---
title: "Retrieve workspace network policy"
method: GET
path: "/v3/organizations/{orgId}/network-policy"
tags: ["Network policy"]
---

# Retrieve workspace network policy

`GET /v3/organizations/{orgId}/network-policy`

## Request

- Base URL: `https://api.reasonmachines.com`
- URL: `https://api.reasonmachines.com/v3/organizations/{orgId}/network-policy`
- Auth: HTTP bearer

Requires network:read. Returns the saved host list. Workspace hosts add allowed destinations to the platform baseline; an empty list does not remove baseline access. Changes apply at the next Hands start, not as immediate revocation of active leases.

<sub>Scope: `network:read`</sub>

## Response `200`

Saved network policy.

- NetworkPolicy
  - `network_allowed_hosts` string[], required

## Other responses

- `400`: Invalid request.
- `401`: Missing, invalid, or expired key.
- `403`: The key lacks the required scope or role.
- `429`: Too many requests. Retry after the number of seconds in the `Retry-After` response header.

## Changes

- **2026-10-15** `85b2017ca5c4`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/ara/apis/reason-api/changes/v3/organizations/:orgId/network-policy/get.md)

---

[API](https://skmtc.dev/ara/apis/reason-api.md) - [All operations](https://skmtc.dev/ara/apis/reason-api/llms.txt) - [OpenAPI document](https://skmtc.dev/ara/apis/reason-api/revisions/e97c8704807c?raw)