diff --git a/agent-network/README.md b/agent-network/README.md index c5211e2a0..029ada299 100644 --- a/agent-network/README.md +++ b/agent-network/README.md @@ -118,7 +118,7 @@ Two roles delegate Agent Network access without account-admin rights: through the self-scoped endpoints below. Every authenticated user, regardless of role, can read the caller-scoped -self-service endpoint `GET /api/agent-network/me/setup` (the endpoint, providers, +self-service endpoint `GET /api/agent-network/agent-config` (the endpoint, providers, and models the caller's own policies allow — what a local AI tool needs and nothing more). The regular usage and access-log endpoints self-scope instead of denying: a caller without the account-wide grant gets their own rows back, so "my usage" diff --git a/management/internals/modules/agentnetwork/handlers/me_handler.go b/management/internals/modules/agentnetwork/handlers/me_handler.go index aa1ba08e9..9b05a5031 100644 --- a/management/internals/modules/agentnetwork/handlers/me_handler.go +++ b/management/internals/modules/agentnetwork/handlers/me_handler.go @@ -18,7 +18,7 @@ import ( // the regular usage/logs endpoints, which self-scope for callers without // the account-wide grants. func (h *handler) addMeEndpoints(router *mux.Router) { - router.HandleFunc("/agent-network/me/setup", h.getMySetup).Methods("GET", "OPTIONS") + router.HandleFunc("/agent-network/agent-config", h.getMySetup).Methods("GET", "OPTIONS") } func (h *handler) getMySetup(w http.ResponseWriter, r *http.Request) { diff --git a/shared/management/http/api/openapi.yml b/shared/management/http/api/openapi.yml index 5450b51b9..4cb9129f5 100644 --- a/shared/management/http/api/openapi.yml +++ b/shared/management/http/api/openapi.yml @@ -13852,7 +13852,7 @@ paths: "$ref": "#/components/responses/forbidden" '500': "$ref": "#/components/responses/internal_error" - /api/agent-network/me/setup: + /api/agent-network/agent-config: get: summary: Retrieve the caller's Agent Network setup description: Returns everything the caller needs to configure a local AI tool and nothing more - the account's Agent Network endpoint plus the providers and models the caller's own policies allow. Available to every authenticated user regardless of role; the response never contains provider credentials, policy or guardrail configuration, or providers the caller cannot reach.