---
title: "List Agent Profiles"
method: GET
path: "/agents/v2/agent-profiles"
tags: ["Agent Profiles"]
deprecated: true
---

# List Agent Profiles

`GET /agents/v2/agent-profiles`

## Request

- Base URL: `https://odyssey.asteroid.ai`
- URL: `https://odyssey.asteroid.ai/agents/v2/agent-profiles`
- Auth: API key in header `X-Api-Key`

> **Deprecated.**

List all agent profiles for an organization

## Query parameters

- `organizationId` string, uuid
- `pageSize` integer
- `page` integer
- `searchName` string
- `sortField` 'name' | 'created_at' | 'updated_at': Available fields for sorting agent profiles
- `sortDirection` 'asc' | 'desc'

## Response `200`

The request has succeeded.

- object
  - `items` AgentsProfileAgentProfile[], required
    - `cookies` AgentsProfileCookie[], required
      - `createdAt` string, date-time
      - `domain` string, required
      - `expiry` string, date-time
      - `httpOnly` boolean, required: Whether the cookie should be accessible only via HTTP(S)
      - `id` string, uuid
      - `key` string, required: The cookie key/name as sent in HTTP headers
      - `name` string, required
      - `sameSite` 'Strict' | 'Lax' | 'None', required: SameSite attribute for cookies
      - `secure` boolean, required: Whether the cookie should only be sent over HTTPS
      - `value` string, required
    - `createdAt` string, date-time, required
    - `credentials` AgentsProfileCredential[], required: Deprecated: Use vaultItems instead. Legacy credential names mirrored from attached vault items (legacyName). Prefer vaultItems; ##NAME## remains a grace-period alias.
      - `createdAt` string, date-time
      - `data` string, required: The credential value (plaintext - will be encrypted server-side)
      - `id` string, uuid
      - `name` string, required: Display name for the credential (will be uppercased)
    - `description` string, required
    - `fingerprintId` string, nullable: Anchor browser fingerprint ID applied at session create (admin only). Absent or null when unset.
    - `id` string, uuid, required
    - `inboxEmail` string, required: The resolved inbox email address for this profile
    - `inboxEmailPrefix` string: Optional custom prefix for the agent's inbox email address. If set, the inbox will be {prefix}@agentmail.asteroid.ai. If not set, defaults to the first 8 characters of the profile ID.
    - `name` string, required: Name of the agent profile (unique within organization)
    - `organizationId` string, uuid, required
    - `stickyIP` boolean, required: Whether browser runs on this profile egress from one dedicated IP. Applies when the environment uses the managed proxy or no proxy.
    - `tracingEnabled` boolean, required: Whether browser tracing is enabled (admin only)
    - `updatedAt` string, date-time, required
    - `vaultItems` AgentsProfileAgentProfileVaultItemRef[], required: Org vault items attached to this profile. Deleted items are omitted.
      - `fields` AgentsProfileAgentProfileVaultItemFieldRef[], required
        - `key` string, required: UPPER_SNAKE field key, unique within a template or item.
        - `legacyPlaceholder` string: Legacy ##NAME## placeholder when this field was mirrored from an older profile credential.
        - `placeholder` string, required: Canonical placeholder, e.g. ##MY_PORTAL.USERNAME##
        - `type` 'username' | 'email' | 'url' | 'phone' | 'text' | 'password' | 'hidden' | 'totp_seed' | 'api_key' | 'card_number' | 'card_expiry' | 'card_cvv' | 'cardholder_name', required: Type of a vault field. Sensitivity is derived from the type: username, email, url, phone, text, card_expiry, and cardholder_name are readable; password, hidden, totp_seed, api_key, card_number, and card_cvv are write-only. There is no separate hidden flag.
      - `id` string, uuid, required
      - `itemKey` string, required: UPPER_SNAKE vault item key. Derived from name when omitted on create. Unique among a profile's attached items, not across the organisation. Stays the same across renames.
      - `kind` 'login' | 'api_key' | 'card' | 'custom', required: Kind of vault item. Templates and items need at least one field. Completeness is per-field required.
      - `name` string, required
  - `page` integer, required
  - `pageSize` integer, required
  - `total` integer, required

## Other responses

- `400`: The server could not understand the request due to invalid syntax.
- `401`: Access is unauthorized.
- `403`: Access is forbidden.
- `404`: The server cannot find the requested resource.
- `500`: Server error

---

[API](https://skmtc.dev/asteroid/apis/agent-service.md) - [All operations](https://skmtc.dev/asteroid/apis/agent-service/llms.txt) - [OpenAPI document](https://skmtc.dev/asteroid/apis/agent-service/revisions/ccc134d1d510?raw)