Create task (stream/json)

curl --request POST \
  --url https://neo.api.projectdiscovery.io/api/v1/tasks \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "agent_id": "<string>",
  "agent_ids": [
    "<string>"
  ],
  "ask_question": false,
  "auto_execute": false,
  "browser_session_refs": [
    "<string>"
  ],
  "file_keys": [
    "<string>"
  ],
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "isolated": false,
  "max_iterations": 2,
  "max_steps": 102,
  "message": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "parts": [
      {
        "media_type": "<string>",
        "name": "<string>",
        "text": "<string>",
        "url": "<string>"
      }
    ],
    "role": "user"
  },
  "mode": "agent",
  "project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "sandbox_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "secrets": [
    "<string>"
  ],
  "task": "<string>",
  "title": "<string>"
}
'

import requests

url = "https://neo.api.projectdiscovery.io/api/v1/tasks"

payload = {
    "agent_id": "<string>",
    "agent_ids": ["<string>"],
    "ask_question": False,
    "auto_execute": False,
    "browser_session_refs": ["<string>"],
    "file_keys": ["<string>"],
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "isolated": False,
    "max_iterations": 2,
    "max_steps": 102,
    "message": {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "parts": [
            {
                "media_type": "<string>",
                "name": "<string>",
                "text": "<string>",
                "url": "<string>"
            }
        ],
        "role": "user"
    },
    "mode": "agent",
    "project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "sandbox_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "secrets": ["<string>"],
    "task": "<string>",
    "title": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    agent_id: '<string>',
    agent_ids: ['<string>'],
    ask_question: false,
    auto_execute: false,
    browser_session_refs: ['<string>'],
    file_keys: ['<string>'],
    id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    isolated: false,
    max_iterations: 2,
    max_steps: 102,
    message: {
      id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
      parts: [{media_type: '<string>', name: '<string>', text: '<string>', url: '<string>'}],
      role: 'user'
    },
    mode: 'agent',
    project_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    sandbox_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    secrets: ['<string>'],
    task: '<string>',
    title: '<string>'
  })
};

fetch('https://neo.api.projectdiscovery.io/api/v1/tasks', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://neo.api.projectdiscovery.io/api/v1/tasks",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'agent_id' => '<string>',
    'agent_ids' => [
        '<string>'
    ],
    'ask_question' => false,
    'auto_execute' => false,
    'browser_session_refs' => [
        '<string>'
    ],
    'file_keys' => [
        '<string>'
    ],
    'id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'isolated' => false,
    'max_iterations' => 2,
    'max_steps' => 102,
    'message' => [
        'id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
        'parts' => [
                [
                                'media_type' => '<string>',
                                'name' => '<string>',
                                'text' => '<string>',
                                'url' => '<string>'
                ]
        ],
        'role' => 'user'
    ],
    'mode' => 'agent',
    'project_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'sandbox_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'secrets' => [
        '<string>'
    ],
    'task' => '<string>',
    'title' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://neo.api.projectdiscovery.io/api/v1/tasks"

