Update customer PI settings

{
  "override": {
    "pi_mode": "off",
    "pi_block_threshold": 0.5,
    "pi_indirect_mode": "off",
    "pi_tier2a_block_threshold": 0.5,
    "pi_tier2b_block_threshold": 0.5,
    "pi_output_action": "observe",
    "pi_fail_closed": true,
    "pi_allowlist_patterns": [
      "string"
    ]
  },
  "effective": {
    "pi_mode": "string",
    "pi_block_threshold": 1.1,
    "pi_pass_threshold": 1.1,
    "pi_input_action": "string",
    "pi_output_action": "string",
    "pi_allowlist_patterns": [
      "string"
    ],
    "pi_safer_vendor_route": "string",
    "pi_fail_closed": true,
    "pi_log_full_text_on_block": true,
    "pi_indirect_mode": "string",
    "pi_tier2a_block_threshold": 1.1,
    "pi_tier2b_block_threshold": 1.1
  },
  "inherited_fields": [
    "string"
  ]
}

Replaces the customer’s prompt injection override as a whole. The override is sparse: set only the fields to pin, everything else inherits the organization policy. An empty body restores full inheritance. Changes propagate to request enforcement within about 60 seconds. Requires the customer_guardrails feature; without it the request is rejected with a 403.

Authentication

AuthorizationBearer

Your production key sent as a bearer token.

Path parameters

customer_idstringRequired

Request

This endpoint expects an object.

pi_modeenum or nullOptional

Direct-injection enforcement mode: off, alert, or block

Allowed values:

pi_block_thresholddouble or nullOptional0-1

Direct-injection block threshold. Must be at least the organization’s pi_pass_threshold, which is not overridable per customer

pi_indirect_modeenum or nullOptional

Indirect-injection enforcement mode, a separate axis from pi_mode

Allowed values:

pi_tier2a_block_thresholddouble or nullOptional0-1

Indirect-injection heuristic-confidence threshold

pi_tier2b_block_thresholddouble or nullOptional0-1

Indirect-injection embedding-similarity threshold

pi_output_actionenum or nullOptional

What to do when the response-side check fires

Allowed values:

pi_fail_closedboolean or nullOptional

Whether to reject requests when the detection service is unavailable. Defaults to failing open

pi_allowlist_patternslist of strings or nullOptional

Regexes whose matching segments skip scanning. Unioned with the organization's list, never replacing it. A pattern broad enough to match ordinary prose disables enforcement rather than narrowing it

Response

Successful Response

overrideobjectOptional

What this customer sets. Fields it does not set are null here

effectiveobjectOptional

The policy a request scoped to this customer runs under

inherited_fieldslist of stringsOptional

Fields taken from the organization policy because the customer does not set them