Update

Update the tenant’s AI governance settings. Requires update_mask listing which fields to apply (e.g. require_tool_approval, default_tool_classification, audit_verbosity, auto_discovery_enabled, discovery_interval, prefer_code_mode_over_direct_tools, surface_requestable_tools, allowed_client_types, default_client_lifecycle). Only masked fields change. Returns the updated settings.

POST /api/v1/settings/ai-governance

Update

Go

package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.AIGovernanceSettings.Update(ctx, nil)
    if err != nil {
        log.Fatal(err)
    }
    if res.UpdateAIGovernanceSettingsResponse != nil {
        // handle response
    }
}

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

const conductoroneSDKTypescript = new ConductoroneSDKTypescript({
  security: {
    bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
    oauth: "<YOUR_OAUTH_HERE>",
  },
});

async function run() {
  const result = await conductoroneSDKTypescript.aiGovernanceSettings.update();

  console.log(result);
}

run();

curl --request POST \
  --url https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "aiGovernanceSettings": {
    "allowedClientTypes": [],
    "autoDiscoveryEnabled": true,
    "c1awAutospillDisabled": true,
    "c1awAutospillThresholdBytes": 123,
    "codeModeConcurrency": 123,
    "createdAt": "2023-11-07T05:31:56Z",
    "defaultClientLifecycle": {
      "inactivityCloseAfter": "<string>",
      "inactivityHideAfter": "<string>",
      "retentionDeleteAfter": "<string>"
    },
    "discoveryInterval": "<string>",
    "enabled": true,
    "preferCodeModeOverDirectTools": true,
    "requireToolApproval": true,
    "surfaceRequestableTools": true,
    "updatedAt": "2023-11-07T05:31:56Z"
  },
  "updateMask": "<string>"
}
'

import requests

url = "https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance"

payload = {
    "aiGovernanceSettings": {
        "allowedClientTypes": [],
        "autoDiscoveryEnabled": True,
        "c1awAutospillDisabled": True,
        "c1awAutospillThresholdBytes": 123,
        "codeModeConcurrency": 123,
        "createdAt": "2023-11-07T05:31:56Z",
        "defaultClientLifecycle": {
            "inactivityCloseAfter": "<string>",
            "inactivityHideAfter": "<string>",
            "retentionDeleteAfter": "<string>"
        },
        "discoveryInterval": "<string>",
        "enabled": True,
        "preferCodeModeOverDirectTools": True,
        "requireToolApproval": True,
        "surfaceRequestableTools": True,
        "updatedAt": "2023-11-07T05:31:56Z"
    },
    "updateMask": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    aiGovernanceSettings: {
      allowedClientTypes: [],
      autoDiscoveryEnabled: true,
      c1awAutospillDisabled: true,
      c1awAutospillThresholdBytes: 123,
      codeModeConcurrency: 123,
      createdAt: '2023-11-07T05:31:56Z',
      defaultClientLifecycle: {
        inactivityCloseAfter: '<string>',
        inactivityHideAfter: '<string>',
        retentionDeleteAfter: '<string>'
      },
      discoveryInterval: '<string>',
      enabled: true,
      preferCodeModeOverDirectTools: true,
      requireToolApproval: true,
      surfaceRequestableTools: true,
      updatedAt: '2023-11-07T05:31:56Z'
    },
    updateMask: '<string>'
  })
};

fetch('https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'aiGovernanceSettings' => [
        'allowedClientTypes' => [
                
        ],
        'autoDiscoveryEnabled' => true,
        'c1awAutospillDisabled' => true,
        'c1awAutospillThresholdBytes' => 123,
        'codeModeConcurrency' => 123,
        'createdAt' => '2023-11-07T05:31:56Z',
        'defaultClientLifecycle' => [
                'inactivityCloseAfter' => '<string>',
                'inactivityHideAfter' => '<string>',
                'retentionDeleteAfter' => '<string>'
        ],
        'discoveryInterval' => '<string>',
        'enabled' => true,
        'preferCodeModeOverDirectTools' => true,
        'requireToolApproval' => true,
        'surfaceRequestableTools' => true,
        'updatedAt' => '2023-11-07T05:31:56Z'
    ],
    'updateMask' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"aiGovernanceSettings\": {\n    \"allowedClientTypes\": [],\n    \"autoDiscoveryEnabled\": true,\n    \"c1awAutospillDisabled\": true,\n    \"c1awAutospillThresholdBytes\": 123,\n    \"codeModeConcurrency\": 123,\n    \"createdAt\": \"2023-11-07T05:31:56Z\",\n    \"defaultClientLifecycle\": {\n      \"inactivityCloseAfter\": \"<string>\",\n      \"inactivityHideAfter\": \"<string>\",\n      \"retentionDeleteAfter\": \"<string>\"\n    },\n    \"discoveryInterval\": \"<string>\",\n    \"enabled\": true,\n    \"preferCodeModeOverDirectTools\": true,\n    \"requireToolApproval\": true,\n    \"surfaceRequestableTools\": true,\n    \"updatedAt\": \"2023-11-07T05:31:56Z\"\n  },\n  \"updateMask\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"aiGovernanceSettings\": {\n    \"allowedClientTypes\": [],\n    \"autoDiscoveryEnabled\": true,\n    \"c1awAutospillDisabled\": true,\n    \"c1awAutospillThresholdBytes\": 123,\n    \"codeModeConcurrency\": 123,\n    \"createdAt\": \"2023-11-07T05:31:56Z\",\n    \"defaultClientLifecycle\": {\n      \"inactivityCloseAfter\": \"<string>\",\n      \"inactivityHideAfter\": \"<string>\",\n      \"retentionDeleteAfter\": \"<string>\"\n    },\n    \"discoveryInterval\": \"<string>\",\n    \"enabled\": true,\n    \"preferCodeModeOverDirectTools\": true,\n    \"requireToolApproval\": true,\n    \"surfaceRequestableTools\": true,\n    \"updatedAt\": \"2023-11-07T05:31:56Z\"\n  },\n  \"updateMask\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

200

{
  "aiGovernanceSettings": {
    "allowedClientTypes": [],
    "autoDiscoveryEnabled": true,
    "c1awAutospillDisabled": true,
    "c1awAutospillThresholdBytes": 123,
    "codeModeConcurrency": 123,
    "createdAt": "2023-11-07T05:31:56Z",
    "defaultClientLifecycle": {
      "inactivityCloseAfter": "<string>",
      "inactivityHideAfter": "<string>",
      "retentionDeleteAfter": "<string>"
    },
    "discoveryInterval": "<string>",
    "enabled": true,
    "preferCodeModeOverDirectTools": true,
    "requireToolApproval": true,
    "surfaceRequestableTools": true,
    "updatedAt": "2023-11-07T05:31:56Z"
  }
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization · string · header · required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Body

application/json

UpdateAIGovernanceSettingsRequest is the request to update the tenant's AI governance settings.

aiGovernanceSettings · Ai Governance Settings · object | null

AIGovernanceSettings holds the tenant-wide AI governance policy that controls MCP client access, tool approval, classification defaults, audit detail, and automatic tool discovery. There is one settings object per tenant.

Show child attributes

updateMask · string | null

Response

200 - application/json

UpdateAIGovernanceSettingsResponse contains the updated AI governance settings.

UpdateAIGovernanceSettingsResponse contains the updated AI governance settings.

aiGovernanceSettings · Ai Governance Settings · object | null

AIGovernanceSettings holds the tenant-wide AI governance policy that controls MCP client access, tool approval, classification defaults, audit detail, and automatic tool discovery. There is one settings object per tenant.

Show child attributes