Oore CI
ReferenceAPICategories

Artifacts

Build artifact management — upload, list, download via signed URLs. Time-limited share tokens and token-authorized artifact delivery.

Download via scoped token

GET
/install/artifact/{token}

Downloads an artifact using a scoped download token. No session auth required — the token itself is the authorization. For S3/R2 storage, redirects to a presigned URL.

Path Parameters

token*string

Scoped download token

Response Body

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/install/artifact/string"
Empty

Download an artifact from the install delivery route

GET
/install/download/{token}

Returns local artifact bytes using the signed path token.

Path Parameters

token*string

Signed local download token

Response Body

application/octet-stream

application/json

application/json

curl -X GET "https://example.com/install/download/string"
"string"

Get iOS OTA install manifest

GET
/install/ios/{token}/manifest.plist

Returns an Apple property-list manifest authorized by the scoped token in the URL.

Path Parameters

token*string

Artifact install token

Response Body

application/xml

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/install/ios/string/manifest.plist"
"string"

Revoke scoped download token

DELETE
/v1/artifact-tokens/{token_id}

Revokes a scoped download token so it can no longer be used.

Authorization

bearer_auth
AuthorizationBearer <token>

In: header

Path Parameters

token_id*string

Download token ID

Response Body

application/json

application/json

curl -X DELETE "https://example.com/v1/artifact-tokens/string"
{  "revoked": true}

Download via scoped token from the versioned route

GET
/v1/artifacts/dl/{token}

Resolves a time-limited path token and redirects to the backing storage URL. The token is the authorization; no session bearer token is used.

Path Parameters

token*string

Scoped download token

Response Body

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/v1/artifacts/dl/string"
Empty

Download an artifact from local storage

GET
/v1/artifacts/download/{token}

Returns the artifact bytes using the signed path token.

Path Parameters

token*string

Signed local download token

Response Body

application/octet-stream

application/json

application/json

curl -X GET "https://example.com/v1/artifacts/download/string"
"string"

Get an iOS OTA install manifest from the versioned route

GET
/v1/artifacts/install/ios/{token}/manifest.plist

Returns an Apple property-list manifest authorized by the install token in the URL.

Path Parameters

token*string

Artifact install token

Response Body

application/xml

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/v1/artifacts/install/ios/string/manifest.plist"
"string"

Download an artifact from the legacy local-storage route

GET
/v1/artifacts/local-download/{token}

Backward-compatible alias for signed local artifact downloads.

Path Parameters

token*string

Signed local download token

Response Body

application/octet-stream

application/json

application/json

curl -X GET "https://example.com/v1/artifacts/local-download/string"
"string"

Upload an artifact to local storage

PUT
/v1/artifacts/local-upload/{token}

Stores a bounded binary artifact using the signed path token. The token is the authorization; no session bearer token is used.

Path Parameters

token*string

Signed local upload token

Request Body

application/octet-stream

Raw artifact bytes

TypeScript Definitions

Use the request body type in TypeScript.

body*BinaryPayload
Formatbinary

Response Body

application/json

application/json

application/json

curl -X PUT "https://example.com/v1/artifacts/local-upload/string" \  -H "Content-Type: application/octet-stream" \  -d 'string'
Empty

List available artifacts for a bounded set of builds

POST
/v1/artifacts/query

Authorization

bearer_auth
AuthorizationBearer <token>

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

curl -X POST "https://example.com/v1/artifacts/query" \  -H "Content-Type: application/json" \  -d '{    "build_ids": [      "string"    ]  }'
{  "artifacts": [    {      "artifact_type": "apk",      "build_id": "string",      "checksum": "string",      "created_at": 0,      "expires_at": 0,      "file_path": "string",      "file_size": 0,      "id": "string",      "metadata": {},      "name": "string",      "state": "string"    }  ]}
POST
/v1/artifacts/{artifact_id}/download-link

Returns a signed download URL for an artifact. URLs expire after 15 minutes.

Authorization

bearer_auth
AuthorizationBearer <token>

In: header

Path Parameters

artifact_id*string

Artifact ID

Response Body

application/json

application/json

curl -X POST "https://example.com/v1/artifacts/string/download-link"
{  "download_url": "string",  "expires_at": 0}
POST
/v1/artifacts/{artifact_id}/install-link

Creates a one-hour install session for an APK or install-ready signed IPA. QA viewers may use this endpoint through their artifact read permission.

Authorization

bearer_auth
AuthorizationBearer <token>

In: header

Path Parameters

artifact_id*string

Artifact ID

Response Body

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/v1/artifacts/string/install-link"
{  "download_url": "string",  "expires_at": 0,  "install_url": "string",  "manifest_url": "string",  "platform": "android"}

Create scoped download token

POST
/v1/artifacts/{artifact_id}/scoped-token

Generates a scoped, time-limited download token for a specific artifact. The token can be shared with external users who don't have an account.

