List Guardrail Attachments

GET /environments/{env_id}/guardrails/{guardrail_id}/attachments

List Guardrail Attachments

Return the scope attachments for one guardrail. Each attachment determines whether the guardrail applies to an environment, model, caller API key, or team.

Parameters

• env_id (path, string, required): Environment ID that scopes the request.
• guardrail_id (path, string, required): Guardrail ID within the environment.

Responses

• 200: OK

• data (array, required): Scope attachments for the guardrail.

• data[].id (string, required): Guardrail attachment ID.

• data[].guardrail_id (string, required): Guardrail definition selected by this attachment.

• data[].env_id (string, required): Environment that owns the guardrail and attachment.

• data[].scope_type (string, required): The resource dimension an attachment binds to. model, mcp_server, and passthrough_route select dimensions a request carries only one of: an MCP tool call resolves no model, a model request routes to no MCP server, and passthrough-route traffic resolves neither. A model-scoped guardrail therefore never inspects MCP or passthrough traffic, an mcp_server-scoped one never inspects model traffic, and a passthrough_route-scoped one inspects only the traffic of that route.

• data[].scope_id (string, optional): ID of the model, MCP server, caller API key, or team selected by scope_type. Null for an environment-scoped attachment.

• data[].priority (integer, optional): Precedence when the same guardrail matches through more than one attachment. Higher numbers win; equal priorities prefer api_key, then team, then model or mcp_server, then env scope. Model and MCP-server scopes share a rank because no single request can match both.

• data[].enabled (boolean, required): Whether the gateway considers this attachment during scope resolution.

• data[].created_at (string, optional): RFC3339 time when the attachment was created.

• 400: Request body or parameters failed validation.

• error (object, required): Error details.

• error.code (string, required): Machine-readable identifier. Examples: UNAUTHENTICATED, INVALID_REQUEST, MASTER_KEY_UNSET, INTERNAL.

• error.message (string, required): Human-readable explanation; safe to surface to operators.

• 401: Missing or invalid bearer. Response fields (application/json): identical to GET /environments/{env_id}/guardrails/{guardrail_id}/attachments, response 400 above.

• 404: Resource not found. Response fields (application/json): identical to GET /environments/{env_id}/guardrails/{guardrail_id}/attachments, response 400 above.

cURL

curl -X GET '$AISIX_CP/environments/{env_id}/guardrails/{guardrail_id}/attachments' -H 'Authorization: Bearer $AISIX_TOKEN'