Agentsai-org
GET/groups/{group_id}/ai-org/revisions/{number}
One revision of the organization, by number.
get_ai_org_revision
ai_org:read
A token needs theai_org:readscope: Read an AI organization, its agents, sessions and usageGranted byread_api,write_api.Every operation this scope unlocks
Returns the revision's full configuration. Reporters and above of the top-level group may read it.
Parameters
Path
- group_idGroupId (string · uuid)The organization's top-level group
- numberinteger · int64The revision's number
Responses
200The revisionapplication/json
- author_kindAiRevisionAuthorpersonagentplatform
bodyOrgConfig
- The OrgConfig schema
autonomyAutonomyConfig
- The AutonomyConfig schema
- levelAutonomyLevelsupervisedgatedautonomousHow much an organization may do without asking: a named preset for every gate, each of which can still be set on its own.
budgetsBudgets
- The Budgets schema
- org_monthly_cap_microsinteger · int640–∞All model usage and fees of the organization per calendar month in UTC. Required.
- agent_daily_cap_microsinteger · int64 or nulloptional0–∞
- session_cap_microsinteger · int64 or nulloptional0–∞
structureOrgStructure
- The OrgStructure schema
- levelStructureLevelL1L2L3The organization's shape:
L1is engineers in one squad,L2adds squads each led by a product owner,L3adds a director across the squads. - boardarray of UserId (string · uuid)optionalBesides the root group's Owners, who are always on it.
agentsarray of AgentConfigoptional
- The AgentConfig schema
- display_nameAgentDisplayName (string)
- handleAgentHandle (string)
- keyAgentKey (string)
- positionPositionengineerreviewerproduct_ownerdirectorrelease_managertechnical_writerAn agent's job, which decides what it may do and which model tier it uses by default.
- squadSquadKey (string)
- specialisationSpecialisationbackendfrontendinfrastructurecli_and_toolingqualityor nulloptionalAn engineer's specialisation, which shapes the work it is given.
- wip_limitinteger · int32 or nulloptional0–∞
modelsarray of PositionRoutingoptionalPinned.
- The PositionRouting schema
- positionPositionengineerreviewerproduct_ownerdirectorrelease_managertechnical_writerAn agent's job, which decides what it may do and which model tier it uses by default.
- tierAiModelTiermost_capablestandardeconomicalA model tier: the most capable, the standard, or the economical model in the organization's region.
- modelAiModelKey (string) or nulloptionalAn exact model, which stays exact until the provider retires it.
pipelinesPipelinePolicyoptionalOrdered.
- The PipelinePolicy schema
- agent_codeAgentCodeTrustuntrustedtrustedoptionalWhether a run of code an agent wrote, or a run an agent started, gets the repository's connections, secrets, cloud roles and build cache.
squadsarray of SquadConfigoptional
- The SquadConfig schema
- keySquadKey (string)
- leadAgentKey (string)
- nameSquadName (string)
- repositoriesarray of RepositoryId (string · uuid)optional
trackerTrackerConfigoptional
- The TrackerConfig schema
- kindAiTrackergitmoapjiratrello
triggersTriggerAllowListoptional
- The TriggerAllowList schema
- principalsarray of PrincipalId (string · uuid)optional
- body_digeststringHex SHA-256 of the canonical body; two revisions with one digest are one configuration.
- created_atstring · date-time
created_byActorSummary
- The ActorSummary schema
- emailstring
- idstring
- usernamestring
- avatar_urlstring or nulloptional
- numberinteger · int64
- org_idAiOrgId (string · uuid)
- revision_idAiOrgRevisionId (string · uuid)
- stateAiRevisionStatedraftproposedpublishedsupersededdeclined
- updated_atstring · date-time
- parent_numberinteger · int64 or nulloptionalThe revision this one was edited from.
- published_atstring · date-time or nulloptional
published_byActorSummary or nulloptional
- The ActorSummary schema
- emailstring
- idstring
- usernamestring
- avatar_urlstring or nulloptional
200 exampleSynthesized example
{
"author_kind": "person",
"body": {
"autonomy": {
"level": "supervised",
"gates": [
{
"gate": "merge_protected",
"setting": "ask"
}
]
},
"budgets": {
"org_monthly_cap_micros": 88,
"agent_daily_cap_micros": 28,
"session_cap_micros": 57
},
"structure": {
"level": "L1",
"board": [
"c9d8e7f6-a5b4-4c3d-9e2f-1a0b9c8d7e6f",
"a3f1c2d4-5e6f-4a7b-8c9d-0e1f2a3b4c5d"
]
},
"agents": [
{
"display_name": "Lin Park",
"handle": "handle-941d",
"key": "key-c718",
"position": "engineer",
"squad": "squad-30b4"
},
{
"display_name": "Tomás Reyes",
"handle": "handle-d424",
"key": "key-0a25",
"position": "engineer",
"squad": "squad-bb5d"
}
],
"models": [
{
"position": "engineer",
"tier": "most_capable"
},
{
"position": "engineer",
"tier": "most_capable"
}
],
"pipelines": {
"agent_code": "untrusted"
},
"squads": [
{
"key": "key-cf00",
"lead": "lead-6ccf",
"name": "payments-api"
},
{
"key": "key-4563",
"lead": "lead-8ed7",
"name": "payments-api"
}
],
"tracker": {
"kind": "gitmoap"
},
"triggers": {
"principals": [
"fa30f9ef-7107-4433-9f84-9e9a6cb3c5f4",
"2088ea4f-5c56-49bf-8417-5d6528a67098"
]
}
},
"body_digest": "body-digest-8051",
"created_at": "2026-10-09T11:39:11Z",
"created_by": {
"email": "tomas@acme.example",
"id": "id-932e",
"username": "mara",
"avatar_url": "https://gitmoap.example/acme/5201862d"
},
"number": 17,
"org_id": "5882456c-bb0f-4239-9ac8-19b484cbbf10",
"revision_id": "6f8a48f9-0695-4e73-b50d-16943681f621",
"state": "draft",
"updated_at": "2026-10-08T16:06:55Z",
"parent_number": 14,
"published_at": "2026-10-12T04:25:09Z",
