# /alerts/config/effective - Inspect a tenant's effective merged config

**GET /alerts/config/effective**

Privileged troubleshooting view. Returns the configuration a tenant
ACTUALLY receives: the per-layer contribution of every organization
in its ancestor chain (Owner → tenant), the merged effective layer,
and the rendered Alertmanager YAML pushed to Mimir for that tenant.

Unlike `GET /alerts/config` (which returns only the caller's own
layer), this exposes the full inherited + merged view, so it is
gated by the dedicated `config:alerts` permission. That permission
lives solely on the `super` user role, which is owner-assignable
only — so in practice only an Owner-org Super Admin can reach this.
It is not reachable by Distributor/Reseller admins.

Secrets are redacted in the response: telegram `bot_token` and
webhook URL path/query in every layer and in the effective layer,
and SMTP credentials / bearer / bot tokens in the rendered YAML.

`organization_id` is required and may target ANY tenant. A
nonexistent id returns an empty effective config (no error) — the
honest answer for a diagnostic tool. Read-only: no Mimir push, no
DB writes.



## Servers
- Backend API server (port 8080): https://api.your-domain.com/api (Backend API server (port 8080))
- Collect API server (port 8081): https://collect.your-domain.com/api (Collect API server (port 8081))


## Authentication methods
- Bearer auth


## Parameters


### Query parameters
- **organization_id** (string)
  Logto organization id of the tenant to inspect.


## Responses
### 200
Effective configuration report

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object)


### 400
Bad request - validation error

#### Body: application/json (object)
- **code** (integer)
  HTTP error code
- **message** (string)
  Error message
- **data** (object)


### 401
Unauthorized - invalid or missing token

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object | null)


### 403
Forbidden - insufficient permissions

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object | null)


### 422
Unprocessable entity - business logic error

#### Body: application/json (object)
- **code** (integer)
  HTTP error code
- **message** (string)
  Error message
- **data** (object)



[Powered by Bump.sh](https://bump.sh)