> ## Documentation Index
> Fetch the complete documentation index at: https://docs.checkfu.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Read an Agent blueprint publication receipt

> Returns one immutable publication receipt: the bound Release coordinate (lineage name, release number, content hash, required wire version), the server-derived actor and channel provenance, and the bounded source-compilation digests. Responses never carry source text, source-map paths, or canonical file contents (§6.4).

Checkfu support posture: alpha; hosted. Required evidence journey: blueprint-authority. Deployment-specific readiness and the latest proven release are available from GET /v1/support/capabilities.



## OpenAPI

````yaml /openapi.json get /v1/agent-blueprint-publications/{id}
openapi: 3.1.0
info:
  title: Checkfu API
  version: '2026-08-31'
  description: >-
    Authentication is declared per operation: API-key, runtime, or connector
    bearer; Automation signature; or credential-free pairing redemption. Every
    general Checkfu REST request requires the dated `Checkfu-Version` header
    (one of: 2026-08-31); the three MCP JSON-RPC transports use
    `MCP-Protocol-Version`, A2A uses `A2A-Version`, and the provider OAuth
    callback carries neither Checkfu header. API keys resolve one Workspace
    without a request selector; authenticated responses identify it with
    `Checkfu-Workspace-Id`.
servers:
  - url: https://api.checkfu.com
security:
  - bearerAuth: []
tags:
  - name: organizations
  - name: sourceRepositories
  - name: tenants
  - name: workspaces
  - name: principals
  - name: principalGroups
  - name: principalAccessCredentials
  - name: apiKeys
  - name: agents
  - name: harnesses
  - name: harnessRuntime
  - name: computerProfiles
  - name: permissionAssignments
  - name: actionPolicies
  - name: files
  - name: memoryStores
  - name: dreams
  - name: modelCredentials
  - name: modelRoutingProfiles
  - name: blueprintInstallations
  - name: toolSources
  - name: skills
  - name: skillSources
  - name: agentSources
  - name: agentBlueprints
  - name: skillProposals
  - name: instructionProposals
  - name: catalog
  - name: concepts
  - name: support
  - name: bootstrapRequests
  - name: connections
  - name: connectionVaults
  - name: connectionAssignments
  - name: connectedRuntimes
  - name: fileTrees
  - name: collaboration
  - name: automationGraphs
  - name: automations
  - name: actionApprovals
  - name: standingApprovals
  - name: usage
  - name: models
  - name: outcomes
  - name: budgets
  - name: billing
  - name: sessions
  - name: audit
  - name: sessionExports
  - name: runs
  - name: runnerPools
  - name: transcripts
  - name: sessionWatches
  - name: sessionHandoffs
  - name: sessionCapsules
  - name: sessionTrajectories
  - name: webhookEndpoints
  - name: integrationGateway
  - name: workEnvironments
  - name: computers
  - name: computerScreens
  - name: computerBrowserObservations
  - name: computerBrowserActions
  - name: environments
  - name: vaults
  - name: apiMcp
  - name: a2a
paths:
  /v1/agent-blueprint-publications/{id}:
    get:
      tags:
        - agentBlueprints
      summary: Read an Agent blueprint publication receipt
      description: >-
        Returns one immutable publication receipt: the bound Release coordinate
        (lineage name, release number, content hash, required wire version), the
        server-derived actor and channel provenance, and the bounded
        source-compilation digests. Responses never carry source text,
        source-map paths, or canonical file contents (§6.4).


        Checkfu support posture: alpha; hosted. Required evidence journey:
        blueprint-authority. Deployment-specific readiness and the latest proven
        release are available from GET /v1/support/capabilities.
      operationId: agentBlueprints.getPublication
      parameters:
        - name: id
          in: path
          schema:
            $ref: '#/components/schemas/AgentBlueprintPublicationReceiptId'
          required: true
        - name: checkfu-version
          in: header
          schema:
            type: string
            enum:
              - '2026-08-31'
          required: true
      responses:
        '200':
          description: >-
            Immutable provenance receipt binding one Release coordinate to one
            admitted compilation.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AgentBlueprintPublicationReceipt_1'
          headers:
            checkfu-workspace-id:
              description: The Workspace resolved from the authenticated bearer credential.
              required: true
              schema:
                $ref: '#/components/schemas/WorkspaceId'
        '400':
          description: Typed Checkfu wire error
          content:
            application/json:
              schema:
                type: object
                required:
                  - error
                properties:
                  error:
                    type: object
                    properties:
                      type:
                        type: string
                        enum:
                          - validation.malformed
                      message:
                        type: string
                      more:
                        type: string
                        enum:
                          - >-
                            https://docs.checkfu.com/reference/errors#validation-malformed
                        description: >-
                          Stable public documentation and remedy for this error
                          type.
