> ## Documentation Index > Fetch the complete documentation index at: https://conductorone-lee-google-cloud-project-mcp-setup.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # List History > List the change history for AI governance settings (newest first). Singleton: scoped to the caller's tenant. Admin-tier per object-history convention. ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples get /api/v1/settings/ai-governance/history openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/settings/ai-governance/history: get: tags: - AI Governance Settings summary: List History description: |- List the change history for AI governance settings (newest first). Singleton: scoped to the caller's tenant. Admin-tier per object-history convention. operationId: c1.api.ai_governance.v1.AIGovernanceSettingsService.ListHistory responses: '200': content: application/json: schema: $ref: >- #/components/schemas/c1.api.ai_governance.v1.ListAIGovernanceSettingsHistoryResponse description: >- ListAIGovernanceSettingsHistoryResponse contains a page of AI governance settings change-history entries, newest first. x-codeSamples: - lang: go label: ListHistory source: "package main\n\nimport(\n\t\"context\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/shared\"\n\tconductoronesdkgo \"github.com/conductorone/conductorone-sdk-go\"\n\t\"log\"\n)\n\nfunc main() {\n ctx := context.Background()\n\n s := conductoronesdkgo.New(\n conductoronesdkgo.WithSecurity(shared.Security{\n BearerAuth: \"\",\n Oauth: \"\",\n }),\n )\n\n res, err := s.AIGovernanceSettings.ListHistory(ctx)\n if err != nil {\n log.Fatal(err)\n }\n if res.ListAIGovernanceSettingsHistoryResponse != nil {\n // handle response\n }\n}" - lang: typescript label: Typescript (SDK) source: >- import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript"; const conductoroneSDKTypescript = new ConductoroneSDKTypescript({ security: { bearerAuth: "", oauth: "", }, }); async function run() { const result = await conductoroneSDKTypescript.aiGovernanceSettings.listHistory(); console.log(result); } run(); components: schemas: c1.api.ai_governance.v1.ListAIGovernanceSettingsHistoryResponse: description: |- ListAIGovernanceSettingsHistoryResponse contains a page of AI governance settings change-history entries, newest first. properties: list: description: The page of history entries, newest first. items: $ref: >- #/components/schemas/c1.api.ai_governance.v1.AIGovernanceSettingsHistoryEntry type: - array - 'null' nextPageToken: description: >- Pagination token for the next page, or empty if there are no more results. type: string title: List Ai Governance Settings History Response type: object x-speakeasy-name-override: ListAIGovernanceSettingsHistoryResponse c1.api.ai_governance.v1.AIGovernanceSettingsHistoryEntry: description: >- AIGovernanceSettingsHistoryEntry is a single change-history record capturing a snapshot of the settings and who changed them. properties: metadata: oneOf: - $ref: '#/components/schemas/c1.api.history.v1.HistoryEntryMetadata' - type: 'null' snapshot: oneOf: - $ref: >- #/components/schemas/c1.api.ai_governance.v1.AIGovernanceSettings - type: 'null' title: Ai Governance Settings History Entry type: object x-speakeasy-name-override: AIGovernanceSettingsHistoryEntry c1.api.history.v1.HistoryEntryMetadata: description: |- HistoryEntryMetadata is the shared metadata envelope embedded on every per-service HistoryEntry. The strongly-typed snapshot lives on the per-service entry message alongside this envelope. properties: actor: oneOf: - $ref: '#/components/schemas/c1.api.history.v1.HistoryActor' - type: 'null' annotations: description: |- Server-rendered annotations: known keys carry display_label and (for ticket_id, etc.) display_url resolved from tenant config. Cap mirrors the per-object annotation ceiling (16). items: $ref: '#/components/schemas/c1.api.history.v1.HistoryAnnotation' type: - array - 'null' changeKind: description: |- Storage-model enum re-exported here for wire compatibility with the storage row. UNSPECIFIED should never appear on the wire. enum: - CHANGE_KIND_UNSPECIFIED - CHANGE_KIND_CREATE - CHANGE_KIND_PUT - CHANGE_KIND_HARD_DELETE type: string x-speakeasy-unknown-values: allow createdAt: format: date-time type: - string - 'null' id: description: KSUID. Same value as c1.models.history.v1.ObjectHistory.id. type: string syslogEventId: description: |- System Log event id — KSUID of the OCSF event recorded for this write. Empty for non-RPC writes (workflows, cron). Customer-facing copy says "System Log event"; the underlying format is OCSF. type: string traceId: description: |- OTel trace correlation. Empty when no valid span at write time. 32-hex-char otel trace id or empty. type: string title: History Entry Metadata type: object x-speakeasy-name-override: HistoryEntryMetadata c1.api.ai_governance.v1.AIGovernanceSettings: description: >- AIGovernanceSettings holds the tenant-wide AI governance policy that controls MCP client access, tool approval, classification defaults, audit detail, and automatic tool discovery. There is one settings object per tenant. properties: allowedClientTypes: description: >- MCP client types permitted to connect. An empty list allows all types. items: enum: - MCP_CLIENT_TYPE_UNSPECIFIED - MCP_CLIENT_TYPE_PERSONAL - MCP_CLIENT_TYPE_SHARED - MCP_CLIENT_TYPE_SERVICE - MCP_CLIENT_TYPE_EPHEMERAL type: string x-speakeasy-unknown-values: allow type: - array - 'null' auditVerbosity: description: How much detail is captured in the audit log for MCP tool calls. enum: - AUDIT_VERBOSITY_UNSPECIFIED - AUDIT_VERBOSITY_MINIMAL - AUDIT_VERBOSITY_STANDARD - AUDIT_VERBOSITY_FULL type: string x-speakeasy-unknown-values: allow autoDiscoveryEnabled: description: >- When true, C1 periodically re-discovers tools from registered MCP servers on the discovery_interval schedule. type: boolean c1awAutospillDisabled: deprecated: true description: |- Deprecated. Set QUOTA_REF_TENANT_C1AW_AUTOSPILL_THRESHOLD_KB to 0 to disable C1AW autospill. type: boolean c1awAutospillThresholdBytes: deprecated: true description: |- Deprecated. C1AW autospill is configured with QUOTA_REF_TENANT_C1AW_AUTOSPILL_THRESHOLD_KB. format: uint32 type: integer codeModeConcurrency: description: |- Number of pre-warmed Lambda instances for the per-tenant code-mode function. 0 (default) leaves the Lambda cold-started on first call; > 0 keeps that many execution environments warm via AWS Lambda provisioned concurrency, redeploying the function on change. format: int32 type: integer createdAt: format: date-time type: - string - 'null' defaultClientLifecycle: oneOf: - $ref: >- #/components/schemas/c1.api.ai_governance.v1.MCPClientLifecycleConfig - type: 'null' defaultToolClassification: description: >- Classification assigned to newly discovered tools that do not declare their own classification (for example, read, write, or destructive). enum: - TOOL_CLASSIFICATION_UNSPECIFIED - TOOL_CLASSIFICATION_READ - TOOL_CLASSIFICATION_WRITE - TOOL_CLASSIFICATION_DESTRUCTIVE - TOOL_CLASSIFICATION_SENSITIVE - TOOL_CLASSIFICATION_DANGEROUS type: string x-speakeasy-unknown-values: allow discoveryInterval: format: duration type: - string - 'null' enabled: deprecated: true description: Legacy master switch. type: boolean preferCodeModeOverDirectTools: description: >- When true, the MCP server hides direct tool listings from capable clients whenever the code-mode entrypoints (describe + execute) are registered, so agents discover and invoke MCP tools through TypeScript code mode instead of direct tool calls. A small allowlist of high-traffic direct tools remains exposed. Incapable clients (e.g. SERVICE, EPHEMERAL) see the normal tool set regardless. Defaults to false. type: