Organizations

List organizations

Returns the organizations in your account, newest first. A user sees only their own organization.

Query parameters

Responses

Request

curl 'https://api.agnt.ai/organizations' \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "organizations": [
    {
      "id": "6660c4a1f2e3b7d8a9c01234",
      "account": "account",
      "name": "Ava",
      "generalInfo": "generalinfo"
    }
  ]
}

Create an organization

Creates an organization. Called as a user, that user becomes its owner. Requires an account key or an organization admin.

Request body

Responses

Request

curl 'https://api.agnt.ai/organizations' \
  -X POST \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Ava"
}'

Response

{
  "ok": true,
  "organization": {
    "id": "6660c4a1f2e3b7d8a9c01234",
    "account": "account",
    "name": "Ava",
    "generalInfo": "generalinfo"
  }
}

Retrieve an organization

Retrieves an organization. Admins also get the full SSO and SCIM configuration; other members see whether SSO is enabled and enforced.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>' \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "organization": {
    "id": "6660c4a1f2e3b7d8a9c01234",
    "account": "account",
    "name": "Ava",
    "generalInfo": "generalinfo"
  }
}

Update an organization

Updates an organization. Only the fields you send change. `defaultTeam` is the team that organization-scoped provisioning places new users on. Requires an account key or an organization admin.

Path parameters

Request body

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>' \
  -X PUT \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Ava",
  "generalInfo": "generalinfo",
  "defaultTeam": "defaultteam",
  "defaultAssistant": "defaultassistant"
}'

Response

{
  "ok": true,
  "organization": {
    "id": "6660c4a1f2e3b7d8a9c01234",
    "account": "account",
    "name": "Ava",
    "generalInfo": "generalinfo"
  }
}

Delete an organization

Deletes an organization and its domains. Its users and teams stay in your account, and teams left with no members are deleted. Requires an account key or an organization admin.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>' \
  -X DELETE \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "organization": {
    "id": "6660c4a1f2e3b7d8a9c01234"
  }
}

List organization members

Returns the organization's users, newest first, with their organization role. `search` matches name and email.

Path parameters

Query parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/members' \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "members": [
    {
      "id": "6660c4a1f2e3b7d8a9c01234",
      "email": "[email protected]",
      "name": "Ava",
      "avatarUrl": "https://harborview.co",
      "organizationRole": "organizationrole",
      "createdAt": "2026-10-15T14:30:00Z"
    }
  ]
}

Add an organization member

Adds a user to the organization by email, creating the user if needed, and places them on the organization's default team when one is set. New users receive an invitation email. Requires an account key or an organization admin.

Path parameters

Request body

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/members' \
  -X POST \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "email": "[email protected]"
}'

Response

{
  "ok": true,
  "member": {
    "id": "6660c4a1f2e3b7d8a9c01234",
    "email": "[email protected]",
    "name": "Ava",
    "organizationRole": "organizationrole",
    "createdAt": "2026-10-15T14:30:00Z"
  }
}

Remove an organization member

Removes a user from the organization and its teams. The organization's only admin cannot be removed; promote another admin first.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/members/<userId>' \
  -X DELETE \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "member": {
    "id": "6660c4a1f2e3b7d8a9c01234"
  }
}

List domains

Returns the organization's domains, verified or not, each with the DNS TXT record that proves ownership. Requires an account key or an organization admin.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/domains' \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "domains": [
    {
      "id": "6660c4a1f2e3b7d8a9c01234",
      "domain": "harborview.co",
      "source": "manual",
      "verified": true
    }
  ]
}

Add a domain

Adds an unverified domain and returns the TXT record (`txtRecordName`, `txtRecordValue`) to publish in DNS. Then verify the domain. Requires an account key or an organization admin.

Path parameters

Request body

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/domains' \
  -X POST \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "domain": "harborview.co"
}'

Response

{
  "ok": true,
  "domain": {
    "id": "6660c4a1f2e3b7d8a9c01234",
    "domain": "harborview.co",
    "source": "manual",
    "verified": true
  }
}

Verify a domain

Looks up the domain's TXT record and marks the domain verified when the value matches. Until the record is visible in DNS, the call returns `400` and records `lastCheckedAt`; call it again after the record propagates.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/domains/<domainId>/verify' \
  -X POST \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "domain": {
    "id": "6660c4a1f2e3b7d8a9c01234",
    "domain": "harborview.co",
    "source": "manual",
    "verified": true
  }
}

Update a domain

Sets `autoJoin`: whether people who sign in with this verified domain join the organization automatically. Domains managed by SSO cannot be changed. Requires an account key or an organization admin.

