> ## Documentation Index > Fetch the complete documentation index at: https://docs.igrisecurity.com/llms.txt > Use this file to discover all available pages before exploring further. # List policies > Lists the organization's governance policies. `limit` defaults to 50 and is capped at 100. See [Policies](/govern/policies). **Required permission:** `policies:read` ## OpenAPI ````yaml /api-reference/openapi.yaml get /api/v1/policies openapi: 3.1.0 info: title: Igris Management API version: '1' description: >- REST API for managing Igris connections, policies, sessions, audit events and alerts. servers: - url: https://api.igrisecurity.com security: - bearerAuth: [] tags: - name: Connections - name: Policies - name: Sessions - name: Audit Events - name: Incidents - name: Webhooks - name: API Keys - name: Members - name: LLM Providers - name: LLM Cost - name: Observe paths: /api/v1/policies: get: tags: - Policies summary: List policies description: > Lists the organization's governance policies. `limit` defaults to 50 and is capped at 100. See [Policies](/govern/policies). **Required permission:** `policies:read` operationId: listPolicies parameters: - $ref: '#/components/parameters/Limit' - $ref: '#/components/parameters/Offset' - name: connectionSlug in: query description: >- Only policies attached to this connection. Pass `__org__` for org-wide policies only. schema: type: string example: github-prod responses: '200': description: A page of policies. content: application/json: schema: type: object properties: data: type: array items: $ref: '#/components/schemas/Policy' meta: $ref: '#/components/schemas/ListMeta' example: data: - id: 7b1d4c2e-0000-4000-8000-000000000002 name: Block delete tools description: null connectionSlugs: - github-prod rules: - target: kind: mcp_tool tool: delete_* action: deny enabled: true owner: name: Alice email: alice@company.com lastEditedBy: null createdAt: '2026-01-01T00:00:00Z' updatedAt: '2026-01-01T00:00:00Z' meta: total: 1 limit: 50 offset: 0 '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' components: parameters: Limit: name: limit in: query description: Page size. schema: type: integer minimum: 1 default: 50 Offset: name: offset in: query description: Number of rows to skip. schema: type: integer minimum: 0 default: 0 schemas: Policy: type: object description: A policy as returned by `GET`. It has `owner` and `lastEditedBy`. properties: id: type: string format: uuid organizationId: type: string serverId: type: - string - 'null' connectionSlugs: type: - array - 'null' items: type: string description: >- Connection slugs the policy applies to, or `null` for an org-wide policy. name: type: string description: type: - string - 'null' rules: type: array items: $ref: '#/components/schemas/PolicyRule' enabled: type: boolean owner: $ref: '#/components/schemas/PolicyPerson' lastEditedBy: $ref: '#/components/schemas/PolicyPerson' createdAt: type: string format: date-time updatedAt: type: string format: date-time ListMeta: type: object required: - total - limit - offset properties: total: type: integer limit: type: integer offset: type: integer PolicyRule: type: object required: - target - action properties: target: $ref: '#/components/schemas/PolicyRuleTarget' action: type: string enum: - allow - deny - alert - redact conditions: type: object description: > When the rule applies. Keys can only be `user` or `metadata.`; any other key returns `422`. A value is a string (exact match) or one of `{ eq }`, `{ neq }`, `{ in: [...] }`, `{ nin: [...] }`. additionalProperties: oneOf: - type: string - type: object properties: eq: type: string - type: object properties: neq: type: string - type: object properties: in: type: array items: type: string - type: object properties: nin: type: array items: type: string example: user: alice@company.com metadata.env: in: - prod - staging limit: type: object description: >- Rate limit. Applies to LLM rules only; on an `mcp_tool` rule it returns `422`. required: - per properties: requests: type: number exclusiveMinimum: 0 tokens: type: number exclusiveMinimum: 0 dollars: type: number exclusiveMinimum: 0 per: type: string enum: - minute - hour - day tokenGuard: type: object properties: maxInputTokens: type: number exclusiveMinimum: 0 maxOutputTokens: type: number exclusiveMinimum: 0 maxRequestMaxTokens: type: number exclusiveMinimum: 0 contentGuard: type: object description: Content detectors to run. See [Guards](/govern/guards). required: - detectors - action properties: detectors: type: array minItems: 1 maxItems: 50 items: type: string minLength: 1 maxLength: 80 action: type: string enum: - deny - redact - alert inspectResponse: type: boolean logContent: type: boolean PolicyPerson: type: - object - 'null' properties: name: type: string email: type: string Error: type: object required: - error properties: error: type: string ForbiddenError: type: object properties: error: type: string example: Forbidden required: type: string description: The permission the caller lacks. example: policies:write PolicyRuleTarget: description: What the rule matches. oneOf: - type: object title: MCP tool required: - kind - tool properties: kind: type: string const: mcp_tool tool: type: string minLength: 1 description: Tool name. `*` wildcards are allowed. example: delete_* - type: object title: LLM model required: - kind - model properties: kind: type: string const: llm_model model: type: string minLength: 1 example: gpt-4o* - type: object title: LLM endpoint required: - kind - endpoint properties: kind: type: string const: llm_endpoint endpoint: type: string enum: - chat.completions - embeddings - images.generate - audio.transcriptions - audio.speech - passthrough responses: Unauthorized: description: No valid session or API key, or the key's creator is no longer a member. content: application/json: schema: $ref: '#/components/schemas/Error' example: error: Unauthorized Forbidden: description: The caller lacks the required permission. content: application/json: schema: $ref: '#/components/schemas/ForbiddenError' securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: ig_... description: >- An Igris API key. It acts with the current role and permission overrides of the member who created it. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.