Guardrails and routing
Guardrails
Account and workspace rules combine with API-key restrictions. Manage rules with GET /api/controls/guardrails and PUT /api/controls/guardrails/account or /workspace. Supply allowOperated, allowTools, maxOutputTokens (or null), models and providers. Empty lists allow all at that scope. A blocked request returns 403 guardrail_violation. Output limits and tool restrictions apply to text; model/provider restrictions also apply to OCR.
Routing preferences
Use GET/PUT /api/controls/routing with sort (throughput or latency), allowFallbacks and ordered providers. Preferences apply to BYOK autoroutes only; they never route to paid capacity. Disabling provider fallback preserves account rotation. Combos keep their own order and each step must pass guardrails.