---
title: "Fetch agent trust constraints"
method: GET
path: "/v1/agents/{agent_id}/constraints"
tags: ["Agent Environment", "Trust Runtime"]
---

# Fetch agent trust constraints

`GET /v1/agents/{agent_id}/constraints`

## Request

- The document declares no server URL.
- Auth: none declared
- TypeScript: <https://skmtc.dev/vijilai/apis/vijil-console-api-combined/docs/v1/agents/:agent_id/constraints/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns the agent's trust constraints (Dome guard config, tool permissions, organization rules, enforcement mode) in the format consumed by the vijil-sdk Trust Runtime at boot.

## Path parameters

- `agent_id` string, uuid, required

## Response `200`

Successful Response

- AgentConstraints: Full constraint set for a single agent — what the SDK fetches at boot.
  - `agent_id` string, required
  - `dome_config` DomeGuardConfig, required: Dome guardrail configuration shape consumed by the SDK at boot.
    - `input_guards` string[], required
    - `output_guards` string[], required
    - `guards` object, required
  - `tool_permissions` ToolPermission[], required
    - `name` string, required
    - `identity` string, required
    - `endpoint` string, required
    - `allowed_actions` string[], nullable
  - `organization` OrganizationConstraints, required: Organization-level policy constraints applied to all agents in the org.
    - `required_input_guards` string[], required
    - `required_output_guards` string[], required
    - `denied_tools` string[], required
    - `max_model_tier` string, nullable
  - `enforcement_mode` 'warn' | 'enforce', required
  - `updated_at` string, date-time, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/vijilai/apis/vijil-console-api-combined.md) - [All operations](https://skmtc.dev/vijilai/apis/vijil-console-api-combined/llms.txt) - [OpenAPI document](https://skmtc.dev/vijilai/apis/vijil-console-api-combined/revisions/a8b2ee2b2d06?raw)