---
title: "Get a policy"
method: GET
path: "/v3/policies/{policy_id}"
tags: ["Policies"]
---

# Get a policy

`GET /v3/policies/{policy_id}`

Returns the specified policy.

## Response `200`

OK

- object
  - `request_id` string — ID of the request.
  - `data` PolicyObject
    - `id` string — Globally unique identifier for the policy (UUID).
    - `name` string — A human-readable name for the policy. Required on create.
    - `application_id` string — The ID of the application that owns the policy. Read-only; derived from the authenticated API key.
    - `organization_id` string — The ID of the Nylas organization that owns the policy. Read-only; derived from the authenticated API key.
    - `limits` object — Operational limits enforced for inboxes that use this policy. All fields are optional. If omitted, each limit defaults to the plan's maximum allowed value. If a requested value exceeds the plan limit, the API returns an error.
      - `limit_attachment_size_limit` integer — Maximum size (in bytes) for a single attachment.
      - `limit_attachment_count_limit` integer — Maximum number of attachments allowed on a single message.
      - `limit_attachment_allowed_types` string[] — Allowed attachment MIME types. If empty or omitted, all types permitted by the plan are allowed.
      - `limit_size_total_mime` integer — Maximum total MIME size (in bytes) for a single message, including all attachments.
      - `limit_storage_total` integer — Maximum total storage (in bytes) for each inbox that uses this policy.
      - `limit_count_daily_message_received` integer — Maximum number of messages each grant can receive per day.
      - `limit_count_daily_email_sent` integer — Maximum number of messages each grant can send per day.
      - `limit_inbox_retention_period` integer — How long (in days) to retain messages in the inbox before they are deleted. Must be greater than `limit_spam_retention_period` when both are set.
      - `limit_spam_retention_period` integer — How long (in days) to retain messages in the spam folder before they are deleted. Must be shorter than `limit_inbox_retention_period` when both are set.
    - `rules` string[] — (Legacy) Rule IDs linked to this policy. Rule evaluation uses the `rule_ids` array on the [workspace](/docs/reference/api/workspaces/), not the policy. Set rules on the workspace instead. Whether rules are allowed depends on your plan.
    - `spam_detection` object — Spam detection configuration for inboxes that use this policy.
      - `use_list_dnsbl` boolean — If `true`, enables DNS-based block list (DNSBL) checking on inbound messages.
      - `use_header_anomaly_detection` boolean — If `true`, enables header anomaly detection on inbound messages.
      - `spam_sensitivity` number, float — Spam detection sensitivity. Must be between `0.1` and `5.0`. Higher values mark more messages as spam.
    - `created_at` integer — When the policy was created, in seconds using the Unix timestamp format.
    - `updated_at` integer — When the policy was last updated, in seconds using the Unix timestamp format.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `404` — Not Found
- `429` — Rate Limit

---

[API](https://skmtc.dev/nylas/apis/nylas-api.md) · [All operations](https://skmtc.dev/nylas/apis/nylas-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/nylas/nylas-api/revisions/51c2c1b4ecff/schema)