Skip to main content
GET
Error

Authorizations

Authorization
string
header
required

The control surface credential. Send Authorization: Bearer <token>.

Two kinds of token are accepted and they are told apart by shape, not by a separate header. A token beginning pbk_ is an org scoped API key, whose public half and secret half are generated together and of which only a hash of the secret is ever stored; anything else is treated as an OAuth 2.1 access token and verified against the authorization server's keys.

Both resolve to the same context: an org, a principal and a set of scopes. Nothing downstream branches on which channel you used, with one deliberate exception, key management, which requires a signed-in person so that a key can never mint another key.

Scopes are enforced when MCP tools are REGISTERED rather than when they are called, so a tool your credential cannot use is absent from tools/list rather than refused mid gesture.

Path Parameters

id
string
required

The thread id.

Query Parameters

since
string

The messageId you were reading. Omit it for the newest assistant message.

Pattern: ^[A-Za-z0-9_-]{1,128}$
afterPart
integer

How many parts of that message you already hold. Zero or more; zero replays the whole message.

Required range: x >= 0

Response

The chunks you had not seen, ended by data: [DONE]. Empty of parts when there is nothing owed.