> ## Documentation Index
> Fetch the complete documentation index at: https://docs.labelbox.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get one agent

> Returns one agent resolved to its latest immutable version, including its system prompt, toolsets, and default credential grants. A soft-deleted or unknown id is a 404.



## OpenAPI

````yaml /recursion/openapi.yaml get /managed-agents/v2/agents/{agentId}
openapi: 3.1.0
info:
  title: Managed Agents API
  version: 0.14.0
  description: >-
    The Recursion Managed Agents REST API. Authenticate with a Recursion API key
    as a bearer token. An organization-scoped key acts in its own organization
    and needs nothing else; a tenant-scoped key must also send
    `x-organization-id` with an organization id or `default`. Field names follow
    each operation's published schema.
servers:
  - url: https://api.recursion.labelbox.com
security:
  - bearerAuth: []
paths:
  /managed-agents/v2/agents/{agentId}:
    get:
      tags:
        - Agents
      summary: Get one agent
      description: >-
        Returns one agent resolved to its latest immutable version, including
        its system prompt, toolsets, and default credential grants. A
        soft-deleted or unknown id is a 404.
      operationId: managedAgentsGetAgentV2
      parameters:
        - description: >-
            Agent id (UUID) as returned by managedAgentsCreateAgent or
            managedAgentsListAgents.
          in: path
          name: agentId
          required: true
          schema:
            description: >-
              Agent id (UUID) as returned by managedAgentsCreateAgent or
              managedAgentsListAgents.
            format: uuid
            type: string
        - $ref: '#/components/parameters/RecursionTenantId'
        - $ref: '#/components/parameters/RecursionOrganizationId'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StandaloneAgent'
          description: >-
            A configured standalone Managed Agent: its versioned execution
            definition plus current mutable classification tags. Publishing the
            execution definition mints a new immutable version; applying tags
            does not.
          headers:
            recursion-organization-id:
              $ref: '#/components/headers/RecursionOrganizationId'
            recursion-tenant-id:
              $ref: '#/components/headers/RecursionTenantId'
        '400':
          description: Bad Request.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorInvalidRequest'
                x-recursion-error-codes:
                  - invalid_request
          headers:
            recursion-organization-id:
              $ref: '#/components/headers/RecursionOrganizationId'
            recursion-tenant-id:
              $ref: '#/components/headers/RecursionTenantId'
        '401':
          description: Unauthorized.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorUnauthorized'
                x-recursion-error-codes:
                  - unauthorized
          headers:
            recursion-organization-id:
              $ref: '#/components/headers/RecursionOrganizationId'
            recursion-tenant-id:
              $ref: '#/components/headers/RecursionTenantId'
        '403':
          description: Forbidden.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorForbidden'
                x-recursion-error-codes:
                  - forbidden
          headers:
            recursion-organization-id:
              $ref: '#/components/headers/RecursionOrganizationId'
            recursion-tenant-id:
              $ref: '#/components/headers/RecursionTenantId'
        '404':
          description: Not Found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorNotFound'
                x-recursion-error-codes:
                  - not_found
          headers:
            recursion-organization-id:
              $ref: '#/components/headers/RecursionOrganizationId'
            recursion-tenant-id:
              $ref: '#/components/headers/RecursionTenantId'
        '413':
          description: Payload Too Large.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorPayloadTooLarge'
                x-recursion-error-codes:
                  - payload_too_large
          headers:
            recursion-organization-id:
              $ref: '#/components/headers/RecursionOrganizationId'
            recursion-tenant-id:
              $ref: '#/components/headers/RecursionTenantId'
        '429':
          headers:
            Retry-After:
              description: When to retry, as delay seconds or an HTTP date.
