List tasks
const url = 'http://127.0.0.1:7700/api/tasks';const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url http://127.0.0.1:7700/api/tasks \ --header 'Authorization: Bearer <token>'Every task the box knows, in the order they were created. The list is rebuilt from the action log at boot, so it includes finished and undone tasks.
Authorizations
Section titled “Authorizations”Responses
Section titled “Responses”All tasks.
object
A short name for people.
What the worker should do. For the fake worker, one command per line.
A folder in BOX_HOME/workspaces. The task works on its own copy of it.
droid is Droid with Claude. fake runs scripted steps with no model, for tests.
Tool names the task may call through its broker, such as wallet.pay.
Hosts the task’s network may reach: example.com (any port), example.com:8080 (one port) or *.example.com (subdomains). Never localhost, a loopback or link-local address, or a whole top-level domain.
Droid worker: the Claude model. haiku (cheap checks), sonnet (most work, the default), opus (hard tasks), or a full model id that starts with claude-. The task records the id it ran on.
Spending above this, in US cents, pauses the task for an OK. Default Settings defaultBudgetCents, 100 unless changed.
Who started it, for the log and the portal: api, schedule, asi1, jira:BOX-12. From a paired device it is always phone:<device name>.
The agent seat doing the work, such as Credit analyst. Shown in the audit.
How Droid works on it. Ignored by the fake worker.
object
Droid writes a plan first
low gets no network beyond the model and asks before any spending. medium keeps its hosts and a budget of at most $1. high keeps what the task asked for. The box enforces this too.
Personal: the first real folder the task works on a copy of.
Personal: every real folder the task works on.
queued created, not started. running the worker is working. waiting paused until an
approval is answered. done finished; its changes are part of the workspace. failed stopped with
an error; its changes are not applied. undone removed; its changes are gone and other tasks keep
theirs.
The Linux user the task runs as, box-<id>.
Finished tasks whose changes this task saw when it started, newest first.
Tool spending plus model cost, in US cents. Not rounded.
The latest step
Why it failed, as a sentence a person can read, such as Your Anthropic key was not accepted. Change it in Settings, Accounts & Keys.
Business: the id of the person who asked for the task. Set by the box, never by the caller.
The app whose box started the task, whatever source it gave. Set by the box, never by the caller.
Personal, for a task on real folders: done and waiting for the owner, kept, stopped by a conflict, or undone.
Example
[ { "id": "t3k9x2a1b2", "title": "Fix the failing test", "prompt": "Fix the failing test in this project.", "workspace": "project", "worker": "droid", "tools": [], "hosts": [], "budgetCents": 25, "source": "api", "state": "done", "user": "box-t3k9x2a1b2", "layers": [], "costCents": 5.2, "step": "All 4 tests pass.", "createdAt": "2026-10-24T09:12:03.411Z", "updatedAt": "2026-10-24T09:13:40.902Z" }]