Rensei docs
API ReferenceOrg

List host binary consents in the org, and what each consentable binary requires (org admin, humans only).

List host binary consents in the org, and what each consentable binary requires (org admin, humans only). - Rensei REST API operation reference.

GET
/api/org/{orgId}/bridge-consents

Authorization

headerAuthorizationBearer <rsk_live_*>

Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.

Path Parameters

orgId*string

Organization id (must match the authenticated org).

Query Parameters

hostId?string

Only this host (worker_hosts.id).

Length1 <= length
includeRevoked?string

1 = include revoked rows (evidence).

Value in"0""1"

Response Body

Consents (newest first) and the requirements of every binary with an accepted contract.

application/json
  1. response
consents*array<>
consentable*array<>
Example Request
curl -X GET 'https://app.rensei.ai/api/org/string/bridge-consents'
Example Response
{  "consents": [    {      "id": "string",      "hostId": "string",      "binaryName": "string",      "subcommandSet": [        "string"      ],      "subcommandSetSha256": "string",      "versionConstraint": "string",      "hostParams": {        "property1": "string",        "property2": "string"      },      "source": "string",      "consentedBy": "string",      "consentedAt": "string",      "revokedBy": "string",      "revokedAt": "string"    }  ],  "consentable": [    {      "binaryName": "string",      "subcommandSet": [        "string"      ],      "subcommandSetSha256": "string",      "contracts": [        {          "pluginId": "string",          "pluginVersion": "string",          "contractSha256": "string",          "subcommandSet": [            "string"          ]        }      ],      "hostParams": {        "property1": [          {            "type": "string",            "pattern": "string",            "minLength": 0,            "maxLength": 0,            "required": true,            "default": "string"          }        ],        "property2": [          {            "type": "string",            "pattern": "string",            "minLength": 0,            "maxLength": 0,            "required": true,            "default": "string"          }        ]      },      "contractVersionConstraints": [        "string"      ]    }  ]}

Mint a new rsk_ API key

Creates a new `rsk_live_*` token. The full token is returned **once** and is never stored in plaintext. - `projects: "all"` requires `org_keys:write` scope or org admin/owner role. - `projects: [...]` requires project membership for all listed project IDs. Canonical endpoint (supersedes deprecated `POST /api/org/api-keys`).

Consent one host to run one binary for the exact command set its accepted contracts need (org admin, humans only).

Records consented_by as the authenticated human. The subcommand set must equal the union of every accepted contract for the binary; a binary with no accepted contract is refused. Any change to a live consent is a new row with the old one revoked in the same transaction; re-sending the identical consent returns the live row with created=false.