GEgetaxonflow
System Policies

Get static policy by ID

Returns a single static policy by its UUID.

The policy ID is the id field from the static_policies table, not the policy_id (human-readable identifier like 'sql_injection_union').

get/api/v1/system-policies/{id}

Request

Path parameters

idstring uuid required

Static policy UUID

Headers

Authorizationstring

Basic auth credentials: Basic base64(clientId:clientSecret). Required in evaluation/enterprise mode. Optional in community mode (defaults to community tenant).

Response

Static policy details

idstring uuid required

Unique policy UUID

policy_idstring required

Human-readable policy identifier (e.g., sys_sqli_union_select)

namestring required

Display name of the policy

descriptionstring

Detailed policy description

category'security-sqli' | 'security-admin' | 'pii-global' | 'pii-us' | 'pii-eu' | 'pii-india' | 'custom' required

Policy category (v2.0.0 semantic naming)

tier'system' | 'organization' | 'tenant'

Policy tier in the hierarchy

patternstring required

Regex pattern for detection

severity'critical' | 'high' | 'medium' | 'low' required

Policy severity level

action'block' | 'require_approval' | 'redact' | 'warn' | 'log' required

Action to take when pattern matches. require_approval triggers HITL queue for human oversight.

enabledboolean required

Whether policy is active

priorityinteger

Evaluation priority (higher = evaluated first)

versioninteger

Policy version number

has_overrideboolean

Whether this policy has an override (Enterprise only)

tenant_idstring required

Tenant ID (for tenant-tier policies)

created_atstring date-time required

When policy was created

updated_atstring date-time required

When policy was last modified

Example response

{
  "policy_id": "sys_sqli_union_select",
  "name": "UNION SELECT Detection",
  "description": "Detects SQL injection attempts using UNION SELECT",
  "tier": "system",
  "pattern": "(?i)\\bUNION\\s+(ALL\\s+)?SELECT\\b",
  "priority": 1000,
  "version": 1
}

Changes

No recorded changes to this operation across all 1 revision of this API.