Skip to main content

查询安全策略

查询安全策略列表。共 11 条策略,固定返回全量,不分页。

前提

已完成 Endpoint 与鉴权配置,详见API 总览与认证。

接口

GET /policies 查询安全策略列表。共 11 条策略,固定返回全量,不分页。

请求示例

curl -X GET "$BASE_URL/policies" \
  -H "Authorization: Bearer $BAILIAN_API_KEY"
其中 BASE_URL 为 https://{workspace_id}.cn-beijing.maas.aliyuncs.com/api/v1/agentstudio/security,BAILIAN_API_KEY 为阿里云百炼 API Key。

响应体

字段类型说明
policy_codestring策略标识,取值见下表
risk_domainstring策略分组,取值见下表
enabledbooleantrue 已启用,false 未启用
freeboolean是否为免费能力。免费策略未开通高级防护时仍生效
policy_code 取值:
policy_coderisk_domain名称
content_safetymodel_interaction内容安全
prompt_attackmodel_interaction提示词攻击
sensitive_data_leakmodel_interaction敏感数据外泄
tool_invokeruntime_tool工具调用安全
skill_scanruntime_toolSkills 安全检测
network_protectionruntime_tool网络防护
rag_poisoningknowledge_memoryRAG 数据投毒
memory_theftknowledge_memory记忆窃取
identity_credentialidentity_credential身份与凭证安全
baseline_checkconfig_component基线检查(免费)
vulnerability_scanconfig_component漏洞检测(免费)
risk_domain 取值:model_interaction(模型交互安全)、runtime_tool(运行环境与工具安全)、knowledge_memory(知识与记忆安全)、identity_credential(身份与凭证安全)、config_component(配置与组件安全)。

响应示例

{
  "success": true,
  "data": [
    {"policy_code": "content_safety",      "risk_domain": "model_interaction",   "enabled": false, "free": false},
    {"policy_code": "prompt_attack",       "risk_domain": "model_interaction",   "enabled": true,  "free": false},
    {"policy_code": "sensitive_data_leak", "risk_domain": "model_interaction",   "enabled": true,  "free": false},
    {"policy_code": "tool_invoke",         "risk_domain": "runtime_tool",        "enabled": true,  "free": false},
    {"policy_code": "skill_scan",          "risk_domain": "runtime_tool",        "enabled": true,  "free": false},
    {"policy_code": "network_protection",  "risk_domain": "runtime_tool",        "enabled": false, "free": false},
    {"policy_code": "rag_poisoning",       "risk_domain": "knowledge_memory",    "enabled": true,  "free": false},
    {"policy_code": "memory_theft",        "risk_domain": "knowledge_memory",    "enabled": true,  "free": false},
    {"policy_code": "identity_credential", "risk_domain": "identity_credential", "enabled": true,  "free": false},
    {"policy_code": "baseline_check",      "risk_domain": "config_component",    "enabled": true,  "free": true},
    {"policy_code": "vulnerability_scan",  "risk_domain": "config_component",    "enabled": true,  "free": true}
  ]
}
Managed Agent API
Flow Agent API
Sandbox API
RAG API
长期记忆
ParseX API
框架集成
Assistant API(下线中)