---
title: "Enable mTLS Enforcement for an Agent Pool"
method: POST
path: "/agent-pools/{agent_pool}/actions/enable-mtls-enforcement"
tags: ["agent-pools-mtls-certificates"]
---

# Enable mTLS Enforcement for an Agent Pool

`POST /agent-pools/{agent_pool}/actions/enable-mtls-enforcement`

## Request

- Base URL: `https://example.scalr.io/api/iacp/v3`
- URL: `https://example.scalr.io/api/iacp/v3/agent-pools/{agent_pool}/actions/enable-mtls-enforcement`
- Auth: HTTP bearer

Once enabled, all agent sessions connecting to this pool must present a valid
mTLS client certificate signed by the Scalr platform. Sessions without a
verified certificate are rejected with ``401 Unauthorized``.

## Path parameters

- `agent_pool` string, required

## Response `204`

mTLS enforcement enabled successfully.

## Other responses

- `403`: User unauthorized to perform this action.
- `404`: Agent pool not found or user unauthorized.
- `409`: mTLS enforcement is already enabled.
- `422`: mTLS enforcement feature not available for this account.
- `4XX`: Client error.
- `5XX`: Server error.

---

[API](https://skmtc.dev/scalr/apis/scalr-iacp-api.md) - [All operations](https://skmtc.dev/scalr/apis/scalr-iacp-api/llms.txt) - [OpenAPI document](https://skmtc.dev/scalr/apis/scalr-iacp-api/revisions/d3e1dc85657a?raw)