> ## Documentation Index > Fetch the complete documentation index at: https://docs.agentsfleet.net/llms.txt > Use this file to discover all available pages before exploring further. # List fleet runners > Platform-admin operator-plane read of the whole fleet, newest first over the composite (created_at, id) key. Under keyset pagination a runner enrolled mid-traversal never repeats or hides a row. The retired page, page_size and sort parameters are refused. Each row carries a derived `liveness` — never the stored auth state, never the token hash. ## OpenAPI ````yaml https://raw.githubusercontent.com/agentsfleet/agentsfleet/main/public/openapi.json get /v1/fleets/runners openapi: 3.1.0 info: title: agentsfleet Control Plane API version: 1.0.0 description: API for managing workspaces, fleets, triggers, and runs. contact: name: agentsfleet url: https://agentsfleet.net servers: - url: https://api.agentsfleet.net description: Production security: - BearerAuth: [] tags: - name: Health description: System status and readiness probes x-mintlify: navigation: Health - name: Authentication description: Command Line Interface (CLI) sign-in sessions and GitHub sign-in x-mintlify: navigation: Authentication - name: Workspaces description: Create and manage workspaces x-mintlify: navigation: Workspaces - name: Tenant description: Manage tenant provider settings and models x-mintlify: navigation: Tenant - name: auth-identity-events description: >- Process signed account events from Clerk. This route is not for customer fleets. x-mintlify: navigation: Auth Identity Events - name: Fleets description: Create, configure, and run fleets x-mintlify: navigation: Fleets - name: Schedules description: Manage and receive scheduled Fleet events x-mintlify: navigation: Schedules - name: Memory description: Read and search saved fleet memory x-mintlify: navigation: Memory - name: Secrets description: Manage named secrets for fleets in a workspace x-mintlify: navigation: Secrets - name: Admin description: Manage shared provider keys and models x-mintlify: navigation: Admin - name: Billing description: Read tenant balances and charge records x-mintlify: navigation: Billing - name: Integration Grants description: Manage fleet access to third-party services x-mintlify: navigation: Integration Grants - name: Connectors description: Connect workspaces to third-party providers x-mintlify: navigation: Connectors - name: Fleet Keys description: Manage keys that let external clients call a fleet x-mintlify: navigation: Fleet Keys - name: API Keys description: Manage tenant admin API keys x-mintlify: navigation: API Keys - name: Webhooks description: Receive signed events and approval decisions x-mintlify: navigation: Webhooks - name: Approvals description: List, inspect, and resolve pending approvals x-mintlify: navigation: Approvals - name: Fleet description: Enroll and manage runners x-mintlify: navigation: Fleet - name: Fleet Bundles description: Manage fleet source bundles in a workspace x-mintlify: navigation: Fleet Bundles - name: Fleet library description: Browse and add reusable fleet sources x-mintlify: navigation: Fleet library - name: Model Library description: List models available to the tenant x-mintlify: navigation: Model Library paths: /v1/fleets/runners: get: tags: - Fleet summary: List fleet runners description: >- Platform-admin operator-plane read of the whole fleet, newest first over the composite (created_at, id) key. Under keyset pagination a runner enrolled mid-traversal never repeats or hides a row. The retired page, page_size and sort parameters are refused. Each row carries a derived `liveness` — never the stored auth state, never the token hash. operationId: list_fleet_runners parameters: - name: starting_after in: query required: false description: An opaque cursor from a previous page's `next_cursor`. schema: type: string - name: limit in: query required: false description: Rows per page (1-100). schema: type: integer minimum: 1 maximum: 100 default: 50 responses: '200': description: A page of fleet runners. content: application/json: schema: type: object required: - items - total - next_cursor properties: items: type: array items: $ref: '#/components/schemas/RunnerSummary' total: type: integer format: int64 nullable: true description: The full runner count; stable across pages. next_cursor: type: string nullable: true description: Cursor for the next page; null on the final page. default: $ref: '#/components/responses/Error' components: schemas: RunnerSummary: type: object description: >- One fleet row as returned to the operator. `liveness` is derived at read time (never stored); the auth `token_hash` and stored auth state are never returned. `assigned_policy` is what the operator assigned. `achievable` is what the host last reported it can enforce. When the two disagree the runner is `degraded` and receives no work. required: - id - host_id - sandbox_tier - admin_state - liveness - labels - last_seen_at - created_at - degraded properties: assigned_policy: $ref: '#/components/schemas/RunnerAssignedPolicy' nullable: true description: >- The assignment this runner must satisfy. Null only for a runner enrolled before policy assignment existed; such a runner reads degraded until an operator assigns a policy. achievable: $ref: '#/components/schemas/RunnerCapabilityReport' nullable: true description: >- The host's last capability report. Null until the runner's first report