---
title: "Get connector policies"
method: GET
path: "/api/apps/{app_id}/external-auth/connector-governance"
---

# Get connector policies

`GET /api/apps/{app_id}/external-auth/connector-governance`

## Request

- Base URL: `https://app.base44.com`
- URL: `https://app.base44.com/api/apps/{app_id}/external-auth/connector-governance`
- Auth: HTTP bearer

<Info>This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.</Info>

Returns the connector policies of the app's workspace, one entry per connector. It tells you whether builders may connect each connector to the workspace's apps, and whether the apps' users may connect their own accounts.

A connector with `builder_connection_enabled` set to `false` can't be connected with [Start connector connection](/api-reference/start-connector-connection). Workspace admins set these policies in the workspace settings. Any editor of the app can read them, including one who isn't a member of the workspace.

The list isn't paginated.

This is limited to 60 requests a minute per caller. Some workspaces have a different limit.

<Note>This endpoint accepts a personal API key belonging to a user with editor access to the app, including a read-only key. Workspace API keys are not accepted.</Note>

## Path parameters

- `app_id` string, required: ID of the app.

## Response `200`

The workspace's connector policies.

- ConnectorGovernanceListResponse: The workspace's connector policies, as they apply to the app.
  - `items` ConnectorGovernanceItem[], required: One entry per connector available to the workspace.
    - `integration_type` string, required: ID of the connector.
    - `display_name` string, required: Name of the connector.
    - `connector_mode` string, required: Which ways the connector can be connected. One of `all`, `shared_only`, `app_user_only`, `byo_shared_only`, or `byo_shared_and_app_user`, with the same meaning as `connector_mode` in [List connectors](/api-reference/list-connectors).
    - `builder_connection_enabled` boolean, required: Whether the workspace lets builders connect the connector to its apps (`true`) or has turned that off (`false`). When it's `false`, starting a connection is refused.
    - `per_user_connection_enabled` boolean, required: Whether the apps' users can connect their own accounts with the workspace's credentials (`true`) or not (`false`). Always `false` when `has_per_user_credentials` is `false`.
    - `has_per_user_credentials` boolean, required: Whether the workspace has set up its own OAuth app credentials for the connector.
    - `school_approval_required` boolean: Whether the school must enable this OAuth connector before anyone can connect it.
    - `not_yet_enabled` boolean: Whether both switches are off only because the connector became available after the workspace chose to start new connectors off, and nobody has set its policy yet (`true`). Setting either switch makes it `false`.
  - `has_any_governance_policies` boolean, required: Whether the workspace has restricted any connector (`true`) or left them all at the defaults (`false`).

## Other responses

- `401`: Missing or invalid credentials.
- `403`: You don't have editor access to this app, or you used a workspace API key.
- `404`: App not found.
- `409`: The app's workspace requires an unlocked SSO session.
- `429`: Rate limit reached. Retry later.

## Changes

- **2026-10-13** `32455e516133`: 1 info
  - added the optional property `items/items/school_approval_required` to the response with the `200` status
- **2026-10-11** `80287813ab84`: 1 info
  - the endpoint scheme security `PersonalAccessTokenAuth` was added to the API
- **2026-10-01** `e58d4ff7b1f8`: 1 info
  - added the optional property `items/items/not_yet_enabled` to the response with the `200` status
- **2026-09-30** `63675fa5257c`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/base44/apis/base44-app-management-api/changes/api/apps/:app_id/external-auth/connector-governance/get.md)

---

[API](https://skmtc.dev/base44/apis/base44-app-management-api.md) - [All operations](https://skmtc.dev/base44/apis/base44-app-management-api/llms.txt) - [OpenAPI document](https://skmtc.dev/base44/apis/base44-app-management-api/revisions/c534f09cf314?raw)