Update
package main
import(
"context"
"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
"log"
)
func main() {
ctx := context.Background()
s := conductoronesdkgo.New(
conductoronesdkgo.WithSecurity(shared.Security{
BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
Oauth: "<YOUR_OAUTH_HERE>",
}),
)
res, err := s.AIGovernanceSettings.Update(ctx, nil)
if err != nil {
log.Fatal(err)
}
if res.UpdateAIGovernanceSettingsResponse != nil {
// handle response
}
}import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";
const conductoroneSDKTypescript = new ConductoroneSDKTypescript({
security: {
bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
oauth: "<YOUR_OAUTH_HERE>",
},
});
async function run() {
const result = await conductoroneSDKTypescript.aiGovernanceSettings.update();
console.log(result);
}
run();curl --request POST \
--url https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"aiGovernanceSettings": {
"allowedClientTypes": [],
"autoDiscoveryEnabled": true,
"c1awAutospillDisabled": true,
"c1awAutospillThresholdBytes": 123,
"codeModeConcurrency": 123,
"createdAt": "2023-11-07T05:31:56Z",
"defaultClientLifecycle": {
"inactivityCloseAfter": "<string>",
"inactivityHideAfter": "<string>",
"retentionDeleteAfter": "<string>"
},
"discoveryInterval": "<string>",
"enabled": true,
"preferCodeModeOverDirectTools": true,
"requireToolApproval": true,
"surfaceRequestableTools": true,
"untrustedJudgeDisable": true,
"updatedAt": "2023-11-07T05:31:56Z",
"usageAttributionCostCenterAttribute": "<string>",
"usageAttributionTeamAttribute": "<string>"
},
"updateMask": "<string>"
}
'import requests
url = "https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance"
payload = {
"aiGovernanceSettings": {
"allowedClientTypes": [],
"autoDiscoveryEnabled": True,
"c1awAutospillDisabled": True,
"c1awAutospillThresholdBytes": 123,
"codeModeConcurrency": 123,
"createdAt": "2023-11-07T05:31:56Z",
"defaultClientLifecycle": {
"inactivityCloseAfter": "<string>",
"inactivityHideAfter": "<string>",
"retentionDeleteAfter": "<string>"
},
"discoveryInterval": "<string>",
"enabled": True,
"preferCodeModeOverDirectTools": True,
"requireToolApproval": True,
"surfaceRequestableTools": True,
"untrustedJudgeDisable": True,
"updatedAt": "2023-11-07T05:31:56Z",
"usageAttributionCostCenterAttribute": "<string>",
"usageAttributionTeamAttribute": "<string>"
},
"updateMask": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
aiGovernanceSettings: {
allowedClientTypes: [],
autoDiscoveryEnabled: true,
c1awAutospillDisabled: true,
c1awAutospillThresholdBytes: 123,
codeModeConcurrency: 123,
createdAt: '2023-11-07T05:31:56Z',
defaultClientLifecycle: {
inactivityCloseAfter: '<string>',
inactivityHideAfter: '<string>',
retentionDeleteAfter: '<string>'
},
discoveryInterval: '<string>',
enabled: true,
preferCodeModeOverDirectTools: true,
requireToolApproval: true,
surfaceRequestableTools: true,
untrustedJudgeDisable: true,
updatedAt: '2023-11-07T05:31:56Z',
usageAttributionCostCenterAttribute: '<string>',
usageAttributionTeamAttribute: '<string>'
},
updateMask: '<string>'
})
};
fetch('https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'aiGovernanceSettings' => [
'allowedClientTypes' => [
],
'autoDiscoveryEnabled' => true,
'c1awAutospillDisabled' => true,
'c1awAutospillThresholdBytes' => 123,
'codeModeConcurrency' => 123,
'createdAt' => '2023-11-07T05:31:56Z',
'defaultClientLifecycle' => [
