---
title: "Enable mTLS Enforcement for an Agent Pool"
method: POST
path: "/agent-pools/{agent_pool}/actions/enable-mtls-enforcement"
tags: ["agent-pools-mtls-certificates"]
---

# Enable mTLS Enforcement for an Agent Pool

`POST /agent-pools/{agent_pool}/actions/enable-mtls-enforcement`

Once enabled, all agent sessions connecting to this pool must present a valid
mTLS client certificate signed by the Scalr platform. Sessions without a
verified certificate are rejected with ``401 Unauthorized``.

## Path parameters

- `agent_pool` string, required

## Response `204`

mTLS enforcement enabled successfully.

## Other responses

- `403` — User unauthorized to perform this action.
- `404` — Agent pool not found or user unauthorized.
- `409` — mTLS enforcement is already enabled.
- `422` — mTLS enforcement feature not available for this account.
- `4XX` — Client error.
- `5XX` — Server error.

---

[API](https://skmtc.net/scalr/apis/scalr-iacp-api.md) · [All operations](https://skmtc.net/scalr/apis/scalr-iacp-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/scalr/scalr-iacp-api/versions/fc927526ad12/schema)