arrives. degraded: type: boolean description: >- True when the assigned policy exceeds what the host reported it can enforce (or no report has arrived). A degraded runner is issued no leases. degraded_reason: type: string nullable: true description: >- The specific missing mechanism (for example `cgroup controllers not delegated`), mapping to a step in the runner bootstrap playbook. Null when not degraded. id: type: string format: uuid host_id: type: string sandbox_tier: $ref: '#/components/schemas/RunnerSandboxTier' admin_state: type: string description: Operator setting. Only `active` accepts runner requests. enum: - active - cordoned - draining - drained - revoked liveness: type: string description: >- Derived runtime liveness. `registered` = minted, never seen; `busy` = holds a live lease; `online` = heartbeat fresh; `offline` = heartbeat stale. enum: - registered - busy - online - offline labels: type: array items: type: string last_seen_at: type: integer format: int64 description: Epoch milliseconds of the last heartbeat; 0 if never seen. created_at: type: integer format: int64 description: Epoch milliseconds the runner was registered. RunnerAssignedPolicy: type: object description: >- The policy assigned to one runner. agentsfleet delivers it to the host on enrollment and on every heartbeat. The host never declares its own policy. required: - sandbox_tier - network_policy - registry_allowlist - worker_count properties: sandbox_tier: $ref: '#/components/schemas/RunnerSandboxTier' network_policy: $ref: '#/components/schemas/RunnerNetworkPolicy' registry_allowlist: type: array description: >- Operator registry baseline merged into each lease's egress allowlist. Empty = the runner substitutes its default registry set. Entries are `host[:port]` names; at most 32. maxItems: 32 items: type: string worker_count: type: integer description: >- Concurrent workers on the host. Clamped server-side into [1, 64]; the stored (clamped) value is echoed back. minimum: 1 maximum: 64 RunnerCapabilityReport: type: object description: >- What a runner host's kernel can actually enforce, as the host last reported it. Unauthenticated self-assertion — agentsfleet reconciles it against the assigned policy to compute `degraded`, but a compromised host can lie; placement trust stays operator-assigned. required: - landlock - seccomp - cgroup_controllers - bubblewrap - egress_enforcement properties: landlock: type: boolean description: The kernel offers Landlock filesystem sandboxing. seccomp: type: boolean description: A seccomp system-call filter can be installed. cgroup_controllers: type: array description: >- Controllers present in the delegated cgroup subtree (`cpu`, `memory`, `pids` are required for cage-building tiers). items: type: string bubblewrap: type: boolean description: The bubblewrap sandbox helper is present on the host. egress_enforcement: type: boolean description: >- Kernel-enforced egress allowlisting is available in this runner build. Always false until that wiring ships; a runner assigned `allow_list_egress` reads as degraded rather than silently refusing work. RunnerSandboxTier: type: string description: >- Isolation strength the operator assigns to a runner. The host applies it and reports what it can deliver. A host that cannot meet the assignment is marked degraded and receives no work. Only tiers with real enforcement are assignable. enum: - landlock_full - container_nested - dev_none ErrorBody: type: object description: RFC 7807 problem detail error response (application/problem+json) required: - docs_uri - title - detail - error_code - request_id properties: docs_uri: type: string format: uri description: Stable link to documentation for this error code example: https://docs.agentsfleet.net/api-reference/error-codes#UZ-AGT-009 title: type: string description: Short human-readable label, same for every occurrence of this code example: Fleet not found detail: type: string description: Instance-specific context describing what went wrong example: No fleet with id 'abc123' in this workspace. error_code: type: string description: Machine-readable error code example: UZ-AGT-009 request_id: type: string description: Correlation ID for this request current_state: type: string description: >- Resource state that blocked the requested change. Present only on 409 responses. example: paused user_message: type: string description: > Plain message safe to show to a user. Present only when an error defines one. Use `detail` or `title` when this field is absent. example: >- We couldn't find that Fleet. It may have been deleted, or the ID doesn't match one in this workspace. etag: type: string description: >- Resource version returned on 412 responses so the caller can refetch and retry. RunnerNetworkPolicy: type: string description: >- Network access assigned to a runner's sandboxed work. `allow_all` allows all outbound traffic. `deny_all_egress` allows none. `allow_list_egress` limits outbound traffic to an approved list. That mode is not available yet; a runner assigned it is marked degraded and refuses work. enum: - allow_all - deny_all_egress - allow_list_egress responses: Error: description: RFC 7807 problem detail error response content: application/problem+json: schema: $ref: '#/components/schemas/ErrorBody' securitySchemes: BearerAuth: type: http scheme: bearer bearerFormat: JWT description: >- Obtain a token via the CLI auth flow (POST /v1/auth/sessions) or GitHub OAuth ````