Get one entry
Reads a single runtime-managed entry by namespace and key. The value is passed through the namespace’s redaction policy. When authentication is enabled, this endpoint requires the namespace’s read permission (for example, system_tenant_policy:read).
Authorizations
A bearer JWT issued by the platform's Access Manager (plugin-auth / lib-auth). Authorization is deny-all by default: the application must be configured with an authorizer, and when authentication is enabled it enforces per-namespace role-based access control on top of a valid, platform-scoped (non-tenant) identity. Machine callers obtain a token via the Access Manager client-credentials flow.
Path Parameters
The Systemplane namespace. Rails and plugins use runtime_config, tenant_policy, or operational_registry; some applications register a single application-named namespace instead.
"runtime_config"
The registered key within the namespace. Keys are flat, dot-delimited identifiers; a key may itself contain / segments.
"tenancy.ispb_organization_bindings"
Response
The entry.
A single Systemplane entry.
The namespace the entry belongs to.
"tenant_policy"
The registered key.
"fees.max_fee_amount_cents"
The entry's current value (post-redaction). Untyped — see the key's catalog contract.
A human-readable description of the key. Omitted when the key has none.
"Maximum fee amount in cents"