              schema:
                type: string
            recursion-organization-id:
              $ref: '#/components/headers/RecursionOrganizationId'
            recursion-tenant-id:
              $ref: '#/components/headers/RecursionTenantId'
          description: Too Many Requests.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorRateLimitExceeded'
                x-recursion-error-codes:
                  - rate_limit_exceeded
        '500':
          description: Internal Server Error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorInternalError'
                x-recursion-error-codes:
                  - internal_error
          headers:
            recursion-organization-id:
              $ref: '#/components/headers/RecursionOrganizationId'
            recursion-tenant-id:
              $ref: '#/components/headers/RecursionTenantId'
        '502':
          description: A dependent service returned an invalid response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorDependencyFailure'
                x-recursion-error-codes:
                  - bad_gateway
          headers:
            recursion-organization-id:
              $ref: '#/components/headers/RecursionOrganizationId'
            recursion-tenant-id:
              $ref: '#/components/headers/RecursionTenantId'
        '503':
          headers:
            Retry-After:
              description: When to retry, as delay seconds or an HTTP date.
              schema:
                type: string
            recursion-organization-id:
              $ref: '#/components/headers/RecursionOrganizationId'
            recursion-tenant-id:
              $ref: '#/components/headers/RecursionTenantId'
          description: Service Unavailable.
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: >-
                      #/components/schemas/ManagedAgentsApiErrorManagedAgentsUnavailable
                  - $ref: >-
                      #/components/schemas/ManagedAgentsApiErrorServiceUnavailable
                discriminator:
                  propertyName: code
                  mapping:
                    managed_agents_unavailable: >-
                      #/components/schemas/ManagedAgentsApiErrorManagedAgentsUnavailable
                    service_unavailable: >-
                      #/components/schemas/ManagedAgentsApiErrorServiceUnavailable
                x-recursion-error-codes:
                  - managed_agents_unavailable
                  - service_unavailable
        '504':
          headers:
            Retry-After:
              description: When to retry, as delay seconds or an HTTP date.
              schema:
                type: string
            recursion-organization-id:
              $ref: '#/components/headers/RecursionOrganizationId'
            recursion-tenant-id:
              $ref: '#/components/headers/RecursionTenantId'
          description: A dependent service timed out.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorDependencyTimeout'
                x-recursion-error-codes:
                  - gateway_timeout
components:
  parameters:
    RecursionTenantId:
      name: x-tenant-id
      in: header
      required: false
      description: >-
        Optional tenant consistency check. When present, it must name the tenant
        bound to the API key, including when x-organization-id is `default`.
      schema:
        type: string
        minLength: 1
    RecursionOrganizationId:
      name: x-organization-id
      in: header
      required: false
      description: >-
        Organization in which to act. Required for a tenant-scoped API key.
        Optional for an organization-scoped key, where it must name that same
        organization. The value may be an organization id or `default`.
      schema:
        type: string
        minLength: 1
  schemas:
    StandaloneAgent:
      description: >-
        A configured standalone Managed Agent: its versioned execution
        definition plus current mutable classification tags. Publishing the
        execution definition mints a new immutable version; applying tags does
        not.
      properties:
        agentId:
          description: >-
            Server-assigned id of the agent, used in the agent, agent-version,
            and session routes.
          readOnly: true
          type: string
        builtInIntegrations:
          description: >-
            Built-in integrations this agent may use, each naming an active
            organization connection an admin added on the Integrations page. A
            non-empty tools list narrows this agent below the connection's
            organization allow-list; omission inherits it. Sessions receive
            short-lived access restricted to the effective tools. Not a vault
            grant: nothing about these appears under credential access. A
            version write carries the list in full: omitting it publishes a
            version with none.
          items:
            $ref: '#/components/schemas/BuiltInIntegration'
          type: array
        createdAt:
          description: Server-assigned RFC 3339 timestamp of when the agent was created.
          format: date-time
          readOnly: true
          type: string
        defaultCredentialRefs:
          description: >-
            Narrows the default vaults to individual credentials. Every
            credential is selected when a vault is first added, and may then be
            unchecked.
          items:
            $ref: '#/components/schemas/VaultCredentialRef'
          type: array
        defaultProjectId:
          description: >-
            Billing project copied into new sessions when their create request
            omits project_id. A non-empty session project_id overrides it.
