Approve or block an AI tool, or mark it not reviewed
Record the company’s decision on one AI tool (toolKey from getAiTools or getAiTool): approved, blocked or not_reviewed, and return the tool’s policy. A decision only: Primo removes nothing from the devices and does not stop the tool. A 404 means no device reports the tool. For several tools at once (every MCP server, every tool not reviewed yet), use setAiToolPolicies. The policy a tool gets when a device first reports it is defaultPolicy, in updateAiToolsSettings. AI tools are what Primo finds on Macs (assistant apps, coding agents, IDE plugins, browser extensions, MCP servers, AI connections, agent instruction files), as of the last report (lastSyncedAt of getAiToolsOverview, every 5 minutes), with Primo’s severities, less the findings the company’s AI tools settings ignore. They are not the software catalog (getSoftwares, getDeviceSoftware), the company’s own AI agents (listAgents) nor AI credits (getAiUsage). A company without AI tools monitoring gets a 403, final.
Authorizations
Use your Primo API key in the Authorization header as Bearer <API_KEY>.
Path Parameters
Body
The company's decision on the tool: not_reviewed, approved or blocked
not_reviewed, approved, blocked Response
The company's decision on the tool: not_reviewed, approved or blocked
not_reviewed, approved, blocked default: the policy the settings gave the tool when a device first reported it; admin: a decision
default, admin When the policy was set (ISO 8601); null before the first sync stamps it