List A2A Cedar policies for a project in the authenticated org.
Returns the authenticated org's A2A Cedar policies for a project (project scope is encoded in the policy name prefix). Bearer-reachable read for human principals (user token or browser session) with at least the auditor org role; rsk_* API keys and BYOA OAuth-agent tokens carry no org role and are rejected 403. Strictly org-scoped.
Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.
In: header
Query Parameters
The project whose A2A policies to list (required).
Response Body
application/json
curl -X GET "https://example.com/api/factory/a2a/policies?projectId=string"{
"policies": [
{
"id": "string",
"orgId": "string",
"projectId": "string",
"name": "string",
"cedarText": "string",
"enabled": true,
"templateId": "string",
"templateInputs": {
"property1": null,
"property2": null
},
"createdAt": "string",
"updatedAt": "string"
}
]
}AF-compatible worker registration
AF-compatible registration endpoint. Accepts three auth modes: 1. `Authorization: Bearer rsk_live_*` or `rsp_live_*` (registration token in header). 2. Legacy `WORKER_API_KEY` (transitional; being removed). 3. User session cookie / `rsk_` API key with `projectId` in body (new-user onboarding). `projectAdmissionVersion: 2` makes `projectIds` authoritative, including explicit empty = serve none. When the version is absent, the platform uses the bounded legacy projection. Returns a `runtimeToken` (and `runtimeTokenExpiresAt`) for runtime-JWT-capable callers; legacy callers receive `null` for these fields.
List Cedar policies for the authenticated org.
Returns Cedar policies scoped to the authenticated org (policies.workspaceId), optionally filtered by status or scope. Human principals only: a browser session or a WorkOS user-token bearer is accepted; rsk_* API keys and BYOA OAuth-agent tokens authenticate but are rejected 403.