'inactivityCloseAfter' => '<string>',
'inactivityHideAfter' => '<string>',
'retentionDeleteAfter' => '<string>'
],
'discoveryInterval' => '<string>',
'enabled' => true,
'preferCodeModeOverDirectTools' => true,
'requireToolApproval' => true,
'surfaceRequestableTools' => true,
'untrustedJudgeDisable' => true,
'updatedAt' => '2023-11-07T05:31:56Z',
'usageAttributionCostCenterAttribute' => '<string>',
'usageAttributionTeamAttribute' => '<string>'
],
'updateMask' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"aiGovernanceSettings\": {\n \"allowedClientTypes\": [],\n \"autoDiscoveryEnabled\": true,\n \"c1awAutospillDisabled\": true,\n \"c1awAutospillThresholdBytes\": 123,\n \"codeModeConcurrency\": 123,\n \"createdAt\": \"2023-11-07T05:31:56Z\",\n \"defaultClientLifecycle\": {\n \"inactivityCloseAfter\": \"<string>\",\n \"inactivityHideAfter\": \"<string>\",\n \"retentionDeleteAfter\": \"<string>\"\n },\n \"discoveryInterval\": \"<string>\",\n \"enabled\": true,\n \"preferCodeModeOverDirectTools\": true,\n \"requireToolApproval\": true,\n \"surfaceRequestableTools\": true,\n \"untrustedJudgeDisable\": true,\n \"updatedAt\": \"2023-11-07T05:31:56Z\",\n \"usageAttributionCostCenterAttribute\": \"<string>\",\n \"usageAttributionTeamAttribute\": \"<string>\"\n },\n \"updateMask\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"aiGovernanceSettings\": {\n \"allowedClientTypes\": [],\n \"autoDiscoveryEnabled\": true,\n \"c1awAutospillDisabled\": true,\n \"c1awAutospillThresholdBytes\": 123,\n \"codeModeConcurrency\": 123,\n \"createdAt\": \"2023-11-07T05:31:56Z\",\n \"defaultClientLifecycle\": {\n \"inactivityCloseAfter\": \"<string>\",\n \"inactivityHideAfter\": \"<string>\",\n \"retentionDeleteAfter\": \"<string>\"\n },\n \"discoveryInterval\": \"<string>\",\n \"enabled\": true,\n \"preferCodeModeOverDirectTools\": true,\n \"requireToolApproval\": true,\n \"surfaceRequestableTools\": true,\n \"untrustedJudgeDisable\": true,\n \"updatedAt\": \"2023-11-07T05:31:56Z\",\n \"usageAttributionCostCenterAttribute\": \"<string>\",\n \"usageAttributionTeamAttribute\": \"<string>\"\n },\n \"updateMask\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"aiGovernanceSettings": {
"allowedClientTypes": [
"MCP_CLIENT_TYPE_UNSPECIFIED"
],
"auditVerbosity": "AUDIT_VERBOSITY_UNSPECIFIED",
"autoDiscoveryEnabled": true,
"c1awAutospillDisabled": true,
"c1awAutospillThresholdBytes": 123,
"codeModeConcurrency": 123,
"createdAt": "2023-11-07T05:31:56Z",
"defaultClientLifecycle": {
"inactivityCloseAfter": "<string>",
"inactivityHideAfter": "<string>",
"retentionDeleteAfter": "<string>"
},
"defaultToolClassification": "TOOL_CLASSIFICATION_UNSPECIFIED",
"discoveryInterval": "<string>",
"enabled": true,
"preferCodeModeOverDirectTools": true,
"requireToolApproval": true,
"surfaceRequestableTools": true,
"untrustedJudgeDisable": true,
"updatedAt": "2023-11-07T05:31:56Z",
"usageAttributionCostCenterAttribute": "<string>",
"usageAttributionTeamAttribute": "<string>"
}
}AI Governance Settings
Update
Update the tenant’s AI governance settings. Requires update_mask listing which fields to apply (e.g. require_tool_approval, default_tool_classification, audit_verbosity, auto_discovery_enabled, discovery_interval, prefer_code_mode_over_direct_tools, surface_requestable_tools, untrusted_judge_disable, allowed_client_types, default_client_lifecycle). Only masked fields change. Returns the updated settings.
