API reference · CAIN Agent Security

Create Or Update Posture

POST /fabric/security/posture

Last reviewed 2026-10-02

POST /fabric/security/posture

Create or update agent security posture.

Parameters

Name	In	Type	Meaning
`agent_id` required	query	string
`identity_owner` required	query	string
`status`	query	string	default `"active"`
`risk_level`	query	string	default `"low"`
`trust_level`	query	string	default `"verified"`
`credential_scope`	query	string	default `""`
`current_trajectory_id`	query	string or null
`current_policy_id`	query	string or null
`kill_switch_state`	query	string	default `"inactive"`

Request body

Body_create_or_update_posture_fabric_security_posture_post

Field	Type	Meaning
`allowed_tools`	array of string or null
`denied_tools`	array of string or null

Responses

Status	Meaning	Body
`200`	Successful Response	object
`422`	Validation Error	`HTTPValidationError`
`401`	No key, or a key that is not valid	JSON `detail`
`429`	Rate limit for your plan reached; retry after the Retry-After seconds	JSON `detail`

Try it

Your API key X-API-Key Remember the key in this tab onlyagent_id queryidentity_owner querystatus queryrisk_level querytrust_level querycredential_scope querycurrent_trajectory_id querycurrent_policy_id querykill_switch_state queryRequest body application/json

This call changes data in the account the key belongs to.

The request goes from your browser straight to this site. Your key is not stored unless you tick the box, and then only in this tab's session storage.

Code

curl -sS -X POST 'https://cainstudio.online/fabric/security/posture?agent_id=agent-id&identity_owner=identity-owner' \
  -H "X-API-Key: $CAIN_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{}'

import json, os, urllib.request

req = urllib.request.Request('https://cainstudio.online/fabric/security/posture?agent_id=agent-id&identity_owner=identity-owner', method='POST',
    headers={"X-API-Key": os.environ["CAIN_API_KEY"], "Content-Type": "application/json"},
    data=json.dumps({}).encode())
with urllib.request.urlopen(req, timeout=60) as r:
    print(r.status, json.load(r))

const res = await fetch("https://cainstudio.online/fabric/security/posture?agent_id=agent-id&identity_owner=identity-owner", {
  method: "POST",
  headers: {
    "X-API-Key": process.env.CAIN_API_KEY!,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({}),
});
console.log(res.status, await res.json());

Schemas used

Body_create_or_update_posture_fabric_security_posture_post · HTTPValidationError · ValidationError

← List Postures · all 9 CAIN Agent Security calls · Get Agent Posture →

Try CAIN-42 on your own agents

Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.

Create a free account → · Try the sandbox · See the whole ecosystem