---
title: "Delete policy"
method: DELETE
path: "/api/v1/policies/{id}"
tags: ["Dynamic Policies"]
deprecated: true
---

# Delete policy

`DELETE /api/v1/policies/{id}`

## Request

- Base URL: `https://orchestrator.getaxonflow.com`
- URL: `https://orchestrator.getaxonflow.com/api/v1/policies/{id}`
- Auth: none declared. Required headers: `X-Tenant-ID`
- TypeScript: <https://skmtc.dev/getaxonflow/apis/axonflow-orchestrator-api/docs/api/v1/policies/:id/delete.ts> (a function with typed inputs; its response is checked against the schema)

> **Deprecated.**

## Path parameters

- `id` string, uuid, required

## Headers

- `X-Tenant-ID` string, required
- `X-User-ID` string

## Response `204`

Policy deleted

## Other responses

- `401`: Unauthorized - missing or invalid organization scope (coded envelope)
- `404`: Policy not found
- `409`: The legacy policy tables are read-only. migrations/core/172 revoked INSERT/UPDATE/DELETE/TRUNCATE on static_policies and dynamic_policies from the application roles, and this endpoint writes them, so the write is refused permanently rather than transiently. It is not an entitlement fact: no licence, edition or upgrade changes it. Author policies through the typed authoring route instead. Reads on this endpoint are unaffected. A deployment whose connection may still write the tables (the database owner) does not receive this response. Where the connection cannot write them, the create, update and bulk-import routes answer this before reading the request body, whatever it contains.

---

[API](https://skmtc.dev/getaxonflow/apis/axonflow-orchestrator-api.md) - [All operations](https://skmtc.dev/getaxonflow/apis/axonflow-orchestrator-api/llms.txt) - [OpenAPI document](https://skmtc.dev/getaxonflow/apis/axonflow-orchestrator-api/revisions/f408ef3ec9dd?raw)