Suspend Agent
Machine Agents
Suspend Agent
Temporarily suspend a machine agent, blocking all sessions and tool invocations
POST
Suspend Agent
Suspend Agent
POST /v1/agents/{agentID}/suspend
Suspends a machine agent identity, immediately preventing it from creating new sessions, invoking tools, or performing any authenticated operations. Suspension is reversible — the agent can be reactivated by updating its status back to "active" via the update endpoint.
All active sessions belonging to the suspended agent are effectively blocked at the access-control layer. Existing session tokens will fail scope checks until the agent is reactivated.
Suspension is the recommended first response for anomalous agent behavior. Use
revoke only when permanent
decommissioning is required.
Authentication
RequiresX-API-Key header or Bearer JWT token. Tenant-scoped via X-Tenant-ID.
Path Parameters
The MAIP agent identifier (e.g.,
maip:t1234567:01HYX3KPZQ7RJGBN0WFMV8SDEH).Request Body
Human-readable explanation for the suspension. Recorded in the audit log for
compliance review. Maximum 1024 characters.
Response
Updated status, always
"suspended" on success.The MAIP agent identifier that was suspended.
Example
Reactivating a Suspended Agent
To restore a suspended agent to active status, use the PATCH /v1/agents/ endpoint:Authorizations
API key for machine-to-machine authentication
Path Parameters
Agent identifier
Body
application/json
Human-readable reason for suspension
Response
Agent suspended
Available options:
orchestrator, worker, inference, pipeline, service, bot, llm Maximum string length:
256Available options:
active, suspended, revoked Required range:
0 <= x <= 1Base64-encoded public key

