---
title: "Get effective policies"
method: GET
path: "/api/v1/system-policies/effective"
tags: ["System Policies"]
deprecated: true
---

# Get effective policies

`GET /api/v1/system-policies/effective`

## Request

- Base URL: `https://agent.getaxonflow.com`
- URL: `https://agent.getaxonflow.com/api/v1/system-policies/effective`
- Auth: none declared
- TypeScript: <https://skmtc.dev/getaxonflow/apis/axonflow-agent-api/docs/api/v1/system-policies/effective/get.ts> (a function with typed inputs; its response is checked against the schema)

> **Deprecated.**

Returns all effective policies for a tenant with overrides applied.

This endpoint resolves the three-tier hierarchy:
1. System policies (base)
2. Organization overrides (if any)
3. Tenant overrides (if any)

Used by the Customer Portal for the unified policy view.

## Headers

- `Authorization` string

## Response `200`

Effective policies with overrides applied

- EffectivePoliciesResponse: Effective policies with overrides resolved
  - `static` StaticPolicy[]: Static policies with overrides applied
    - `id` string, uuid, required: Unique policy UUID
    - `policy_id` string, required: Human-readable policy identifier (e.g., sys_sqli_union_select)
    - `name` string, required: Display name of the policy
    - `description` string: Detailed policy description
    - `category` 'security-sqli' | 'security-admin' | 'pii-global' | 'pii-us' | 'pii-eu' | 'pii-india' | 'custom', required: Policy category (v2.0.0 semantic naming)
    - `tier` 'system' | 'organization' | 'tenant': Policy tier in the hierarchy
    - `pattern` string, required: Regex pattern for detection
    - `severity` 'critical' | 'high' | 'medium' | 'low', required: Policy severity level
    - `action` 'block' | 'require_approval' | 'redact' | 'warn' | 'log', required: Action to take when pattern matches. require_approval triggers HITL queue for human oversight.
    - `enabled` boolean, required: Whether policy is active
    - `priority` integer: Evaluation priority (higher = evaluated first)
    - `version` integer: Policy version number
    - `has_override` boolean: Whether this policy has an override (Enterprise only)
    - `override` PolicyOverride: Override configuration for system policies (Enterprise only)
      - `id` string: Override identifier
      - `policy_id` string: ID of the policy being overridden
      - `policy_type` 'static' | 'dynamic': Type of policy being overridden
      - `tenant_id` string: Tenant ID for tenant-level overrides
      - `enabled_override` boolean: Override enabled status (null = no override)
      - `action_override` 'block' | 'require_approval' | 'redact' | 'warn' | 'log': Override action (must be more restrictive). require_approval triggers HITL queue.
      - `override_reason` string: Reason for the override (required for audit)
      - `expires_at` string, date-time: When the override automatically expires
      - `created_by` string: User who created the override
      - `created_at` string, date-time
      - `updated_by` string: User who last updated the override
      - `updated_at` string, date-time
    - `tenant_id` string, required: Tenant ID (for tenant-tier policies)
    - `created_at` string, date-time, required: When policy was created
    - `updated_at` string, date-time, required: When policy was last modified
  - `tenant_id` string
  - `organization_id` string: The organisation these effective policies were computed for, alongside `tenant_id` and `computed_at`. It is metadata about the resolution, not an owner of any one policy in the list. This is the current wire field name and it is not deprecated: it is unrelated to a database column of the same name that was retired in an earlier release. The two share a name and nothing else.
  - `computed_at` string, date-time: When the effective policies were computed

## Other responses

- `400`: Invalid request body or parameters

---

[API](https://skmtc.dev/getaxonflow/apis/axonflow-agent-api.md) - [All operations](https://skmtc.dev/getaxonflow/apis/axonflow-agent-api/llms.txt) - [OpenAPI document](https://skmtc.dev/getaxonflow/apis/axonflow-agent-api/revisions/34d30fcb7fa1?raw)