---
title: "Get workspace connector policies"
method: GET
path: "/api/workspace/{workspace_id}/connector-governance"
---

# Get workspace connector policies

`GET /api/workspace/{workspace_id}/connector-governance`

## Request

- Base URL: `https://app.base44.com`
- URL: `https://app.base44.com/api/workspace/{workspace_id}/connector-governance`
- Auth: HTTP bearer

<Info>This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.</Info>

Returns the connector policies of a workspace, one entry per connector available to it.

A connector policy has two switches. `builder_connection_enabled` decides whether builders can connect the connector to the workspace's apps. `per_user_connection_enabled` decides whether the apps' users can connect their own accounts through a workspace connector. In FERPA-designated workspaces, OAuth connectors start with both switches off. Only an active workspace owner or admin can enable them; workspace credentials alone do not count as approval. Connector policies are available on every plan for those workspaces. [Get connector policies](/api-reference/get-connector-policies) returns the same list for an app's workspace.

The list isn't paginated.

This is limited to 120 requests per minute. A signed-in session has its own limit, and every personal access token for the workspace shares one. Some workspaces have a different limit.

<Note>Call this as any member of the workspace, with a personal access token for that workspace sent as a Bearer token, or from a signed-in session. A read-only token works. Workspace API keys aren't accepted.</Note>

## Path parameters

- `workspace_id` string, required: ID of the workspace. With a personal access token, use the token's workspace. Get it from `organization_id` in [Get app](/api-reference/get-app).

## Response `200`

The workspace's connector policies.

- ConnectorGovernanceListResponse: The workspace's connector policies, as they apply to the app.
  - `items` ConnectorGovernanceItem[], required: One entry per connector available to the workspace.
    - `integration_type` string, required: ID of the connector.
    - `display_name` string, required: Name of the connector.
    - `connector_mode` string, required: Which ways the connector can be connected. One of `all`, `shared_only`, `app_user_only`, `byo_shared_only`, or `byo_shared_and_app_user`, with the same meaning as `connector_mode` in [List connectors](/api-reference/list-connectors).
    - `builder_connection_enabled` boolean, required: Whether the workspace lets builders connect the connector to its apps (`true`) or has turned that off (`false`). When it's `false`, starting a connection is refused.
    - `per_user_connection_enabled` boolean, required: Whether the apps' users can connect their own accounts with the workspace's credentials (`true`) or not (`false`). Always `false` when `has_per_user_credentials` is `false`.
    - `has_per_user_credentials` boolean, required: Whether the workspace has set up its own OAuth app credentials for the connector.
    - `school_approval_required` boolean: Whether the school must enable this OAuth connector before anyone can connect it.
    - `not_yet_enabled` boolean: Whether both switches are off only because the connector became available after the workspace chose to start new connectors off, and nobody has set its policy yet (`true`). Setting either switch makes it `false`.
  - `has_any_governance_policies` boolean, required: Whether the workspace has restricted any connector (`true`) or left them all at the defaults (`false`).

## Other responses

- `401`: Missing or invalid credentials.
- `403`: You aren't a member of the workspace, your token is for a different workspace, or your credential can't be used on this endpoint.
- `409`: The workspace requires an unlocked SSO session.
- `429`: Rate limit exceeded.

## Changes

> 58 revisions in range; 1 not diffed.

- **2026-10-13** `b92cc2f13639`: 1 info
  - added the optional property `items/items/school_approval_required` to the response with the `200` status
- **2026-10-12** `5e139db2e643`: 1 info
  - the endpoint scheme security `PersonalAccessTokenAuth` was added to the API
- **2026-10-09** `fc604cdcc3a2`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/adexad/apis/base44-app-management-api/changes/api/workspace/:workspace_id/connector-governance/get.md)

---

[API](https://skmtc.dev/adexad/apis/base44-app-management-api.md) · [All operations](https://skmtc.dev/adexad/apis/base44-app-management-api/llms.txt) · [OpenAPI document](https://skmtc.dev/adexad/apis/base44-app-management-api/revisions/fa29e915c226?raw)