---
title: "List policies"
method: GET
path: "/orgs/{org_name}/governance/policies"
tags: ["Policies"]
---

# List policies

`GET /orgs/{org_name}/governance/policies`

## Request

- Base URL: `https://hub.docker.com/v2`
- URL: `https://hub.docker.com/v2/orgs/{org_name}/governance/policies`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/docker/apis/docker-ai-governance-policy-api/docs/orgs/:org_name/governance/policies/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns a shallow summary of the organization's policies, one page at a time. The rule set is not included; use GetPolicy to fetch the full object.

Results are paginated with an opaque cursor. Pass `page_size` to bound the page; if more policies remain, the response includes a non-null `next_page_token` to pass as `page_token` on the next request. Iterate until `next_page_token` is `null`. Treat the token as opaque; do not parse or construct it.

## Query parameters

- `page_size` integer
- `page_token` string

## Response `200`

Object wrapping an array of policy summaries under `data` and a `next_page_token`, which is null on the last page. Rule sets are not included; use GetPolicy to fetch a full policy.

- object
  - `data` PolicySummary[], required
    - `id` string, required
    - `name` string, required: Human-readable label, unique within the organization.
    - `org` string, required
    - `scope` Scope, required: Restricts the policy to specific teams. An empty or absent list means the policy applies org-wide.
      - `teams` string[]: Team IDs the policy applies to. Each must be a valid team in the organization.
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
    - `type` 'allowlist_v0' | 'cedar_v1', required: Identifies the policy type. `allowlist_v0` for network, HTTP, and filesystem allowlist policies; `cedar_v1` for Cedar language policies.
  - `next_page_token` string, nullable, required: The opaque cursor for the next page, or `null` on the last page.

## Other responses

- `400`: Bad request
- `401`: Missing or invalid credentials
- `403`: Caller lacks the required permission for this org, or the org is not entitled to use governance.
- `404`: Not found
- `500`: Internal server error

## Changes

- **2026-09-22** `85e78016fe38`: 2 warning, 4 info
  - added the new `allowlist_v0` enum value to the `data/items/type` response property for the response status `200`
  - added the new `cedar_v1` enum value to the `data/items/type` response property for the response status `200`
  - added the new optional `query` request parameter `page_size`
  - added the new optional `query` request parameter `page_token`
  - …2 more
- **2026-06-10** `c133c0782991`: 4 warning
  - added the new `limit_exceeded` enum value to the `error/code` response property for the response status `401`
  - added the new `limit_exceeded` enum value to the `error/code` response property for the response status `403`
  - added the new `limit_exceeded` enum value to the `error/code` response property for the response status `404`
  - added the new `limit_exceeded` enum value to the `error/code` response property for the response status `500`
- **2026-06-04** `67e1167ee1cf`: 1 breaking, 1 info
  - the response's body type changed from `array` to `object` for status `200`
  - added the required property `data` to the response with the `200` status
- **2026-06-02** `4a10a8953b34`: 1 info
  - added the non-success response with the status `404`
- …earlier changes not shown

[Operation history](https://skmtc.dev/docker/apis/docker-ai-governance-policy-api/changes/orgs/:org_name/governance/policies/get.md)

---

[API](https://skmtc.dev/docker/apis/docker-ai-governance-policy-api.md) - [All operations](https://skmtc.dev/docker/apis/docker-ai-governance-policy-api/llms.txt) - [OpenAPI document](https://skmtc.dev/docker/apis/docker-ai-governance-policy-api/revisions/4f9f7d5cadd5?raw)