---
title: "List Security Policies"
method: GET
path: "/security-policies"
tags: ["Security Policies"]
---

# List Security Policies

`GET /security-policies`

## Request

- Base URL: `https://api.meow.com/v1`
- URL: `https://api.meow.com/v1/security-policies`
- Auth: API key in header `x-api-key`
- TypeScript: <https://skmtc.dev/meow/apis/meow-api/docs/security-policies/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns the security policies configured for your entity, including the required approvers and quorum for each.

## Query parameters

- `limit` integer: Maximum number of results to return.
- `offset` string, nullable: Opaque offset identifier for pagination. Use the nextOffset from a previous response.

## Headers

- `x-entity-id` string, uuid

## Response `200`

Successful Response

- CustomerApiSecurityPoliciesResponse
  - `security_policies` CustomerApiSecurityPolicyResponse[], required: Security policies on this page.
    - `id` string, uuid, required: Unique identifier for the policy.
    - `action_type` 'manage_users_and_policies' | 'send_money', required
    - `quorum` integer, required: How many approvals a gated request needs before it executes.
    - `minimum_amount` string, nullable: Amount, in USD, at or above which this policy applies. `null` means it applies to every matching action regardless of amount.
    - `approver_user_ids` string[], required: Users who may approve a request this policy gates. Excludes members whose membership has been removed.
    - `initiator_user_ids` string[], required: Users whose requests this policy applies to. Excludes members whose membership has been removed.
    - `created_time` integer, required: When the policy was created, as a Unix timestamp in seconds.
    - `updated_time` integer, required: When the policy was last changed, as a Unix timestamp in seconds.
  - `page` PageMetadata
    - `nextOffset` string, nullable: Opaque offset identifier.

## Other responses

- `400`: The request could not be processed.
- `401`: Authentication failed.
- `403`: The API key is not authorized for this operation, or the user of a global API key is an admin or controller without approved KYC. The KYC case returns the message `KYC is required for controllers and admins.` until that user completes KYC in the Meow dashboard.
- `429`: Too many requests.

---

[API](https://skmtc.dev/meow/apis/meow-api.md) - [All operations](https://skmtc.dev/meow/apis/meow-api/llms.txt) - [OpenAPI document](https://skmtc.dev/meow/apis/meow-api/revisions/ea2d7e25b63b?raw)