---
title: "Client-side routes currently permitted"
method: GET
path: "/runtime-config"
tags: ["runtime-config"]
---

# Client-side routes currently permitted

`GET /runtime-config`

## Request

- Base URL: `https://api.dre.app` (the document declares no server; this is the origin it was published from)
- URL: `https://api.dre.app/runtime-config`
- Auth: none declared
- TypeScript: <https://skmtc.dev/dre/apis/dre-api/docs/runtime-config/get.ts> (a function with typed inputs; its response is checked against the schema)

An allow-list. The client enables a route only when its name is present, so a missing key, an empty array, a wrong type, a non-2xx or an unreachable server all disable every route. Response must never be shared-cached (`Cache-Control: private, no-store`).

## Response `200`

The permitted routes

- RuntimeConfigResponseDto
  - `enabledRoutes` RuntimeRoute[], required: Client-side routes the client is permitted to use. An allow-list: a route absent from this array is off, and so is every route when this response cannot be read at all.

## Other responses

- `403`: Sanctioned region
- `429`: Rate limited

## Changes

- **2026-09-08** `1ee8fdf15424`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/dre/apis/dre-api/changes/runtime-config/get.md)

---

[API](https://skmtc.dev/dre/apis/dre-api.md) - [All operations](https://skmtc.dev/dre/apis/dre-api/llms.txt) - [OpenAPI document](https://skmtc.dev/dre/apis/dre-api/revisions/af4c974abc44?raw)