GEgetaxonflow
Dynamic Policies

List active dynamic policies

Returns the active dynamic policies visible to the CALLING tenant: the tenant's own policies plus the shared global/default baseline. Policies owned by other tenants are never returned in the same response, and requests without a resolvable tenant are rejected with 401 (fail closed).

The tenant scope is read from the X-Tenant-ID header. When the request arrives through the AxonFlow Agent, that header is set from the validated credential and overwrites any client-supplied value, so the caller cannot choose the scope. The orchestrator itself does not authenticate this route, so a caller with direct network access to the orchestrator can name a tenant — deploy the orchestrator on a private network behind the Agent.

get/api/v1/policies/dynamic

Request

Response

List of dynamic policies visible to the calling tenant

idstring
namestring
descriptionstring
enabledboolean
typestring

Policy type — narrower-than-category dimension surfaced on list/CRUD responses (e.g. risk, content, user, cost).

categorystring

Policy category. Dynamic policies use a dynamic- prefix (dynamic-risk, dynamic-compliance, dynamic-security, dynamic-cost, dynamic-access).

tier'system' | 'organization' | 'tenant'

Policy tier. Dynamic policies default to tenant; organization-tier policies require Enterprise.

priorityinteger

Evaluation priority — lower values evaluate first. Useful when multiple dynamic policies match the same request.

created_atstring date-time

When the dynamic policy was first inserted.

updated_atstring date-time

When the dynamic policy was last modified.

Example response

[
  {
    "type": "risk",
    "category": "dynamic-risk"
  }
]

Changes

No recorded changes to this operation across all 1 revision of this API.