---
title: "Get single checkpoint"
method: GET
path: "/agents/{agent_id}/checkpoints/{checkpoint_id}"
tags: ["Checkpoints"]
---

# Get single checkpoint

`GET /agents/{agent_id}/checkpoints/{checkpoint_id}`

## Request

- Base URL: `https://api.mnemom.ai/v1`
- URL: `https://api.mnemom.ai/v1/agents/{agent_id}/checkpoints/{checkpoint_id}`
- Auth: one of:
  - API key in header `X-Mnemom-Api-Key`
  - HTTP bearer
  - API key in cookie `mnemom_session`

Authorization: authentication is required (401 without credentials), and the caller must be an `owner`, `admin` or `member` of the organization that owns `agent_id` — checkpoint telemetry is member-only; there is no anonymous read. `checkpoint_id` is queried together with `agent_id`. A checkpoint under an agent the caller cannot access (the caller is not in the agent's organization, or the agent does not exist) returns the same 404 as a checkpoint that does not exist, as does one belonging to a different agent — never another tenant's data. A `viewer` or `auditor` of the agent's own organization gets 403: they can already see the agent exists.

## Path parameters

- `agent_id` string, required
- `checkpoint_id` string, required

## Response `200`

Checkpoint details

- Checkpoint
  - `checkpoint_id` string
  - `request_id` string, nullable: The gateway's per-proxied-request id (ADR-065 mnemom_request_id), when the gateway wrote this checkpoint with a request-scoped logger. Null on rows written before migration 548 or by a caller with no request context.
  - `agent_id` string
  - `card_id` string
  - `session_id` string
  - `timestamp` string, date-time
  - `thinking_block_hash` string
  - `provider` string
  - `model` string
  - `verdict` 'clear' | 'review_needed' | 'boundary_violation' | 'unverified' | 'unanalyzed': `unverified`: analysis was supposed to run but did not complete. `unanalyzed`: the agent's integrity_mode is off (AIP off), so the turn was recorded but never analysed (migration 518). Neither is a clean integrity pass.
  - `concerns` object[]
    - `category` string
    - `severity` string
    - `description` string
    - `evidence` string
  - `reasoning_summary` string
  - `conscience_context` object
  - `window_position` object
    - `index` integer
    - `window_size` integer
  - `analysis_metadata` object
  - `linked_trace_id` string, nullable
  - `re_evaluated_at` string, date-time, nullable
  - `original_verdict` string, nullable

## Other responses

- `400`: Bad request
- `401`: Authentication required
- `403`: Forbidden
- `404`: Resource not found
- `429`: Rate-limit exceeded. The global per-IP limiter (100 requests/minute, applied to every `/v1/*` route) rejected this request. Back off until the window resets — `Retry-After` carries the cooldown in seconds and `X-RateLimit-Reset` the absolute reset time.
- `500`: Server error — request was well-formed but the server failed to fulfill it. Typically a downstream dependency (DB / RPC / external API) returned an unexpected error.

---

[API](https://skmtc.dev/mnemom/apis/mnemom-api.md) · [All operations](https://skmtc.dev/mnemom/apis/mnemom-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mnemom/apis/mnemom-api/revisions/274b7a6ea182?raw)