Protection

Replace thresholds settings

PUT replaces the entire thresholds block (warn / quarantine / block trip points (warn ≤ quarantine ≤ block, ∈ [0, 1])). The current spec at the org scope is read; the new thresholds is spliced in; the merged spec is validated; recompose is triggered. Requires Idempotency-Key and If-Match. Async fan-out — the response carries agents_flagged_for_recompose. Authorization: the caller must be an owner/admin of the organization named by org_id (or a platform admin); any other caller, including every non-member and any caller naming an org id that does not exist, receives 403 and no other tenant's manifest can be changed.

put/protection/org/{org_id}/thresholds

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/protection/org/{org_id}/thresholds
  • Auth: one of:
    • HTTP bearer
    • API key in header X-Mnemom-Api-Key
    • API key in cookie mnemom_session

Path parameters

org_idstring required

Organization identifier (e.g. org-abc12345)

Headers

Idempotency-Keystring required

Client-supplied idempotency token. Replays within 24 hours return the stored result verbatim. See ADR-023.

If-Matchstring required

Optimistic concurrency token. Pass the ETag from a recent GET ("sha256:<hex64>" shape). A stale ETag returns 412 Precondition Failed; a missing header returns 428 Precondition Required. See RFC 9110 §13.1.1.

Request body

warnnumber required
quarantinenumber required
blocknumber required

Response

The thresholds primitive was updated at the org scope.

oktrue required
scope'org' required
scope_idstring required
resource'protection' required
primitive'thresholds' required
verb'put' | 'patch' required
content_hashstring required

New sha256:<hex64> of the spec at this scope after the write.

agents_flagged_for_recomposeinteger
_warningsobject

Pre-existing structural issues outside the modified primitive. Present only when the existing spec carries unrelated validation problems; never blocks the write.

Changes

No recorded changes to this operation across all 1 revision of this API.