Get Agent Access settings for the current tenant.
curl --request GET \ --url https://auth.example.com/api/admin/settings/agent \ --header 'Authorization: Bearer <token>'Requires admin:agent_settings:read.
Authorizations
Section titled “Authorizations ”Responses
Section titled “ Responses ”Current effective Agent Access settings.
object
object
Authenticated MCP HTTP requests admitted per Grant and OAuth client each minute.
New MCP initialize requests admitted per Grant and OAuth client each minute; it cannot exceed requestRateLimitPerMinute.
Active stateful MCP sessions allowed per Grant and OAuth client.
Per-grant and per-Tool limit for explicitly opted-in standard-risk public Mode A calls; the effective limit never exceeds rateLimitPerMinute.
Known Admin permissions classified as high risk in addition to the built-in list.
Stable standard-risk Tool IDs explicitly enabled for public Mode A clients; read-only remains the default.
Reject this tenant when selected as a Bulk Plan canary.
Example
{ "settings": { "elevationMode": "self_reauth" }}Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}