model_access_get

Get a team's model access control: the models-management mode plus the team-level model list, and one project's list when project_id is given. Semantics: in blocklist mode (the default) every catalog model is available except those in the team or project blocklist (the union blocks). In allowlist mode only models in BOTH the team and project allowlists are available; a project with an empty allowlist denies all models, and a project with no allowlist configured falls back to the team allowlist. Args: - team_id: required (get it from teams_list) - project_id: optional, include to also return that project's list. OAuth callers must pass it as tenant context anyway, so an OAuth result always carries the project block. - response_format: optional, 'json' (default) or 'markdown' Returns: { models_management ('blocklist' | 'allowlist'), team: {models, count}, project?: {project_id, configured, models, count}, auto_allowlist_trained_models? (allowlist mode only), note }. Only the mode's active list is returned; the inactive stored list is never surfaced. Example: "Which models are blocked for project X?" -> team_id="team_xxx", project_id="project_xxx" Don't use when: you want to change the lists, use model_access_update (catalog-only, run via scenario_tool_execute_write).