---
title: "List bindings"
method: GET
path: "/v1/agents/{agent_id}/bindings"
tags: ["Execution Intents"]
---

# List bindings

`GET /v1/agents/{agent_id}/bindings`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/agents/{agent_id}/bindings`
- Auth: HTTP bearer

## Path parameters

- `agent_id` string, uuid, required

## Response `200`

Binding list

- object
  - `bindings` BindingResponse[], required
    - `id` string, uuid, required
    - `agent_id` string, uuid, required
    - `binding_type` 'http' | 'graphql' | 'postgres' | 'mysql' | 'redis' | 'grpc' | 'smtp' | 'cloud_sdk' | 's3' | 'custom', required
    - `name` string, required
    - `config` object
    - `guardrails` BindingGuardrails: Per-binding execution guardrails enforced at execute time.
      - `allowed_hosts` string[]: Host allowlist (trailing * wildcard supported). Empty = unrestricted at binding level.
      - `allowed_paths` string[]: Path allowlist for HTTP/GraphQL bindings.
      - `max_requests_per_minute` integer: Per-binding RPM; strictest of binding and agent limits wins. Denied executions do not count.
      - `max_duration_ms` integer: Upstream timeout cap for this binding.
      - `max_request_bytes` integer: Max serialized execute `params` size in bytes (default 256 KiB).
      - `max_response_bytes` integer: Max upstream response body bytes (default 1 MiB, hard cap 4 MiB).
      - `allowed_request_headers` string[]: Agent-supplied headers permitted in execute params. Defaults to content-type, accept, user-agent, idempotency-key.
      - `allow_mutations` boolean: GraphQL only — when false, mutation operations return 403 guardrail_violation.
      - `allow_introspection` boolean: GraphQL only — when false, __schema/__type introspection is blocked.
      - `max_query_depth` integer: GraphQL max selection depth.
      - `max_aliases` integer: GraphQL max alias count.
      - `allowed_operations` string[]: GraphQL operation kinds allowed (query, mutation, subscription).
    - `is_active` boolean, required
    - `credential_set` boolean: Whether a credential is stored for this binding. The value itself is never returned.
    - `credential_source_type` 'inline' | 'vault_ref', nullable: How the credential is sourced — inline (HSM-encrypted copy) or vault_ref (live pointer).
    - `credential_vault_id` string, uuid, nullable: For vault_ref credentials — the vault containing the referenced secret.
    - `credential_path` string, nullable: For vault_ref credentials — the secret path in the referenced vault.
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required

## Other responses

- `403`: Insufficient permissions

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/ae109b496830?raw)