            Carried in full on every version write: omitting it publishes a
            version with no default.
          type: string
        defaultRubric:
          description: >-
            Markdown rubric that sessions of this agent are graded against by
            default when they start with a message. A session that supplies its
            own outcome ignores this entirely. Carried in full on every version
            write: omitting it publishes a version with no rubric.
          type: string
        defaultVaultIds:
          description: >-
            Vaults whose credentials are copied into a new session when its
            create request omits vault_ids. Sending an explicit empty list on
            the session still overrides these.
          items:
            type: string
          type: array
        description:
          description: Free-text note about what this agent is for.
          type: string
        disabledIntegrationMcpProviders:
          description: >-
            Native integration providers whose MCP tools new sessions of this
            agent do not receive, even though the grant is present. Suppresses
            integration-derived servers only, never the agent's own mcpServers.
            github is ignored, because a GitHub grant always keeps its MCP tools
            alongside git and gh in the sandbox.
          items:
            type: string
          type: array
        executionCompatibility:
          description: >-
            Whether this exact agent definition is compatible with the
            standalone execution context. Omitted by deployments that do not
            compute it; a client must treat any present value other than
            compatible as incompatible.
          enum:
            - compatible
            - incompatible
          readOnly: true
          type: string
        fileHistoryEnabled:
          description: >-
            Whether new sessions may search and read the session outputs this
            agent's earlier sessions saved. Omitted means off.
          type: boolean
        latestAgentVersionId:
          description: >-
            Server-maintained id of the newest version of this agent; sessions
            started without an explicit version use it.
          readOnly: true
          type: string
        maxConcurrentSessions:
          description: >-
            Maximum number of this agent's ordinary root sessions that may run
            or wait on compute at once. Omit for unlimited. Sessions beyond the
            cap are accepted with execution_state=queued and wait until a slot
            frees; child/subagent sessions and outcome evaluation passes do not
            take a slot. Carried in full on every version write: omitting it
            publishes a version with no cap.
          maximum: 10000
          minimum: 1
          type: integer
        mcpServers:
          description: >-
            Remote MCP servers to attach. Each entry is an object with name (the
            label the server's tools are grouped under) and url (its http/https
            endpoint); any further keys are passed to the runtime unchanged.
            Credentials come from the vaults granted to the session, not from
            this entry. Tools are discovered and snapshotted at session start.
          items:
            additionalProperties:
              $ref: '#/components/schemas/PlatformSafeJsonValue'
            type: object
          type: array
        metadata:
          additionalProperties:
            $ref: '#/components/schemas/PlatformSafeJsonValue'
          description: >-
            Caller-owned key/value data stored with the agent and returned
            unchanged.
          type: object
        model:
          description: >-
            Public model id from GET /managed-agents/v1/models, for example
            anthropic/claude-sonnet-5-5. Agent reads return the same public id.
            An id the catalog does not list is rejected here, before the session
            starts.
          type: string
        modelConfig:
          $ref: '#/components/schemas/InferenceConfig'
          description: >-
            Default inference settings applied to every turn unless a session
            overrides them.
        multiagent:
          additionalProperties:
            $ref: '#/components/schemas/PlatformSafeJsonValue'
          description: >-
            Multi-agent orchestration settings, such as subagent definitions and
            delegation limits.
          type: object
        name:
          description: >-
            Human-readable label shown wherever agents are listed. Not required
            to be unique.
          type: string
        nativeIntegrations:
          description: >-
            Native connections this agent may use, with provider-enforced
            permission and resource restrictions. Omit or send [] for none.
