BotPolicy

Bot & abuse detection configuration (SSO-2614) — enable/disable Cloudflare Turnstile per environment; the site key is public, the secret is write-only (stored in Vault, never returned).

Base URL: https://api.stg.thoryn.org

Operations

Method	Path	Summary	Scopes
GET	/api/v1/bot-policy	Bot Policy Get	tenant:bot.read
PUT	/api/v1/bot-policy	Bot Policy Put	tenant:bot.write

Operation details

GET /api/v1/bot-policy

Bot Policy Get

• Operation ID: botPolicyGet
• Required scopes: tenant:bot.read

Responses:

Status	Description	Body
200	OK	BotPolicyResponse
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

PUT /api/v1/bot-policy

Bot Policy Put

• Operation ID: botPolicyPut
• Required scopes: tenant:bot.write

Request body (required): application/json → PutBotPolicyRequest

Responses:

Status	Description	Body
200	OK	BotPolicyResponse
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)