Skip to main content
GET
List the organization's governance configurations

Authorizations

Authorization
string
header
required

A Barndoor API key, sent as Authorization: Bearer <key>. Keys are prefixed bdai_ and are opaque — do not attempt to decode one. Interchangeable with an OAuth 2.0 access token.

Response

The requested record

require_pricing_for_mappings
boolean
required
default_model_access
enum<string>

Org-wide posture for model access (BCP-3887).

Answers "what happens to a route that no applicable policy mentions?" — distinct from the policies themselves, which answer "who may use what".

Allow [blocked] is the historical behaviour and the Default. That default is not cosmetic: governance_config holds a row only for orgs that have already changed some governance setting, so [GovernanceConfigDb::get] returns GovernanceConfig::default() for most orgs and this enum decides their posture. It must agree with the column default in V70__default_model_access.sql; default_matches_column_default pins that.

Available options:
allow,
deny
require_routing_policy
boolean

Whether callers must address a routing policy rather than naming a model directly (BCP-4037).

false — the historical behaviour — is the Default, and must agree with the column default in V78__require_routing_policy.sql for the same reason [DefaultModelAccess] must agree with V70's: governance_config holds a row only for orgs that have changed some governance setting, so whether an org gets this default or the column's depends on whether a row happens to exist. default_matches_column_default pins both.

#[serde(default)] so config bodies written before this field existed — every current Terraform config and API client — keep deserialising, and keep meaning "off".