            Stored in full on each agent version; secrets remain on the
            connection.
          items:
            $ref: '#/components/schemas/NativeIntegration'
          maxItems: 25
          type: array
        organizationId:
          description: >-
            Organization that owns the agent. Server-assigned from the
            authenticated principal; never accepted from the caller.
          readOnly: true
          type: string
        skills:
          description: >-
            Skill packages loaded into the agent's runtime, each an entry with
            the skill reference and its metadata.
          items:
            additionalProperties:
              $ref: '#/components/schemas/PlatformSafeJsonValue'
            type: object
          type: array
        supportsNewSessions:
          description: >-
            Whether this agent type supports new sessions here. Other start
            requirements still apply. Existing sessions and agent editing remain
            available when false.
          readOnly: true
          type: boolean
        system:
          description: System prompt prepended to every conversation this agent runs.
          type: string
        tags:
          description: >-
            Current organization-scoped classification tags applied to this
            agent. Always an array. Tags are mutable catalog metadata and are
            deliberately absent from AgentVersion and session runtime snapshots.
          items:
            $ref: '#/components/schemas/StandaloneTag'
          readOnly: true
          type: array
        template:
          $ref: '#/components/schemas/TemplateRef'
          description: >-
            Reviewed template revision this agent's current version started
            from.
        updatedAt:
          description: >-
            Server-assigned RFC 3339 timestamp of the most recent update to the
            agent.
          format: date-time
          readOnly: true
          type: string
        webSearchEnabled:
          default: true
          description: >-
            Whether new sessions may use the native web_search tool. Omitted on
            legacy agents and interpreted as enabled.
          type: boolean
      required:
        - organizationId
        - agentId
        - name
        - model
        - modelConfig
        - system
        - mcpServers
        - defaultVaultIds
        - defaultCredentialRefs
        - disabledIntegrationMcpProviders
        - skills
        - tags
        - createdAt
        - updatedAt
      type: object
      additionalProperties: false
    ManagedAgentsApiErrorInvalidRequest:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - invalid_request
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          $ref: '#/components/schemas/ManagedAgentsApiErrorDetails'
          description: >-
            Optional structured error details. Reserved transport fields are
            typed; code-specific fields remain forward compatible.
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorUnauthorized:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - unauthorized
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          $ref: '#/components/schemas/ManagedAgentsApiErrorDetails'
          description: >-
            Optional structured error details. Reserved transport fields are
            typed; code-specific fields remain forward compatible.
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorForbidden:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - forbidden
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          $ref: '#/components/schemas/ManagedAgentsApiErrorDetails'
          description: >-
            Optional structured error details. Reserved transport fields are
            typed; code-specific fields remain forward compatible.
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorNotFound:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - not_found
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          $ref: '#/components/schemas/ManagedAgentsApiErrorDetails'
          description: >-
            Optional structured error details. Reserved transport fields are
            typed; code-specific fields remain forward compatible.
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorPayloadTooLarge:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - payload_too_large
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          $ref: '#/components/schemas/ManagedAgentsApiErrorDetails'
          description: >-
            Optional structured error details. Reserved transport fields are
            typed; code-specific fields remain forward compatible.
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorRateLimitExceeded:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - rate_limit_exceeded
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          $ref: '#/components/schemas/ManagedAgentsApiErrorDetails'
          description: >-
            Optional structured error details. Reserved transport fields are
            typed; code-specific fields remain forward compatible.
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorInternalError:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - internal_error
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          $ref: '#/components/schemas/ManagedAgentsApiErrorDetails'
          description: >-
            Optional structured error details. Reserved transport fields are
            typed; code-specific fields remain forward compatible.
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorDependencyFailure:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - bad_gateway
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          $ref: '#/components/schemas/ManagedAgentsApiErrorDetails'
          description: >-
            Optional structured error details. Reserved transport fields are
            typed; code-specific fields remain forward compatible.
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorManagedAgentsUnavailable:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - managed_agents_unavailable
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          $ref: '#/components/schemas/ManagedAgentsApiErrorDetails'
          description: >-
            Optional structured error details. Reserved transport fields are
            typed; code-specific fields remain forward compatible.
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorServiceUnavailable:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - service_unavailable
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          $ref: '#/components/schemas/ManagedAgentsApiErrorDetails'
          description: >-
            Optional structured error details. Reserved transport fields are
            typed; code-specific fields remain forward compatible.
