Change the AI tools settings of the company
Change some of the company’s AI tools settings and return them all, as getAiToolsSettings does. Only the fields sent change, at least one. A list sent replaces the whole list: to ignore one more severity or rule, read the settings with getAiToolsSettings first and send the full list with the change (a rule by its code from rules). Ignoring a severity, a rule, the devices assigned to no employee or the devices in stock takes their findings out of every AI tools read and the cockpit at once; nothing changes on the devices. defaultPolicy applies to the tools a device reports for the first time, never to a tool already seen: its policy is setAiToolPolicy. AI tools are what Primo finds on Macs (assistant apps, coding agents, IDE plugins, browser extensions, MCP servers, AI connections, agent instruction files), as of the last report (lastSyncedAt of getAiToolsOverview, every 5 minutes), with Primo’s severities, less the findings the company’s AI tools settings ignore. They are not the software catalog (getSoftwares, getDeviceSoftware), the company’s own AI agents (listAgents) nor AI credits (getAiUsage). A company without AI tools monitoring gets a 403, final.
Authorizations
Use your Primo API key in the Authorization header as Bearer <API_KEY>.
Body
The policy a tool gets the first time a device reports it; the tools already seen keep theirs
not_reviewed, approved, blocked The severities whose findings the company ignores, e.g. ["low"]
critical, high, medium, low The rule codes whose findings the company ignores whatever their severity, e.g. ["unpinned_dependency"]
2001 - 100true: a device assigned to no employee raises no finding (its tools stay listed)
true: a device in stock raises no finding (its tools stay listed)
Response
The policy a tool gets the first time a device reports it; the tools already seen keep theirs
not_reviewed, approved, blocked The severities whose findings the company ignores, e.g. ["low"]
critical, high, medium, low The rule codes whose findings the company ignores whatever their severity, e.g. ["unpinned_dependency"]
2001 - 100true: a device assigned to no employee raises no finding (its tools stay listed)
true: a device in stock raises no finding (its tools stay listed)
Every rule Primo rates, worst severity first