> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mcpjam.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get a session transcript

> The projected transcript, paged. Tool payloads and blobs are dropped, and the stored blob URL is never returned.

Check `transcriptUnavailable` before trusting `messageCount`: an unreadable transcript reports `null`, never `0`.



## OpenAPI

````yaml /reference/openapi.json get /projects/{projectId}/user-testing/scenarios/{scenarioId}/sessions/{sessionId}
openapi: 3.1.0
info:
  title: MCPJam API
  version: 1.0.0-preview
  description: >-
    Programmatic access to MCP servers saved in your MCPJam projects — live
    diagnostics (validate, inspect, export) and operations: call tools, render
    prompts, run eval suites asynchronously and poll their results, and import
    OAuth tokens.


    **The API is in preview**: the surface may change while we finish the
    design. Error `code` values are stable; error `message` strings are not.
    Write clients that ignore unknown response fields.
  contact:
    name: MCPJam
    url: https://github.com/MCPJam/inspector/issues
servers:
  - url: https://app.mcpjam.com/api/v1
    description: Hosted MCPJam
security:
  - bearerAuth: []
tags:
  - name: Hosts
    description: >-
      Project hosts: named model + capability profiles you run chats and eval
      suites against.
  - name: Environments
    description: >-
      Project environments: named, live-editable execution bundles (one host, an
      optional standalone server group, optionally pinned skills and plugin
      versions) that eval suites and journeys run against. Distinct from Sandbox
      images, which are Computer base images. Reads require project membership;
      every write requires project admin.
  - name: Plugins
    description: >-
      Agent Plugins imported into a project — read-only inventory and version
      detail.
  - name: Sandbox images
    description: >-
      Custom Computer images: a digest-pinned Dockerfile built into an immutable
      image your project's computers boot from.
  - name: Server diagnostics
    description: Connect-level health checks against a saved MCP server.
  - name: Primitives
    description: 'The server''s MCP primitives: tools, prompts, and resources.'
  - name: Export
    description: Full-server snapshots for diffing and CI.
  - name: Execution
    description: 'Run the server''s primitives: call tools, render prompts.'
  - name: Eval runs
    description: >-
      Asynchronous eval suite runs: create with 202, poll status, iterations,
      and traces.
  - name: Server connections
    description: >-
      Connect an MCP server URL to a project, authorizing in a browser when the
      server requires it.
  - name: OAuth
    description: 'Bring-your-own OAuth: import externally obtained tokens for a server.'
  - name: Chatboxes
    description: >-
      Read-only access to the chatboxes published from a project: listing,
      settings, attached servers, and share links.
  - name: Catalog
    description: >-
      Discover the resources the other routes operate on: your account,
      projects, servers, eval suites, and chat sessions.
  - name: Tunnels
    description: >-
      Relay tunnels that expose local MCP servers through a public URL,
      registered as first-class project servers (the `mcpjam tunnel` CLI flow).
  - name: Agent
    description: >-
      Headless agent turns over the public API: send a message history, the
      server runs one assistant turn with project-scoped workspace tools (eval
      reads + suite creation) on a pinned hosted model, and returns the reply
      plus created-resource references.
  - name: Swarms
    description: >-
      Personas, journeys and swarm containers — the authoring half of Swarms —
      plus the model-backed generation that drafts them.
  - name: Swarm runs
    description: >-
      Launching journeys and reading what they produced. Launching SPENDS — see
      the per-operation notes.
  - name: Swarm insights
    description: >-
      What a swarm run revealed. The scorecard and findings are deterministic
      and free; requesting wave insights runs models and draws on your shared
      daily ledger.
  - name: User testing
    description: >-
      Publishing an environment for real visitors, and controlling who can reach
      it. Several of these NARROW access and take effect immediately.
paths:
  /projects/{projectId}/user-testing/scenarios/{scenarioId}/sessions/{sessionId}:
    parameters:
      - $ref: '#/components/parameters/projectId'
      - $ref: '#/components/parameters/scenarioId'
      - $ref: '#/components/parameters/sessionId'
    get:
      tags:
        - User testing
      summary: Get a session transcript
      description: >-
        The projected transcript, paged. Tool payloads and blobs are dropped,
        and the stored blob URL is never returned.


        Check `transcriptUnavailable` before trusting `messageCount`: an
        unreadable transcript reports `null`, never `0`.
      operationId: getUserTestingSession
      requestBody:
        $ref: '#/components/requestBodies/cursorBody'
      responses:
        '200':
          description: The session and its messages.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UserTestingSessionDetail'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '429':
          $ref: '#/components/responses/RateLimited'
        '500':
          $ref: '#/components/responses/InternalError'
components:
  parameters:
    projectId:
      name: projectId
      in: path
      required: true
      description: ID of the hosted project that contains the server.
      schema:
        type: string
    scenarioId:
      name: scenarioId
      in: path
      required: true
      description: >-
        Scenario ID, as returned by publishing an environment or by the
