---
title: "Preview a risk policy against this organization's recent screenings (read-only)"
method: POST
path: "/api/v1/policy/preview"
tags: ["risk-policy-browser"]
---

# Preview a risk policy against this organization's recent screenings (read-only)

`POST /api/v1/policy/preview`

## Request

- Base URL: `https://kyt.infinihash.com`
- URL: `https://kyt.infinihash.com/api/v1/policy/preview`
- Auth: API key in header `X-API-Key`

Replay a PROPOSED policy over the caller's own screenings from the last
`days` days and compare it with the current one: counts by level and
action, alerts (any action other than allow) and which screenings change.
Nothing is saved; any authenticated caller of the org may preview, while
PUT /policy still requires a BSA officer session.

## Request body

- PolicyPreview: A proposed policy plus how far back to replay it (1-90 days).
  - `thresholds` object, nullable
  - `actions` object, nullable
  - `exposure_decay` boolean, nullable
  - `days` integer

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Proposed policy is invalid (same rules as PUT /policy)

---

[API](https://skmtc.dev/infinihash/apis/infinihash-kyt.md) · [All operations](https://skmtc.dev/infinihash/apis/infinihash-kyt/llms.txt) · [OpenAPI document](https://skmtc.dev/infinihash/apis/infinihash-kyt/revisions/e575fa9c63fd?raw)