Response Format

Governed responses include policy-enforcement headers and field-level access control. This page documents the headers and field masking behavior you should expect.

Governance headers

Governed responses include the following headers:

HeaderValueDescription
X-Conduit-GovernedtrueResponse was processed through governance pipeline
X-Robots-Tagnoai, noimageaiAnti-training directive (when enabled by MLS policy)
X-Conduit-Anti-TrainingtrueData must not be used for AI/ML model training
Cache-Controlno-store, no-cache, must-revalidateCaching disabled (when enabled by MLS policy)
Pragmano-cacheHTTP/1.0 backward-compatible no-cache
X-Conduit-StatelesstrueStateless enforcement — do not persist query data
X-RateLimit-Remaining<number>Remaining requests in the current rate limit window
X-RateLimit-Reset<unix-timestamp>When the current rate limit window resets

Field masking examples

Masked fields have their values replaced with a pattern defined by the MLS policy. Hidden fields are removed entirely.

Standard Access policy

FieldAccessYou receive
ListAgentEmailmasked"***@***.com"
BuyerAgentEmailmasked"***@***.com"
ListAgentDirectPhonehidden(field removed)
BuyerAgentDirectPhonehidden(field removed)
TaxAssessedValuemasked"$***,***"

Example governed response

json
{
  "jsonrpc": "2.0",
  "id": 2,
  "result": {
    "content": [
      {
        "type": "text",
        "text": "[{
          \"ListingId\": \"MLS-2024-12345\",
          \"StreetAddress\": \"123 Main St\",
          \"City\": \"Austin\",
          \"StateOrProvince\": \"TX\",
          \"ListPrice\": 450000,
          \"BedroomsTotal\": 3,
          \"BathroomsTotal\": 2,
          \"ListAgentFullName\": \"Jane Smith\",
          \"ListAgentEmail\": \"***@***.com\",
          \"TaxAssessedValue\": \"$***,***\",
          \"ListOfficeName\": \"Realty Associates\"
        }]"
      }
    ]
  }
}

Note: ListAgentDirectPhone is completely absent (hidden). ListAgentEmail and TaxAssessedValue are masked.

Billing status header

If your billing is past due, governed responses include:

X-Conduit-Billing: past_due

Requests are still processed while past due, but your access will be revoked if billing remains unresolved. See Billing & Usage for details.