"published_by": {
"email": "tomas@acme.example",
"id": "id-0f8d",
"username": "lin",
"avatar_url": "https://gitmoap.example/acme/d28b9aa6"
}
}
400Bad request — a path parameter is not a well-formed value of its typeapplication/json
Error codes
- BAD_REQUESTThe request is malformed: a parameter or a body field is not a well-formed value of its type
errorErrorBody
- The ErrorBody schema
- codestringThe coarse category, tied to the status:
NOT_FOUND,CONFLICT,INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all. - messagestringWhat went wrong, for a person. Written to be read, not parsed: match on
reasonorcode. - fieldstring or nulloptionalOn a
400that refused one field's value, the field, as its JSON path:email,items[0].name. Put the message under that input. Absent on every other error. - reasonstring or nulloptionalThe specific code, when the error has one:
LAST_ORGANIZATION_OWNER,BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and oncodeotherwise. - required_scopestring or nulloptionalThe scope the access token was missing, on
INSUFFICIENT_SCOPE. - violationsanyoptionalPresent on the structured-validation errors (
PROVIDER_VALIDATION_FAILEDper-node,PIPELINE_VALIDATION_FAILEDDAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
400 exampleSynthesized example
{
"error": {
"code": "code-9590",
"message": "Inline scalar newtypes but keep their brand"
}
}
401Unauthenticated — no credential, or an invalid oneapplication/json
Error codes
- UNAUTHORIZEDNo credential was sent, or the one sent is invalid, expired or revoked
errorErrorBody
- The ErrorBody schema
- codestringThe coarse category, tied to the status:
NOT_FOUND,CONFLICT,INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all. - messagestringWhat went wrong, for a person. Written to be read, not parsed: match on
reasonorcode. - fieldstring or nulloptionalOn a
400that refused one field's value, the field, as its JSON path:email,items[0].name. Put the message under that input. Absent on every other error. - reasonstring or nulloptionalThe specific code, when the error has one:
LAST_ORGANIZATION_OWNER,BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and oncodeotherwise. - required_scopestring or nulloptionalThe scope the access token was missing, on
INSUFFICIENT_SCOPE. - violationsanyoptionalPresent on the structured-validation errors (
PROVIDER_VALIDATION_FAILEDper-node,PIPELINE_VALIDATION_FAILEDDAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
401 exampleSynthesized example
{
"error": {
"code": "code-6af9",
"message": "Draw the region map from operation density"
}
}
403Forbidden — the caller's access level or token scope is insufficientapplication/json
Error codes
- FORBIDDENYou are signed in but may not do this here;
reasonnames the permission or the rule that refused it - INSUFFICIENT_SCOPEThe access token lacks the scope this operation needs;
required_scopenames it - PERMISSION_REQUIREDYou need a permission you do not hold here; the message names it
errorErrorBody
- The ErrorBody schema
- codestringThe coarse category, tied to the status:
NOT_FOUND,CONFLICT,INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all. - messagestringWhat went wrong, for a person. Written to be read, not parsed: match on
reasonorcode. - fieldstring or nulloptionalOn a
400that refused one field's value, the field, as its JSON path:email,items[0].name. Put the message under that input. Absent on every other error. - reasonstring or nulloptionalThe specific code, when the error has one:
LAST_ORGANIZATION_OWNER,BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and oncodeotherwise. - required_scopestring or nulloptionalThe scope the access token was missing, on
INSUFFICIENT_SCOPE. - violationsanyoptionalPresent on the structured-validation errors (
PROVIDER_VALIDATION_FAILEDper-node,PIPELINE_VALIDATION_FAILEDDAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
403 exampleSynthesized example
{
"error": {
"code": "code-1e9b",
"message": "Pin a page's payload to the build that rendered it"
}
}
404Not found — or found and private, which is masked as absentapplication/json
Error codes
- NOT_FOUNDThe resource does not exist — or exists and you cannot see it: a private resource you have no access to answers exactly as an absent one does
errorErrorBody
- The ErrorBody schema
- codestringThe coarse category, tied to the status:
NOT_FOUND,CONFLICT,INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all. - messagestringWhat went wrong, for a person. Written to be read, not parsed: match on
reasonorcode. - fieldstring or nulloptionalOn a
400that refused one field's value, the field, as its JSON path:email,items[0].name. Put the message under that input. Absent on every other error. - reasonstring or nulloptionalThe specific code, when the error has one:
LAST_ORGANIZATION_OWNER,BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and oncodeotherwise. - required_scopestring or nulloptionalThe scope the access token was missing, on
INSUFFICIENT_SCOPE. - violationsanyoptionalPresent on the structured-validation errors (
PROVIDER_VALIDATION_FAILEDper-node,PIPELINE_VALIDATION_FAILEDDAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
404 exampleSynthesized example
{
"error": {
"code": "code-d341",
"message": "Inline scalar newtypes but keep their brand"
}
}
CLI
gitmoap ai-org get-ai-org-revision
- --group-ididThe organization's top-level group (id or group path)
- --numbernumberThe revision's number