> ## Documentation Index
> Fetch the complete documentation index at: https://docs.chainloop.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# List artifacts

> List artifacts stored in the organization, optionally filtered by project, product, kind, or search term.



## OpenAPI

````yaml https://api.app.chainloop.dev/openapi.yaml get /v1/artifacts
openapi: 3.0.1
info:
  contact:
    email: support@chainloop.dev
    name: Chainloop Support
    url: https://chainloop.dev
  termsOfService: https://chainloop.dev/terms
  title: Chainloop Platform API
  version: '1.0'
servers:
  - url: https://api.app.chainloop.dev/
security:
  - bearerToken: []
tags:
  - description: AI-powered agent operations
    name: AgentsService
  - name: ArtifactService
  - name: AssessmentService
  - description: Service for polling the status of asynchronous operations
    name: AsyncOperationsService
  - name: AttestationsService
  - name: PolicyService
  - name: ComplianceService
  - name: ComponentService
  - name: EnvironmentsService
  - name: EvidenceService
  - name: FindingService
  - name: LogicalEnvironmentsService
  - name: ProductsService
  - name: ProjectsService
  - name: UserService
externalDocs:
  description: Chainloop Official Documentation
  url: https://docs.chainloop.dev
paths:
  /v1/artifacts:
    get:
      tags:
        - ArtifactService
      summary: List artifacts
      description: >-
        List artifacts stored in the organization, optionally filtered by
        project, product, kind, or search term.
      operationId: ArtifactService_List
      parameters:
        - description: ProjectName is the name of the project to filter artifacts by
          in: query
          name: project_name
          schema:
            type: string
        - description: >-
            ProjectVersionName is the name of the project version to filter
            artifacts by
          in: query
          name: project_version_name
          schema:
            type: string
        - description: >-
            Kind is the type of artifact to filter by


            The type of artifact to filter by (e.g., CONTAINER_IMAGE,
            HELM_CHART)

             - CHAINLOOP_AI_AGENT_CONFIG: AI agent configuration collected automatically during attestation
             - UNKNOWN_KIND: Artifact kind is unknown — created from SBOM metadata when no matching attested artifact exists
             - CHAINLOOP_AI_CODING_SESSION: AI coding session evidence (e.g., Claude Code session traces)
          explode: true
          in: query
          name: kind
          schema:
            items:
              enum:
                - MATERIAL_TYPE_UNSPECIFIED
                - STRING
                - CONTAINER_IMAGE
                - ARTIFACT
                - SBOM_CYCLONEDX_JSON
                - SBOM_SPDX_JSON
                - JUNIT_XML
                - OPENVEX
                - HELM_CHART
                - SARIF
                - EVIDENCE
                - ATTESTATION
                - CSAF_VEX
                - CSAF_INFORMATIONAL_ADVISORY
                - CSAF_SECURITY_ADVISORY
                - CSAF_SECURITY_INCIDENT_RESPONSE
                - GITLAB_SECURITY_REPORT
                - ZAP_DAST_ZIP
                - BLACKDUCK_SCA_JSON
                - TWISTCLI_SCAN_JSON
                - GHAS_CODE_SCAN
                - GHAS_SECRET_SCAN
                - GHAS_DEPENDENCY_SCAN
                - JACOCO_XML
                - SLSA_PROVENANCE
                - CHAINLOOP_RUNNER_CONTEXT
                - CHAINLOOP_PR_INFO
                - GITLEAKS_JSON
                - CHAINLOOP_AI_AGENT_CONFIG
                - UNKNOWN_KIND
                - CHAINLOOP_AI_CODING_SESSION
              type: string
            type: array
          style: form
        - description: |-
            The cursor to start pagination from

            The cursor to start pagination from
          in: query
          name: pagination.cursor
          schema:
            type: string
        - description: |-
            The limit of the number of entries to return

            The maximum number of entries to return
          in: query
          name: pagination.limit
          schema:
            default: 10
            format: int32
            type: integer
        - description: >-
            Search provides a way to search artifacts by name, version, or
            digest


            Search term to filter artifacts by name, version, or digest
          in: query
          name: search
          schema:
            type: string
        - description: |-
            ProductID is the ID of the product to filter artifacts by

            ID of the product to filter artifacts by
          in: query
          name: product_id
          schema:
            type: string
        - description: >-
            ProductVersionID is the ID of the product version to filter
            artifacts by


            ID of the product version to filter artifacts by. Must be provided
            with product_id
          in: query
          name: product_version_id
          schema:
            type: string
        - description: >-
            Filter by presence of actionable vulnerability findings, i.e. OPEN
            or IN_PROGRESS (true = has vulnerabilities, false = no
            vulnerabilities, unset = no filter). Findings resolved via
            assessment are excluded.
          in: query
          name: has_vulnerabilities
          schema:
            type: boolean
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1ArtifactServiceListResponse'
          description: A successful response.
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1BadRequestResponse'
          description: Bad Request - The request was invalid or cannot be served.
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1UnauthorizedResponse'
          description: Unauthorized - Authentication is required.
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1PermissionDeniedResponse'
          description: Forbidden - You do not have permission to access this resource.
        '500':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1InternalServerErrorResponse'
          description: Internal Server Error - An unexpected error occurred on the server.
        default:
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/rpcStatus'
          description: An unexpected error response.
components:
  schemas:
    v1ArtifactServiceListResponse:
      description: Response for the List method
      example:
        pagination:
          next_cursor: next_cursor
