getSecurityTargetControlState
GET/security/targets/agent/:agentId/control-state
Requires security:read and current explicit agent scope. Effective hold, barrier, worker acknowledgement and unknown external work are separate facts.
Request
Responses
- 200
- 401
- 403
- 404
- 500
Effective agent hold, shared barriers and runtime acknowledgement, and deduplicated work counts.
Response Headers
Successful security responses must not be cached.
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.
Missing, invalid, disabled, revoked, or unavailable service credential; HTTPS is required by default. Includes the Bearer authentication challenge.
Response Headers
Present on authentication failures; a POST rejected by the locked credential recheck has no challenge.
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.
security_permission_denied: missing required security permission.
Response Headers
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.
Unknown, wrong-Organization, or out-of-scope target; indistinguishable to the caller. A concurrent target ownership change uses error/message with target_not_found; ordinary missing lookups use detail.
Response Headers
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.
Unexpected server failure. Retain error_id for support; do not assume a timed-out or failed create was never accepted.
Response Headers
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.