                    required:
                      - type
                      - message
                      - more
                    additionalProperties: false
                additionalProperties: false
        '401':
          description: Typed Checkfu wire error
          content:
            application/json:
              schema:
                type: object
                required:
                  - error
                properties:
                  error:
                    type: object
                    required:
                      - type
                      - message
                      - more
                    properties:
                      type:
                        type: string
                        enum:
                          - auth.invalid_key
                      message:
                        type: string
                      more:
                        type: string
                        enum:
                          - >-
                            https://docs.checkfu.com/reference/errors#auth-invalid-key
                        description: >-
                          Stable public documentation and remedy for this error
                          type.
                    additionalProperties: false
                additionalProperties: false
        '403':
          description: >-
            The organization, tenant, or workspace backing this key is
            administratively disabled. | Deployment governance or retention
            policy denied the request.
          content:
            application/json:
              schema:
                anyOf:
                  - type: object
                    required:
                      - error
                    properties:
                      error:
                        type: object
                        properties:
                          type:
                            type: string
                            enum:
                              - auth.disabled_tenancy
                          message:
                            type: string
                          more:
                            type: string
                            enum:
                              - >-
                                https://docs.checkfu.com/reference/errors#auth-disabled-tenancy
                            description: >-
                              Stable public documentation and remedy for this
                              error type.
                        required:
                          - type
                          - message
                          - more
                        additionalProperties: false
                    additionalProperties: false
                  - $ref: '#/components/schemas/PolicyDeniedError'
        '404':
          description: >-
            The requested resource does not exist in the resolved deployment
            boundary.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationNotFoundError'
        '429':
          description: Typed Checkfu wire error
          headers:
            retry-after:
              description: >-
                Delay in seconds for rate limits or deployment quotas with a
                known release or UTC reset boundary
              required: false
              schema:
                type: integer
                minimum: 1
          content:
            application/json:
              schema:
                type: object
                required:
                  - error
                properties:
                  error:
                    type: object
                    required:
                      - type
                      - message
                      - more
                    properties:
                      type:
                        type: string
                        enum:
                          - budget.exceeded
                      message:
                        type: string
                      more:
                        type: string
                        enum:
                          - >-
                            https://docs.checkfu.com/reference/errors#budget-exceeded
                        description: >-
                          Stable public documentation and remedy for this error
                          type.
                    additionalProperties: false
                additionalProperties: false
        '500':
          description: >-
            An unexpected internal failure occurred; the message contains an
            opaque incident reference.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RuntimeInternalError'
      security:
        - bearerAuth: []
components:
  schemas:
    AgentBlueprintPublicationReceiptId:
      type: string
      allOf:
        - pattern: ^abpub_[0-9a-f]{32}$
    AgentBlueprintPublicationReceipt_1:
      anyOf:
        - $ref: '#/components/schemas/Objects_85'
        - $ref: '#/components/schemas/Objects_87'
        - $ref: '#/components/schemas/Objects_88'
      description: >-
        Immutable provenance receipt binding one Release coordinate to one
        admitted compilation.
    WorkspaceId:
      type: string
      allOf:
        - pattern: ^wrkspc_[0-9a-f]{32}$
    PolicyDeniedError:
      type: object
      properties:
        error:
          type: object
          properties:
            type:
              type: string
              enum:
                - policy.denied
            message:
              type: string
            more:
              type: string
              enum:
                - https://docs.checkfu.com/reference/errors#policy-denied
              description: Stable public documentation and remedy for this error type.
          required:
            - type
            - message
            - more
          additionalProperties: false
      required:
        - error
      additionalProperties: false
      description: Deployment governance or retention policy denied the request.
    ValidationNotFoundError:
      type: object
      properties:
        error:
          type: object
          properties:
            type:
              type: string
              enum:
                - validation.not_found
            message:
              type: string
            more:
              type: string
              enum:
                - https://docs.checkfu.com/reference/errors#validation-not-found
              description: Stable public documentation and remedy for this error type.
          required:
            - type
            - message
            - more
          additionalProperties: false
      required:
        - error
      additionalProperties: false
      description: >-
        The requested resource does not exist in the resolved deployment
        boundary.
    RuntimeInternalError:
      type: object
      properties:
        error:
          type: object
          properties:
            type:
              type: string
              enum:
                - runtime.internal
            message:
              type: string
            more:
              type: string
              enum:
                - https://docs.checkfu.com/reference/errors#runtime-internal
              description: Stable public documentation and remedy for this error type.
          required:
            - type
            - message
            - more
          additionalProperties: false
      required:
        - error
      additionalProperties: false
      description: >-
        An unexpected internal failure occurred; the message contains an opaque
        incident reference.
