Hanzo
OpenapiGateway

Read returns the EFFECTIVE edge policy the caller is subject to: the platform…

Read returns the EFFECTIVE edge policy the caller is subject to: the platform CORS allowlist and pre-auth per-IP flood cap in force, plus the caller's own…

GET /v1/gateway/config

Addresshttps://api.hanzo.ai/v1/gateway/config
MethodGET
Operationget_gateway_config
AuthAuthorization: Bearer $HANZO_API_KEY

Read returns the EFFECTIVE edge policy the caller is subject to: the platform CORS allowlist and pre-auth per-IP flood cap in force, plus the caller's own authenticated rate ceiling, edge-cache TTLs and accepted-method allowlist. A SuperAdmin may inspect a specific tenant's effective policy with ?org=<slug>.

Request

GET /v1/gateway/config takes no parameters and no body — the credential is the whole request.

Response

StatusBodyMeaning
200Policyok

200 body — 11 fields.

FieldInTypeAlwaysDescription
cache_pathsbodyobjectCachePaths overrides CacheTTLSec per path PREFIX (key "/v1/models" → seconds).
cache_paths.*bodyinteger
cache_ttl_secbodyintegerCacheTTLSec is the org's default edge-cache TTL for its responses, in seconds; 0 means no caching.
cors_originsbodystring[]CORSOrigins is the PLATFORM-scope CORS allowlist EdgeCORS admits: an exact origin, a bare host, or a "*.host" wildcard.
methodsbodystring[]Methods is the allowlist of HTTP methods the edge accepts for this org.
modebodystringMode is the abuse gate's posture for THIS scope: "shadow" scores traffic and records the verdict without acting on it, "live" enforces it. Unset means shadow.
org_rpmbodyintegerOrgRPM is the org's OWN authenticated rate ceiling, requests per minute, as ScopeRateLimit enforces it.
per_ip_rpmbodyintegerPerIPRPM is the PLATFORM-scope pre-auth flood cap: requests EdgeRateLimit admits per WindowSec from one client IP.
updated_atbodyintegerUpdatedAt is the unix second this policy row was last written.
updated_bybodystringUpdatedBy is the validated user id that wrote this policy row.
window_secbodyintegerWindowSec is the window PerIPRPM is counted over, in seconds.

Failure carries the platform error shape — see Errors.

Examples

hanzo gateway config get

Gateway API · All Hanzo APIs · Interactive reference

How is this guide?

On this page