List workspace artifacts
curl --request GET \
--url https://aquila.attaxr.com/api/workspace/tree \
--cookie better-auth.session_token=const options = {method: 'GET', headers: {cookie: 'better-auth.session_token='}};
fetch('https://aquila.attaxr.com/api/workspace/tree', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://aquila.attaxr.com/api/workspace/tree"
headers = {"cookie": "better-auth.session_token="}
response = requests.get(url, headers=headers)
print(response.text){
"entries": [
{
"path": "<string>",
"name": "<string>",
"size": 123,
"modifiedAt": "<string>"
}
],
"truncated": true
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}Workspace
List workspace artifacts
Every file in the calling user’s R2 workspace bucket — the artifacts the Hackbot agent wrote — flattened to one list. The workspace has no server-side search, so the listing is capped like the agent’s own scan; truncated reports a clipped result.
GET
/
api
/
workspace
/
tree
List workspace artifacts
curl --request GET \
--url https://aquila.attaxr.com/api/workspace/tree \
--cookie better-auth.session_token=const options = {method: 'GET', headers: {cookie: 'better-auth.session_token='}};
fetch('https://aquila.attaxr.com/api/workspace/tree', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://aquila.attaxr.com/api/workspace/tree"
headers = {"cookie": "better-auth.session_token="}
response = requests.get(url, headers=headers)
print(response.text){
"entries": [
{
"path": "<string>",
"name": "<string>",
"size": 123,
"modifiedAt": "<string>"
}
],
"truncated": true
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}
