List retained download metadata through the authenticated native endpoint. Use the session ID to scope the query.
curl "https://api.tooluse.net/v1/browsers/downloads?sessionId=$SESSION_ID&page=1&size=20" \
-H "Authorization: Bearer $TOOLUSE_API_KEY"
Read GET /v1/browsers/downloads/{id} for metadata. Request the same resource with Accept: application/octet-stream to stream the authenticated bytes. There is no public signed download URL.
Committed private-R2 files can survive browser shutdown when the deployment enables that storage. Expired, deleted, uncommitted or quota-refused files are not available indefinitely. Use the returned retention and state information, and delete a retained file with DELETE /v1/browsers/downloads/{id} when it is no longer needed. The Cloudflare Containers transport currently refuses downloads.