Machines

The filter expression, e.g. all;status~in~healthy;group~nin~lab.

A malformed segment is dropped; a field this list does not have is a 400 naming it. Fields: status, os, os_version, agent_version, group, tactic, strategy, last_seen, enrolled.

Free text over hostname, OS, versions, group and machine ID. ANDs with the expression whichever way its conditions are joined.

Where the previous page stopped. Opaque; an unreadable one starts over.

Rows wanted: 50 when absent, at most 200. A larger value is answered with 200 rows rather than refused.

active | suspended | stuck | uninstalled | archived. stuck includes machines still installing. Absent lists every machine that is neither archived nor deleted; a deleted one is never listed.

How many machines the filter matched in all, not just on this page.

Pass back as cursor for the next page. null means this was the last.

How many machines are in the fleet: the length of machines, since this list is never paged.

Every artifact this machine has reported, in any state — gone and out_of_scope included.

How many of those artifacts carry an unresolved issue. Counts artifacts, not issues: two issues on one file count once.

The ten configuration sections and whether each is applied, in a fixed order. Empty before the machine first checks in.

Scan runs surviving retention, not runs ever recorded: quiet runs past the last few per kind are pruned, so this is the number of rows a reader can actually open.

Facts about steering that are not problems: the surfaces' first, then a second TLS inspector.

One per surface the machine reported, in root, pac, routes order. Empty when not reported.

What else the agent found intercepting. Empty when not reported or none.

The effective hooks section: this machine's own or else its profile's, all five tools present.

The effective restrictions: this machine's own or else its profile's.

One row per browser the agent reported, state worked out when the request is answered. null when never reported, which is not the same as "no browsers".

The network a machine last said it is on.

The newest crash this machine's agent reported.

One enrollment profile's settings, as a machine's page names them.

Another machine, by ID, hostname and lifecycle. A deleted one can no longer be read.

Another machine, by ID, hostname and lifecycle. A deleted one can no longer be read.

One machine's own report on its capture tactic.

The AI tools the machine last reported, in the order its agent reported them, with each layer and its gap counts. null when the agent has not reported any, which is not the same as "no tools".

RFC 3339: when this server stored tool_coverage.

The hooks section. tools is keyed claude_code | codex | gemini_cli | cursor | windsurf | copilot_cli | antigravity; in a response every one of the five is present, and on a request an absent tool is on.

The restrictions section, keyed local_mcp_servers | extensions | extension_directory. An absent key is not set.

The worst unresolved severity across them, or null when nothing is open. Ranked, never sorted alphabetically — that puts critical after high and low before medium, wrong in both directions at once.

The per-machine attachment overrides, with the same three states as the scan fields: absent leaves it, null clears back to inheriting, a value sets one. Validated in-handler so the refusal names the field.

Refused if sent: the set of strategies is fixed when the machine enrolls. To switch one of them on or off, use PATCH /machines/{id}/strategies/{strategy}.

Refused if sent, even as null: a machine's capture tactic is fixed when it enrolls, and sending it is a 400 that says so.

The per-machine content-collection override, three-state like the panel fields above. Not collection_enabled: that switch decides whether this machine observes AI traffic at all, this one only whether file contents may be collected from it.

Whether the machine is currently collecting at all.

Three-state like everything else below: omitting it leaves collection as it was. It was briefly a required bool, which made every existing caller send a value for a field it had no opinion about — and a caller that has to restate the current setting to change something else will eventually restate it wrongly.

Strategy ids to switch off on this machine. null returns to the profile, [] runs everything enrolled; a strategy the machine never enrolled is 400.

The per-machine log-level override, with the same three states as the scan fields: absent leaves it alone, null clears it back to inheriting from the profile, a value sets one. An unknown level is a 400 naming the accepted levels.

Which group this machine belongs to. The enrollment profile sets the first value; it can be changed. null returns the machine to ungrouped; omitting the field leaves it alone.

The per-machine panel overrides, three-state like the attachment fields above.

The per-machine scan override; the same applies to every scan_* field. Each has three states: omitting it leaves the stored value alone, null clears the override so the field inherits from the profile again, and a value sets one.

