From e3ae2a719f3e66c4a9f155a5e733d5121552873c Mon Sep 17 00:00:00 2001 From: braginini Date: Mon, 31 Aug 2026 11:14:27 +0200 Subject: [PATCH] Rename the Agent Network self-service route to /agent-network/agent-config The endpoint returns the config a local AI tool needs, so name it for that rather than for the caller-scoped "me" prefix. --- agent-network/README.md | 2 +- .../internals/modules/agentnetwork/handlers/me_handler.go | 2 +- shared/management/http/api/openapi.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/agent-network/README.md b/agent-network/README.md index c5211e2a0..029ada299 100644 --- a/agent-network/README.md +++ b/agent-network/README.md @@ -118,7 +118,7 @@ Two roles delegate Agent Network access without account-admin rights: through the self-scoped endpoints below. Every authenticated user, regardless of role, can read the caller-scoped -self-service endpoint `GET /api/agent-network/me/setup` (the endpoint, providers, +self-service endpoint `GET /api/agent-network/agent-config` (the endpoint, providers, and models the caller's own policies allow — what a local AI tool needs and nothing more). The regular usage and access-log endpoints self-scope instead of denying: a caller without the account-wide grant gets their own rows back, so "my usage" diff --git a/management/internals/modules/agentnetwork/handlers/me_handler.go b/management/internals/modules/agentnetwork/handlers/me_handler.go index aa1ba08e9..9b05a5031 100644 --- a/management/internals/modules/agentnetwork/handlers/me_handler.go +++ b/management/internals/modules/agentnetwork/handlers/me_handler.go @@ -18,7 +18,7 @@ import ( // the regular usage/logs endpoints, which self-scope for callers without // the account-wide grants. func (h *handler) addMeEndpoints(router *mux.Router) { - router.HandleFunc("/agent-network/me/setup", h.getMySetup).Methods("GET", "OPTIONS") + router.HandleFunc("/agent-network/agent-config", h.getMySetup).Methods("GET", "OPTIONS") } func (h *handler) getMySetup(w http.ResponseWriter, r *http.Request) { diff --git a/shared/management/http/api/openapi.yml b/shared/management/http/api/openapi.yml index 5450b51b9..4cb9129f5 100644 --- a/shared/management/http/api/openapi.yml +++ b/shared/management/http/api/openapi.yml @@ -13852,7 +13852,7 @@ paths: "$ref": "#/components/responses/forbidden" '500': "$ref": "#/components/responses/internal_error" - /api/agent-network/me/setup: + /api/agent-network/agent-config: get: summary: Retrieve the caller's Agent Network setup description: Returns everything the caller needs to configure a local AI tool and nothing more - the account's Agent Network endpoint plus the providers and models the caller's own policies allow. Available to every authenticated user regardless of role; the response never contains provider credentials, policy or guardrail configuration, or providers the caller cannot reach.