Get Project PI Settings

{
  "effective": {
    "pi_allowlist_patterns": [
      "(?i)ignore the previous ticket"
    ],
    "pi_block_threshold": 0.7,
    "pi_fail_closed": false,
    "pi_indirect_mode": "alert",
    "pi_input_action": "block",
    "pi_log_full_text_on_block": false,
    "pi_mode": "alert",
    "pi_output_action": "redact",
    "pi_pass_threshold": 0.3,
    "pi_safer_vendor_route": null,
    "pi_tier2a_block_threshold": 0.6,
    "pi_tier2b_block_threshold": 0.45
  },
  "inherited_fields": [
    "pi_indirect_mode",
    "pi_input_action",
    "pi_output_action",
    "pi_pass_threshold",
    "pi_tier2a_block_threshold",
    "pi_tier2b_block_threshold",
    "pi_fail_closed",
    "pi_log_full_text_on_block",
    "pi_allowlist_patterns",
    "pi_safer_vendor_route"
  ],
  "override": {
    "pi_block_threshold": 0.7,
    "pi_mode": "alert"
  }
}

Return the project’s prompt injection override, the effective policy after merging it with the organization’s, and which fields are inherited. A project pinned to an API key uses this policy as written. A project named per request (project_id body field or X-Project-Id header) can only tighten the organization policy; anything that loosens it is ignored at request time.

Needs view_security_rules, manage_security_rules or manage_projects.

Authentication

AuthorizationBearer

A management key (mgmt_...), sent as Authorization: Bearer <key>. Reading /v1/routing-policies also accepts the organization’s gateway API keys; writing there needs a management key.

Path parameters

project_idstringRequiredformat: "uuid"

The project’s id.

Response

The project's prompt injection settings

effectiveobject

The policy a request to this project runs under, when the project is pinned to an API key.

inherited_fieldslist of strings

Fields taken from the organization policy because the project doesn't set them.

overrideobject

What the project sets. Fields it doesn't set are null.

Errors

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

422

Unprocessable Entity Error