Skip to main content
GET
Get the agent kill switch

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Response

The current state of the kill switch.

AgentKillSwitch Object

Description

The org-level agent kill switch, and the activation that is in force or last was.

active is what matters; the rest is the record of how it got that way. An activation is in force only while it has not been deactivated AND expires_at is still in the future, and that is evaluated on every read - so active can be false on a row that was never explicitly turned off.

Everything below active describes the LATEST activation whether or not it is still in force, so an admin reading an inactive switch can still see who last turned it on and when it ended.

active
boolean
required

Whether agent tool calls are being denied right now. This is the field to read; it already accounts for expiry.

activated_at
string<date-time>

When the latest activation was turned on. Absent if it never has been.

activated_by_user_id
string<uuid>

The admin who turned it on. Absent when that user has since been hard-deleted - the activation record outlives them deliberately.

expires_at
string<date-time>

When the latest activation stops denying on its own. In the past for an activation that already ran out.

deactivated_at
string<date-time>

When the latest activation was turned off before its expiry, either by an admin or by being superseded. Absent when it ended at expires_at, or has not ended.

reason
string

The admin's stated reason. Not an internal note - it is shown to the developer whose tool call is denied, in their own terminal.