	payload := strings.NewReader("{\n  \"agent_id\": \"<string>\",\n  \"agent_ids\": [\n    \"<string>\"\n  ],\n  \"ask_question\": false,\n  \"auto_execute\": false,\n  \"browser_session_refs\": [\n    \"<string>\"\n  ],\n  \"file_keys\": [\n    \"<string>\"\n  ],\n  \"id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"isolated\": false,\n  \"max_iterations\": 2,\n  \"max_steps\": 102,\n  \"message\": {\n    \"id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n    \"parts\": [\n      {\n        \"media_type\": \"<string>\",\n        \"name\": \"<string>\",\n        \"text\": \"<string>\",\n        \"url\": \"<string>\"\n      }\n    ],\n    \"role\": \"user\"\n  },\n  \"mode\": \"agent\",\n  \"project_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"sandbox_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"secrets\": [\n    \"<string>\"\n  ],\n  \"task\": \"<string>\",\n  \"title\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://neo.api.projectdiscovery.io/api/v1/tasks")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"agent_id\": \"<string>\",\n  \"agent_ids\": [\n    \"<string>\"\n  ],\n  \"ask_question\": false,\n  \"auto_execute\": false,\n  \"browser_session_refs\": [\n    \"<string>\"\n  ],\n  \"file_keys\": [\n    \"<string>\"\n  ],\n  \"id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"isolated\": false,\n  \"max_iterations\": 2,\n  \"max_steps\": 102,\n  \"message\": {\n    \"id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n    \"parts\": [\n      {\n        \"media_type\": \"<string>\",\n        \"name\": \"<string>\",\n        \"text\": \"<string>\",\n        \"url\": \"<string>\"\n      }\n    ],\n    \"role\": \"user\"\n  },\n  \"mode\": \"agent\",\n  \"project_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"sandbox_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"secrets\": [\n    \"<string>\"\n  ],\n  \"task\": \"<string>\",\n  \"title\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://neo.api.projectdiscovery.io/api/v1/tasks")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"agent_id\": \"<string>\",\n  \"agent_ids\": [\n    \"<string>\"\n  ],\n  \"ask_question\": false,\n  \"auto_execute\": false,\n  \"browser_session_refs\": [\n    \"<string>\"\n  ],\n  \"file_keys\": [\n    \"<string>\"\n  ],\n  \"id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"isolated\": false,\n  \"max_iterations\": 2,\n  \"max_steps\": 102,\n  \"message\": {\n    \"id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n    \"parts\": [\n      {\n        \"media_type\": \"<string>\",\n        \"name\": \"<string>\",\n        \"text\": \"<string>\",\n        \"url\": \"<string>\"\n      }\n    ],\n    \"role\": \"user\"\n  },\n  \"mode\": \"agent\",\n  \"project_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"sandbox_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"secrets\": [\n    \"<string>\"\n  ],\n  \"task\": \"<string>\",\n  \"title\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

"<string>"

{
  "status": "accepted",
  "task_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "warnings": [
    {
      "message": "<string>"
    }
  ]
}

{
  "error": "Bad request",
  "code": "user_spending_cap_reached",
  "error_id": "<string>",
  "kind": "forbidden request",
  "message": "<string>"
}

{
  "error": "Bad request",
  "code": "user_spending_cap_reached",
  "error_id": "<string>",
  "kind": "forbidden request",
  "message": "<string>"
}

{
  "error": "Bad request",
  "code": "user_spending_cap_reached",
  "error_id": "<string>",
  "kind": "forbidden request",
  "message": "<string>"
}

Tasks

Create task (stream/json)

Create a new task or continue an existing one. Returns SSE by default, or JSON acknowledgement when requested.

Response Modes:

default (response_format omitted): streaming SSE response (text/event-stream)
response_format=json: synchronous acknowledgement (202 + task id/status JSON)
if response_format is omitted and Accept: application/json is sent, JSON acknowledgement is returned.

Mode Options:

agent (default): Full agent mode with all tools, execution capabilities, and memory
chat: Conversational mode with limited tools (web search, knowledge search)

Direct Agent Execution:

Use agent_id to bypass AgentSwarm and route to a specific agent

Secrets (Opt-In):

Use secrets to pass only selected secret names into task runtime
If omitted, no user/project secrets are exposed by default

POST

api

tasks

Create task (stream/json)

curl --request POST \
  --url https://neo.api.projectdiscovery.io/api/v1/tasks \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "agent_id": "<string>",
  "agent_ids": [
    "<string>"
  ],
  "ask_question": false,
  "auto_execute": false,
  "browser_session_refs": [
    "<string>"
  ],
  "file_keys": [
    "<string>"
  ],
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "isolated": false,
  "max_iterations": 2,
  "max_steps": 102,
  "message": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "parts": [
      {
        "media_type": "<string>",
        "name": "<string>",
        "text": "<string>",
        "url": "<string>"
      }
    ],
    "role": "user"
  },
  "mode": "agent",
  "project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "sandbox_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "secrets": [
    "<string>"
  ],
  "task": "<string>",
  "title": "<string>"
}
'

import requests

url = "https://neo.api.projectdiscovery.io/api/v1/tasks"

payload = {
    "agent_id": "<string>",
    "agent_ids": ["<string>"],
    "ask_question": False,
    "auto_execute": False,
    "browser_session_refs": ["<string>"],
    "file_keys": ["<string>"],
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "isolated": False,
    "max_iterations": 2,
    "max_steps": 102,
    "message": {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "parts": [
            {
                "media_type": "<string>",
                "name": "<string>",
                "text": "<string>",
                "url": "<string>"
            }
        ],
        "role": "user"
    },
    "mode": "agent",
    "project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "sandbox_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "secrets": ["<string>"],
    "task": "<string>",
    "title": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    agent_id: '<string>',
    agent_ids: ['<string>'],
    ask_question: false,
    auto_execute: false,
    browser_session_refs: ['<string>'],
    file_keys: ['<string>'],
    id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    isolated: false,
    max_iterations: 2,
    max_steps: 102,
    message: {
      id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
      parts: [{media_type: '<string>', name: '<string>', text: '<string>', url: '<string>'}],
      role: 'user'
    },
    mode: 'agent',
    project_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    sandbox_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    secrets: ['<string>'],
    task: '<string>',
    title: '<string>'
  })
};

