---
title: "Get Connection Tool Policies"
method: GET
path: "/v1/workspaces/{workspace}/openapi-connections/{connection_id}/tool-policies"
tags: ["v1", "protected", "openapi-connections"]
---

# Get Connection Tool Policies

`GET /v1/workspaces/{workspace}/openapi-connections/{connection_id}/tool-policies`

## Request

- The document declares no server URL.
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/agentarea/apis/agentarea-api/docs/v1/workspaces/:workspace/openapi-connections/:connection_id/tool-policies/get.ts> (a function with typed inputs; its response is checked against the schema)

The workspace default and the workspace-layer verdict for each operation.

A run names an operation ``openapi:<connection id>:<tool>``, the tool being the
operation's name made a valid tool name; only that name may allow it, and the
tool name alone may only narrow it.

## Path parameters

- `connection_id` string, uuid, required
- `workspace` string, required: Slug of the workspace the request acts in

## Response `200`

Successful Response

- MCPInstanceToolPolicies
  - `tools` MCPInstanceToolPolicy[], required
    - `default` 'allow' | 'approval' | 'deny', required
    - `effective` 'allow' | 'approval' | 'deny', required
    - `name` string, required
    - `reason` string, nullable

## Other responses

- `422`: Validation Error

## Changes

- **2026-11-10** `8fba066696c7`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/agentarea/apis/agentarea-api/changes/v1/workspaces/:workspace/openapi-connections/:connection_id/tool-policies/get.md)

---

[API](https://skmtc.dev/agentarea/apis/agentarea-api.md) - [All operations](https://skmtc.dev/agentarea/apis/agentarea-api/llms.txt) - [OpenAPI document](https://skmtc.dev/agentarea/apis/agentarea-api/revisions/7a4e10cf159f?raw)