---
title: "List registered agent builds"
method: GET
path: "/projects/{projectId}/agent-builds"
---

# List registered agent builds

`GET /projects/{projectId}/agent-builds`

## Request

- Base URL: `https://api.caveman.so/api/v1`
- URL: `https://api.caveman.so/api/v1/projects/{projectId}/agent-builds`
- Auth: one of:
  - OAuth 2
    - Authorization code: `/api/v1/oauth/authorize`
    - Token URL: `/api/v1/oauth/token` scopes: `trace:read_metadata`
  - HTTP bearer
  - API key in cookie `cave_access`
  - API key in cookie `__Secure-cave_identity.session_token`

GET /api/v1/projects/{projectId}/agent-builds on the Caveman Cloud control plane. Requires the trace:read_metadata scope. Exposed to autonomous agents as the list action of the caveman_builds tool (read access). Registered agent builds, their evidence, and detected regressions.

## Response `200`

Newest 200 tenant-scoped builds

- object
  - `data` AgentBuild[], required
    - `agent_slug` string, required
    - `build_sha256` string, required
    - `plan_sha256` string, required
    - `source_sha256` string, required
    - `eval_suite_sha256` string, required
    - `catalog_sha256` string, required
    - `transform_registry_sha256` string, required
    - `harness` 'pi' | 'vercel-ai-sdk' | 'eve' | 'mastra', required: Cave Build v2 accepts only Pi. Cave Build v3 accepts exact native Pi behavioral builds plus baseline-equivalent generic Pi, Vercel AI SDK, Eve, and Mastra envelopes. Claude v3 fails closed until executable parity exists.
    - `adapter_version` string, required
    - `upstream_version` string, required
    - `runtime_version` string, required
    - `evidence_status` 'locked', required
    - `evidence_basis` 'inferred', required
    - `lock` object, required: Immutable Cave Build v2 or v3. V2 is Pi-only. V3 permits behavioral lowering only for the exact owned native Pi contract; generic targets remain baseline-equivalent. Runtime failure policy is abort-only. Server recomputes canonical digests, target identity, capabilities, plan-diff passes, validation economics, and policy_sha256.
    - `id` string, uuid, required
    - `project_id` string, uuid, required
    - `registered_by` string, uuid, required
    - `created_at` string, date-time, required
  - `next_cursor` string, nullable, required

## Other responses

- `4XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.
- `5XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.

---

[API](https://skmtc.dev/caveman/apis/caveman-cloud-api.md) - [All operations](https://skmtc.dev/caveman/apis/caveman-cloud-api/llms.txt) - [OpenAPI document](https://skmtc.dev/caveman/apis/caveman-cloud-api/revisions/508312d01cfc?raw)