List effective platform policies for a project

GET /api/v1/projects/{id}/policies/effective

Returns each policy type resolved for the project: the merged effective value, each scope's own value, and which scope(s) are in force. The org values are read server-side, so the caller needs only project read access.

Path parameters

id string Required

Project ID

Responses

406

application/json

application/json application/vnd.agent-engine-2026-09-20-preview+json

Unsupported or malformed API version, an operation unavailable in the selected published contract, or an unacceptable representation (including unsupported media-type parameters or excluded SSE). Existing authentication, authorization, and rate-limit failures take precedence.
Hide response attributes Show response attributes object
- badRequestDetail object
  
  Optional validation details defined by the standard error schema; API negotiation errors do not emit this field.
  
  Hide badRequestDetail attribute Show badRequestDetail attribute object
  
  fields array[object]
  
  Fields with validation failures.
  
  Hide fields attributes Show fields attributes object
  
  A field and its validation failure.
  
  description string Required
  
  Human-readable validation failure.
  
  field string Required
  
  Name or path of the invalid request field.
- detail string Required
  
  Human-readable error details.
- error integer Required
  
  HTTP status code.
- errorCode string Required
  
  Machine-readable error code.
- parameters array[string]
  
  Request parameter names associated with the error; omitted when none apply.
- reason string Required
  
  HTTP status reason phrase.
Hide response attributes Show response attributes object
- badRequestDetail object
  
  Optional validation details defined by the standard error schema; API negotiation errors do not emit this field.
  
  Hide badRequestDetail attribute Show badRequestDetail attribute object
  
  fields array[object]
  
  Fields with validation failures.
  
  Hide fields attributes Show fields attributes object
  
  A field and its validation failure.
  
  description string Required
  
  Human-readable validation failure.
  
  field string Required
  
  Name or path of the invalid request field.
- detail string Required
  
  Human-readable error details.
- error integer Required
  
  HTTP status code.
- errorCode string Required
  
  Machine-readable error code.
- parameters array[string]
  
  Request parameter names associated with the error; omitted when none apply.
- reason string Required
  
  HTTP status reason phrase.
200

application/vnd.agent-engine-2026-09-20-preview+json

application/vnd.agent-engine-2026-09-20-preview+json application/json

OK
Hide response attribute Show response attribute object
- policies array[object]
  
  Hide policies attributes Show policies attributes object
  
  effective_int_value integer
  
  effective_string_list array[string]
  
  The enforced allowlist. An empty array means nothing is allowed, which happens when the org and project lists are disjoint; null means no allowlist is enforced. The two must not collapse into one another.
  
  enabled boolean
  
  organization object
  
  Hide organization attributes Show organization attributes object
  
  enabled boolean
  
  int_value integer
  
  string_list array[string]
  
  project object
  
  Hide project attributes Show project attributes object
  
  enabled boolean
  
  id string
  
  int_value integer
  
  string_list array[string]
  
  source string
  
  organization | project | both | none
  
  type string
  
  Values are MAX_TOOL_CALLS_PER_EXECUTION, MAX_LLM_CALLS_PER_EXECUTION, MAX_EXECUTION_DURATION_MS, MAX_TOKENS_PER_EXECUTION, MAX_TOKENS_PER_SESSION, AUTHORIZED_TOOLS, or AUTHORIZED_MODELS.
Hide response attribute Show response attribute object
- policies array[object]
  
  Hide policies attributes Show policies attributes object
  
  effective_int_value integer
  
  effective_string_list array[string]
  
  The enforced allowlist. An empty array means nothing is allowed, which happens when the org and project lists are disjoint; null means no allowlist is enforced. The two must not collapse into one another.
  
