Get Organization PI Settings

Return the organization's prompt injection policy, which projects inherit unless they override it. There's one per organization.

Authentication

AuthorizationBearer

A management key (mgmt_...), sent as Authorization: Bearer <key>. Reading /v1/routing-policies also accepts the organization’s gateway API keys; writing there needs a management key.

Response

The organization's prompt injection settings

pi_allowlist_patternslist of strings

Regular expressions whose matching prompt segments skip screening. A project’s patterns add to the organization’s, never replacing them. A pattern that matches ordinary text, such as .*, is ignored.

pi_block_thresholddouble0-1Defaults to 0.57

Direct injection: a prompt segment is blocked when its score, from 0 to 1, reaches this value. At least the organization’s pi_pass_threshold.

pi_fail_closedbooleanDefaults to false

Reject requests, with code: "sidecar_error", when screening is unavailable. false lets them through unscreened.

pi_indirect_modeenumDefaults to off

Indirect injection, in tool results and documents: off, alert or block. A separate axis from pi_mode.

Allowed values:

pi_input_actionenumDefaults to block

Reserved: requests are screened as pi_mode says.

Allowed values:

pi_log_full_text_on_blockbooleanDefaults to false

Log the full text of blocked prompts.

pi_modeenumDefaults to off

Direct injection, in the prompt a user sends: off, alert (score and record, never block) or block.

Allowed values:

pi_output_actionenumDefaults to redact

What the response-side check does with a leaked credential, such as an API key: redact replaces it with a placeholder, observe only records it. Other values behave like observe.

Allowed values:

pi_pass_thresholddouble0-1Defaults to 0.3

Reserved: no effect on screening yet. At most pi_block_threshold.

pi_safer_vendor_routestring or null

Reserved for a future route action.

pi_tier2a_block_thresholddouble0-1Defaults to 0.6

Indirect injection: the score, from 0 to 1, at which the heuristic signal fires.

pi_tier2b_block_thresholddouble0-1Defaults to 0.45

Indirect injection: the score, from 0 to 1, at which the similarity-to-known-attacks signal fires.

Errors

401

Unauthorized Error

403

Forbidden Error