The hooks section. tools is keyed claude_code | codex | gemini_cli | cursor | windsurf | copilot_cli | antigravity; in a response every one of the five is present, and on a request an absent tool is on.

The restrictions section, keyed local_mcp_servers | extensions | extension_directory. An absent key is not set.

What this machine is enrolled to be capable of. Immutable.

Worked out from capture_strategies.

Which of them are running. Mutable, per strategy.

Most severe first; non-empty only when health is degraded. On a list row this is the beat-time snapshot; on the detail view it is recomputed when the request is read.

Whether this machine is paused as of this response, worked out from paused_until by the server.

active | installing | stuck | suspended | uninstalled | archived | deleted. A list never carries deleted.

Live pauses, all three scopes.

AI tools the machine reported present, in the order its agent reported them. Empty when it has reported none.

OS logins with a live presence on this machine, newest first. Personal data, readable by anyone who can read machines.

The per-machine attachment overrides; null means the machine inherits the setting from its profile.

The Machines list's 3 of 4: covered is how many are reporting.

The per-machine content-collection override; null means the machine inherits its profile's switch. Decides whether file contents may be collected from this machine.

The companion version the machine last reported. null means not reported yet, not "no companion".

The machine's own disabled-strategy block, null when it follows the profile; enabled_strategies above is the materialised result.

The health of an active machine. Only an active machine has one; installing and stuck are lifecycle values, not health. unreachable is worked out when the request is answered.

RFC 3339, or null if the machine has never checked in.

The per-machine log-level override, or null when this machine inherits its enrollment profile's level.

The address the server last saw this machine's requests arrive from. null before its first beat.

Personal data and a coarse location signal: it names the network a machine connects from. Same grant as above.

The per-machine panel overrides; null means the machine inherits the setting from its profile.

When this machine's user paused enforcement until, as it last reported. null means enforcing, which almost every machine almost always is.

A value in the past is stale, not paused: the agent resumes on its own clock and clears the field when it next checks in. Read is_paused rather than comparing this to the current time yourself.

The enrollment profile a machine enrolled through, by name.

The machine's own primary egress address, as it last reported one. null means it never has: either its agent is too old to report one, or it could not determine an address.

Personal data. Readable by anyone who can read machines.

What the agent last said it is actually running at, or null when it has never said — an agent from before the field, which must render as not reported rather than as obeying the assertion.

This machine's scan override, not the configuration it is running. null on any scan_* field means the machine inherits that field from the enrollment profile it enrolled through.

RFC 3339 when Suspend was pressed, else null.

The hooks section. tools is keyed claude_code | codex | gemini_cli | cursor | windsurf | copilot_cli | antigravity; in a response every one of the five is present, and on a request an absent tool is on.

The restrictions section, keyed local_mcp_servers | extensions | extension_directory. An absent key is not set.

RFC 3339 when the agent reported its local uninstall, else null.

Trailing window, in UTC days. Default 30, clamped to 1..=90.

Oldest first, zero-filled: the quiet days are data, not gaps.

How many changes of each kind are kept for a machine. A list this long has had older changes dropped.

What the server saw the connection arrive from.

What the agent said its own primary egress interface was.

Newest first.

Trailing window, in hours. Default 24, clamped to 1..=168.

Largest first, at most 20.

Largest first, at most 20.

As total_tools, for services.

How many distinct tools were in the window, including any past the 20 the list stops at.

The window actually used, after the clamp.

The filter expression, e.g. all;truncated~in~true;error~nin~none.

Fields: agent_version, bundle_hash, truncated, error, collected, received. The machine is not one of them: it is the path, not a condition, which is what makes this tab's locked chip a statement of the surface rather than a filter a reader could clear.

Free text over the agent version, the bundle hash and the error kind. Never the log tail — this route does not serve one.

Where the previous page stopped. Opaque; an unreadable one starts over.

Rows wanted: 50 when absent, between 1 and 200.

How many bundles the filter matched in all, not just on this page.

Pass back as cursor for the next page. null means this was the last.

Free-form counters, exactly as the agent sent them.

The end of the agent's log. Only a single bundle carries it; the list does not.

The grant stands until revoked; expires_at is then a century out.

live, revoked or expired.

