Skip to content

Agents and the kill switch

Freeze agents in bulk

POST/api/w/:wid/freeze

Admins and security leads. Freeze every agent a selector names; send dryRun: true first to see the count and digest, then confirmCount. The answer carries a batchId for lifting exactly this batch later.

FieldDescription
selectorall, agentIds, principalId, vendor, tier, upstreamId; fields combine with AND
reasonrequired (except on a dry run)
holddefault security
dryRuntrue to count without freezing
confirmCountfor large selections, the count you saw

#Authentication

Session cookie

A signed-in person: the console's session cookie. Every state-changing request also carries the header x-immiscible-csrf: 1, and the member's role decides what it may do. Bearer tokens are ignored on these routes, so no machine credential can reach them.

#Path parameters

widstringrequired

Workspace id