Path parameters

Request body

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/domains/<domainId>' \
  -X PUT \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "autoJoin": true
}'

Response

{
  "ok": true,
  "domain": {
    "id": "6660c4a1f2e3b7d8a9c01234",
    "domain": "harborview.co",
    "source": "manual",
    "verified": true
  }
}

Remove a domain

Removes a domain from the organization. To remove a domain managed by SSO, disable SSO first. Requires an account key or an organization admin.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/domains/<domainId>' \
  -X DELETE \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "domain": {
    "id": "6660c4a1f2e3b7d8a9c01234"
  }
}

Configure SSO

Configures SAML 2.0 sign-in for the organization's verified domains, with `provider: "saml_generic"`. Each object you send (`saml`, `memberSync`) is merged into the stored one, so you can change one field, such as the certificate, on its own. Sign-in works once `saml.entryPoint` and `saml.certificate` are set and `enabled` is `true`. Requires an account key or an organization admin.

Path parameters

Request body

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/sso' \
  -X PUT \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "enabled": true,
  "enforced": true,
  "provider": "saml_generic",
  "saml": {
    "entryPoint": "https://harborview.okta.com/app/harborview_agnt/exk7q2m9vb4XhR1d5x7/sso/saml",
    "certificate": "MIIDqDCCApCgAwIBAgIGAY...",
    "attributeMapping": {
      "email": "email",
      "firstName": "givenName",
      "lastName": "sn",
      "groups": "groups"
    },
    "groupRoleMapping": [
      {
        "group": "harborview-agnt-admins",
        "role": "admin"
      }
    ]
  },
  "memberSync": {
    "autoProvision": true
  }
}'

Response

{
  "ok": true,
  "organization": {
    "id": "6660c4a1f2e3b7d8a9c01234",
    "account": "account",
    "name": "Ava",
    "generalInfo": "generalinfo"
  }
}

Disable SSO

Turns SSO off and clears the SSO configuration, including the SCIM token. Requires an account key or an organization admin.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/sso' \
  -X DELETE \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "organization": {
    "id": "6660c4a1f2e3b7d8a9c01234",
    "account": "account",
    "name": "Ava",
    "generalInfo": "generalinfo"
  }
}

Retrieve default model tiers

Returns the organization's default model tiers for new chats and tasks. `null` means the organization uses the account default.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/settings/model-tiers' \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "defaultModelTiers": {
    "chat": "low",
    "task": "low"
  }
}

Update default model tiers

Sets the organization's default model tiers for new chats and tasks: `low`, `medium`, `high` or `ultra`. `null` uses the account default. Requires an account key or an organization admin.

Path parameters

Request body

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/settings/model-tiers' \
  -X PATCH \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "chat": "low",
  "task": "low"
}'

Response

{
  "ok": true,
  "defaultModelTiers": {
    "chat": "low",
    "task": "low"
  }
}

List organization audit events

Returns the organization's audit events from the last 30 days, newest first. Filter by actor, action, entity type and time range (`after`, `before`).

Path parameters

Query parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/audit-events' \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "events": [
    {
      "id": "6660c4a1f2e3b7d8a9c01234",
      "account": "account",
      "organization": "organization",
      "actor": "actor",
      "action": "action",
      "entityType": "entitytype"
    }
  ]
}

Retrieve audit export settings

Returns whether audit logging is on for the organization, and the S3 destination for exports.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/audit-logging' \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "auditLogging": {
    "enabled": true,
    "s3BucketArn": "s3bucketarn",
    "s3Prefix": "s3prefix",
    "roleArn": "rolearn",
    "region": "region",
    "lastDeliveredAt": "2026-10-15T14:30:00Z"
  }
}

Configure audit export

Turns audit logging on or off and sets the S3 bucket, key prefix, IAM role and region that exports are delivered to.