fetch('https://neo.api.projectdiscovery.io/api/v1/tasks', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://neo.api.projectdiscovery.io/api/v1/tasks",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'agent_id' => '<string>',
    'agent_ids' => [
        '<string>'
    ],
    'ask_question' => false,
    'auto_execute' => false,
    'browser_session_refs' => [
        '<string>'
    ],
    'file_keys' => [
        '<string>'
    ],
    'id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'isolated' => false,
    'max_iterations' => 2,
    'max_steps' => 102,
    'message' => [
        'id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
        'parts' => [
                [
                                'media_type' => '<string>',
                                'name' => '<string>',
                                'text' => '<string>',
                                'url' => '<string>'
                ]
        ],
        'role' => 'user'
    ],
    'mode' => 'agent',
    'project_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'sandbox_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'secrets' => [
        '<string>'
    ],
    'task' => '<string>',
    'title' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://neo.api.projectdiscovery.io/api/v1/tasks"

	payload := strings.NewReader("{\n  \"agent_id\": \"<string>\",\n  \"agent_ids\": [\n    \"<string>\"\n  ],\n  \"ask_question\": false,\n  \"auto_execute\": false,\n  \"browser_session_refs\": [\n    \"<string>\"\n  ],\n  \"file_keys\": [\n    \"<string>\"\n  ],\n  \"id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"isolated\": false,\n  \"max_iterations\": 2,\n  \"max_steps\": 102,\n  \"message\": {\n    \"id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n    \"parts\": [\n      {\n        \"media_type\": \"<string>\",\n        \"name\": \"<string>\",\n        \"text\": \"<string>\",\n        \"url\": \"<string>\"\n      }\n    ],\n    \"role\": \"user\"\n  },\n  \"mode\": \"agent\",\n  \"project_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"sandbox_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"secrets\": [\n    \"<string>\"\n  ],\n  \"task\": \"<string>\",\n  \"title\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://neo.api.projectdiscovery.io/api/v1/tasks")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"agent_id\": \"<string>\",\n  \"agent_ids\": [\n    \"<string>\"\n  ],\n  \"ask_question\": false,\n  \"auto_execute\": false,\n  \"browser_session_refs\": [\n    \"<string>\"\n  ],\n  \"file_keys\": [\n    \"<string>\"\n  ],\n  \"id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"isolated\": false,\n  \"max_iterations\": 2,\n  \"max_steps\": 102,\n  \"message\": {\n    \"id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n    \"parts\": [\n      {\n        \"media_type\": \"<string>\",\n        \"name\": \"<string>\",\n        \"text\": \"<string>\",\n        \"url\": \"<string>\"\n      }\n    ],\n    \"role\": \"user\"\n  },\n  \"mode\": \"agent\",\n  \"project_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"sandbox_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"secrets\": [\n    \"<string>\"\n  ],\n  \"task\": \"<string>\",\n  \"title\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://neo.api.projectdiscovery.io/api/v1/tasks")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"agent_id\": \"<string>\",\n  \"agent_ids\": [\n    \"<string>\"\n  ],\n  \"ask_question\": false,\n  \"auto_execute\": false,\n  \"browser_session_refs\": [\n    \"<string>\"\n  ],\n  \"file_keys\": [\n    \"<string>\"\n  ],\n  \"id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"isolated\": false,\n  \"max_iterations\": 2,\n  \"max_steps\": 102,\n  \"message\": {\n    \"id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n    \"parts\": [\n      {\n        \"media_type\": \"<string>\",\n        \"name\": \"<string>\",\n        \"text\": \"<string>\",\n        \"url\": \"<string>\"\n      }\n    ],\n    \"role\": \"user\"\n  },\n  \"mode\": \"agent\",\n  \"project_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"sandbox_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"secrets\": [\n    \"<string>\"\n  ],\n  \"task\": \"<string>\",\n  \"title\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

"<string>"

{
  "status": "accepted",
  "task_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "warnings": [
    {
      "message": "<string>"
    }
  ]
}

