---
title: "Get action policy"
method: GET
path: "/agent/workspaces/{workspace}/actions/policy"
tags: ["ActionReadApi"]
---

# Get action policy

`GET /agent/workspaces/{workspace}/actions/policy`

## Request

- Base URL: `https://plainrouter.com/api/v1`
- URL: `https://plainrouter.com/api/v1/agent/workspaces/{workspace}/actions/policy`
- Auth: HTTP bearer

Read persisted Actions data for the authorized account. Unbound keys require exactly one active account; account_id cannot select among multiple accounts.

## Path parameters

- `workspace` integer, required

## Query parameters

- `account_id` integer

## Response `200`

Authorized Actions resource.

- ActionPolicyRead
  - `data` object, required
    - `id` integer, nullable, required
    - `workspace_id` integer, required
    - `execution_mode` 'ask' | 'full', required
    - `outcome_check_after_hours` integer, required
    - `anomaly_threshold_percent` string, required

## Other responses

- `401`: Missing, invalid, expired or revoked credentials and inactive account bindings return error and error_description. Insufficient principal permission or lost issuer authority returns error insufficient_scope and error_description. A management key returns message instead.
- `403`: The key lacks the read-actions grant.
- `404`: Workspace, account, or Actions resource not found.
- `422`: Request validation failed.

---

[API](https://skmtc.dev/plainrouter/apis/plainrouter-conversion-api.md) · [All operations](https://skmtc.dev/plainrouter/apis/plainrouter-conversion-api/llms.txt) · [OpenAPI document](https://skmtc.dev/plainrouter/apis/plainrouter-conversion-api/revisions/d071d4f4f05c?raw)