> ## Documentation Index
> Fetch the complete documentation index at: https://docs.crossmint.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Browser Profile

> Retrieve a browser profile owned by the authenticated user. The response carries metadata only: what a checkout run did with the profile is reported on that run, not here.

A profile owned by another user returns `404`, not `403`.

**API scope required**: `agent-checkouts.browser-profiles.read`



## OpenAPI

````yaml get /unstable/agent-checkouts/browser-profiles/{id}
openapi: 3.0.3
info:
  title: Crossmint Agent Checkouts API
  version: unstable
  description: >-
    Drive a real, automated browser session through any merchant's checkout on
    behalf of a signed-in user.


    You hand the API a product URL, an optional natural-language instruction,
    and a hard maximum cost. Crossmint runs a browser through the merchant's
    checkout pages, pausing for *user actions* (shipping, payment, anything only
    a human can answer) which you respond to with values that satisfy a supplied
    JSON Schema. There are no webhooks in v1 — poll the checkout until it
    reaches a terminal state.


    ## Base URL


    `https://www.crossmint.com/api` (production) ·
    `https://staging.crossmint.com/api` (staging)


    ## Authentication


    Every request requires **two** credentials:


    - `X-API-KEY` — a client-side API key (`ck_...`) with the
    `agent-checkouts.*` scopes.

    - `Authorization: Bearer <jwt>` — a JWT identifying the end user, issued by
    an external auth provider your project trusts. Without it the API returns
    `401`.


    <Note>This API lives under the `unstable` namespace. The schema may change —
    pin and re-test on upgrades.</Note>
servers:
  - url: https://www.crossmint.com/api
    description: Production
  - url: https://staging.crossmint.com/api
    description: Staging
security:
  - ApiKeyAuth: []
    BearerAuth: []
tags:
  - name: Agent Checkouts
    description: Create, poll, respond to, and cancel browser-driven checkouts.
  - name: Buyer Profiles
    description: >-
      Subject-scoped buyer identity and shipping address the agent can prefill
      during a checkout run. Payment data is never stored.
  - name: Browser Profiles
    description: >-
      Subject-scoped browser identity that lets a user's merchant login be
      reused across checkout runs. Crossmint stores metadata only: the saved
      browser state is held by our browser infrastructure and never returned.
paths:
  /unstable/agent-checkouts/browser-profiles/{id}:
    get:
      tags:
        - Browser Profiles
      summary: Get Browser Profile
      description: >-
        Retrieves a browser profile owned by the authenticated user. A profile
        owned by another user returns `404`, not `403`, so an id cannot be
        probed for existence.


        **API scope required**: `agent-checkouts.browser-profiles.read`
      operationId: getBrowserProfile
      parameters:
        - $ref: '#/components/parameters/BrowserProfileId'
      responses:
        '200':
          description: Returns the browser profile.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BrowserProfile'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
components:
  parameters:
    BrowserProfileId:
      name: id
      in: path
      required: true
      description: The browser profile id (returned by create).
      schema:
        type: string
        format: uuid
  schemas:
    BrowserProfile:
      type: object
      description: >-
        The browser profile, returned by create, get, list items, and update.
        Metadata only — no cookies, tokens, or local storage.
      required:
        - id
        - createdAt
        - updatedAt
      properties:
        id:
          type: string
          format: uuid
          description: >-
            The browser profile id. Pass it as `browserProfileId` when creating
            a checkout.
        label:
          type: string
          minLength: 1
          maxLength: 120
          description: Optional human-readable label for the profile.
        createdAt:
          type: string
          format: date-time
        updatedAt:
          type: string
          format: date-time
          description: When the label was last changed. Checkout runs do not update it.
    Error:
      type: object
      properties:
        statusCode:
          type: integer
        error:
          type: string
        message:
          type: string
  responses:
    Unauthorized:
      description: >-
        Missing or invalid authentication. A valid `X-API-KEY` and
        `Authorization: Bearer <jwt>` are both required.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
    Forbidden:
      description: >-
        The API key lacks the required scope, or Agent Checkouts is not enabled
        for this project.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
    NotFound:
      description: >-
        No checkout, action, buyer profile, or browser profile with the given
        id.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: X-API-KEY
      description: Client-side API key (`ck_...`) with the `agent-checkouts.*` scopes.
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >-
        JWT identifying the end user, issued by an external auth provider your
        project trusts.

````