> ## Documentation Index > Fetch the complete documentation index at: https://docs.agentsfleet.net/llms.txt > Use this file to discover all available pages before exploring further. # Read this runner's own row > Answers the row this host enrolled as: its status, its assigned policy, and what its kernel can actually enforce. Reading it does NOT bump liveness — the heartbeat writes that and nothing else does, so inspecting a host can never mask a dead runner. ## OpenAPI ````yaml https://raw.githubusercontent.com/agentsfleet/agentsfleet/main/public/openapi.json get /v1/runners/me openapi: 3.1.0 info: title: agentsfleet Control Plane API description: API for managing workspaces, fleets, triggers, and runs. contact: name: agentsfleet url: https://agentsfleet.net license: name: MIT identifier: MIT version: 1.0.0 servers: - url: https://api.agentsfleet.net description: Production security: [] paths: /v1/runners/me: get: tags: - Runners summary: Read this runner's own row description: >- Answers the row this host enrolled as: its status, its assigned policy, and what its kernel can actually enforce. Reading it does NOT bump liveness — the heartbeat writes that and nothing else does, so inspecting a host can never mask a dead runner. operationId: get_runner_self responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/SelfResponse' '401': description: No credential, or one this route does not accept content: application/problem+json: schema: $ref: '#/components/schemas/ProblemBody' '403': description: The credential is good and lacks the capability this route requires content: application/problem+json: schema: $ref: '#/components/schemas/ProblemBody' '429': description: The instance is at its ceiling content: application/problem+json: schema: $ref: '#/components/schemas/ProblemBody' '500': description: The daemon failed to answer content: application/problem+json: schema: $ref: '#/components/schemas/ProblemBody' '503': description: A dependency this route needs is unreachable content: application/problem+json: schema: $ref: '#/components/schemas/ProblemBody' security: - RunnerBearerAuth: [] components: schemas: SelfResponse: type: object description: >- `GET /v1/runners/me` reply — the runner's own registration row, read-only. Reading this does NOT bump liveness, so inspecting a host can never mask a dead runner. required: - id - status - host_id - sandbox_tier - last_seen_at - degraded properties: achievable: oneOf: - type: 'null' - $ref: '#/components/schemas/CapabilityReport' description: What the host reported it can actually enforce. assigned_policy: oneOf: - type: 'null' - $ref: '#/components/schemas/AssignedPolicy' description: The policy currently assigned to it. degraded: type: boolean description: Whether the row reads degraded. degraded_reason: type: - string - 'null' description: Why it reads degraded. host_id: type: string description: The host it runs on. id: type: string description: The runner's identifier. last_seen_at: type: integer format: int64 description: Epoch milliseconds of the last beat; zero when never seen. sandbox_tier: type: string description: The tier it was assigned. status: type: string description: Operator-facing state. additionalProperties: false ProblemBody: type: object description: The body every refusal carries, under `application/problem+json`. required: - docs_uri - title - detail - error_code - request_id properties: action_id: type: - string - 'null' description: 'On that 409 only: the action the gate held.' current_state: type: - string - 'null' description: 'On a 409 only: the state that forbade the transition.' detail: type: string description: One sentence on what was refused and why. docs_uri: type: string description: Where the error code is documented. error_code: type: string description: The registry code, stable across releases. etag: type: - string - 'null' description: >- On a 412 only: the resource's current entity tag, to refetch and retry. gate_id: type: - string - 'null' description: 'On an answered approval gate''s 409 only: the gate that was answered.' missing_secrets: type: - array - 'null' items: type: string description: 'On a 424 only: the credentials this workspace has yet to store.' outcome: type: - string - 'null' description: 'On that 409 only: the answer that stands.' request_id: type: string description: The request this refusal answers, for support. resolved_at: type: - integer - 'null' format: int64 description: 'On that 409 only: when the standing answer was given.' resolved_by: type: - string - 'null' description: 'On that 409 only: who gave it.' title: type: string description: A short name for the refusal, safe to show a person. user_message: type: - string - 'null' description: A curated sentence for end users, where the code has one. CapabilityReport: type: object description: | What this host can actually enforce. required: - landlock - seccomp - cgroup_controllers - bubblewrap - egress_enforcement properties: bubblewrap: type: boolean description: The sandbox launcher is available. cgroup_controllers: type: array items: type: string description: Controllers present in the delegated cgroup's subtree control. egress_enforcement: type: boolean description: Kernel-enforced egress allowlisting is available. landlock: type: boolean description: Filesystem isolation is available. seccomp: type: boolean description: System-call filtering is available. AssignedPolicy: type: object description: The isolation, egress and concurrency settings assigned to one runner. required: - sandbox_tier - network_policy - registry_allowlist - worker_count - extra_binds properties: extra_binds: type: array items: $ref: '#/components/schemas/ExtraBind' description: Extra host paths bound into every lease's sandbox. network_policy: $ref: '#/components/schemas/RunnerNetworkPolicy' description: Egress posture to apply. registry_allowlist: type: array items: type: string description: >- Operator registry baseline merged into each lease's egress allowlist. Empty means the runner substitutes its own default registry set. sandbox_tier: $ref: '#/components/schemas/SandboxTier' description: Isolation strength to apply. worker_count: type: integer format: int32 description: Concurrent workers the runner may start. Clamped on both sides. minimum: 0 ExtraBind: type: object description: >- One host path bound into every lease's sandbox, in addition to the baseline. An operator may ADD a path a host needs; never remove or re-mode one the sandbox depends on. required: - path - mode - note properties: mode: $ref: '#/components/schemas/BindMode' description: Whether the bind is writable. note: type: string description: Operator note explaining why the bind exists. path: type: string description: Host path to bind. RunnerNetworkPolicy: type: string description: >- Egress posture assigned per runner, named so the behaviour reads off the value. enum: - allow_all - deny_all_egress - allow_list_egress SandboxTier: type: string description: The isolation strength assigned to a runner. enum: - landlock_full - container_nested - dev_none BindMode: type: string description: Whether an operator-added bind is writable. enum: - read_only - read_write securitySchemes: RunnerBearerAuth: type: http scheme: bearer bearerFormat: agt_r description: The opaque agt_r token minted when the runner enrols (POST /v1/runners) ````