---
title: "Read actual company fallback settings and recorded outages"
method: GET
path: "/v1/protocol/commerce/connected/business-central/{connectionId}/safety-settings"
---

# Read actual company fallback settings and recorded outages

`GET /v1/protocol/commerce/connected/business-central/{connectionId}/safety-settings`

## Request

- Base URL: `https://api.decionis.com`
- URL: `https://api.decionis.com/v1/protocol/commerce/connected/business-central/{connectionId}/safety-settings`
- Auth: HTTP bearer

Default off; requires COMMERCE_MCP_OAUTH_CONNECTED_ENABLED, the exact fresh nine-scope v3 consent, current Microsoft purchase and membership, and signed supported-source eligibility. It never upgrades a legacy v1 or v2 grant. Also requires COMMERCE_MCP_BUSINESS_CENTRAL_NATIVE_ENABLED and a separately verified current company connection/native read grant within the purchaser tenant extracted by Accounts. No caller-supplied tenant, economics or source URL is accepted. Eight-second deadline and fixed bounded source reads apply. Requires erp:read. Reads enabled status and provider-observed can_configure; enabled remains read-only.

## Path parameters

- `connectionId` string, uuid, required

## Query parameters

- `org_id` string, uuid, required

## Response `200`

Bounded private result

- CommerceNativeSafetyResponse
  - `version` 'commerce-native-bc-safety-v1', required
  - `org_id` string, uuid, required
  - `connection_id` string, uuid, required
  - `connection_revision` integer, required
  - `status` object, required
    - `version` 'decionis.business_central.guard.status.v1', required
    - `connection_id` string, uuid, required
    - `settings_id` string, uuid, required
    - `etag` string, required
    - `observed_at` string, date-time, required
    - `enabled` boolean, required
    - `fallback_mode` 'FAIL_OPEN' | 'FAIL_CLOSED', required
    - `default_fallback_mode` 'FAIL_OPEN', required
    - `configured` boolean, required
    - `can_configure` boolean, required
    - `preflight_readiness` object
      - `version` 'bc_native_preflight_readiness_v1', required
      - `profile_configured` boolean, required
      - `missing` string[], required
      - `document_evidence_required` true, required
    - `consecutive_failures` integer, required
    - `circuit_open_until` string, date-time, nullable, required
    - `last_configuration_operation_id` string, uuid, nullable, required
    - `timeout_ms` 150, required
    - `intercepts` unknown[], required
      - unknown
    - `outage_scope` 'fail_open_availability_only', required
  - `outages` object, required
    - `version` 'decionis.business_central.guard.outages.v1', required
    - `connection_id` string, uuid, required
    - `observed_at` string, date-time, required
    - `scope` 'fail_open_availability_only', required
    - `records` object[], required
      - `id` string, uuid, required
      - `created_at` string, date-time, required
      - `failure_type` 'HTTP_5XX' | 'CIRCUIT_OPEN' | 'TRANSPORT_FAILURE', required
      - `attempts` integer, required
      - `processed` boolean, required
    - `coverage` object, required
      - `limit` 50, required
      - `complete` boolean, required
      - `truncated` boolean, required
  - `execution_available` false, required

## Other responses

- `400`: Invalid, oversized or conflicting request fields
- `401`: Authentication required
- `403`: Current signed authority, source, scope, role or company permission denied
- `404`: Authorized source, document or evidence unavailable
- `409`: Exact source, policy, evidence or idempotency binding changed; an uncertain write is never retried
- `429`: Request rate limit reached
- `503`: Default-off capability or required dependency unavailable

---

[API](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api.md) · [All operations](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/llms.txt) · [OpenAPI document](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/revisions/357f5e459d0c?raw)