DOdocker
Policies

Get policy

Changed on

Returns the full policy including its allowlist_v0 rule set.

get/orgs/{org_name}/governance/policies/{policy_id}

Request

Response

Full policy including its allowlist_v0 rule set.

idstring required
namestring required

Human-readable label, unique within the organization.

orgstring required
created_atstring date-time required
updated_atstring date-time required

Example response

{
  "id": "pol_06evsmp24r1pg71cm8500546pkbn",
  "name": "Security Research — hardened",
  "org": "my-org",
  "scope": {
    "teams": [
      "d290f1ee-6c54-4b01-90e6-d701748f0851"
    ]
  },
  "created_at": "2026-04-22T00:00:00Z",
  "updated_at": "2026-04-22T00:00:00Z",
  "allowlist_v0": {
    "domain": "network",
    "rules": [
      {
        "id": "rule_06evsm9qjm1pdsk0a8nkfaxy7jna",
        "name": "allow research mirrors",
        "actions": [
          "connect:tcp",
          "connect:udp"
        ],
        "resources": [
          "research.mitre.org",
          "cve.mitre.org"
        ],
        "http_resources": [
          {
            "host": "api.github.com",
            "port": 443,
            "path": "/repos/docker/**"
          }
        ],
        "decision": "allow"
      }
    ]
  },
  "cedar_v1": {
    "text": "permit(principal, action == MCP::Action::\"call_tool\", resource is MCP::Tool);",
    "schema_url": "https://schemas.docker.com/policy/cedar/v1/mcp/v0"
  }
}

Changes

  • 4f9f7d5cadd5Revision changes
    • breaking

      the response property /// became optional for the status

    • breaking

      added subschema #1 subschema #2 to the // response property oneOf list for the response status

    • warning

      added the new request:connect enum value to the //// response property for the response status

    • warning

      added the new request:delete enum value to the //// response property for the response status

    • warning

      added the new request:get enum value to the //// response property for the response status

    • warning

      added the new request:head enum value to the //// response property for the response status

    • warning

      added the new request:options enum value to the //// response property for the response status

    • warning

      added the new request:patch enum value to the //// response property for the response status

    • warning

      added the new request:post enum value to the //// response property for the response status

    • warning

      added the new request:put enum value to the //// response property for the response status

    • warning

      added the new request:trace enum value to the //// response property for the response status

    • info

      added the optional property /// to the response with the status

  • 85e78016fe38Revision changes
    • info

      added the optional property to the response with the status