AY Developer docs
ApiAgents

Update guardrails

Merges the given fields into the agent's `config`. `kill_switch: true` halts every agent call (`403 AGENT_HALTED`) and deactivates the Zitadel machine user; `false` restores both. `daily_limit_eur` caps the sum of today's transactions (`403 DAILY_LIMIT_EXCEEDED`).

PATCH
/agents/{id}/config

Merges the given fields into the agent's config. kill_switch: true halts every agent call (403 AGENT_HALTED) and deactivates the Zitadel machine user; false restores both. daily_limit_eur caps the sum of today's transactions (403 DAILY_LIMIT_EXCEEDED).

Authorization

BearerAuth
AuthorizationBearer <token>

Owner token: the OIDC id_token of the signed-in user (Zitadel). Owners manage agents with it; agents never use it. Add X-Act-As: <business id> to act for a business you are a member of.

In: header

Path Parameters

id*string

Agent id.

Formatuuid

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Guardrails. Unknown fields are dropped.

Response Body

application/json

application/json

application/json

application/json

curl -X PATCH "https://example.com/agents/497f6eca-6276-4993-bfeb-53cbbbba6f08/config" \  -H "Content-Type: application/json" \  -d '{}'
{  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",  "config": {    "kill_switch": true,    "daily_limit_eur": 0,    "max_spend_per_tx_eur": 0  }}