---
title: "Get Agent Profile"
method: GET
path: "/agents/v2/agent-profiles/{profileId}"
tags: ["Agent Profiles"]
deprecated: true
---

# Get Agent Profile

`GET /agents/v2/agent-profiles/{profileId}`

## Request

- Base URL: `https://odyssey.asteroid.ai`
- URL: `https://odyssey.asteroid.ai/agents/v2/agent-profiles/{profileId}`
- Auth: API key in header `X-Api-Key`

> **Deprecated.**

Get an agent profile by ID

## Path parameters

- `profileId` string, uuid, required

## Response `200`

The request has succeeded.

- AgentsProfileAgentProfile: An agent profile: who an agent signs in as. Credentials, cookies and an inbox. The environment it runs on is the workflow's choice.
  - `cookies` AgentsProfileCookie[], required
    - `createdAt` string, date-time
    - `domain` string, required
    - `expiry` string, date-time
    - `httpOnly` boolean, required: Whether the cookie should be accessible only via HTTP(S)
    - `id` string, uuid
    - `key` string, required: The cookie key/name as sent in HTTP headers
    - `name` string, required
    - `sameSite` 'Strict' | 'Lax' | 'None', required: SameSite attribute for cookies
    - `secure` boolean, required: Whether the cookie should only be sent over HTTPS
    - `value` string, required
  - `createdAt` string, date-time, required
  - `credentials` AgentsProfileCredential[], required: Deprecated: Use vaultItems instead. Legacy credential names mirrored from attached vault items (legacyName). Prefer vaultItems; ##NAME## remains a grace-period alias.
    - `createdAt` string, date-time
    - `data` string, required: The credential value (plaintext - will be encrypted server-side)
    - `id` string, uuid
    - `name` string, required: Display name for the credential (will be uppercased)
  - `description` string, required
  - `fingerprintId` string, nullable: Anchor browser fingerprint ID applied at session create (admin only). Absent or null when unset.
  - `id` string, uuid, required
  - `inboxEmail` string, required: The resolved inbox email address for this profile
  - `inboxEmailPrefix` string: Optional custom prefix for the agent's inbox email address. If set, the inbox will be {prefix}@agentmail.asteroid.ai. If not set, defaults to the first 8 characters of the profile ID.
  - `name` string, required: Name of the agent profile (unique within organization)
  - `organizationId` string, uuid, required
  - `stickyIP` boolean, required: Whether browser runs on this profile egress from one dedicated IP. Applies when the environment uses the managed proxy or no proxy.
  - `tracingEnabled` boolean, required: Whether browser tracing is enabled (admin only)
  - `updatedAt` string, date-time, required
  - `vaultItems` AgentsProfileAgentProfileVaultItemRef[], required: Org vault items attached to this profile. Deleted items are omitted.
    - `fields` AgentsProfileAgentProfileVaultItemFieldRef[], required
      - `key` string, required: UPPER_SNAKE field key, unique within a template or item.
      - `legacyPlaceholder` string: Legacy ##NAME## placeholder when this field was mirrored from an older profile credential.
      - `placeholder` string, required: Canonical placeholder, e.g. ##MY_PORTAL.USERNAME##
      - `type` 'username' | 'email' | 'url' | 'phone' | 'text' | 'password' | 'hidden' | 'totp_seed' | 'api_key' | 'card_number' | 'card_expiry' | 'card_cvv' | 'cardholder_name', required: Type of a vault field. Sensitivity is derived from the type: username, email, url, phone, text, card_expiry, and cardholder_name are readable; password, hidden, totp_seed, api_key, card_number, and card_cvv are write-only. There is no separate hidden flag.
    - `id` string, uuid, required
    - `itemKey` string, required: UPPER_SNAKE vault item key. Derived from name when omitted on create. Unique among a profile's attached items, not across the organisation. Stays the same across renames.
    - `kind` 'login' | 'api_key' | 'card' | 'custom', required: Kind of vault item. Templates and items need at least one field. Completeness is per-field required.
    - `name` string, required

## Other responses

- `400`: The server could not understand the request due to invalid syntax.
- `401`: Access is unauthorized.
- `403`: Access is forbidden.
- `404`: The server cannot find the requested resource.
- `500`: Server error

---

[API](https://skmtc.dev/asteroid/apis/agent-service.md) - [All operations](https://skmtc.dev/asteroid/apis/agent-service/llms.txt) - [OpenAPI document](https://skmtc.dev/asteroid/apis/agent-service/revisions/ccc134d1d510?raw)