None for a grant nobody ever pasted in — a fact worth showing, not a gap to hide.

Whether this strategy should be running.

What this machine is enrolled to be capable of. Immutable.

Worked out from capture_strategies.

Which of them are running. Mutable, per strategy.

Most severe first; non-empty only when health is degraded. On a list row this is the beat-time snapshot; on the detail view it is recomputed when the request is read.

Whether this machine is paused as of this response, worked out from paused_until by the server.

active | installing | stuck | suspended | uninstalled | archived | deleted. A list never carries deleted.

Live pauses, all three scopes.

AI tools the machine reported present, in the order its agent reported them. Empty when it has reported none.

OS logins with a live presence on this machine, newest first. Personal data, readable by anyone who can read machines.

The per-machine attachment overrides; null means the machine inherits the setting from its profile.

The Machines list's 3 of 4: covered is how many are reporting.

The per-machine content-collection override; null means the machine inherits its profile's switch. Decides whether file contents may be collected from this machine.

The companion version the machine last reported. null means not reported yet, not "no companion".

The machine's own disabled-strategy block, null when it follows the profile; enabled_strategies above is the materialised result.

The health of an active machine. Only an active machine has one; installing and stuck are lifecycle values, not health. unreachable is worked out when the request is answered.

RFC 3339, or null if the machine has never checked in.

The per-machine log-level override, or null when this machine inherits its enrollment profile's level.

The address the server last saw this machine's requests arrive from. null before its first beat.

Personal data and a coarse location signal: it names the network a machine connects from. Same grant as above.

The per-machine panel overrides; null means the machine inherits the setting from its profile.

When this machine's user paused enforcement until, as it last reported. null means enforcing, which almost every machine almost always is.

A value in the past is stale, not paused: the agent resumes on its own clock and clears the field when it next checks in. Read is_paused rather than comparing this to the current time yourself.

The enrollment profile a machine enrolled through, by name.

The machine's own primary egress address, as it last reported one. null means it never has: either its agent is too old to report one, or it could not determine an address.

Personal data. Readable by anyone who can read machines.

What the agent last said it is actually running at, or null when it has never said — an agent from before the field, which must render as not reported rather than as obeying the assertion.

This machine's scan override, not the configuration it is running. null on any scan_* field means the machine inherits that field from the enrollment profile it enrolled through.

RFC 3339 when Suspend was pressed, else null.

The hooks section. tools is keyed claude_code | codex | gemini_cli | cursor | windsurf | copilot_cli | antigravity; in a response every one of the five is present, and on a request an absent tool is on.

The restrictions section, keyed local_mcp_servers | extensions | extension_directory. An absent key is not set.

RFC 3339 when the agent reported its local uninstall, else null.

next_before from the previous page.

1–200; default 50.

Newest first.

Pass back as before; null on the last page.

1 for the first try; each retry adds one.

The machine's OS, as it reports it: windows | macos | linux.

The update reached its version and left something undone: a reconcile step failed, interrupted or deferred, a retired file failed, or a component skipped. false while outcome is null.

When state last changed.

The rollout's scope: profile | machine.

waiting | downloading | verifying | installing | awaiting | updated | failed | cancelled | skipped.

What this machine is moving to: the default build of its OS when the rollout started.

Why it failed or was skipped or cancelled, in a sentence.

When the next automatic retry is due; null when none is.

What an update did on the machine, in the agent's own account. An endpoint's word: shown, and trusted for nothing.

Why a skipped machine was skipped: no_build (the release has no agent build for its OS), needs_reinstall (it runs a version too old to update in place) or ahead (it already runs something newer). null on every other state.

null when the sweep started it (automatic update).

Automatic retries per machine, 0–5. Omitted means 3.

Rows per state, zeros left out.

Automatic retries per machine, 0–5.

profile | machine.

The highest version any of its machines is moving to — a headline. Machines of different OSes can move to different versions: targets says which, and each row carries its own target_version.

Per OS, in the order windows, macos, linux.

Set once no machine has anything left to do.

The user who started it; null when the sweep started it because the profile updates automatically (or the user has since been deleted — the audit row still names them).