Update Agentic Guardrails

Update the financial and operational safety limits for an AI agent operating on this connector.

POST/api/v1/connectors/dispatch

Request

curl -X POST "<BASE_URL>/api/v1/connectors/dispatch" \
  -H "Authorization: Bearer <ACCESS_TOKEN>" \
  -H "X-CQRS-Action: UPDATE_AGENTIC_GUARDRAILS" \
  -H "Content-Type: application/json" \
  -H "X-Idempotency-Key: <IDEMPOTENCY_KEY>" \
  -d '{
    "binding_id": "7c9e6679-7425-40de-944b-e07fc1f90ae7"
  }'

Authorization

Minimum role: Tenant administratorThe caller must hold this role or a higher one.
Multi-factor sign-in: Required. The access token must come from a session that completed multi-factor sign-in.
Action: UPDATE_AGENTIC_GUARDRAILS

Headers

AuthorizationstringRequired
Access token of the signed-in user, as a Bearer token. It identifies the user, their role and the workspace.
X-CQRS-ActionstringRequired
Names the command to run. Must be UPDATE_AGENTIC_GUARDRAILS for this endpoint.
Content-TypestringRequired
Always application/json.
X-Idempotency-KeystringRequired
A key you choose that is unique to this attempt. A command repeated with the same key is not applied a second time.
X-Correlation-IdstringOptional
Your own identifier for the request. Returned in the x-correlation-id response header; generated when you leave it out.

Request body

binding_iduuidRequired
No description yet.
bound_external_account_idstring or nullOptional
No description yet.
enforcement_modeenum or nullOptional
Controls whether the connector actually executes mutating API calls.
Allowed values
- ACTIVE
- SIMULATION
ACTIVE
Normal operation. Payloads are sent to the external API.
SIMULATION
Dry-run mode. Generates a successful response shape and logs the intended payload to the ReasoningTrace, but drops the HTTP request.
fallback_owner_iduuid or nullOptional
No description yet.
ingestion_scopeenum or nullOptional
Defines the legal boundaries for semantic vectorization (RAG).
Allowed values
- NONE
- WHITELISTED
- ALL
NONE
No data from this connector can be stored in the semantic database.
WHITELISTED
Only explicitly listed resources (channels, folders) are ingested.
ALL
Everything visible to the OAuth token is ingested (High Risk).
ingestion_whitelisted_pathsarray of string or nullOptional
No description yet.
max_autonomous_daily_spendnumber or nullOptional
No description yet.
max_daily_api_calls_for_aiinteger or nullOptional
No description yet.
primary_owner_iduuid or nullOptional
No description yet.
require_human_approval_for_creativesboolean or nullOptional
No description yet.
selected_external_account_idsarray of string or nullOptional
No description yet.

Response

Status 202. The command was applied. The body is the record as it stands after the command: a JSON object whose fields depend on the record.

Errors

Every error carries an HTTP status. Where it also carries a code, branch on the code, not on the message.

400X-CQRS-Action is missing or names a command this route does not accept. Send UPDATE_AGENTIC_GUARDRAILS.
400DOMAIN_ROUTINGThe body is not a valid command. Check the required fields and their types.
400IDEMPOTENCY_KEY_REQUIREDX-Idempotency-Key is missing.
401The access token is missing, expired or not valid.
401L1_AUTHThe caller's role is below tenantadmin, the session has not completed multi-factor sign-in, or the caller has no access to this record.
403L1_POLICYA business rule refused the command. The message names the rule.
409L1_IDEMPOTENCYA command with this idempotency key was already applied.
409CONFLICTThe command would duplicate a record that must be unique.
500L3_COMMITThe command was valid but could not be saved.