Get artifact metadata

Owner and, for org_shared artifacts, organization members can read this. Missing credentials, an invalid key, and anyone who cannot read the artifact get the same 404 as an unknown id. This route does not return 401. A session-authenticated response may append ?access= on contentUrl so the sandboxed iframe can load HTML without cookies. API-key responses omit that grant.

GET /api/v1/artifacts/{id}

200

{
  "artifact": {
    "id": "11111111-1111-4111-8111-111111111111",
    "creatorUserId": "user_example",
    "organizationId": null,
    "accessType": "private",
    "filename": "11111111-1111-4111-8111-111111111111.html",
    "name": "hello",
    "mimeType": "text/html",
    "sizeBytes": 527,
    "createdAt": "2026-10-21T12:00:00.000Z",
    "updatedAt": "2026-10-21T12:00:00.000Z",
    "uploadedAt": "2026-10-21T12:00:00.000Z",
    "viewerUrl": "http://localhost:3000/artifacts/11111111-1111-4111-8111-111111111111",
    "contentUrl": "http://localhost:3001/api/v1/artifacts/11111111-1111-4111-8111-111111111111/content",
    "shared": false,
    "passwordProtected": false
  }
}

Authorizations

bearerAuthsessionCookie

Authorization · string · header · required

Factrove API key, usually prefixed ftrv_. Send Authorization: Bearer <key>. Product routes do not accept x-api-key as a credential. A present Authorization header that is not a valid key does not fall back to the session cookie.

Path Parameters

id · string<uuid> · required

Artifact UUID.

Pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$

Response

200

application/json

Artifact metadata, including whether a public share is active.

artifact · object · required

Show child attributes