> ## Documentation Index > Fetch the complete documentation index at: https://evalgate.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # List policies policies > Requires scopes: eval:read ## OpenAPI ````yaml /api-reference/openapi.json get /api/policies openapi: 3.1.2 info: title: EvalGate API version: 18.13.0 description: EvalGate API. See docs/api-contract.md for stability commitments. servers: - url: https://evalgate.com description: Production - url: http://localhost:3000 description: Local security: [] paths: /api/policies: get: tags: - policies summary: List policies policies description: 'Requires scopes: eval:read' operationId: get_policies parameters: - name: environment in: query required: false schema: type: string - name: key in: query required: false schema: type: string - name: target in: query required: false schema: type: string responses: '200': description: Successful response content: application/json: schema: $ref: '#/components/schemas/GetApiPoliciesResponse200ApplicationJson' '400': $ref: '#/components/responses/ValidationError' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '409': $ref: '#/components/responses/Conflict' '429': $ref: '#/components/responses/RateLimited' '500': $ref: '#/components/responses/InternalError' '503': $ref: '#/components/responses/ServiceUnavailable' security: - bearerAuth: [] components: schemas: GetApiPoliciesResponse200ApplicationJson: oneOf: - type: object properties: status: oneOf: - type: string enum: - draft - type: string enum: - canary - type: string enum: - paused - type: string enum: - live - type: string enum: - selected - type: string enum: - candidate - type: string enum: - rolled_back createdAt: type: string updatedAt: type: string createdBy: type: string summary: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' rationale: oneOf: - type: 'null' - type: string metadata: oneOf: - type: 'null' - type: object additionalProperties: $ref: '#/components/schemas/JsonValue' environment: oneOf: - type: 'null' - type: string enum: - dev - type: string enum: - staging - type: string enum: - prod kind: type: string enum: - policy_pack artifactId: type: number versionId: type: number payload: type: object properties: name: type: string mode: oneOf: - type: string enum: - active - type: string enum: - shadow schemaVersion: type: number enum: - 1 policies: type: array items: type: object properties: id: type: string name: type: string actions: type: array items: oneOf: - type: object properties: type: type: string enum: - observe_only additionalProperties: false required: - type - type: object properties: type: type: string enum: - label label: type: string additionalProperties: false required: - type - label - type: object properties: type: type: string enum: - redact target: oneOf: - type: string enum: - input - type: string enum: - output - type: string enum: - tool_result replacement: type: string additionalProperties: false required: - type - target - type: object properties: type: type: string enum: - disable_tool toolName: type: string additionalProperties: false required: - type - toolName - type: object properties: message: type: string type: type: string enum: - force_clarify additionalProperties: false required: - message - type - type: object properties: type: type: string enum: - route_human reason: type: string queue: type: string additionalProperties: false required: - type - type: object properties: type: type: string enum: - stop_session reason: type: string additionalProperties: false required: - type enabled: type: boolean scope: oneOf: - type: string enum: - input - type: string enum: - tool_call - type: string enum: - tool_result - type: string enum: - planner_state - type: string enum: - final_output - type: string enum: - autonomy_round conditions: type: array items: type: object properties: value: oneOf: - type: string - type: number - type: boolean enum: - false - type: boolean enum: - true - type: array items: type: string operator: oneOf: - type: string enum: - includes - type: string enum: - in - type: string enum: - gte - type: string enum: - lte - type: string enum: - eq - type: string enum: - neq - type: string enum: - not_includes field: oneOf: - type: string enum: - severity - type: string enum: - tags - type: string enum: - environment - type: string enum: - toolName - type: string enum: - roundNumber - type: string enum: - noveltyScore - type: string enum: - blastRadius - type: string enum: - currentPassRate - type: string enum: - targetPassRate - type: string enum: - failedCaseCount - type: string enum: - totalCaseCount - type: string enum: - tokensUsed - type: string enum: - unknownPattern - type: string enum: - failureMemoryHit additionalProperties: false required: - value - operator - field priority: type: number description: type: string metadata: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' additionalProperties: false required: - id - name - actions - enabled - scope - conditions - priority description: type: string metadata: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' additionalProperties: false required: - name - mode - schemaVersion - policies versionNumber: type: number displayName: oneOf: - type: 'null' - type: string promotedBy: oneOf: - type: 'null' - type: string key: type: string additionalProperties: false required: - status - createdAt - updatedAt - createdBy - summary - rationale - metadata - environment - kind - artifactId - versionId - payload - versionNumber - displayName - promotedBy - key - type: object properties: artifact: type: object properties: id: type: number kind: type: string enum: - policy_pack displayName: oneOf: - type: 'null' - type: string key: type: string additionalProperties: false required: - id - kind - displayName - key versions: type: array items: type: object properties: status: oneOf: - type: string enum: - draft - type: string enum: - canary - type: string enum: - paused - type: string enum: - live - type: string enum: - selected - type: string enum: - candidate - type: string enum: - rolled_back createdAt: type: string updatedAt: type: string createdBy: type: string summary: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' rationale: oneOf: - type: 'null' - type: string metadata: oneOf: - type: 'null' - type: object additionalProperties: $ref: '#/components/schemas/JsonValue' environment: oneOf: - type: 'null' - type: string enum: - dev - type: string enum: - staging - type: string enum: - prod kind: type: string enum: - policy_pack artifactId: type: number versionId: type: number payload: