# POST /v1/capabilities/guardrails/dry-run - Evaluate guardrail checks against sample text.

Source: <https://everruns.com/docs/api/operations/dry_run_guardrails/>

POST

/v1/capabilities/guardrails/dry-run

Select code samplecURL (shell:curl)

```js
const url = 'https://app.everruns.com/api/v1/capabilities/guardrails/dry-run';
const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: '{"config":{},"stage":"output","text":"the model said something darn surprising","tool_name":"bashkit_exec"}'
};


try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```sh
curl --request POST \
  --url https://app.everruns.com/api/v1/capabilities/guardrails/dry-run \
  --header 'Content-Type: application/json' \
  --data '{ "config": {}, "stage": "output", "text": "the model said something darn surprising", "tool_name": "bashkit_exec" }'
```

* Production APIapp.everruns.com/api/v1/capabilities/guardrails/dry-run

## Request Bodyrequired

Media typeapplication/json

Request body for the `dry_run_guardrails` operation: evaluate a guardrails capability config against sample content without a session.

object

**config**

required

The `guardrails` capability config to evaluate (same shape persisted in `AgentCapabilityConfig.config`).

object

**stage**

required

Pipeline stage to evaluate.

string

Allowed values: output tool\_use tool\_output

##### Example

```plaintext
output
```

**text**

required

Sample content: model output, serialized tool arguments, or tool output, depending on `stage`.

string

##### Example

```plaintext
the model said something darn surprising
```

**tool\_name**

Tool name for `tool_use` stage checks (`tool_pattern` rules).

string | null

##### Example

```plaintext
bashkit_exec
```

## Responses

### 200

Triggered checks for the sample content

Media typeapplication/json

Response for the `dry_run_guardrails` operation.

object

**blocked**

required

Whether any hit would block (i.e. the content would be suppressed or the tool call refused when this config runs active).

boolean

**hits**

required

All triggered checks, in config order.

Array\<object>

One triggered check from a guardrails dry run.

object

**action**

required

Effective action (advisory mode downgrades block to log).

string

Allowed values: block log

**check\_id**

required

The check’s `id`, or `"<type>#<index>"` when none was set.

string

**check\_index**

required

Index of the check in the config’s `checks` array.

integer format: int32

**matched**

Bounded excerpt of what matched.

string | null

**reason\_code**

required

Stable machine-readable code, `guardrail.<rule_type>`.

string

**replacement**

The check’s custom replacement text, if configured.

string | null

**rule\_type**

required

Rule type: regex, blocklist, or tool\_pattern.

string

**stage**

required

Stage the check ran in.

string

Allowed values: output tool\_use tool\_output

##### Example

```json
{
  "hits": [
    {
      "action": "block",
      "check_id": "profanity",
      "matched": "darn",
      "reason_code": "guardrail.blocklist",
      "rule_type": "blocklist",
      "stage": "output"
    }
  ]
}
```

### 400

Invalid guardrails config, stage, or oversized text

Media typeapplication/json

Standard error response.

Wire shape is [RFC 9457 Problem Details](https://www.rfc-editor.org/rfc/rfc9457): every error response includes `title` and `status`, and may include `detail`, `code`, `allowed_actions`, `retry_after_seconds`, `instance`, and `type`. The content type is rewritten to `application/problem+json` with the `application/problem+json` content type.

object

**allowed\_actions**

Recovery actions the caller can take next.

Array\<object>

Agent-actionable link describing a follow-up the caller can take. Used in two contexts:

* **Error recovery** — `ErrorResponse.allowed_actions` carries `rel`s like `retry`, `retry-later`, `unarchive`, `get-existing` so the agent knows the right next call after a 4xx/429.
* **Entity hypermedia** — `WithUrls<T>.allowed_actions` carries state-aware `rel`s like `cancel`, `events`, `self`, `update` on the entity itself so the agent can follow links instead of reconstructing routes from prose.

The shape is intentionally identical across both contexts; the closed `rel` vocabulary distinguishes them.

object

**hint**

Short, agent-readable hint (e.g. “Shorten ‘name’ to <= 200 chars.”, “Cancel the active turn for this session.”).

string | null

**href**

Absolute (preferred) or relative URL the caller may invoke directly. **Always present on entity hypermedia actions** (`WithUrls<T>.allowed_actions`); **optional on error-recovery actions** (`ErrorResponse.allowed_actions`) where the matching `operation_id` is enough and the URI is implicit from the failed call.

string | null

**method**

HTTP method to use against `href`. Required for entity hypermedia actions; usually omitted on error-recovery actions where the same operation is retried with its original method.

string | null

**operation\_id**

OpenAPI `operationId` the caller should invoke. Lets an MCP client resolve the call without parsing `href`.

string | null

**rel**

required

Link relation describing the action. Examples: `self`, `cancel`, `pause`, `resume`, `events`, `retry`, `retry-later`, `unarchive`, `get-existing`, `delete`, `update`.

string

**schema\_ref**

OpenAPI `$ref` to the request-body schema, when the action takes one (e.g. `#/components/schemas/UpdateSessionRequest`). Lets a tool-calling agent fetch the input shape without scanning the whole spec.

string | null

**code**

Stable, machine-readable error code (snake\_case).

string | null

**detail**

Human-readable explanation specific to this occurrence.

string | null

**instance**

Request URI for this occurrence.

string | null

**retry\_after\_seconds**

Seconds the caller should wait before retrying (429 / transient 503).

integer | null format: int32

**status**

required

HTTP status code; mirrors the response status line.

integer format: int32

**title**

required

Short, human-readable summary of the problem (e.g. “Not Found”).

string

**type**

RFC 9457 problem type URI. Optional; identifies the problem class.

string | null

##### Example

```json
{
  "allowed_actions": [
    {
      "method": "POST"
    }
  ],
  "code": "session_not_found",
  "detail": "Session session_01933b5a000070008000000000000001 not found in org org_01933b5a000070008000000000000001.",
  "instance": "/v1/sessions/session_01933b5a000070008000000000000001",
  "retry_after_seconds": 30,
  "status": 404,
  "title": "Session not found",
  "type": "https://everruns.com/docs/errors/session_not_found"
}
```