        project's scenario reads.
      schema:
        type: string
    sessionId:
      name: sessionId
      in: path
      required: true
      description: Chat session ID, as returned by the scenario's session list.
      schema:
        type: string
  requestBodies:
    cursorBody:
      required: false
      description: Optional pagination cursor.
      content:
        application/json:
          schema:
            type: object
            properties:
              cursor:
                type: string
                description: >-
                  Opaque pagination cursor from a previous response's
                  `nextCursor`. Don't parse it.
          example: {}
  schemas:
    UserTestingSessionDetail:
      type: object
      description: >-
        A session's transcript, paged. The stored blob URL is NEVER returned: it
        is a direct handle with no further authorization, so handing it out
        would turn one authorized read into an unbounded, unrevocable one.
      required:
        - id
        - scenarioId
        - chatSessionId
        - modelId
        - startedAt
        - lastActivityAt
        - messageCount
        - messages
      properties:
        id:
          type: string
        scenarioId:
          type: string
        chatSessionId:
          type:
            - string
            - 'null'
        modelId:
          type:
            - string
            - 'null'
        startedAt:
          type:
            - number
            - 'null'
          description: Epoch milliseconds.
        lastActivityAt:
          type:
            - number
            - 'null'
          description: Epoch milliseconds.
        messageCount:
          type:
            - integer
            - 'null'
          description: >-
            `null` — never `0` — when the transcript could not be read. Zero
            would be a claim the visitor said nothing, the opposite of what an
            unreadable blob means, and a caller checking only this field would
            act on it.
        transcriptUnavailable:
          type: boolean
          description: >-
            True when the stored conversation could not be read. Distinct from
            an empty `messages`, which means the visitor genuinely said nothing.
        messages:
          type: array
          items:
            $ref: '#/components/schemas/TranscriptMessage'
        nextCursor:
          type: string
    TranscriptMessage:
      type: object
      description: One projected transcript message. Tool payloads and blobs are dropped.
      required:
        - role
        - text
      properties:
        role:
          type: string
        text:
          type: string
        toolName:
          type: string
        createdAt:
          type: number
          description: Epoch milliseconds.
    Error:
      type: object
      required:
        - code
        - message
      properties:
        code:
          type: string
          description: >-
            Stable, machine-readable error code. New codes may be added over
            time; treat unknown codes as non-retryable failures unless the HTTP
            status says otherwise.
          enum:
            - UNAUTHORIZED
            - FORBIDDEN
            - NOT_FOUND
            - CONFLICT
            - VALIDATION_ERROR
            - RATE_LIMITED
            - FEATURE_NOT_SUPPORTED
            - SERVER_UNREACHABLE
            - TIMEOUT
            - OAUTH_REQUIRED
            - INTERNAL_ERROR
        message:
          type: string
          description: >-
            Human-readable description. May change between releases — don't
            match on it.
        details:
          type: object
          description: Optional, unstructured context bag.
          additionalProperties: true
  responses:
    Unauthorized:
      description: >-
        Missing, invalid, revoked, or orphaned key (`UNAUTHORIZED`) — or the
        **target MCP server** needs an OAuth grant (`OAUTH_REQUIRED`), which is
        a property of the server, not your key.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          examples:
            badKey:
              summary: Invalid or revoked key
              value:
                code: UNAUTHORIZED
                message: Invalid API key
            oauthRequired:
              summary: Target server needs an OAuth grant
              value:
                code: OAUTH_REQUIRED
                message: Server requires OAuth authorization
    Forbidden:
      description: Key is valid but not allowed to do this.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            code: FORBIDDEN
            message: You do not have access to this project
    NotFound:
      description: Unknown project, server, or resource.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            code: NOT_FOUND
            message: Server not found
    RateLimited:
      description: >-
        Per-key rate limit exceeded (60 requests/minute sustained, bursts up to
        10). Honor `Retry-After` and back off with jitter.
      headers:
        Retry-After:
          description: Seconds to wait before retrying.
          schema:
            type: integer
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            code: RATE_LIMITED
            message: API key rate limit exceeded. Slow down and retry.
    InternalError:
      description: Something failed on MCPJam's side.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            code: INTERNAL_ERROR
            message: Unexpected internal error
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: >-
        MCPJam API key (`sk_…`). Create one at [Settings → API
        keys](https://app.mcpjam.com/settings/api-keys). Guest sessions cannot
        use the API, and API keys cannot manage other API keys.

````