{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/mongodb/main/json-schema/mongodb-organization-settings-schema.json",
  "title": "OrganizationSettings",
  "description": "Collection of settings that configures the organization.",
  "x-generated": "2026-10-03",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/mongodb-organizations-api-openapi.yml#/components/schemas/OrganizationSettings",
  "properties": {
    "apiAccessListRequired": {
      "description": "Flag that indicates whether to require API operations to originate from an IP Address added to the API access list for the specified organization.",
      "type": "boolean"
    },
    "customSessionTimeouts": {
      "$ref": "#/$defs/CustomSessionTimeouts"
    },
    "genAIFeaturesEnabled": {
      "default": true,
      "description": "Flag that indicates whether this organization has access to generative AI features. This setting only applies to Atlas Commercial and is enabled by default. Once this setting is turned on, Project Owners may be able to enable or disable individual AI features at the project level.",
      "type": "boolean"
    },
    "maxServiceAccountSecretValidityInHours": {
      "description": "Number that represents the maximum period before expiry in hours for new Atlas Admin API Service Account secrets within the specified organization.",
      "format": "int32",
      "maximum": 8760,
      "minimum": 8,
      "type": "integer"
    },
    "multiFactorAuthRequired": {
      "description": "Flag that indicates whether to require users to set up Multi-Factor Authentication (MFA) before accessing the specified organization. To learn more, see: https://www.mongodb.com/docs/atlas/security-multi-factor-authentication/.",
      "type": "boolean"
    },
    "restrictEmployeeAccess": {
      "description": "Flag that indicates whether to block MongoDB Support from accessing Atlas infrastructure and cluster logs for any deployment in the specified organization without explicit permission. Once this setting is turned on, you can grant MongoDB Support a 24-hour bypass access to the Atlas deployment to resolve support issues. To learn more, see: https://www.mongodb.com/docs/atlas/security-restrict-support-access/.",
      "type": "boolean"
    },
    "securityContact": {
      "description": "String that specifies a single email address for the specified organization to receive security-related notifications. Specifying a security contact does not grant them authorization or access to Atlas for security decisions or approvals. An empty string is valid and clears the existing security contact (if any).",
      "type": "string"
    },
    "streamsCrossGroupEnabled": {
      "description": "Flag that indicates whether a group's Atlas Stream Processing workspaces in this organization can create connections to other group's clusters in the same organization.",
      "type": "boolean"
    }
  },
  "type": "object",
  "$defs": {
    "CustomSessionTimeouts": {
      "description": "Defines the session timeout settings for managing user sessions at the organization level. When set to null, the field's value is unset, and the default timeout settings are applied.",
      "properties": {
        "absoluteSessionTimeoutInSeconds": {
          "description": "Specifies the absolute session timeout duration in seconds. When set to null, the field's value is unset, and the default value of 43,200 seconds (12 hours) is applied. Accepted values range between a minimum of 3,600 seconds (1 hour) and a maximum of 43,200 seconds (12 hours).",
          "format": "int32",
          "type": "integer"
        },
        "idleSessionTimeoutInSeconds": {
          "description": "Specifies the idle session timeout duration in seconds. When set to null, the field's value is unset, and the default behavior depends on the context: no timeout for Atlas Commercial, and 600 seconds (10 minutes) for Atlas for Government. Accepted values start at a minimum of 300 seconds (5 minutes). For Atlas Commercial, the maximum value cannot exceed the configured absolute session timeout. For Atlas for Government, the maximum value is capped at 600 seconds (10 minutes).",
          "format": "int32",
          "type": "integer"
        }
      },
      "type": "object"
    }
  }
}