POST
/
api
/
v1
/
settings
/
ai-governance
Update
package main
import(
"context"
"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
"log"
)
func main() {
ctx := context.Background()
s := conductoronesdkgo.New(
conductoronesdkgo.WithSecurity(shared.Security{
BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
Oauth: "<YOUR_OAUTH_HERE>",
}),
)
res, err := s.AIGovernanceSettings.Update(ctx, nil)
if err != nil {
log.Fatal(err)
}
if res.UpdateAIGovernanceSettingsResponse != nil {
// handle response
}
}import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";
const conductoroneSDKTypescript = new ConductoroneSDKTypescript({
security: {
bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
oauth: "<YOUR_OAUTH_HERE>",
},
});
async function run() {
const result = await conductoroneSDKTypescript.aiGovernanceSettings.update();
console.log(result);
}
run();curl --request POST \
--url https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"aiGovernanceSettings": {
"allowedClientTypes": [],
"autoDiscoveryEnabled": true,
"c1awAutospillDisabled": true,
"c1awAutospillThresholdBytes": 123,
"codeModeConcurrency": 123,
"createdAt": "2023-11-07T05:31:56Z",
"defaultClientLifecycle": {
"inactivityCloseAfter": "<string>",
"inactivityHideAfter": "<string>",
"retentionDeleteAfter": "<string>"
},
"discoveryInterval": "<string>",
"enabled": true,
"preferCodeModeOverDirectTools": true,
"requireToolApproval": true,
"surfaceRequestableTools": true,
"untrustedJudgeDisable": true,
"updatedAt": "2023-11-07T05:31:56Z",
"usageAttributionCostCenterAttribute": "<string>",
"usageAttributionTeamAttribute": "<string>"
},
"updateMask": "<string>"
}
'import requests
url = "https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance"
payload = {
"aiGovernanceSettings": {
"allowedClientTypes": [],
"autoDiscoveryEnabled": True,
"c1awAutospillDisabled": True,
"c1awAutospillThresholdBytes": 123,
"codeModeConcurrency": 123,
"createdAt": "2023-11-07T05:31:56Z",
"defaultClientLifecycle": {
"inactivityCloseAfter": "<string>",
"inactivityHideAfter": "<string>",
"retentionDeleteAfter": "<string>"
},
"discoveryInterval": "<string>",
"enabled": True,
"preferCodeModeOverDirectTools": True,
"requireToolApproval": True,
"surfaceRequestableTools": True,
"untrustedJudgeDisable": True,
"updatedAt": "2023-11-07T05:31:56Z",
"usageAttributionCostCenterAttribute": "<string>",
"usageAttributionTeamAttribute": "<string>"
},
"updateMask": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
aiGovernanceSettings: {
allowedClientTypes: [],
autoDiscoveryEnabled: true,
c1awAutospillDisabled: true,
c1awAutospillThresholdBytes: 123,
codeModeConcurrency: 123,
createdAt: '2023-11-07T05:31:56Z',
defaultClientLifecycle: {
inactivityCloseAfter: '<string>',
inactivityHideAfter: '<string>',
retentionDeleteAfter: '<string>'
},
discoveryInterval: '<string>',
enabled: true,
preferCodeModeOverDirectTools: true,
requireToolApproval: true,
surfaceRequestableTools: true,
untrustedJudgeDisable: true,
updatedAt: '2023-11-07T05:31:56Z',
usageAttributionCostCenterAttribute: '<string>',
usageAttributionTeamAttribute: '<string>'
},
updateMask: '<string>'
})
};
fetch('https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'aiGovernanceSettings' => [
'allowedClientTypes' => [
],
'autoDiscoveryEnabled' => true,
'c1awAutospillDisabled' => true,
'c1awAutospillThresholdBytes' => 123,
'codeModeConcurrency' => 123,
'createdAt' => '2023-11-07T05:31:56Z',
'defaultClientLifecycle' => [
'inactivityCloseAfter' => '<string>',
'inactivityHideAfter' => '<string>',
'retentionDeleteAfter' => '<string>'
],
'discoveryInterval' => '<string>',
'enabled' => true,
'preferCodeModeOverDirectTools' => true,
'requireToolApproval' => true,
'surfaceRequestableTools' => true,
