---
title: "Get Workspace Code Execution Policy"
method: GET
path: "/v1/workspaces/{workspace_id}/code-execution-policy"
tags: ["workspace-code-execution-policy"]
---

# Get Workspace Code Execution Policy

`GET /v1/workspaces/{workspace_id}/code-execution-policy`

Read a workspace's code-execution policy.

Takes the same role as setting it (an organization owner/admin, or an
owner/admin of this workspace), because the policy describes the
workspace's security and billing posture rather than one member's
allowance. A workspace with no policy answers with the unconfigured one
(``configured: false``), which is the deployment's own behavior described
in the same shape rather than a 404.

## Path parameters

- `workspace_id` string, uuid, required

## Response `200`

Successful Response

- WorkspaceCodeExecutionPolicyPublic — A workspace's policy, or the unconfigured policy it has without one.
  - `allowed_images` string[], required
  - `available_tools` string[], required
  - `configured` boolean, required
  - `created_at` string, nullable, required
  - `default_purpose_hint` string, nullable, required
  - `enabled` boolean, required
  - `exec_timeout_s` integer, nullable, required
  - `image` string, nullable, required
  - `max_iterations` integer, nullable, required
  - `sandbox_configured` boolean, required
  - `tools` string[], nullable, required
  - `updated_at` string, nullable, required
  - `workspace_id` string, uuid, required

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/mozilla-ai/apis/otari.md) · [All operations](https://skmtc.dev/mozilla-ai/apis/otari/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/mozilla-ai/otari/revisions/7f178e92b56c/schema)