---
title: "Evaluate an agent policy"
method: POST
path: "/v1/agent-policies/evaluate"
tags: ["S20 Agent Platform (beta)"]
---

# Evaluate an agent policy

`POST /v1/agent-policies/evaluate`

## Request

- Base URL: `https://api.brainiall.com`
- URL: `https://api.brainiall.com/v1/agent-policies/evaluate`
- Auth: HTTP bearer

Evaluates prompt-injection, PII and tool-permission policy before a workflow runs.

## Request body

- object
  - `input` string, required
  - `output` string
  - `tools` string[]
  - `policy` object
    - `allowed_tools` string[]
    - `block_prompt_injection` boolean
    - `block_pii` boolean
    - `redact_pii` boolean
    - `max_tool_calls` integer

## Response `200`

OK

- object

## Other responses

- `401`: Invalid or missing API key
- `429`: Rate limit or quota exceeded

---

[API](https://skmtc.dev/brainiall/apis/brainiall-specialist-ai-apis.md) · [All operations](https://skmtc.dev/brainiall/apis/brainiall-specialist-ai-apis/llms.txt) · [OpenAPI document](https://skmtc.dev/brainiall/apis/brainiall-specialist-ai-apis/revisions/e44fed29a7b5?raw)