    Objects_85:
      type: object
      properties:
        id:
          $ref: '#/components/schemas/AgentBlueprintPublicationReceiptId'
        organization_id:
          $ref: '#/components/schemas/OrganizationId'
        agent_blueprint_release:
          $ref: '#/components/schemas/Objects_86'
        control_plane_actor:
          $ref: '#/components/schemas/ControlPlaneActorRef'
        channel:
          $ref: '#/components/schemas/AgentConfigurationChannel'
        created_at:
          $ref: '#/components/schemas/CurrentTimestamp'
        source_type:
          type: string
          enum:
            - inline_files
        source_sha256:
          type: string
          allOf:
            - pattern: ^sha256:[0-9a-f]{64}$
        compiler_version:
          $ref: '#/components/schemas/BoundedVersionCode_1'
        authoring_epoch:
          $ref: '#/components/schemas/AgentConfigurationAuthoringEpoch_1'
        source_repository_id:
          type: 'null'
        source_revision:
          type: 'null'
        source_root:
          type: 'null'
        source_map_sha256:
          type: string
          allOf:
            - pattern: ^sha256:[0-9a-f]{64}$
      required:
        - id
        - organization_id
        - agent_blueprint_release
        - control_plane_actor
        - channel
        - created_at
        - source_type
        - source_sha256
        - compiler_version
        - authoring_epoch
        - source_repository_id
        - source_revision
        - source_root
        - source_map_sha256
      additionalProperties: false
    Objects_87:
      type: object
      properties:
        id:
          $ref: '#/components/schemas/AgentBlueprintPublicationReceiptId'
        organization_id:
          $ref: '#/components/schemas/OrganizationId'
        agent_blueprint_release:
          $ref: '#/components/schemas/Objects_86'
        control_plane_actor:
          $ref: '#/components/schemas/ControlPlaneActorRef'
        channel:
          $ref: '#/components/schemas/AgentConfigurationChannel'
        created_at:
          $ref: '#/components/schemas/CurrentTimestamp'
        source_type:
          type: string
          enum:
            - source_revision
        source_sha256:
          type: string
          allOf:
            - pattern: ^sha256:[0-9a-f]{64}$
        compiler_version:
          $ref: '#/components/schemas/BoundedVersionCode_1'
        authoring_epoch:
          $ref: '#/components/schemas/AgentConfigurationAuthoringEpoch_1'
        source_repository_id:
          $ref: '#/components/schemas/SourceRepositoryId'
        source_revision:
          $ref: '#/components/schemas/ExactSourceRevision'
        source_root:
          $ref: '#/components/schemas/SourceRoot'
        source_map_sha256:
          type: string
          allOf:
            - pattern: ^sha256:[0-9a-f]{64}$
      required:
        - id
        - organization_id
        - agent_blueprint_release
        - control_plane_actor
        - channel
        - created_at
        - source_type
        - source_sha256
        - compiler_version
        - authoring_epoch
        - source_repository_id
        - source_revision
        - source_root
        - source_map_sha256
      additionalProperties: false
    Objects_88:
      type: object
      properties:
        id:
          $ref: '#/components/schemas/AgentBlueprintPublicationReceiptId'
        organization_id:
          $ref: '#/components/schemas/OrganizationId'
        agent_blueprint_release:
          $ref: '#/components/schemas/Objects_86'
        control_plane_actor:
          $ref: '#/components/schemas/ControlPlaneActorRef'
        channel:
          $ref: '#/components/schemas/AgentConfigurationChannel'
        created_at:
          $ref: '#/components/schemas/CurrentTimestamp'
        source_type:
          type: string
          enum:
            - canonical_package
        source_sha256:
          type: 'null'
        compiler_version:
          type: 'null'
        authoring_epoch:
          type: 'null'
        source_repository_id:
          type: 'null'
        source_revision:
          type: 'null'
        source_root:
          type: 'null'
        source_map_sha256:
          type: 'null'
      required:
        - id
        - organization_id
        - agent_blueprint_release
        - control_plane_actor
        - channel
        - created_at
        - source_type
        - source_sha256
        - compiler_version
        - authoring_epoch
        - source_repository_id
        - source_revision
        - source_root
        - source_map_sha256
      additionalProperties: false
    OrganizationId:
      type: string
      allOf:
        - pattern: ^org_[0-9a-f]{32}$
    Objects_86:
      type: object
      properties:
        id:
          $ref: '#/components/schemas/AgentBlueprintReleaseId_1'
        blueprint_name:
          type: string
          allOf:
            - pattern: ^[a-z0-9](?:[a-z0-9._-]{0,93})$
              description: >-
                Blueprint lineage name resolved from the retained Release, never
                the request.