        results:
          - kind: kind
            name: name
            digest: digest
            created_at: '2000-01-23T04:56:07.000Z'
            id: id
            version: version
          - kind: kind
            name: name
            digest: digest
            created_at: '2000-01-23T04:56:07.000Z'
            id: id
            version: version
      properties:
        results:
          items:
            $ref: '#/components/schemas/v1ArtifactItem'
          title: Results is the list of artifacts
          type: array
        pagination:
          $ref: '#/components/schemas/v1CursorPaginationResponse'
      title: ArtifactServiceListResponse
      type: object
    v1BadRequestResponse:
      description: Response for bad request
      example:
        code: 0
        details:
          - details
          - details
        message: message
      properties:
        code:
          default: 3
          description: >-
            The error code indicating the type of error. It's fixed to 3, which
            is the code for INVALID_ARGUMENT.
          format: int32
          type: integer
        message:
          description: A human-readable message providing more details about the error.
          type: string
        details:
          description: Additional details about the error.
          items:
            type: string
          type: array
      required:
        - code
        - message
      title: BadRequestResponse
      type: object
    v1UnauthorizedResponse:
      description: Response for unauthorized access
      example:
        code: 6
        details:
          - details
          - details
        message: message
      properties:
        code:
          default: 16
          description: >-
            The error code indicating the type of error. It's fixed to 16, which
            is the code for UNAUTHENTICATED.
          format: int32
          type: integer
        message:
          description: A human-readable message providing more details about the error.
          type: string
        details:
          description: Additional details about the error.
          items:
            type: string
          type: array
      required:
        - code
        - message
      title: UnauthorizedResponse
      type: object
    v1PermissionDeniedResponse:
      description: Response for permission denied
      example:
        code: 1
        details:
          - details
          - details
        message: message
      properties:
        code:
          default: 7
          description: >-
            The error code indicating the type of error. It's fixed to 7, which
            is the code for PERMISSION_DENIED.
          format: int32
          type: integer
        message:
          description: A human-readable message providing more details about the error.
          type: string
        details:
          description: Additional details about the error.
          items:
            type: string
          type: array
      required:
        - code
        - message
      title: PermissionDeniedResponse
      type: object
    v1InternalServerErrorResponse:
      description: Response for internal server error
      example:
        code: 5
        details:
          - details
          - details
        message: message
      properties:
        code:
          default: 13
          description: >-
            The error code indicating the type of error. It's fixed to 13, which
            is the code for INTERNAL_ERROR.
          format: int32
          type: integer
        message:
          description: A human-readable message providing more details about the error.
          type: string
        details:
          description: Additional details about the error.
          items:
            type: string
          type: array
      required:
        - code
        - message
      title: InternalServerErrorResponse
      type: object
    rpcStatus:
      example:
        code: 5
        details:
          - '@type': '@type'
          - '@type': '@type'
        message: message
      properties:
        code:
          format: int32
          type: integer
        message:
          type: string
        details:
          items:
            $ref: '#/components/schemas/protobufAny'
          type: array
      type: object
    v1ArtifactItem:
      description: >-
        Represents an artifact (container image, helm chart, etc.) stored in the
        platform
      example:
        kind: kind
        name: name
        digest: digest
        created_at: '2000-01-23T04:56:07.000Z'
        id: id
        version: version
      properties:
        id:
          description: Unique identifier of the artifact
          title: ID is the unique identifier of the artifact
          type: string
        kind:
          description: Type of artifact (e.g., CONTAINER_IMAGE, HELM_CHART)
          title: Kind is the type of artifact (e.g., CONTAINER_IMAGE, HELM_CHART)
          type: string
        name:
          description: Name of the artifact (e.g., container image name)
          title: Name is the name of the artifact (e.g., container image name)
          type: string
        version:
          description: Version of the artifact (e.g., container image tag)
          title: Version is the version of the artifact (e.g., container image tag)
          type: string
        digest:
          description: Cryptographic digest of the artifact
          title: Digest is the cryptographic digest of the artifact
          type: string
        created_at:
          description: Timestamp when the artifact was first recorded
          format: date-time
          title: CreatedAt is the timestamp when the artifact was first recorded
          type: string
      title: ArtifactItem
      type: object
    v1CursorPaginationResponse:
      description: Pagination information for cursor-based pagination
      example:
        next_cursor: next_cursor
      properties:
        next_cursor:
          description: The next cursor to start pagination from
          title: The next cursor to start pagination from
          type: string
      title: CursorPaginationResponse
      type: object
    protobufAny:
      additionalProperties:
        type: object
      example:
        '@type': '@type'
      properties:
        '@type':
          type: string
      type: object
  securitySchemes:
    bearerToken:
      description: Bearer token for authentication
      type: http
      scheme: bearer
      bearerFormat: JWT

````