Path parameters

Request body

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/audit-logging' \
  -X PUT \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "enabled": true,
  "s3BucketArn": "s3bucketarn",
  "s3Prefix": "s3prefix",
  "roleArn": "rolearn"
}'

Response

{
  "ok": true,
  "auditLogging": {
    "enabled": true,
    "s3BucketArn": "s3bucketarn",
    "s3Prefix": "s3prefix",
    "roleArn": "rolearn",
    "region": "region",
    "lastDeliveredAt": "2026-10-15T14:30:00Z"
  }
}

Export audit events

Queues an export of audit events to the organization's S3 bucket and returns the job with `202`. `from` and `to` default to the 30 days before the start of today (UTC). Requires audit logging to be on and an S3 destination to be configured.

Path parameters

Request body

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/audit-logging/deliver' \
  -X POST \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "from": "2026-10-15T14:30:00Z",
  "to": "2026-10-15T14:30:00Z"
}'

Retrieve an audit export

Retrieves the status of an audit export job. Requires an account key or an organization admin.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/audit-logging/deliver/<jobId>' \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "deliveryJob": {
    "id": "6660c4a1f2e3b7d8a9c01234",
    "organization": "organization",
    "requestedBy": "requestedby",
    "status": "pending"
  }
}

Create a SCIM token

Creates a SCIM bearer token for the organization and returns it once. The previous token stops working. Your identity provider uses it against `https://<your hosted app domain>/api/scim/v2`. Requires an account key or an organization admin.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/sso/scim-token' \
  -X POST \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "scim": {
    "token": "ak_live_…"
  }
}

Retrieve organization policy

Returns the organization's approval mode per action type, which action types are locked for teams and users, and whether assistants can hand work to each other. Requires an account key or an organization admin.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/settings/resource-permissions' \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "resourcePermissions": {
    "approvalSettings": {
      "matrix": {
        "email_as_user": {
          "mode": null,
          "timeBoxedWindowMin": null
        },
        "email_as_assistant": {
          "mode": null,
          "timeBoxedWindowMin": null
        },
        "messaging": {
          "mode": null,
          "timeBoxedWindowMin": null
        },
        "voice_call_as_assistant": {
          "mode": null,
          "timeBoxedWindowMin": null
        }
      }
    },
    "collaboration": {
      "peerDelegation": true,
      "peerDelegationLockedByDeveloper": true
    }
  }
}

Update organization policy

Sets the approval mode per action type, the action types teams and users cannot loosen (`matrix.locked`), and assistant-to-assistant collaboration. Cells you send replace those cells, and `locked` replaces the list. Requires an account key or an organization admin.

Path parameters

Request body

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/settings/resource-permissions' \
  -X PATCH \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "matrix": {
    "email_as_user": {
      "mode": "manual"
    },
    "locked": [
      "email_as_user"
    ]
  }
}'

Response

{
  "resourcePermissions": {}
}

Retrieve the skill library

Returns which skill tiers the organization allows and which skills are enabled. Requires an account key or an organization admin.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/library' \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "orgLibrary": {
    "allowedTiers": [
      "agnt"
    ],
    "enabledSkills": [
      "enabledskill"
    ]
  }
}

Update the skill library

Sets which skill tiers the organization allows and which skills are enabled. `bulkEnableTier` enables every listed skill in a tier. Requires an account key or an organization admin.

Path parameters

Request body

Responses

Request

curl 'https://api.agnt.ai/organizations/<orgId>/library' \
  -X PATCH \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "allowedTiers": [
    "agnt"
  ],
  "enabledSkills": [
    "enabledskill"
  ],
  "bulkEnableTier": "agnt"
}'

Response

{
  "orgLibrary": {
    "allowedTiers": [
      "allowedtier"
    ],
    "enabledSkills": [
      "enabledskill"
    ]
  }
}

List audit events

Returns the audit trail for your whole account, newest first, with filters and pagination. Requires an account key.

Query parameters

Responses

Request

curl 'https://api.agnt.ai/audit-events' \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "events": [
    {
      "id": "6660c4a1f2e3b7d8a9c01234",
      "account": "account",
      "actor": "actor",
      "action": "action"
    }
  ],
  "page": 1,
  "perPage": 20
}

Retrieve an audit event

Retrieves one audit event from your account.

Path parameters

Responses

Request

curl 'https://api.agnt.ai/audit-events/<eventId>' \
  -H "Authorization: Bearer ak_live_..."

Response

{
  "ok": true,
  "event": {
    "id": "6660c4a1f2e3b7d8a9c01234",
    "account": "account",
    "actor": "actor",
    "action": "action"
  }
}