---
title: "List authz policy versions"
method: GET
path: "/authz/policies/{name}/versions"
tags: ["authz-policies"]
---

# List authz policy versions

`GET /authz/policies/{name}/versions`

## Request

- Base URL: `https://developer.qaip.com/api/v1`
- URL: `https://developer.qaip.com/api/v1/authz/policies/{name}/versions`
- Auth: API key in header `x-api-key`

(reserved for future use) Returns the version history of the named policy, newest first.

Required scope: \`policy:authz:manage\`

## Response `200`

Version history

- AuthzPolicyList
  - `policies` AuthzPolicy[], required
    - `name` string, required: Policy name (also the Rego package suffix).
    - `version` integer, required: Monotonic version within (tenant, name).
    - `rego_sha256` string, required: SHA-256 of the Rego source.
    - `description` string, nullable
    - `status` string, required: active or archived.
    - `created_by` string, required: User id that created this version.
    - `created_at` string, nullable
    - `activated_at` string, nullable
    - `rego` string, nullable: Rego source (included only on single-policy or version reads).

## Other responses

- `401`: Unauthorized - Authentication failed
- `403`: Forbidden - the API key is missing the scope required by this endpoint
- `404`: Not Found - the named policy or version does not exist
- `502`: The application proxy could not obtain an upstream response before forwarding response headers. The error code is unavailable and retryable is false: upstream side effects may have completed, so a 502 alone does not make retrying safe. Check the operation's idempotency and recovery contract before retrying. A failure after streaming has started instead aborts the stream without appending this JSON body. CDN or load-balancer generated errors may have a different body and are not described by this response.
- `503`: Service Unavailable - authz/OPA is not configured in this environment

## Changes

- **2026-09-17** `2489c6f1a9d8`: 17 info
  - added the non-success response with the status `502`
  - added the optional property `error/code` to the response with the `401` status
  - added the optional property `error/code` to the response with the `403` status
  - added the optional property `error/code` to the response with the `404` status
  - …13 more
- **2026-06-17** `05add33422b2`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/qlonolink/apis/qaip-apis/changes/authz/policies/:name/versions/get.md)

---

[API](https://skmtc.dev/qlonolink/apis/qaip-apis.md) - [All operations](https://skmtc.dev/qlonolink/apis/qaip-apis/llms.txt) - [OpenAPI document](https://skmtc.dev/qlonolink/apis/qaip-apis/revisions/2489c6f1a9d8?raw)