Scopes API

Requires an admin bearer token.

GET /v1/scopes/{scope}/catalog

What a scope's compiled policy expands to: every tool it can reach, its data classes, its downstream agents, and its hop budget.

Query params: version (optional; omit for the latest compiled version)

Response (ScopeCatalog):

{
  "scope": "kb-search-agent",
  "version": 1,
  "tools": [
    {"ref": "mcp://kb.internal/search", "data_classes": ["kb.public", "kb.internal"], "privileged": false}
  ],
  "data_classes": {"reads": ["kb.public", "kb.internal", "account.read"], "writes": []},
  "downstream_agents": ["agent://ledger-agent"],
  "hop_budget": 4
}

404 if no compiled policy exists for that scope/version. Served read-through Redis (dag:{scope}:{version}) over an immutable Postgres row — a cache miss only costs latency, never correctness.

Related

• DAG Compiler
• Compiled Policy schema