Get agent policy
GEThttps://api.instacloud.com/projects/{projectId}/agent-policy
Token scope: account · org · project — read-only tokens allowed.
Parameters
| Name | In | Type | Required | Description |
|---|---|---|---|---|
projectId | path | string | yes |
Responses
200
Default Response
| Field | Type | Required | Description |
|---|---|---|---|
policy | object | yes | |
policy.mode | "full_access" | "read_only" | "branch_specific" | "customize" | yes | |
policy.protectedBranchIds | string[] | yes | |
policy.rules | object | yes | |
policy.branchDeveloperRules | object | yes | |
policy.updatedBy | string | no | |
policy.updatedAt | string | no | |
agentSessionEpoch | integer | yes | |
actions | string[] | yes | |
actionCatalog | object[] | yes | |
actionCatalog.action | string | yes | |
actionCatalog.group | string | yes | |
actionCatalog.groupLabel | string | yes | |
actionCatalog.label | string | yes | |
actionCatalog.hint | string | yes | |
actionCatalog.editable | boolean | yes | false when a rule naming this action is refused as a fixed invariant |
actionCatalog.fixedDecision | "allow" | "deny" | "approve" | null | null | yes | what a non-editable action resolves to under the restricted modes; null when editable. full_access allows even the denied ones, so this and the current decision disagree for exactly what stops being allowed when full access is left |
defaultRules | object | yes | |
defaultRules.project | object | yes | |
defaultRules.unprotectedBranch | object | yes | |
defaultRules.protectedBranch | object | yes | |
effectiveRules | object | yes | |
effectiveRules.project | object | yes | |
effectiveRules.unprotectedBranch | object | yes | |
effectiveRules.protectedBranch | object | yes | |
bootstrapRules | object | yes | |
bootstrapRules.project.create | "allow" | yes | |
ruleNotes | string[] | yes |