'untrustedJudgeDisable' => true,
'updatedAt' => '2023-11-07T05:31:56Z',
'usageAttributionCostCenterAttribute' => '<string>',
'usageAttributionTeamAttribute' => '<string>'
],
'updateMask' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"aiGovernanceSettings\": {\n \"allowedClientTypes\": [],\n \"autoDiscoveryEnabled\": true,\n \"c1awAutospillDisabled\": true,\n \"c1awAutospillThresholdBytes\": 123,\n \"codeModeConcurrency\": 123,\n \"createdAt\": \"2023-11-07T05:31:56Z\",\n \"defaultClientLifecycle\": {\n \"inactivityCloseAfter\": \"<string>\",\n \"inactivityHideAfter\": \"<string>\",\n \"retentionDeleteAfter\": \"<string>\"\n },\n \"discoveryInterval\": \"<string>\",\n \"enabled\": true,\n \"preferCodeModeOverDirectTools\": true,\n \"requireToolApproval\": true,\n \"surfaceRequestableTools\": true,\n \"untrustedJudgeDisable\": true,\n \"updatedAt\": \"2023-11-07T05:31:56Z\",\n \"usageAttributionCostCenterAttribute\": \"<string>\",\n \"usageAttributionTeamAttribute\": \"<string>\"\n },\n \"updateMask\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://{tenantDomain}.conductor.one/api/v1/settings/ai-governance")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"aiGovernanceSettings\": {\n \"allowedClientTypes\": [],\n \"autoDiscoveryEnabled\": true,\n \"c1awAutospillDisabled\": true,\n \"c1awAutospillThresholdBytes\": 123,\n \"codeModeConcurrency\": 123,\n \"createdAt\": \"2023-11-07T05:31:56Z\",\n \"defaultClientLifecycle\": {\n \"inactivityCloseAfter\": \"<string>\",\n \"inactivityHideAfter\": \"<string>\",\n \"retentionDeleteAfter\": \"<string>\"\n },\n \"discoveryInterval\": \"<string>\",\n \"enabled\": true,\n \"preferCodeModeOverDirectTools\": true,\n \"requireToolApproval\": true,\n \"surfaceRequestableTools\": true,\n \"untrustedJudgeDisable\": true,\n \"updatedAt\": \"2023-11-07T05:31:56Z\",\n \"usageAttributionCostCenterAttribute\": \"<string>\",\n \"usageAttributionTeamAttribute\": \"<string>\"\n },\n \"updateMask\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"aiGovernanceSettings": {
"allowedClientTypes": [
"MCP_CLIENT_TYPE_UNSPECIFIED"
],
"auditVerbosity": "AUDIT_VERBOSITY_UNSPECIFIED",
"autoDiscoveryEnabled": true,
"c1awAutospillDisabled": true,
"c1awAutospillThresholdBytes": 123,
"codeModeConcurrency": 123,
"createdAt": "2023-11-07T05:31:56Z",
"defaultClientLifecycle": {
"inactivityCloseAfter": "<string>",
"inactivityHideAfter": "<string>",
"retentionDeleteAfter": "<string>"
},
"defaultToolClassification": "TOOL_CLASSIFICATION_UNSPECIFIED",
"discoveryInterval": "<string>",
"enabled": true,
"preferCodeModeOverDirectTools": true,
"requireToolApproval": true,
"surfaceRequestableTools": true,
"untrustedJudgeDisable": true,
"updatedAt": "2023-11-07T05:31:56Z",
"usageAttributionCostCenterAttribute": "<string>",
"usageAttributionTeamAttribute": "<string>"
}
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.
Body
application/json
UpdateAIGovernanceSettingsRequest is the request to update the tenant's AI governance settings.
AIGovernanceSettings holds the tenant-wide AI governance policy that controls MCP client access, tool approval, classification defaults, audit detail, and automatic tool discovery. There is one settings object per tenant.
Show child attributes
Show child attributes
Response
200 - application/json
UpdateAIGovernanceSettingsResponse contains the updated AI governance settings.
UpdateAIGovernanceSettingsResponse contains the updated AI governance settings.
AIGovernanceSettings holds the tenant-wide AI governance policy that controls MCP client access, tool approval, classification defaults, audit detail, and automatic tool discovery. There is one settings object per tenant.
Show child attributes
Show child attributes
Was this page helpful?