GEgetaxonflow
System Policies

List static policies

Returns static policies with three-tier hierarchy resolution:

  1. System policies - Managed by AxonFlow, immutable base
  2. Organization policies - Enterprise tier, organization-wide (Enterprise only)
  3. Tenant policies - Per-tenant customizations

v2.0.0 Categories (semantic naming):

  • security-sqli - SQL injection detection (was: sql_injection)
  • security-admin - Admin access protection (was: admin_access)
  • pii-global - Global PII patterns (was: pii_detection)
  • pii-us - US-specific PII (SSN, etc.)
  • pii-eu - EU-specific PII (GDPR)
  • pii-india - India-specific PII (Aadhaar, PAN)
  • custom - Tenant-created policies

Legacy category names are still accepted and automatically mapped.

Part of ADR-019: Unified Policy Management System.

get/api/v1/system-policies

Request

Query parameters

pageinteger

Page number (1-indexed)

page_sizeinteger

Number of policies per page

category'security-sqli' | 'security-admin' | 'pii-global' | 'pii-us' | 'pii-eu' | 'pii-india' | 'custom' | 'sql_injection' | 'pii_detection' | 'dangerous_queries' | 'admin_access'

Filter by policy category. New categories use semantic naming. Legacy names (sql_injection, pii_detection, etc.) are still accepted.

tier'system' | 'organization' | 'tenant'

Filter by policy tier

severity'critical' | 'high' | 'medium' | 'low'

Filter by severity level

enabledboolean

Filter by enabled status

Headers

Authorizationstring

Basic auth credentials: Basic base64(clientId:clientSecret). Required in evaluation/enterprise mode. Optional in community mode (defaults to community tenant).

Response

List of static policies

Example response

{
  "policies": [
    {
      "policy_id": "sys_sqli_union_select",
      "name": "UNION SELECT Detection",
      "description": "Detects SQL injection attempts using UNION SELECT",
      "tier": "system",
      "pattern": "(?i)\\bUNION\\s+(ALL\\s+)?SELECT\\b",
      "priority": 1000,
      "version": 1
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.