/v1/sessions/{session_id}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.recursion.labelbox.com/managed-agents/v1/sessions/{session_id}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.recursion.labelbox.com/managed-agents/v1/sessions/{session_id}"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.recursion.labelbox.com/managed-agents/v1/sessions/{session_id}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "access_policy": "admin_only",
  "active_handoff": {
    "access_expires_at": "2026-02-18T09:30:00.000Z",
    "deadline_at": "2026-02-18T09:30:00.000Z",
    "handoff_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
    "reason": "example",
    "requested_at": "2026-02-18T09:30:00.000Z",
    "state": "awaiting_user",
    "wake_cause": "example"
  },
  "agent_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "agent_snapshot": {
    "key": "example"
  },
  "agent_version_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "computer_use": true,
  "concurrency_slot_held": true,
  "config": {
    "key": "example"
  },
  "created_at": "2026-02-18T09:30:00.000Z",
  "credential_refs": [
    {
      "credential_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
      "vault_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d"
    }
  ],
  "credential_refs_configured": true,
  "effective_model": "example",
  "environment_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "execution_state": "provisioning",
  "external_source_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "external_source_type": "example",
  "failure": {
    "at": "2026-02-18T09:30:00.000Z",
    "category": "transient",
    "code": "example",
    "message": "example",
    "phase": "example",
    "retryable": true
  },
  "forked_at_event_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "kind": "api_call",
  "last_activity_at": "2026-02-18T09:30:00.000Z",
  "metadata": {
    "key": "example"
  },
  "model_ref_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "model_snapshot": {
    "key": "example"
  },
  "organization_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "parent_session_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "root_session_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "sandbox_instance_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "sandbox_provider": "example",
  "session_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "session_path": "example",
  "source_refs": {
    "key": "example"
  },
  "status": "active",
  "stop_reason": "example",
  "tenant_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "updated_at": "2026-02-18T09:30:00.000Z",
  "user_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "vault_ids": [
    "example"
  ],
  "wake_at": "2026-02-18T09:30:00.000Z"
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "forbidden",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "bad_gateway",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "gateway_timeout",
  "message": "<string>",
  "details": {}
}

Authorizations

Authorization

string

header

required

A Recursion API key, created in the console under API keys.

Path Parameters

session_id

string<uuid>

required

Session id (UUID) as returned by startSession or listSessions.

Query Parameters

view

enum<string>

full (default) returns the whole session. summary omits agent_snapshot, model_snapshot and config — written once at start and never changed — which a poller that already holds them should ask for: they are most of the row's bytes.

Available options:

full,

summary

Response

One durable agent run: its lifecycle status (active, awaiting_human, completed, failed, cancelled), the agent version, environment, model, and credentials it was pinned to, and its place in a multi-agent tree. Returned when starting, reading, or listing sessions; imported RL rollouts appear as sessions too and run no agent loop.

computer_use

boolean

required

Whether this session has a computer-enabled environment and a display that passed its readiness probe.

config

object | null

required

Resolved per-session runtime settings written at start, including the snapshotted MCP servers and tool bindings, multi-agent roster, and delegation depth limits. Read-only to callers.

Show child attributes

created_at

string<date-time>

required

RFC 3339 timestamp of when this record was created. Server-assigned.

credential_refs

object[] | null

required

Explicit allowlist of individual credentials the session may use. Read credential_refs_configured to tell an intentionally empty allowlist from a legacy session granted whole vaults.

Show child attributes

credential_refs_configured

boolean

required

True when credential_refs is an explicit allowlist. False on legacy sessions granted every credential in their vaults, which would otherwise be indistinguishable from an empty allowlist.

kind

enum<string>

required

What produced the session: api_call, chat, rollout (an imported RL rollout), subagent (delegated by another session), benchmark, evaluation (a platform-started evaluation run over other session snapshots), reflection (a platform-started memory consolidation), or session_analyst (a platform-started read-only assistant that answers questions about another session tree).

Available options:

api_call,

chat,

rollout,

subagent,

benchmark,

evaluation,

reflection,

session_analyst

organization_id

string

required

Organization that owns this record. Resolved from the API key; never accepted from the caller.

root_session_id

string

required

Root session of the multi-agent tree this session belongs to (UUID). Equal to session_id for a root session.

session_id

string

required

Identifier for this session (UUID). Server-assigned.

session_path

string

required

Position of this session within its tree, as a slash-delimited path of session ids. "/" for a root session.

status

enum<string>

required

Coarse session state shared with RL rollout imports: active, awaiting_human (for a rollout, carries no score), completed, failed, or cancelled. For where a running agent loop is, read execution_state instead.

Available options:

active,

awaiting_human,

completed,

failed,

cancelled

Example:

"active"

updated_at

string<date-time>

required

RFC 3339 timestamp of the last change to this record. Server-assigned.

access_policy

enum<string>

Explicit access classification. Omitted/null is the ordinary behavior. admin_only requires elevated classified-data access and the current Admin organization role on public APIs. platform_internal is the service's own session over this organization's data: it is readable in-organization when addressed directly, but list and gestalt views include it only for callers with elevated classified-data access.

