---
title: "Get FAP for a project"
method: GET
path: "/api/data-access/policy"
tags: ["DataAccess"]
---

# Get FAP for a project

`GET /api/data-access/policy`

## Request

- Base URL: `https://api.agentstack.tech` (the document declares no server; this is the origin it was published from)
- URL: `https://api.agentstack.tech/api/data-access/policy`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

Returns `project.data.config.field_access_policy` (NeuralCache).

**Auth:** must have **read** on `project_id`.

Optional query `resource` returns a single `resources.<name>` object.

## Query parameters

- `project_id` integer, required: Project ID
- `resource` string, nullable: If set, return only this resource's policy

## Response `200`

Full policy: default_access, globals, resources, version

- unknown

## Other responses

- `400`: Bad Request
- `401`: Not authenticated
- `403`: Insufficient project access (read / admin / owner)
- `404`: Not Found
- `409`: Conflict
- `422`: Validation Error
- `429`: Too Many Requests
- `500`: Internal Server Error

---

[API](https://skmtc.dev/agentstack/apis/agentstack-core-api.md) · [All operations](https://skmtc.dev/agentstack/apis/agentstack-core-api/llms.txt) · [OpenAPI document](https://skmtc.dev/agentstack/apis/agentstack-core-api/revisions/8ecf3406e74a?raw)