{
  "error": "Bad request",
  "code": "user_spending_cap_reached",
  "error_id": "<string>",
  "kind": "forbidden request",
  "message": "<string>"
}

{
  "error": "Bad request",
  "code": "user_spending_cap_reached",
  "error_id": "<string>",
  "kind": "forbidden request",
  "message": "<string>"
}

{
  "error": "Bad request",
  "code": "user_spending_cap_reached",
  "error_id": "<string>",
  "kind": "forbidden request",
  "message": "<string>"
}

Authorizations

Authorization

string

header

required

JWT authentication token

Body

application/json

agent_id

string

Bypass AgentSwarm and route to specific agent

agent_ids

string[]

Array of agent IDs for multi-agent orchestration

ask_question

boolean

default:false

Enable the ask_question tool for the planner with durable DB-backed suspension. When false (default), the tool and its prompt sections are removed entirely so the planner must proceed without asking the user clarifying questions.

auto_execute

boolean

default:false

When mode=plan, auto-execute the plan without waiting for user approval

browser_session_refs

string[]

Optional standalone browser session references (brs_) to continue from. With one ref the agent reuses that warm, logged-in browser daemon instead of launching fresh; with multiple, the orchestrator runs one browser subagent per referenced session so each drives its own session. Every ref must exist on the user's sandbox (ownership is validated per ref). Cannot be used with an isolated task.

completion_delivery

enum<string>

Optional. When set, controls how task results are handed off on completion. webhook — POST the completion artifact to the team webhook URL when configured. artifact — persist the completion artifact for GET /api/v1/tasks/{id}/artifacts. When omitted, no completion handoff runs.

Available options:

webhook,

artifact

file_keys

string[]

Optional file references

string<uuid>

Optional task ID. If omitted or invalid, server generates one.

isolated

boolean

default:false

Run task in an ephemeral sandbox with no prior user context

max_iterations

integer

Max execution-verification loop iterations. When omitted, defaults to 0 for agent mode (no verification) and 1 for plan mode (single execute + verify cycle). 0 = explicitly skip verification. 1+ = run that many execute+verify cycles.

Required range: 0 <= x <= 5

max_steps

integer

Max LLM steps for execution mode only. Does not affect plan or verification phases. Defaults to 45 (direct) or 60 (swarm).

Required range: 4 <= x <= 200

message

object

Show child attributes

mode

enum<string>

default:agent

agent = full tools, chat = limited tools, plan = info-gathering + strategic planning

Available options:

agent,

chat,

plan

model

enum<string>

Optional model. If omitted/empty, server resolves default via user/team/tag policy.

Available options:

auto,

opus-5,

opus-4.8,

opus-4.7,

opus-4.6,

sonnet-4.6,

haiku-4.5,

gpt-5.6-sol-high,

gpt-5.6-terra-high,

gemini-3-pro,

gemini-3-flash,

grok-4.3-high,

grok-4.3-fast,

grok-4.5-high,

grok-4.5-fast,

kimi-k3,

glm-5.2,

deepseek-v4-pro-high,

deepseek-v4-flash

project_id

string<uuid>

Project ID to scope task to. If omitted, task is user-scoped.

response_format

enum<string>

Optional response mode.

sse: stream response events
json: immediate acknowledgement with task id/status When omitted, server falls back to Accept header and defaults to sse.

Available options:

sse,

json

sandbox_id

string<uuid>

Optional sandbox to run this task on. Use the id returned by GET /api/v1/sandboxes. When omitted, the Neo-managed cloud sandbox is used. Self-hosted sandboxes require an explicit selection.

schedule

object

Show child attributes

secrets

string[]

Optional secret names to expose at runtime (opt-in). Only listed names are resolved and made available to tools. If omitted or empty, no user/project secrets are exposed.

task

string

Optional shorthand user input. Used only when message.parts is absent.

title

string

Optional task title. When set, the title is persisted on create and auto title generation is skipped. When omitted, the agent generates a title from the first user message.

Required string length: 1 - 500

triage_ref

object

Optional link to an inbox report (HackerOne, GitHub, or Security Inbox). When set, Neo associates this task with that report so triage status appears in the inbox. Starting triage again for the same report replaces the previous link.

Show child attributes

visibility

enum<string>

Task visibility. Defaults to private when omitted/empty.

Available options:

public,

private,

unlisted,

team

Response

Streaming SSE response

The response is of type string.

⌘I