Protection

Replace trusted sources settings

PUT replaces the entire trusted_sources block (domain / agent / IP-range allow-list bypassing screening). The current spec at the platform scope is read; the new trusted_sources is spliced in; the merged spec is validated; recompose is triggered. Requires Idempotency-Key and If-Match. Async fan-out — the response carries agents_flagged_for_recompose.

put/protection/platform/{scope_id}/trusted_sources

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/protection/platform/{scope_id}/trusted_sources
  • Auth: one of:
    • HTTP bearer
    • API key in header X-Mnemom-Api-Key
    • API key in cookie mnemom_session

Path parameters

scope_id'default' required

Always default — the platform scope is a singleton; any other value returns 400 with care-framed guidance pointing at default.

Headers

Idempotency-Keystring required

Client-supplied idempotency token. Replays within 24 hours return the stored result verbatim. See ADR-023.

If-Matchstring required

Optimistic concurrency token. Pass the ETag from a recent GET ("sha256:<hex64>" shape). A stale ETag returns 412 Precondition Failed; a missing header returns 428 Precondition Required. See RFC 9110 §13.1.1.

Request body

domainsstring[] required
agent_idsstring[] required
ip_rangesstring[] required

Response

The trusted_sources primitive was updated at the platform scope.

oktrue required
scope'platform' required
scope_idstring required
resource'protection' required
primitive'trusted_sources' required
verb'put' | 'patch' required
content_hashstring required

New sha256:<hex64> of the spec at this scope after the write.

agents_flagged_for_recomposeinteger
_warningsobject

Pre-existing structural issues outside the modified primitive. Present only when the existing spec carries unrelated validation problems; never blocks the write.

Changes

No recorded changes to this operation across all 1 revision of this API.