Export the CP-published runtime projection for a tenant/environment or data plane.

GET

/v1/runtime/projection

Returns approved registered MCP server snapshots, sanitized tool input schemas, transport profiles, policy version metadata, and projection reload metadata. Stdio entries reference an approved stdio transport adapter profile; this endpoint never enables broad localhost bypass, arbitrary URL proxying, shell command strings, or secret material in schemas.

Authorizations

• oidc

Parameters

Query Parameters

tenant_id

required

string

>= 1 characters

environment_id

required

string

>= 1 characters

data_plane_id

string

>= 1 characters

if_none_match

string

>= 1 characters

Responses

200

Runtime projection contract for DP hot reload and local smoke fixtures.

object

schemaVersion

required

tenantId

required

string

>= 1 characters

environmentId

required

string

>= 1 characters

projectionVersion

required

string

>= 1 characters

activeProjectionVersion

required

string

>= 1 characters

desiredProjectionVersion

required

string

>= 1 characters

etag

required

string

>= 1 characters

source

required

object

kind

required

Allowed values: control_plane_export local_file

controlPlaneUrl

required

string format: uri

publishedAt

required

string format: date-time

publishedBy

string

>= 1 characters

snapshotIds

required

Array<string>

schemaRefs

required

Array<string>

reload

required

object

state

required

Allowed values: current reloading stale error

lastCheckedAt

required

string format: date-time

lastReloadedAt

required

string format: date-time

stale

required

object

isStale

required

boolean

staleAfter

required

string format: date-time

error

required

One of:

null

null

object

object

reasonCode

required

string

/^[a-z0-9_]+$/

message

required

string

>= 1 characters

retryable

required

boolean

servers

required

Array<object>

object

serverId

required

string

>= 1 characters

snapshotId

required

string

>= 1 characters

tenantId

required

string

>= 1 characters

environmentId

required

string

>= 1 characters

name

required

string

>= 1 characters

approvalStatus

required

registrationStatus

required

Allowed values: registered disabled deprecated

credentialMode

required

Allowed values: service_account user_delegated agent_scoped workload_mapped

transport

required

One of:

object

Any of:

unknown

unknown

object

object

Any of:

unknown

unknown

tools

required

Array<object>

>= 1 items

object

toolId

required

string

>= 1 characters

name

required

string

>= 1 characters

description

required

string

>= 1 characters

riskTier

required

Allowed values: low medium high critical

gatewayStatus

required

Allowed values: allowed denied_candidate

deniedReason

string

/^[a-z0-9_]+$/

inputSchemaRef

required

string

>= 1 characters

inputSchema

required

Sanitized MCP tool input schema returned by DP tools/list after policy filtering.

object

policyRefs

required

Array<string>

>= 1 items

policy

required

object

version

required

string

>= 1 characters

defaultDecision

required

denyBeatsAllow

required

discoveryHidesUnauthorizedTools

required

runtimeAuditExport

required

object

schemaVersion

required

ingestPath

required

material

required

events

required

Array<object>

object

eventId

required

string

>= 1 characters

requestId

required

string

>= 1 characters

tenantId

required

string

>= 1 characters

environmentId

required

string

>= 1 characters

serverId

required

string

>= 1 characters

toolId

required

string

>= 1 characters

projectionVersion

required

string

>= 1 characters

policyVersion

required

string

>= 1 characters

credentialMode

required

Allowed values: none service_account user_delegated agent_scoped workload_mapped

upstreamTransport

required

Allowed values: streamable_http legacy_sse stdio

decision

required

Allowed values: allow deny

outcome

required

Allowed values: succeeded denied failed

latencyMs

required

integer

statusCode

required

integer | null

>= 100

errorCategory

required

Allowed values: none policy_denied schema_invalid upstream_timeout upstream_error transport_error projection_stale

metadataOnly

required

rawArgsLogged

required

secretMaterialLogged

required

Headers

ETag

string

304

Projection has not changed for the supplied ETag.

403

Caller lacks runtime projection read permission for the scoped tenant/environment.