Authentication: personal access token. The spec defines an api_key security
scheme — send an Authorization: ApiKey <your-personal-access-token> header
(value format: ApiKey <your key>). A session_cookie scheme (connect.sid)
exists for browser sessions. Operations in this spec declare security: [], an
artifact of the upstream spec generator — authentication is still enforced by the
server.
Responses
200 — Retrieved AI organization runtime settings
{
"results": {
"threadRetentionHours": 0,
"visibleDataAppModels": [
"opus"
],
"dataAppCodingAgent": "claude",
"defaultAiAgentModelOptions": [
{
"deprecated": true,
"supportsReasoning": true,
"default": true,
"groupLabel": "string",
"provider": "string",
"description": "string",
"displayName": "string",
"modelId": "string",
"name": "string"
}
],
"defaultAiAgentModelConfig": {
"reasoning": true,
"modelProvider": "string",
"modelName": "string"
},
"aiAgentReviewsAvailable": true,
"aiAgentReviewsEnabled": true,
"aiAgentMemoryEnabled": true,
"aiAgentsVisible": true,
"isTrial": true,
"isCopilotEnabled": true
},
"status": "ok"
}default — Error
{
"error": {
"data": "string",
"message": "string",
"name": "string",
"statusCode": 0
},
"status": "error"
}