Policies

Permanently deletes the policy and its rule set. Returns the deleted policy as a courtesy; its updated_at is unchanged by the deletion. Changes may take up to five minutes to reach developer machines.

delete/orgs/{org_name}/governance/policies/{policy_id}

Request

Response

Policy deleted, returns the deleted policy.

Example response

{
  "deleted": {
    "id": "pol_06evsmp24r1pg71cm8500546pkbn",
    "name": "Security Research — hardened",
    "org": "my-org",
    "scope": {
      "teams": [
        "d290f1ee-6c54-4b01-90e6-d701748f0851"
      ]
    },
    "created_at": "2026-04-22T00:00:00Z",
    "updated_at": "2026-04-22T00:00:00Z",
    "allowlist_v0": {
      "domain": "network",
      "rules": [
        {
          "id": "rule_06evsm9qjm1pdsk0a8nkfaxy7jna",
          "name": "allow research mirrors",
          "actions": [
            "connect:tcp",
            "connect:udp"
          ],
          "resources": [
            "research.mitre.org",
            "cve.mitre.org"
          ],
          "http_resources": [
            {
              "host": "api.github.com",
              "port": 443,
              "path": "/repos/docker/**"
            }
          ],
          "decision": "allow"
        }
      ]
    },
    "cedar_v1": {
      "text": "permit(principal, action == MCP::Action::\"call_tool\", resource is MCP::Tool);",
      "schema_url": "https://schemas.docker.com/policy/cedar/v1/mcp/v0"
    }
  }
}

Changes

    • breaking

      the response property //// became optional for the status

    • breaking

      added subschema #1 subschema #2 to the /// response property oneOf list for the response status

    • warning

      added the new request:connect enum value to the ///// response property for the response status

    • warning

      added the new request:delete enum value to the ///// response property for the response status

    • warning

      added the new request:get enum value to the ///// response property for the response status

    • warning

      added the new request:head enum value to the ///// response property for the response status

    • warning

      added the new request:options enum value to the ///// response property for the response status

    • warning

      added the new request:patch enum value to the ///// response property for the response status

    • warning

      added the new request:post enum value to the ///// response property for the response status

    • warning

      added the new request:put enum value to the ///// response property for the response status

    • warning

      added the new request:trace enum value to the ///// response property for the response status

    • info

      added the optional property //// to the response with the status

    • info

      added the optional property / to the response with the status