Available options:

admin_only,

platform_internal

active_handoff

object

Current browser handoff, including its exclusive driver claim and deadline. Absent when no browser handoff is active. Never contains the short-lived access URL.

Show child attributes

Example:

{
  "access_expires_at": "2026-02-18T09:30:00.000Z",
  "deadline_at": "2026-02-18T09:30:00.000Z",
  "handoff_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "reason": "example",
  "requested_at": "2026-02-18T09:30:00.000Z",
  "state": "awaiting_user",
  "wake_cause": "example"
}

agent_id

string

Agent this session runs (UUID). Empty for imported sessions that were not started from an agent.

agent_snapshot

object

The agent version's definition as it stood when the session started, frozen so later edits to the agent cannot change this session's behavior.

Show child attributes

agent_version_id

string

Agent version this session runs (UUID), pinned at start so a later edit to the agent cannot change a running session.

concurrency_slot_held

boolean

Whether this root session currently occupies the agent's max_concurrent_sessions slot. True while admitted and non-terminal. False exclusively while an active queued root waits to start. Omitted for unlimited agents, child sessions, legacy rows, and terminal or deleted sessions.

effective_model

string

Provider-qualified model string frozen for this session, including any per-session model override. Prefer this over resolving model_ref_id or the current agent version when displaying what actually ran.

environment_id

string

Environment whose sandbox definition this session runs in (UUID).

execution_state

enum<string>

Where the agent loop is. Empty for sessions without a loop, such as imported rollouts. provisioning normally clears in under a minute and is bounded: a sandbox that does not become ready within the deployment's compute-ready timeout (five minutes by default) fails the session with sandbox_provision_timeout, so a session is never stuck here indefinitely. This field, read from the session itself, is the authoritative status -- a session's event stream is written on a separate path and can lag it, so an empty event list does not mean the session is still starting. When a session leaves provisioning by failing, failure carries the reason.

Available options:

provisioning,

queued,

running,

idle,

completed

external_source_id

string

Identifier of the session's counterpart in the external_source_type system, so a caller can find the session again from that side. Set together with external_source_type.

external_source_type

string

Kind of external system this session is correlated to, e.g. slack_thread. Set together with external_source_id and filterable when listing sessions.

failure

object

Structured terminal failure. Omitted for healthy sessions and legacy rows.

Show child attributes

Example:

{
  "at": "2026-02-18T09:30:00.000Z",
  "category": "transient",
  "code": "example",
  "message": "example",
  "phase": "example",
  "retryable": true
}

forked_at_event_id

string

Event in the parent session (UUID) this session was forked from, so the fork's starting context is identifiable. Set only on forks.

last_activity_at

string<date-time>

RFC 3339 timestamp of when the agent loop last made progress. Distinct from updated_at, which any metadata write touches. Absent for sessions that run no loop.

metadata

object

Caller-defined string key/value pairs supplied when the session was started, e.g. ids from your own system. Immutable, present on root sessions only, and filterable with metadata=key:value or metadata_key=key on GET /v1/sessions. At most 32 entries; keys use letters, digits, '_', '.', and '-' up to 64 characters; values are 1-512 characters.

Show child attributes

model_ref_id

string

Model reference the session's turns run on (UUID), resolved at start from the agent version or the start request.

model_snapshot

object

The resolved model reference and inference settings as they stood when the session started, frozen for the same reason as agent_snapshot.

Show child attributes

parent_session_id

string

Session that created this one (UUID) — the delegating session for a subagent, or the source session for a fork. Empty on a root session.

sandbox_instance_id

string

Provider-assigned id of the sandbox instance serving this session. Empty before provisioning finishes; historical self_hosted sessions may also have no instance id.

sandbox_provider

string

Sandbox runtime that provisioned this session's compute, from the supported sandbox providers list.

source_refs

object

Secondary provenance ids from the originating system beyond the primary external source, e.g. an imported rollout's problem, problem-version, and run ids.

Show child attributes

stop_reason

string

Why the loop is not running. Set whenever execution_state is idle or completed. sleeping means the agent chose to wait and the session resumes on the next message or at wake_at; awaiting_subagents means a coordinator is waiting on delegated work.

tenant_id

string

Data-residency tenant the session's content is stored under, resolved from the request scope. A child session inherits its parent's value.

user_id

string

User the session was started on behalf of, resolved from the request scope. Empty for sessions started by a service credential.

vault_ids

string[]

Vaults (UUIDs) the session may draw credentials from. Combine with credential_refs to narrow the grant to specific credentials.

wake_at

string<date-time>

RFC 3339 timestamp at which a sleeping session wakes itself if nobody messages it first. Absent unless the agent scheduled a timed wait.

API reference

Endpoints

Get session

Authorizations

Path Parameters

Query Parameters

Response