Read the account-default review policy (console plane)
GET /v1/admin/orgs/{org_id}/projects/{project_id}/review-policy
The authoritative account-default review policy (D6): require_review, allow_direct, or auto_send_graduated. require_review always downgrades an agent’s per-send mode assertion (an agent can never override it). effective is the account policy with the safe require_review floor applied. human_email_review describes the separate default-off exception for the sole verified human recipient. Readable through Full account control; ordinary agents discover the exception on get_inbox without administrative authority.
Authorizations
Section titled “Authorizations ”Parameters
Section titled “ Parameters ”Path Parameters
Section titled “Path Parameters ”Responses
Section titled “ Responses ”Ok
The account-default review policy (D6) plus the effective floor an inbox with no override resolves to (require_review is the safe floor).
object
Default-off account-wide exception for emails from any account agent to exactly one To recipient: the account human at verified_email, with no Cc or Bcc. Exact address only, not aliases. SMTP envelope must also contain only that recipient. Backend deterministically approves qualifying new submissions as human_recipient_auto; writing rules, intent requirements, suppression and sending limits still apply. Other recipients retain their existing review policy. Protected onboarding practice always requires human review. Only the human or an explicitly authorized account:admin connection can change this setting. Ordinary agents cannot enable it.
object
Default-off review exceptions for email between inboxes in the sender’s exact project or organization. Every final To, Cc, Bcc and SMTP envelope recipient must resolve to a current inbox inside that scope. Shared domains, aliases, shared administrators and organization hierarchy do not establish membership. Organization enablement covers all current and future projects; project-off does not override it. These settings grant no inbox access. Writing rules, intent, suppression, sending limits and protected onboarding review still apply. Ordinary agents and project managers cannot enable these settings.
object
object
True when the project or organization exception is enabled.
object
Missing or invalid credential.
The canonical error envelope. error is a stable machine code.
object
Stable error code (e.g. unauthorized, forbidden, not_found, invalid, quota_exceeded, rate_limited).
Example
forbiddenHuman-readable detail (never leaks internals).
Example
missing required scopeMachine-readable quota reason. inbox_limit_exceeded means billing account inbox capacity across all organizations and projects sharing that account; enrollment_token_mailbox_budget_exhausted means the enrollment key lifetime creation allowance. Read message for recovery; inbox counts are separate from sending quotas.
Consumed plus reserved units.
Requested additional units.
Next UTC usage-period boundary; pending reservations survive this boundary.
Authenticated but lacking the required scope, or out of quota.
The canonical error envelope. error is a stable machine code.
object
Stable error code (e.g. unauthorized, forbidden, not_found, invalid, quota_exceeded, rate_limited).
Example
forbiddenHuman-readable detail (never leaks internals).
Example
missing required scopeMachine-readable quota reason. inbox_limit_exceeded means billing account inbox capacity across all organizations and projects sharing that account; enrollment_token_mailbox_budget_exhausted means the enrollment key lifetime creation allowance. Read message for recovery; inbox counts are separate from sending quotas.
Consumed plus reserved units.
Requested additional units.
Next UTC usage-period boundary; pending reservations survive this boundary.