Change Insights settings

PATCH

/v1/insights/settings

curl --request PATCH \
  --url http://127.0.0.1:8080/v1/insights/settings \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Deedglass-Version: 2026-10-01' \
  --data '{ "anomaly_facts": true, "reason": "Let refund-approval-over-30 send anomalous agents to approval." }'

• A local server (make dev)
• The cloud beta

Changes the fields you send and seals an insights.settings_changed admin deed with the reason, because the settings change what policies see (deed in the answer; absent when nothing changed, and then nothing is sealed). reason is required, 3 to 280 characters (400 validation_failed on reason); anomaly_active_minutes is 5 to 1,440 and anomaly_stale_after_minutes 10 to 240 (400 validation_failed on the field). Unknown fields are 400. Bodies up to 16 KiB. An admin+ Console session (with the Deedglass-CSRF header) or an org admin key (admin scope); viewers get 403 insufficient_role and agent keys 403 insufficient_scope.

Authorizations

• bearerAuth
• sessionCookie

Parameters

Header Parameters

Deedglass-Version

string

/^[0-9]{4}-[0-9]{2}-[0-9]{2}$/

The API version (YYYY-MM-DD). Leave it out to use your org’s pinned version (public routes use the latest). An unknown version is 400 api_version_invalid.

Deedglass-CSRF

string

Needed when the request uses a Console session (it changes state); without it the answer is 403 csrf_failed. Not sent with an API key.

Request Body^required

Media typeapplication/json

The fields to change, and why.

object

anomaly_facts

boolean

anomaly_active_minutes

integer

>= 5 <= 1440

anomaly_stale_after_minutes

integer

>= 10 <= 240

llm_phrasing

True without DEEDGLASS_ANTHROPIC_API_KEY on the server is 400 validation_failed on llm_phrasing.

boolean

llm_monthly_cap_cents

integer

<= 10000

digest

object

recipients

required

string

Allowed values: owners admins off

reason

required

One line

string

>= 3 characters <= 280 characters

Example

{
  "anomaly_facts": true,
  "reason": "Let refund-approval-over-30 send anomalous agents to approval."
}

Responses

200

The settings after the change, with the deed when something changed.

Media typeapplication/json

object

object

required

string

Allowed value: insights_settings

anomaly_facts

required

This org’s policies see anomaly.*. Off by default.

boolean

anomaly_active_minutes

required

How long an episode stays active after its last finding (default 60).

integer

>= 5 <= 1440

anomaly_stale_after_minutes

required

With the facts on, a detection pass older than this makes every agent anomalous (detector_stale), because unknown isn’t usual (default 15).

integer

>= 10 <= 240

active_policy_reads_anomaly

required

The enforced or shadow policy reads anomaly.*.

boolean

notice

required

The sentence when a policy reads anomaly facts but they are off.

string | null

llm_phrasing

S28: Claude may reword suggestions (off by default; needs the operator’s DEEDGLASS_ANTHROPIC_API_KEY).

boolean

llm_monthly_cap_cents

The month’s phrasing spend cap in cents (default 200).

integer

<= 10000

digest

Who gets the weekly digest (default owners).

object

recipients

string

Allowed values: owners admins off

phrasing_available

The server has an Anthropic key

boolean

simulated

S28: the org’s history came from deedglass dev simulate (the Console shows a banner).

boolean

deed

PATCH only, when something changed: the insights.settings_changed admin deed.

string

Examples

Examplefacts_on

Anomaly facts turned on

{
  "object": "insights_settings",
  "anomaly_facts": true,
  "anomaly_active_minutes": 60,
  "anomaly_stale_after_minutes": 15,
  "active_policy_reads_anomaly": true,
  "notice": null,
  "deed": "deed_01m42vmk0m2p4r6t8v0x2z4c6e"
}

Headers

Deedglass-Request-Id

string

/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/

This request’s id. Quote it to support; it matches error.request_id.

Deedglass-Version

string

The API version this response follows.

400

A missing or bad field.

Media typeapplication/json

object

error

required

object

type

required

string

Allowed values: invalid_request_error authentication_error permission_error policy_error rate_limit_error api_error

code

required

string

Allowed values: invalid_api_key api_key_revoked api_key_expired agent_suspended agent_stopped org_stopped insufficient_scope policy_denied approval_required approval_expired budget_exceeded intent_required intent_invalid intent_replay tool_unknown connector_unavailable upstream_error timeout rate_limited idempotency_conflict validation_failed not_found conflict internal_error authentication_required method_not_allowed request_too_large unsupported_media_type invalid_json api_version_invalid idempotency_key_invalid idempotency_key_in_use service_unavailable session_expired csrf_failed insufficient_role login_link_invalid login_code_invalid last_owner policy_unavailable policy_invalid credentials_missing destination_blocked vault_unavailable upstream_auth_failed upstream_not_found upstream_rate_limited response_too_large statement_refused row_limit_exceeded database_role_unsafe database_not_ready witness_not_configured approval_decided already_countersigned approver_not_eligible self_approval approval_needs_person context_changed approval_unsatisfiable approval_link_invalid approval_link_review_only approver_unmapped stripe_live_key_refused stripe_livemode_detected upstream_approval_pending schedule_needs_approval action_executing from_denied undo_unavailable undo_plan_stale already_undone undo_conflict replay_too_large replay_window_invalid suggestion_stale shadow_slot_taken suggestion_decided observe_not_enabled pro_required

message

required

One or more calm sentences with the next step.

string

param

required

The request field, query parameter or header the error is about.

string | null

request_id

required

string

/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/

doc_url

required

string format: uri

diagnostics

On policy_invalid only. Each problem with its line, code and hint.