  enabled boolean
  
  organization object
  
  Hide organization attributes Show organization attributes object
  
  enabled boolean
  
  int_value integer
  
  string_list array[string]
  
  project object
  
  Hide project attributes Show project attributes object
  
  enabled boolean
  
  id string
  
  int_value integer
  
  string_list array[string]
  
  source string
  
  organization | project | both | none
  
  type string
  
  Values are MAX_TOOL_CALLS_PER_EXECUTION, MAX_LLM_CALLS_PER_EXECUTION, MAX_EXECUTION_DURATION_MS, MAX_TOKENS_PER_EXECUTION, MAX_TOKENS_PER_SESSION, AUTHORIZED_TOOLS, or AUTHORIZED_MODELS.
400

application/json

application/json application/vnd.agent-engine-2026-09-20-preview+json

Bad Request
Hide response attributes Show response attributes object
- code string
- error string
- success boolean
Hide response attributes Show response attributes object
- code string
- error string
- success boolean
403

application/json

application/json application/vnd.agent-engine-2026-09-20-preview+json

Forbidden
Hide response attributes Show response attributes object
- code string
- error string
- success boolean
Hide response attributes Show response attributes object
- code string
- error string
- success boolean
500

application/json

application/json application/vnd.agent-engine-2026-09-20-preview+json

Internal Server Error
Hide response attributes Show response attributes object
- code string
- error string
- success boolean
Hide response attributes Show response attributes object
- code string
- error string
- success boolean

GET /api/v1/projects/{id}/policies/effective

curl \
 --request GET 'https://agentengine.mongodb.com/api/v1/projects/{id}/policies/effective' \
 --header "Authorization: $API_KEY"

Response examples (406)

{
  "detail": "This operation is not available in API version 2026-09-20-preview.",
  "error": 406,
  "errorCode": "OPERATION_NOT_IN_API_VERSION",
  "parameters": [
    "Accept"
  ],
  "reason": "Not Acceptable"
}

{
  "detail": "This operation supports text/event-stream, which the Accept header excludes. Remove unsupported media-type parameters or accept this type with a positive q value.",
  "error": 406,
  "errorCode": "UNACCEPTABLE_MEDIA_TYPE",
  "parameters": [
    "Accept"
  ],
  "reason": "Not Acceptable"
}

{
  "detail": "The requested API version is not supported. Supported versions: 2026-09-20-preview.",
  "error": 406,
  "errorCode": "UNSUPPORTED_API_VERSION",
  "parameters": [
    "Accept"
  ],
  "reason": "Not Acceptable"
}

Response examples (406)

{
  "detail": "This operation is not available in API version 2026-09-20-preview.",
  "error": 406,
  "errorCode": "OPERATION_NOT_IN_API_VERSION",
  "parameters": [
    "Accept"
  ],
  "reason": "Not Acceptable"
}

Response examples (200)

{
  "policies": [
    {
      "effective_int_value": 42,
      "effective_string_list": [
        "string"
      ],
      "enabled": true,
      "organization": {
        "enabled": true,
        "int_value": 42,
        "string_list": [
          "string"
        ]
      },
      "project": {
        "enabled": true,
        "id": "string",
        "int_value": 42,
        "string_list": [
          "string"
        ]
      },
      "source": "string",
      "type": "MAX_TOOL_CALLS_PER_EXECUTION"
    }
  ]
}

Response examples (200)

{
  "policies": [
    {
      "effective_int_value": 42,
      "effective_string_list": [
        "string"
      ],
      "enabled": true,
      "organization": {
        "enabled": true,
        "int_value": 42,
        "string_list": [
          "string"
        ]
      },
      "project": {
        "enabled": true,
        "id": "string",
        "int_value": 42,
        "string_list": [
          "string"
        ]
      },
      "source": "string",
      "type": "MAX_TOOL_CALLS_PER_EXECUTION"
    }
  ]
}

Response examples (400)

{
  "code": "string",
  "error": "string",
  "success": true
}

Response examples (400)

{
  "code": "string",
  "error": "string",
  "success": true
}

Response examples (403)

{
  "code": "string",
  "error": "string",
  "success": true
}

Response examples (403)

{
  "code": "string",
  "error": "string",
  "success": true
}

Response examples (500)

{
  "code": "string",
  "error": "string",
  "success": true
}

Response examples (500)

{
  "code": "string",
  "error": "string",
  "success": true
}