Skip to main content
GET
/
v1
/
agents
/
{agent_id}
/
constraints
Fetch agent trust constraints
curl --request GET \
  --url https://api.example.com/v1/agents/{agent_id}/constraints
{
  "agent_id": "<string>",
  "dome_config": {
    "input_guards": [
      "<string>"
    ],
    "output_guards": [
      "<string>"
    ],
    "guards": {}
  },
  "tool_permissions": [
    {
      "name": "<string>",
      "identity": "<string>",
      "endpoint": "<string>",
      "allowed_actions": [
        "<string>"
      ]
    }
  ],
  "organization": {
    "required_input_guards": [
      "<string>"
    ],
    "required_output_guards": [
      "<string>"
    ],
    "denied_tools": [
      "<string>"
    ],
    "max_model_tier": "<string>"
  },
  "enforcement_mode": "warn",
  "updated_at": "2023-11-07T05:31:56Z"
}

Path Parameters

agent_id
string<uuid>
required

Response

Successful Response

Full constraint set for a single agent — what the SDK fetches at boot.

agent_id
string
required
dome_config
DomeGuardConfig · object
required

Dome guardrail configuration shape consumed by the SDK at boot.

tool_permissions
ToolPermission · object[]
required
organization
OrganizationConstraints · object
required

Organization-level policy constraints applied to all agents in the org.

enforcement_mode
enum<string>
required
Available options:
warn,
enforce
updated_at
string<date-time>
required
Last modified on April 21, 2026