List durable notifications

GET/v1/notifications

Lists the authenticated user's server-side notification inbox, scoped to the active organization plus global account notifications.

How to call this endpoint

Every ACP API request uses bearer authentication. The examples here show the actual request path, auth header, and body shape that the platform expects.

Path, query, and header parameters

These parameters control which ACP object the endpoint acts on and how the request is processed.

Path parameters

None.

Query parameters

Name	Location	Type	Required	Description
state	query	all \| unread \| read	No	—
category	query	agent_runs \| permission_requests \| assigned_work \| task_activity \| invitations \| product_updates	No	—
cursor	query	string	No	—
limit	query	integer	No	—

Body schema

This endpoint does not require a request body.

None.

What the API returns

Each response code below includes the documented payload shape for the ACP API.

200Paginated notification inboxapplication/json

Field	Type	Required	Description
data	object[]	Yes	—
data[].context	object	No	—
data[].context.permissionRequest	object	No	Original proposed action, returned only by a notification detail read with current thread read access. Retained after approval or denial. Decision status and resolvedBy identity are projected into metadata.decision on the existing inbox item.
data[].context.permissionRequest.requestId	string	Yes	—
data[].context.permissionRequest.toolName	string	Yes	—
data[].context.permissionRequest.input	string	Yes	—
data[].context.permissionRequest.reason	string	No	—
data[].context.permissionRequest.permissionRing	1 \| 2 \| 3	No	—
data[].context.permissionRequest.permissionRingLabel	string	No	—
data[].context.permissionRequest.permissionActionLabel	string	No	—
data[].context.userMessage	string	No	—
data[].context.runSummary	string	No	—
data[].context.requesterId	string	No	—
data[].context.requesterName	string	No	—
data[].context.requesterAvatarUrl	string	No	—
data[].context.agentName	string	No	—
data[].context.agentAvatarUrl	string	No	—
data[].context.actorName	string	No	—
data[].context.actorAvatarUrl	string	No	—
data[].context.computerName	string	No	—
data[].context.threadId	string	No	Thread ID.
data[].context.workflowId	string	No	—
data[].context.runId	string	No	—
data[].context.resources	object[]	No	—
data[].context.resources[].id	string	Yes	Unique identifier.
data[].context.resources[].name	string	Yes	Human-readable name.
data[].context.resources[].resourceType	string	Yes	—
data[].context.resources[].mutationVerb	created \| updated	No	—
data[].id	string	Yes	Unique identifier.
data[].eventId	string	Yes	—
data[].eventType	string	Yes	—
data[].recipientUserId	string	Yes	—
data[].organizationId	string	No	—
data[].preferenceKey	agentRuns \| permissionRequests \| assignedWork \| taskActivity \| invitations \| productUpdates	Yes	—
data[].category	agent_runs \| permission_requests \| assigned_work \| task_activity \| invitations \| product_updates	Yes	—
data[].severity	info \| success \| warning \| error \| critical	Yes	—
data[].title	string	Yes	Display title.
data[].body	string	Yes	—
data[].actionUrl	string	No	—
data[].resourceType	string	No	—
data[].resourceId	string	No	—
data[].metadata	object	Yes	Free-form metadata object.
data[].seenAt	string	No	—
data[].readAt	string	No	—
data[].dismissedAt	string	No	—
data[].archivedAt	string	No	—
data[].bookmarkedAt	string	No	Recipient bookmark timestamp. Bookmarked notifications remain in Inbox when read items are automatically removed.
data[].actedAt	string	No	—
data[].createdAt	string	Yes	ISO 8601 timestamp.
data[].updatedAt	string	Yes	ISO 8601 timestamp.
nextCursor	string	Yes	—

401Authentication required

None.

List durable notifications

Response 200

See the ACP quickstart and SDK flow