Skip to main content
GET
Search memory

Authorizations

Authorization
string
header
required

Your Reason API key from Settings › API keys. New keys use reason_; legacy ara_ keys remain accepted. Keys are capability-scoped: run, mcp:read, mcp:write, secrets:read, secrets:write, sessions:read, sessions:debug, knowledge:read, memory:read, memory:write, skills:read, skills:write, repos:read, repos:write, reviews:read, reviews:write, deployment:read, analytics:read, org:read, org:write, attachments:read, attachments:write, guardrails:read, guardrails:write, network:read, network:write, automations:read, automations:write, agent_auth:read. network:read and network:write are opt-in, excluded from default keys. network:read reads the saved workspace network policy; network:write replaces custom allowed hosts and requires a current organization owner/admin. Legacy project PATCH requests containing network_allowed_hosts also require network:write plus their existing run scope and project management permission; saved project hosts do not affect current session egress. Only owners/admins can mint or manage keys with network:write; keys cannot grant themselves more authority. See /docs/network-policies for replacement semantics and runtime applicability. mcp:write manages MCP server configuration only; it does not authorize remote MCP-tool execution. sessions:read reads sessions, including the assistant, reasoning and tool activity in their events. sessions:debug is privileged: only for organization owners/admins, it expands session events to the full diagnostic projection (diagnostic event kinds, status text and raw event metadata).

Path Parameters

orgId
string
required

Organization id or slug. Resolve it with GET /v3/self.

Query Parameters

scope
enum<string>
required

personal: the memory of the person the API key or OAuth grant belongs to, private to them. team: the Workspace's shared team memory, which every member's Sessions read.

Available options:
personal,
team
q
string
required

Plain text matched case-insensitively against every line, at most 200 bytes. Separate alternatives with | (deploy|release). Not a regular expression.

max_results
integer
default:40

The most matching lines to return, 1 to 100.

Required range: 1 <= x <= 100

Response

Matching lines.

scope
enum<string>

personal: the memory of the person the API key or OAuth grant belongs to, private to them. team: the Workspace's shared team memory, which every member's Sessions read.

Available options:
personal,
team
matches
object[]

Matching lines, file by file in listMemoryFiles order.

truncated
boolean

More lines matched than max_results; narrow q to see them.