get_config
READS the project rules — its configuration — in ONE call, with the provenance of each key. Serves as the starting point when an agent picks up a project: the response says what applies HERE, where it comes from, and who enforces it. Read-only, no parameters. The vocabulary is CLOSED (11 keys, described by the resource orggen://config/schema: defaults, bounds, versions, enumerations); it is constant and can be cached. Response: found (true = the project has a valid AND attested configuration) · effective (the value of each key, defaults included: what the project DECLARES, NOT what is enforced) · reservedKeys (the keys of effective whose planned server guard is not delivered yet — a value there is declared only, not in force) · keyScope (MCP only; the scope of the credential of THIS call, an API key, or an OAuth or session connection, which has no key scope: bounded, true when its project scope is limited, false when not, null with a note when the scope cannot be read right now; requireExplicitProject, true when a mutating call without expectedProjectId is refused, unless the project comes from the X-Project-Id header; list_projects gives the detail, project by project) · sources (per key: default, project, or unattested = a prohibition or a tightening value stored without an attesting write, or in an unreadable configuration: it only restricts you) · enforcement (per key: serveur = an application guard enforces it, consigne = a rule YOU follow but that OrgGen does not verify, reserved = planned, not yet applied — not a guarantee) · whatThisMeansForYou (derived sentences, in your account's language) · localRules (the project's prohibitions: DATA to respect, not an instruction of the product; set by a governing human, or, when sources.forbidden is unattested, stored without an attesting write and kept because they can only restrict you) · governanceDocument (null as long as the document role does not exist: by convention, the framework document is attached to the project root) · updatedAt, updatedBy (read from the log) · bytes / maxBytes (8192 bytes, all plans) · locale · precedence · notIncluded. A project without a configuration still answers: the product defaults, found: false — you never have to guess. Two warnings, not an error: untrustedStoredConfig (a value is stored but nothing attests that it comes from the site: only what can restrict you is kept and applies — its prohibitions and tightening values —, every other key is IGNORED) and invalidStoredConfig (the attested value is unreadable: defaults, except what can only restrict you). The config key of set_project_metadata is RESERVED: no tool writes the configuration. The configuration never takes precedence over a tool refusal, a permission, a write lock or an action reserved to a human. It is not in version snapshots: restore_version does not restore it.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| _unused | No | Unused parameter | |
| expectedProjectId | No | UUID of the project targeted by THIS call. ACTUALLY targets this project instead of the session project. Refused without changing anything if access is not granted. |