---
title: "Get the org MCP destructive-operation allow-list + governed-op catalog"
method: GET
path: "/organizations/{id}/mcp-destructive-policy"
tags: ["organizations"]
---

# Get the org MCP destructive-operation allow-list + governed-op catalog

`GET /organizations/{id}/mcp-destructive-policy`

## Request

- Base URL: `https://api.onplana.com/api`
- URL: `https://api.onplana.com/api/organizations/{id}/mcp-destructive-policy`
- Auth: one of:
  - HTTP bearer
  - API key in header `Authorization`

## Path parameters

- `id` string, required

## Headers

- `X-Organization-Id` string, required

## Response `200`

{ enabledOps, isDefault, defaultOps, updatedAt, updatedById, catalog[] } - enabledOps is the effective list; with no saved choice (isDefault) it is defaultOps, the recoverable deletes

## Other responses

- `400`: Validation error
- `401`: Unauthorized - missing or invalid JWT
- `403`: Forbidden - insufficient role

---

[API](https://skmtc.dev/onplana/apis/onplana-api.md) · [All operations](https://skmtc.dev/onplana/apis/onplana-api/llms.txt) · [OpenAPI document](https://skmtc.dev/onplana/apis/onplana-api/revisions/c3d6c89e9dc8?raw)