Get one key's write contract
Returns the expected write contract for one registered Systemplane key: its JSON schema, semantic validation rules, valid examples, default value, and the matching PUT path. The schema is contract metadata; the currently configured value is read from GET /system/{namespace}/{key}. When authentication is enabled, this discovery endpoint requires read permission for at least one Systemplane namespace.
Authorizations
A bearer JWT issued by the platform's Access Manager (plugin-auth / lib-auth). Authorization is deny-all by default: the application must be configured with an authorizer, and when authentication is enabled it enforces per-namespace role-based access control on top of a valid, platform-scoped (non-tenant) identity. Machine callers obtain a token via the Access Manager client-credentials flow.
Path Parameters
The Systemplane namespace. Rails and plugins use runtime_config, tenant_policy, or operational_registry; some applications register a single application-named namespace instead.
"runtime_config"
The registered key within the namespace. Keys are flat, dot-delimited identifiers; a key may itself contain / segments.
"tenancy.ispb_organization_bindings"
Response
The key's write contract.
The full write contract for one registered key.
The catalog schema version.
"systemplane.catalog.v1"
The application that serves this catalog.
"matcher"
The namespace the key belongs to.
"tenant_policy"
The registered key.
"tenancy.ispb_organization_bindings"
The value kind the key accepts.
"object"
Whether the key's value is resolved per tenant.
false
When a change takes effect.
"read_live"
The redaction policy applied to the value on read.
"mask"
Whether the key has a server-side write validator.
true
A human-readable description of the key.
"Tenant-scoped JSON object keyed by ISPB"
The relative URL of this detail resource.
"/system/-/catalog/tenant_policy/tenancy.ispb_organization_bindings"
The JSON schema the value is validated against.
The write descriptor for a key — the request you send to change it.
The key's default value. Untyped — matches the key's kind.
Human-readable semantic validation rules beyond the JSON schema. Omitted when there are none.
Valid example values for the key. Omitted when there are none.
10