Authorization

bearer_auth
AuthorizationBearer <token>

In: header

Path Parameters

artifact_id*string

Artifact ID

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

curl -X POST "https://example.com/v1/artifacts/string/scoped-token" \  -H "Content-Type: application/json" \  -d '{}'
{  "download_url": "string",  "expires_at": 0,  "id": "string",  "prefix": "string",  "single_use": true,  "token": "string"}

List scoped download tokens

GET
/v1/artifacts/{artifact_id}/scoped-tokens

Lists all scoped download tokens for a specific artifact, including expired and revoked ones.

Authorization

bearer_auth
AuthorizationBearer <token>

In: header

Path Parameters

artifact_id*string

Artifact ID

Response Body

application/json

curl -X GET "https://example.com/v1/artifacts/string/scoped-tokens"
{  "tokens": [    {      "artifact_id": "string",      "created_at": 0,      "created_by": "string",      "created_by_email": "string",      "expires_at": 0,      "id": "string",      "is_expired": true,      "is_revoked": true,      "is_used": true,      "prefix": "string",      "revoked_at": 0,      "single_use": true,      "used_at": 0    }  ]}

List build artifacts

GET
/v1/builds/{build_id}/artifacts

Authorization

bearer_auth
AuthorizationBearer <token>

In: header

Path Parameters

build_id*string

Build ID

Response Body

application/json

curl -X GET "https://example.com/v1/builds/string/artifacts"
{  "artifacts": [    {      "artifact_type": "apk",      "build_id": "string",      "checksum": "string",      "created_at": 0,      "expires_at": 0,      "file_path": "string",      "file_size": 0,      "id": "string",      "metadata": {},      "name": "string",      "state": "string"    }  ]}

List available artifacts across a project

GET
/v1/projects/{project_id}/artifacts

Authorization

bearer_auth
AuthorizationBearer <token>

In: header

Path Parameters

project_id*string

Project ID

Query Parameters

limit?integer

Maximum artifacts to return (defaults to 200, max 200)

Formatint64

Response Body

application/json

application/json

curl -X GET "https://example.com/v1/projects/string/artifacts"
{  "artifacts": [    {      "artifact_type": "apk",      "build_id": "string",      "checksum": "string",      "created_at": 0,      "expires_at": 0,      "file_path": "string",      "file_size": 0,      "id": "string",      "metadata": {},      "name": "string",      "state": "string"    }  ]}

Create artifact

POST
/v1/runners/{runner_id}/jobs/{job_id}/artifacts

Runner creates an artifact record and gets a signed upload URL.

Authorization

bearer_auth
AuthorizationBearer <token>

In: header

Path Parameters

runner_id*string

Runner ID

job_id*string

Build/Job ID

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

curl -X POST "https://example.com/v1/runners/string/jobs/string/artifacts" \  -H "Content-Type: application/json" \  -d '{    "artifact_type": "string",    "name": "string"  }'
{  "artifact": {    "artifact_type": "apk",    "build_id": "string",    "checksum": "string",    "created_at": 0,    "expires_at": 0,    "file_path": "string",    "file_size": 0,    "id": "string",    "metadata": {},    "name": "string",    "state": "string"  },  "upload_url": "string"}

Abort_artifact

POST
/v1/runners/{runner_id}/jobs/{job_id}/artifacts/{artifact_id}/abort

Authorization

bearer_auth
AuthorizationBearer <token>

In: header

Path Parameters

runner_id*string
job_id*string
artifact_id*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

curl -X POST "https://example.com/v1/runners/string/jobs/string/artifacts/string/abort" \  -H "Content-Type: application/json" \  -d '{}'
{  "artifact": {    "artifact_type": "apk",    "build_id": "string",    "checksum": "string",    "created_at": 0,    "expires_at": 0,    "file_path": "string",    "file_size": 0,    "id": "string",    "metadata": {},    "name": "string",    "state": "string"  }}

Complete_artifact

POST
/v1/runners/{runner_id}/jobs/{job_id}/artifacts/{artifact_id}/complete

Authorization

bearer_auth
AuthorizationBearer <token>

In: header

Path Parameters

runner_id*string
job_id*string
artifact_id*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

curl -X POST "https://example.com/v1/runners/string/jobs/string/artifacts/string/complete" \  -H "Content-Type: application/json" \  -d '{}'
{  "artifact": {    "artifact_type": "apk",    "build_id": "string",    "checksum": "string",    "created_at": 0,    "expires_at": 0,    "file_path": "string",    "file_size": 0,    "id": "string",    "metadata": {},    "name": "string",    "state": "string"  }}

Projects

Project CRUD — each project groups one or more pipelines. Per-project role assignments for granular RBAC.

Sources

SCM integrations — local git, GitHub App, and GitLab. Incoming webhook receivers for GitHub and GitLab.