type: object properties: name: type: string mode: oneOf: - type: string enum: - active - type: string enum: - shadow schemaVersion: type: number enum: - 1 policies: type: array items: type: object properties: id: type: string name: type: string actions: type: array items: oneOf: - type: object properties: type: type: string enum: - observe_only additionalProperties: false required: - type - type: object properties: type: type: string enum: - label label: type: string additionalProperties: false required: - type - label - type: object properties: type: type: string enum: - redact target: oneOf: - type: string enum: - input - type: string enum: - output - type: string enum: - tool_result replacement: type: string additionalProperties: false required: - type - target - type: object properties: type: type: string enum: - disable_tool toolName: type: string additionalProperties: false required: - type - toolName - type: object properties: message: type: string type: type: string enum: - force_clarify additionalProperties: false required: - message - type - type: object properties: type: type: string enum: - route_human reason: type: string queue: type: string additionalProperties: false required: - type - type: object properties: type: type: string enum: - stop_session reason: type: string additionalProperties: false required: - type enabled: type: boolean scope: oneOf: - type: string enum: - input - type: string enum: - tool_call - type: string enum: - tool_result - type: string enum: - planner_state - type: string enum: - final_output - type: string enum: - autonomy_round conditions: type: array items: type: object properties: value: oneOf: - type: string - type: number - type: boolean enum: - false - type: boolean enum: - true - type: array items: type: string operator: oneOf: - type: string enum: - includes - type: string enum: - in - type: string enum: - gte - type: string enum: - lte - type: string enum: - eq - type: string enum: - neq - type: string enum: - not_includes field: oneOf: - type: string enum: - severity - type: string enum: - tags - type: string enum: - environment - type: string enum: - toolName - type: string enum: - roundNumber - type: string enum: - noveltyScore - type: string enum: - blastRadius - type: string enum: - currentPassRate - type: string enum: - targetPassRate - type: string enum: - failedCaseCount - type: string enum: - totalCaseCount - type: string enum: - tokensUsed - type: string enum: - unknownPattern - type: string enum: - failureMemoryHit additionalProperties: false required: - value - operator - field priority: type: number description: type: string metadata: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' additionalProperties: false required: - id - name - actions - enabled - scope - conditions - priority description: type: string metadata: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' additionalProperties: false required: - name - mode - schemaVersion - policies versionNumber: type: number displayName: oneOf: - type: 'null' - type: string promotedBy: oneOf: - type: 'null' - type: string key: type: string additionalProperties: false required: - status - createdAt - updatedAt - createdBy - summary - rationale - metadata - environment - kind - artifactId - versionId - payload - versionNumber - displayName - promotedBy - key additionalProperties: false required: - artifact - versions JsonValue: oneOf: - type: 'null' - type: boolean - type: number - type: string - type: array items: $ref: '#/components/schemas/JsonValue' - type: object additionalProperties: $ref: '#/components/schemas/JsonValue' ApiError: type: object properties: error: type: object properties: code: type: string enum: - UNAUTHORIZED - FORBIDDEN - NOT_FOUND - INVALID_REFERENCE - VALIDATION_ERROR - RATE_LIMITED - CONFLICT - INTERNAL_ERROR - SERVICE_UNAVAILABLE - QUOTA_EXCEEDED - FEATURE_LIMIT_REACHED - NO_ORG_MEMBERSHIP - SHARE_REVOKED - SHARE_EXPIRED - SHARE_UNAVAILABLE - PROVIDER_KEY_MISSING - PROVIDER_KEY_EXPIRED - PROVIDER_RATE_LIMITED - PROVIDER_UNAUTHORIZED - PROVIDER_UNAVAILABLE - AGENT_HANDOFF_INVALID - AGENT_HANDOFF_EXPIRED - AGENT_HANDOFF_DENIED - AGENT_HANDOFF_CONSUMED - PAYLOAD_TOO_LARGE - METHOD_NOT_ALLOWED message: type: string details: {} requestId: type: string format: uuid redaction: type: object properties: applied: type: boolean enum: - true fieldCount: type: integer minimum: 0 secretCount: type: integer minimum: 0 required: - applied - fieldCount - secretCount required: - code - message required: - error responses: ValidationError: description: Validation error content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string Unauthorized: description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string WWW-Authenticate: description: >- Bearer challenge. Agent-facing routes include the RFC 9728 resource_metadata URL. schema: type: string Forbidden: description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string NotFound: description: Resource not found content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string Conflict: description: Conflict content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string RateLimited: description: Rate limit exceeded content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string Retry-After: description: Delay in seconds before retrying when present. schema: type: integer minimum: 1 InternalError: description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string ServiceUnavailable: description: Service unavailable content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: EvalGate API key description: >- Organization-scoped EvalGate API key. Discover the supported agent scopes at /.well-known/oauth-protected-resource. Per-operation grants are listed in x-evalgate-required-scopes; OpenAPI bearer security requirement arrays remain empty as required for non-OAuth schemes. x-evalgate-scopes-supported: - eval:read - eval:write - objectives:read - objectives:write - runs:read - runs:write - traces:read - traces:write - exports:download - reports:write - prompt:publish - scorer:publish - red_team:read - red_team:run - red_team:approve - docs:read - agent:read - agent:execute - resources:read - resources:write - contexts:read - contexts:write - observations:write - checks:read - checks:run - standards:read - standards:write - standards:approve - grants:read - grants:write - admin:keys - admin:workspace - admin:org x-evalgate-protected-resource-metadata: https://www.evalgate.com/.well-known/oauth-protected-resource ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.