Array<object>

One finding about a policy file, with its position and the next step. Codes are stable and listed in docs/POLICY_ERRORS.md. In the policy_invalid error envelope each diagnostic also carries object: policy_diagnostic. The full PolicyDiagnostic schema is in openapi.yaml.

object

action

One agent action. Its sections mirror the deed’s. status is the one field an agent needs; state is the exact lifecycle state (docs/GATE.md). The Gate’s own responses (POST /v1/actions and its result report) add execution.result and witness.reasons; lists leave both out. The full Action schema is in openapi.yaml.

object

checks

On undo_unavailable only. Every check of the undo, each with its fix. Additive (S23).

Array<object>

One of the twelve safety checks (S23 §3.3). Available means no check failed. The full UndoCheck schema is in openapi.yaml.

object

Example

{
  "error": {
    "type": "invalid_request_error",
    "code": "validation_failed",
    "message": "anomaly_active_minutes must be 5 to 1,440.",
    "param": "anomaly_active_minutes",
    "request_id": "req_01m42vmm1p3r5t7w9y1a3c5e7g",
    "doc_url": "https://docs.deedglass.com/errors/validation_failed"
  }
}

Headers

Deedglass-Request-Id

string

/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/

This request’s id. Quote it to support; it matches error.request_id.

default

An error. Every error has this envelope; doc_url explains the code.

Media typeapplication/json

object

error

required

object

type

required

string

Allowed values: invalid_request_error authentication_error permission_error policy_error rate_limit_error api_error

code

required

string

Allowed values: invalid_api_key api_key_revoked api_key_expired agent_suspended agent_stopped org_stopped insufficient_scope policy_denied approval_required approval_expired budget_exceeded intent_required intent_invalid intent_replay tool_unknown connector_unavailable upstream_error timeout rate_limited idempotency_conflict validation_failed not_found conflict internal_error authentication_required method_not_allowed request_too_large unsupported_media_type invalid_json api_version_invalid idempotency_key_invalid idempotency_key_in_use service_unavailable session_expired csrf_failed insufficient_role login_link_invalid login_code_invalid last_owner policy_unavailable policy_invalid credentials_missing destination_blocked vault_unavailable upstream_auth_failed upstream_not_found upstream_rate_limited response_too_large statement_refused row_limit_exceeded database_role_unsafe database_not_ready witness_not_configured approval_decided already_countersigned approver_not_eligible self_approval approval_needs_person context_changed approval_unsatisfiable approval_link_invalid approval_link_review_only approver_unmapped stripe_live_key_refused stripe_livemode_detected upstream_approval_pending schedule_needs_approval action_executing from_denied undo_unavailable undo_plan_stale already_undone undo_conflict replay_too_large replay_window_invalid suggestion_stale shadow_slot_taken suggestion_decided observe_not_enabled pro_required

message

required

One or more calm sentences with the next step.

string

param

required

The request field, query parameter or header the error is about.

string | null

request_id

required

string

/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/

doc_url

required

string format: uri

diagnostics

On policy_invalid only. Each problem with its line, code and hint.

Array<object>

One finding about a policy file, with its position and the next step. Codes are stable and listed in docs/POLICY_ERRORS.md. In the policy_invalid error envelope each diagnostic also carries object: policy_diagnostic. The full PolicyDiagnostic schema is in openapi.yaml.

object

action

One agent action. Its sections mirror the deed’s. status is the one field an agent needs; state is the exact lifecycle state (docs/GATE.md). The Gate’s own responses (POST /v1/actions and its result report) add execution.result and witness.reasons; lists leave both out. The full Action schema is in openapi.yaml.

object

checks

On undo_unavailable only. Every check of the undo, each with its fix. Additive (S23).

Array<object>

One of the twelve safety checks (S23 §3.3). Available means no check failed. The full UndoCheck schema is in openapi.yaml.

object

Example

{
  "error": {
    "type": "invalid_request_error",
    "code": "not_found",
    "message": "There's no endpoint at GET /v1/helth. Did you mean /v1/health?",
    "param": null,
    "request_id": "req_01j9zr3m5k8q2w7x4t6v0b1c9d",
    "doc_url": "https://docs.deedglass.com/errors/not_found"
  }
}

Headers

Deedglass-Request-Id

string

/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/

This request’s id. Quote it to support; it matches error.request_id.

Deedglass-Version

string

The API version this response follows.