---
title: "Get binding"
method: GET
path: "/v1/agents/{agent_id}/bindings/{binding_id}"
tags: ["Execution Intents"]
---

# Get binding

`GET /v1/agents/{agent_id}/bindings/{binding_id}`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/agents/{agent_id}/bindings/{binding_id}`
- Auth: HTTP bearer

## Path parameters

- `agent_id` string, uuid, required
- `binding_id` string, uuid, required

## Response `200`

Binding details

- BindingResponse
  - `id` string, uuid, required
  - `agent_id` string, uuid, required
  - `binding_type` 'http' | 'graphql' | 'postgres' | 'mysql' | 'redis' | 'grpc' | 'smtp' | 'cloud_sdk' | 's3' | 'custom', required
  - `name` string, required
  - `config` object
  - `guardrails` BindingGuardrails: Per-binding execution guardrails enforced at execute time.
    - `allowed_hosts` string[]: Host allowlist (trailing * wildcard supported). Empty = unrestricted at binding level.
    - `allowed_paths` string[]: Path allowlist for HTTP/GraphQL bindings.
    - `max_requests_per_minute` integer: Per-binding RPM; strictest of binding and agent limits wins. Denied executions do not count.
    - `max_duration_ms` integer: Upstream timeout cap for this binding.
    - `max_request_bytes` integer: Max serialized execute `params` size in bytes (default 256 KiB).
    - `max_response_bytes` integer: Max upstream response body bytes (default 1 MiB, hard cap 4 MiB).
    - `allowed_request_headers` string[]: Agent-supplied headers permitted in execute params (http, graphql, custom and grpc bindings); any other agent header is dropped. Defaults to content-type, accept, user-agent, idempotency-key. On grpc bindings the `grpc-*` and `connect-*` protocol headers (for example `Connect-Protocol-Version`, `grpc-timeout`) always pass, except names containing `auth` or `host`.
    - `allow_mutations` boolean: GraphQL only — when false, mutation operations return 403 guardrail_violation.
    - `allow_introspection` boolean: GraphQL only — when false, __schema/__type introspection is blocked.
    - `max_query_depth` integer: GraphQL max selection depth.
    - `max_aliases` integer: GraphQL max alias count.
    - `allowed_operations` string[]: GraphQL operation kinds allowed (query, mutation, subscription).
  - `is_active` boolean, required
  - `credential_set` boolean: Whether a credential is stored for this binding. The value itself is never returned.
  - `credential_source_type` 'inline' | 'vault_ref', nullable: How the credential is sourced — inline (HSM-encrypted copy) or vault_ref (live pointer).
  - `credential_vault_id` string, uuid, nullable: For vault_ref credentials — the vault containing the referenced secret.
  - `credential_path` string, nullable: For vault_ref credentials — the secret path in the referenced vault.
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required

## Other responses

- `404`: Resource not found

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)