boolean requireToolApproval: description: >- When true, newly discovered tools start in a pending state and must be approved by an admin before they can be granted or invoked. type: boolean surfaceRequestableTools: description: |- When true, MCP discovery surfaces tools the caller could request (no active grant, but reachable through a request catalog) alongside granted tools — both on the classic tools/list path and inside the code-mode describe entrypoint. Invoking such a tool opens (or reuses) an access-request ticket and returns a request_created envelope instead of executing. Defaults to true. type: boolean updatedAt: format: date-time type: - string - 'null' title: Ai Governance Settings type: object x-speakeasy-name-override: AIGovernanceSettings c1.api.history.v1.HistoryActor: description: |- HistoryActor is a typed reference to whoever performed the change. kind mirrors the storage-model ActorKind enum; user_id is set when kind corresponds to a user principal (API / SUPPORT) so the frontend can resolve the user via its own avatar / lookup hooks. Protos reference objects by id; the frontend renders / caches itself. The raw passport fields (token_id / principal_id) intentionally do not leave the server. Non-user actors (workflow, connector, internal) are identified by `kind` alone; correlating IDs (workflow_run_id, etc.) flow through `HistoryAnnotation` instead of being plucked into the actor message. properties: kind: description: The kind field. enum: - ACTOR_KIND_UNSPECIFIED - ACTOR_KIND_API - ACTOR_KIND_SLACK - ACTOR_KIND_MSTEAMS - ACTOR_KIND_JIRA_CLOUD - ACTOR_KIND_INTERNAL - ACTOR_KIND_SUPPORT - ACTOR_KIND_WORKFLOW type: string x-speakeasy-unknown-values: allow userId: description: |- Bare KSUID. Set when kind = ACTOR_KIND_API or ACTOR_KIND_SUPPORT. Empty otherwise. The frontend resolves user_id → display name via the same lookup paths it uses elsewhere (avatars, mentions, ...). type: string title: History Actor type: object x-speakeasy-name-override: HistoryActor c1.api.history.v1.HistoryAnnotation: description: |- HistoryAnnotation is a single operator-provided key/value rendered with per-key display metadata. Annotations are minted from the Tx.*WithHistoryAnnotations / db.WithHistoryAnnotations call options. properties: displayLabel: description: Server-rendered label, e.g. "Ticket". type: string displayUrl: description: |- Resolved from tenant config; "" if none. Frontend applies its own scheme allowlist. type: string displayValue: description: UI-friendly rendering (truncated / reshaped from raw_value). type: string key: description: 'Storage-side key. Bounds: ^[a-z][a-z0-9_.-]{0,63}$.' type: string kind: description: The kind field. enum: - ANNOTATION_KIND_UNSPECIFIED - ANNOTATION_KIND_GENERIC - ANNOTATION_KIND_TICKET - ANNOTATION_KIND_REASON - ANNOTATION_KIND_WORKFLOW - ANNOTATION_KIND_BATCH - ANNOTATION_KIND_CORRELATION - ANNOTATION_KIND_AUTOMATION type: string x-speakeasy-unknown-values: allow rawValue: description: >- Raw value as stored in ObjectHistory.annotations; storage-side values are capped at 512 bytes. type: string title: History Annotation type: object x-speakeasy-name-override: HistoryAnnotation c1.api.ai_governance.v1.MCPClientLifecycleConfig: description: |- MCPClientLifecycleConfig controls how long inactive MCP clients remain visible, when their access is closed, and when their records are removed. Durations are measured from the client's last activity. Any duration left at zero disables that transition. properties: inactivityCloseAfter: format: duration type: - string - 'null' inactivityHideAfter: format: duration type: - string - 'null' retentionDeleteAfter: format: duration type: - string - 'null' title: Mcp Client Lifecycle Config type: object x-speakeasy-name-override: MCPClientLifecycleConfig securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````