        release_number:
          type: integer
          allOf:
            - exclusiveMinimum: 0
              description: Monotonic published release within the lineage.
        content_sha256:
          type: string
          allOf:
            - pattern: ^sha256:[0-9a-f]{64}$
        required_wire_version:
          $ref: '#/components/schemas/RequiredWireVersion'
      required:
        - id
        - blueprint_name
        - release_number
        - content_sha256
        - required_wire_version
      additionalProperties: false
    ControlPlaneActorRef:
      anyOf:
        - type: object
          properties:
            type:
              type: string
              enum:
                - organization_membership
            id:
              $ref: '#/components/schemas/OrganizationMembershipId'
          required:
            - type
            - id
          additionalProperties: false
        - type: object
          properties:
            type:
              type: string
              enum:
                - api_key
            id:
              $ref: '#/components/schemas/ApiKeyId'
          required:
            - type
            - id
          additionalProperties: false
        - type: object
          properties:
            type:
              type: string
              enum:
                - platform_operator
            id:
              type: string
              allOf:
                - minLength: 1
                - maxLength: 256
          required:
            - type
            - id
          additionalProperties: false
      description: >-
        Server-derived administrative attribution; API keys and operators never
        become people.
    AgentConfigurationChannel:
      type: string
      enum:
        - rest
        - api_key_mcp
        - git
        - console
        - compatibility
      description: >-
        Server-derived dispatch channel provenance; never client-asserted
        authority.
    CurrentTimestamp:
      type: string
      allOf:
        - maxLength: 24
        - pattern: ^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$
          description: A canonical UTC ISO-8601 timestamp with millisecond precision.
    BoundedVersionCode_1:
      type: string
      allOf:
        - pattern: ^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$
          description: >-
            Bounded ASCII version code for compiler, planner, and digest-key
            versions.
    AgentConfigurationAuthoringEpoch_1:
      anyOf:
        - type: string
          enum:
            - checkfu.dev/v1alpha1
      description: Closed YAML/JSON authoring epoch; unknown epochs are rejected outright.
    SourceRepositoryId:
      type: string
      allOf:
        - pattern: ^srepo_[0-9a-f]{32}$
    ExactSourceRevision:
      anyOf:
        - type: object
          properties:
            type:
              type: string
              enum:
                - git_commit_sha1
            commit_oid:
              $ref: '#/components/schemas/GitCommitSha1'
          required:
            - type
            - commit_oid
          additionalProperties: false
        - type: object
          properties:
            type:
              type: string
              enum:
                - git_commit_sha256
            commit_oid:
              $ref: '#/components/schemas/GitCommitSha256'
          required:
            - type
            - commit_oid
          additionalProperties: false
      description: >-
        Exact governed revision coordinate; the server fetches and verifies the
        object.
    SourceRoot:
      anyOf:
        - type: string
          enum:
            - .
        - type: string
          allOf:
            - minLength: 1
            - maxLength: 1024
            - pattern: ^(?:[^\0\\/\n\r]+\/)*[^\0\\/\n\r]+$
            - pattern: ^(?!.*(?:^|\/)\.\.(?:\/|$)).*$
            - pattern: ^(?!.*(?:^|\/)\.(?:\/|$)).*$
      description: Repository-confined source root; always a bounded relative path.
    AgentBlueprintReleaseId_1:
      type: string
      allOf:
        - pattern: ^abrel_[0-9a-f]{32}$
    RequiredWireVersion:
      type: string
      allOf:
        - minLength: 1
        - maxLength: 64
          description: >-
            Wire version the bound Release requires; resolved from the retained
            Release.
    OrganizationMembershipId:
      type: string
      allOf:
        - pattern: ^omem_[0-9a-f]{32}$
    ApiKeyId:
      type: string
      allOf:
        - pattern: ^akey_[0-9a-f]{32}$
    GitCommitSha1:
      type: string
      allOf:
        - pattern: ^[0-9a-f]{40}$
          description: >-
            Exact lowercase SHA-1 Git commit object id; never a ref or
            abbreviated hash.
    GitCommitSha256:
      type: string
      allOf:
        - pattern: ^[0-9a-f]{64}$
          description: >-
            Exact lowercase SHA-256 Git commit object id; never a ref or
            abbreviated hash.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer

````