---
title: "Read the intentionally public safe installation descriptor"
method: GET
path: "/buzz-community-installation-descriptors/v1/{buzz_community_installation_id}"
tags: ["Buzz Control Plane"]
---

# Read the intentionally public safe installation descriptor

`GET /buzz-community-installation-descriptors/v1/{buzz_community_installation_id}`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/buzz-community-installation-descriptors/v1/{buzz_community_installation_id}`
- Auth: none required

## Path parameters

- `buzz_community_installation_id` string, required

## Response `200`

Safe descriptor and public signed evidence only

- BuzzCommunityPublicDescriptor
  - `api_origin` string, uri, required
  - `buzz_community_installation_id` string, required
  - `buzz_community_subject` string, required
  - `content_hash` string, required
  - `default_for_enrollment` boolean, required
  - `descriptor_revision` integer, required
  - `issued_at` string, date-time, required
  - `org_id` string, required: The same Run402 organization id in its resource-qualified spelling. Used ONLY inside the community descriptor, which is content-hashed and published to the Buzz community where a bare UUID carries no type.
  - `provider` 'run402', required
  - `safe_policy_summary` BuzzSafePolicySummary, required
    - `mode` 'manual' | 'automatic', required
    - `requires_current_community_membership` true, required
    - `allowed_capabilities` string[], nullable, required: Exact effective capability allowlist, or null when none is configured.
    - `max_grant_ttl_seconds` integer, nullable, required: Exact effective enrollment grant TTL cap, or null when none is configured.
    - `owner_attested_agents` 'developer': The teammate door. Present only when agents attested by a current community owner or admin may join the installed organization as developers (`POST …/teammates`); absent when the door is closed. Its presence changes the descriptor's canonical bytes and content hash.
  - `status` 'active' | 'revoked', required
  - `approval_event` BuzzNostrEvent, required
    - `id` string, required
    - `pubkey` string, required
    - `created_at` integer, required: Signed NIP-01 event time; conversion would invalidate the event id and signature.
    - `kind` integer, required
    - `tags` array[], required
      - string[]
    - `content` string, required
    - `sig` string, required
  - `authority_membership` object, required
    - `event_id` string, required
    - `event_created_at` string, date-time, required
    - `role` 'owner' | 'admin', required
    - `observed_at` string, date-time, required
  - `relay_self` string, required

## Other responses

- `404`: Unknown or non-public descriptor

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)