Read one of the workspace's hosted gateways and the list of all of them
Account session scoped to the current workspace; reads require membership. The organization comes only from the session. Without deployment_id the answer is the workspace's primary gateway; with it, that gateway, or 404 GATEWAY_NOT_FOUND when the workspace holds no gateway with that id (never the primary). deployments lists every gateway the workspace holds and deployment_limit the capacity an operator granted it (default 1). Reservation is a name allocation, never evidence of DNS, TLS or runtime readiness.
Authorization
AccountSessionCookie The signed HttpOnly account session the web app holds after sign-in (also accepted as a Bearer acct_ token).
In: cookie
Query Parameters
One of the current workspace's gateways; omitted, the workspace's primary. The organization always comes from the session, never from a parameter.
uuidResponse Body
application/json
curl -X GET "https://example.com/v1/public/account/workspace/deployments"{ "deployment": { "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "tenant_label": "string", "tenant_host": "string", "gateway_url": "string", "status": "reserved", "upstream_origin": "string", "runtime_verified": true }, "deployments": [ { "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "tenant_host": "acme.decionisedge.com", "is_primary": true, "status": "queued", "running_mode": "SHADOW" } ], "deployment_limit": 1, "credentials": [ {} ], "gateway_token": { "header": "AgentSafe-Gateway-Token", "issued": true, "revealable": true, "sent": true, "sent_at": "2019-08-24T14:15:22Z", "pending_at": "2019-08-24T14:15:22Z" }, "enforcement": {}, "networking": {}, "activation": {}}Resolve the current credential's authoritative product context POST
Returns the authenticated credential class and exact organization, role and scopes. Accounts owns OAuth and workspace issuance; Core consumes its signed purchased-workspace projection and never turns this response into a new OAuth or organization key. V1 base3 stays unchanged. V2 adds only its recognized profile/consent metadata. V3 privately adds oauth_authority and the existing signed oauth_source_authority for request-scoped product transport. The private evidence is never returned in MCP tools or persisted in reports. Service credentials are refused. Data and connected extensions are default off and require their exact freshly consented profiles.
Reserve the workspace's first gateway domain, or an additional one POST
Signed account session, current workspace ADMIN or OWNER; same-site JSON is mandatory. A body with an optional company_name reserves the workspace's primary gateway, or returns it when one exists. A body with additional:true and tenant_label reserves a further gateway at exactly <tenant_label>.decionisedge.com, needs a verified email, and fits within the capacity an operator granted the workspace; repeating it returns the same gateway. The answer is the reserved gateway's overview. Reservation grants no access to a fleet tenant already serving that label.