Agents and the kill switch
Freeze agents in bulk
POST
/api/w/:wid/freezeAdmins and security leads. Freeze every agent a selector names; send dryRun: true first to see the count and digest, then confirmCount. The answer carries a batchId for lifting exactly this batch later.
| Field | Description |
|---|---|
selector | all, agentIds, principalId, vendor, tier, upstreamId; fields combine with AND |
reason | required (except on a dry run) |
hold | default security |
dryRun | true to count without freezing |
confirmCount | for large selections, the count you saw |
#Authentication
Session cookie
A signed-in person: the console's session cookie. Every state-changing request also carries the header x-immiscible-csrf: 1, and the member's role decides what it may do. Bearer tokens are ignored on these routes, so no machine credential can reach them.
#Path parameters
widstringrequired
Workspace id