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorDependencyTimeout:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - gateway_timeout
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          $ref: '#/components/schemas/ManagedAgentsApiErrorDetails'
          description: >-
            Optional structured error details. Reserved transport fields are
            typed; code-specific fields remain forward compatible.
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    BuiltInIntegration:
      description: >-
        One built-in integration an agent may use, named by its organization
        connection. The agent may narrow the connection's organization tool
        allow-list.
      properties:
        connection_id:
          description: >-
            Organization integration connection (UUID) the agent may use. Must
            belong to the caller's organization, be a built-in integration
            connection, and be active.
          type: string
        tools:
          description: >-
            Optional subset of the connection's organization tool allow-list.
            Omit or send an empty list to inherit all organization-enabled
            tools. A non-empty list limits this agent to exactly those tools,
            subject to later organization changes.
          items:
            type: string
          maxItems: 200
          type: array
      required:
        - connection_id
      type: object
      additionalProperties: false
    VaultCredentialRef:
      description: >-
        A pointer to one credential inside one vault. Used to grant a session
        specific credentials rather than every credential in a vault.
      properties:
        credential_id:
          description: Credential to select inside vault_id.
          type: string
        vault_id:
          description: >-
            Vault holding the credential. Required, because credential ids are
            unique only within a vault.
          type: string
      required:
        - vault_id
        - credential_id
      type: object
      additionalProperties: false
    PlatformSafeJsonValue:
      description: >-
        A JSON value whose integer members stay within the exact ECMAScript
        safe-integer range at every nesting level.
      oneOf:
        - type: 'null'
        - type: boolean
        - type: string
        - type: integer
          minimum: -9007199254740991
          maximum: 9007199254740991
        - type: number
          not:
            type: integer
        - type: array
          items:
            $ref: '#/components/schemas/PlatformSafeJsonValue'
        - additionalProperties:
            $ref: '#/components/schemas/PlatformSafeJsonValue'
          type: object
    InferenceConfig:
      description: >-
        Sampling and generation settings for a model call, mirroring the
        provider's own request parameters. Set it on an agent or a session to
        govern every turn, and read it back on a model event to see what the
        call actually used.
      properties:
        max_tokens:
          description: >-
            Upper bound on tokens the model may generate for one assistant turn
            (the provider's max_tokens). Omit or 0 to use the model reference's
            default.
          format: int64
          type: integer
          minimum: -9007199254740991
          maximum: 9007199254740991
        provider_params:
          additionalProperties:
            $ref: '#/components/schemas/PlatformSafeJsonValue'
          description: >-
            Recognized provider-specific settings are thinking, thinkingDisplay
            and output_config for native Anthropic messages; thinkingConfig for
            native Gemini; and promptCache, promptCacheTTL and
            promptCacheSharedTTL for prompt caching. Unknown top-level keys are
            ignored, not passed through. Omitting all three cache settings
            enables automatic policy: explicit caching stays enabled and
            eligible Anthropic requests may use 1h shared retention when recent
            usage and current pricing evidence predict savings; otherwise shared
            retention is 5m. Setting promptCache or either TTL explicitly keeps
            operator-configured retention. promptCache true enables explicit
            markers; false disables them and ignores both TTL settings. With
            caching enabled, both TTL settings accept only 5m or 1h on models
            using native Anthropic messages. promptCacheTTL defaults to 5m for
            user-context anchors and history. promptCacheSharedTTL controls
            tools and system instructions, defaults to promptCacheTTL under
            explicit configuration, and cannot be shorter than promptCacheTTL.
