Skip to main content
GET
Go (SDK)

Authorizations

Authorization
string
header
required

Send Authorization: Bearer , using an MKA1 API key for automation or an OAuth API access token for a signed-in application. Use a dynamic security callback to refresh OAuth access tokens. Browser session-only operations still require their declared cookie.

Headers

X-On-Behalf-Of
string

Optional external end-user identifier forwarded by the API gateway.

Response

200 - application/json

OK

An organization's tool policy. It applies to every Responses request in the organization, including saved agent runs, and overrides what the request or agent configures.

object
any
required
rules
Stored tool policy rule · object[]
required

The organization's rules. When several rules match a tool, the strictest action applies: deny, then require_approval.

updated_at
string<date-time> | null
required

When the policy was last changed; null when the organization has no policy.