---
title: "Fetch agent trust constraints"
method: GET
path: "/v1/agents/{agent_id}/constraints"
tags: ["Agent Environment", "Trust Runtime"]
---

# Fetch agent trust constraints

`GET /v1/agents/{agent_id}/constraints`

Returns the agent's trust constraints (Dome guard config, tool permissions, organization rules, enforcement mode) in the format consumed by the vijil-sdk Trust Runtime at boot.

## Path parameters

- `agent_id` string, uuid, required

## Response `200`

Successful Response

- AgentConstraints — Full constraint set for a single agent — what the SDK fetches at boot.
  - `agent_id` string, required
  - `dome_config` DomeGuardConfig, required — Dome guardrail configuration shape consumed by the SDK at boot.
    - `input_guards` string[], required
    - `output_guards` string[], required
    - `guards` object, required
  - `tool_permissions` ToolPermission[], required
    - `name` string, required
    - `identity` string, required
    - `endpoint` string, required
    - `allowed_actions` string[], nullable
  - `organization` OrganizationConstraints, required — Organization-level policy constraints applied to all agents in the org.
    - `required_input_guards` string[], required
    - `required_output_guards` string[], required
    - `denied_tools` string[], required
    - `max_model_tier` string, nullable
  - `enforcement_mode` 'warn' | 'enforce', required
  - `updated_at` string, date-time, required

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/vijilai/apis/vijil-console-api-combined.md) · [All operations](https://skmtc.net/vijilai/apis/vijil-console-api-combined/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/vijilai/vijil-console-api-combined/versions/a8b2ee2b2d06/schema)