            Authored thinking objects and enabled cache TTL settings are
            validated at agent/version writes and session start.
          type: object
        reasoning_effort:
          description: >-
            Provider-native reasoning depth value. For a model from the models
            catalog, use one of its supportedReasoningEfforts; omit it to follow
            the provider's current default.
          type: string
        temperature:
          description: >-
            Sampling temperature passed through to the provider, typically
            0.0-2.0. Lower values are more deterministic. Omit to use the
            provider default.
          type: number
        top_p:
          description: >-
            Nucleus-sampling probability mass (0.0-1.0) passed through to the
            provider. Prefer setting either this or temperature, not both. Omit
            to use the provider default.
          type: number
      type: object
      additionalProperties: false
    NativeIntegration:
      description: >-
        A native connection and its agent-owned runtime permission and resource
        policy.
      properties:
        connectionId:
          description: Active native connection in this organization.
          format: uuid
          type: string
        permission:
          description: >-
            Provider permission preset, bounded by the connection's
            authorization.
          type: string
        resources:
          description: >-
            Optional resource subset. Omit to inherit all resources available
            through the connection. An explicit empty list is rejected.
          items:
            type: string
          maxItems: 500
          minItems: 1
          type: array
          uniqueItems: true
        tools:
          description: >-
            Standalone GitHub or Slack MCP tools this agent may use. Omit on
            existing grants to retain the prior tool access; new standalone
            grants select tools explicitly. An explicit empty list is rejected.
          items:
            type: string
          maxItems: 200
          minItems: 1
          type: array
          uniqueItems: true
      required:
        - connectionId
        - permission
      type: object
      additionalProperties: false
    StandaloneTag:
      description: >-
        An organization-scoped classification definition. Applying or removing
        it changes only catalog membership: it does not update the agent, mint
        an AgentVersion, or affect running sessions.
      properties:
        color:
          description: 'Display color in #RRGGBB form.'
          examples:
            - '#14b8a6'
          maxLength: 7
          minLength: 7
          pattern: ^#[0-9A-Fa-f]{6}$
          type: string
        created_at:
          description: Server-assigned RFC 3339 timestamp of when the tag was created.
          format: date-time
          type: string
        description:
          description: >-
            Optional operator-facing explanation of the classification, up to
            280 characters.
          maxLength: 280
          type: string
        label:
          description: >-
            Display label, trimmed by the service. Unique case-insensitively
            among live tags in this organization.
          maxLength: 32
          minLength: 1
          type: string
        organization_id:
          description: >-
            Organization that owns the tag. Server-assigned from the
            authenticated principal and never accepted as authority from the
            request body.
          type: string
        tag_id:
          description: Server-assigned tag id (UUID).
          format: uuid
          type: string
        updated_at:
          description: >-
            Server-assigned RFC 3339 timestamp of the most recent definition
            update.
          format: date-time
          type: string
      required:
        - organization_id
        - tag_id
        - label
        - color
        - created_at
        - updated_at
      type: object
      additionalProperties: false
    TemplateRef:
      description: Reviewed template id and revision copied into this resource.
      properties:
        id:
          description: Stable template id.
          type: string
        revision:
          description: Reviewed catalog revision.
          type: integer
          minimum: -9007199254740991
          maximum: 9007199254740991
      required:
        - id
        - revision
      type: object
      additionalProperties: false
    ManagedAgentsApiErrorDetails:
      type: object
      properties:
        field:
          description: >-
            Request field or header responsible for the error, when one can be
            identified.
          type: string
        issues:
          description: >-
            Boundary-validation failures as path-prefixed human-readable
            messages.
          type: array
          items:
            type: string
        requestId:
          description: Request correlation identifier for support and log lookup.
          type: string
        retryable:
          description: >-
            Server advice about failure transience. `true` means transient,
            `false` means non-transient, and absence gives no advice. Automatic
            replay is allowed only when this field is not `false` and the
            operation-specific retry and idempotency contract permits replay.
          type: boolean
      additionalProperties:
        $ref: '#/components/schemas/PlatformSafeJsonValue'
      description: >-
        Optional structured error details. Reserved transport fields are typed;
        code-specific fields remain forward compatible.
  headers:
    RecursionOrganizationId:
      description: Organization id resolved for this request.
      schema:
        type: string
        minLength: 1
    RecursionTenantId:
      description: Tenant id resolved for this request.
      schema:
        type: string
        minLength: 1
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: A Recursion API key, created in the console under API keys.

````