---
title: "GET /projects/{projectId}/agent-runs/{runId}/evidence"
method: GET
path: "/projects/{projectId}/agent-runs/{runId}/evidence"
---

# GET /projects/{projectId}/agent-runs/{runId}/evidence

`GET /projects/{projectId}/agent-runs/{runId}/evidence`

## Request

- Base URL: `https://api.caveman.so/api/v1`
- URL: `https://api.caveman.so/api/v1/projects/{projectId}/agent-runs/{runId}/evidence`
- Auth: one of:
  - OAuth 2
    - Authorization code: `/api/v1/oauth/authorize`
    - Token URL: `/api/v1/oauth/token` scopes: `trace:read_metadata`
  - HTTP bearer
  - API key in cookie `cave_access`
  - API key in cookie `__Secure-cave_identity.session_token`

GET /api/v1/projects/{projectId}/agent-runs/{runId}/evidence on the Caveman Cloud control plane. Requires the trace:read_metadata scope. Not exposed to autonomous agents: Discloses protected native evidence under current ownership and transactional payload audit.

## Query parameters

- `capability` 'traces.compare' | 'usage.compare' | 'repository.prepare_patch' | 'repository.candidate', required

## Response `200`

Protected native receipt values. Repository candidates additionally require current payload:read; each receipt retains current authority, custody, and retention checks.

- object
  - `data` unknown[], required
    - unknown

## Other responses

- `403`: Current payload or trace authority unavailable.
- `404`: Run, source, or receipt unavailable.
- `4XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.
- `5XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.

---

[API](https://skmtc.dev/caveman/apis/caveman-cloud-api.md) - [All operations](https://skmtc.dev/caveman/apis/caveman-cloud-api/llms.txt) - [OpenAPI document](https://skmtc.dev/caveman/apis/caveman-cloud-api/revisions/508312d01cfc?raw)