---
title: "List authz policies"
method: GET
path: "/authz/policies"
tags: ["authz-policies"]
---

# List authz policies

`GET /authz/policies`

(reserved for future use) Lists the active authz (Rego) policies registered for the tenant.

Required scope: \`policy:authz:manage\`

## Response `200`

Active policies

- AuthzPolicyList
  - `policies` AuthzPolicy[], required
    - `name` string, required — Policy name (also the Rego package suffix).
    - `version` integer, required — Monotonic version within (tenant, name).
    - `rego_sha256` string, required — SHA-256 of the Rego source.
    - `description` string, nullable
    - `status` string, required — active or archived.
    - `created_by` string, required — User id that created this version.
    - `created_at` string, nullable
    - `activated_at` string, nullable
    - `rego` string, nullable — Rego source (included only on single-policy or version reads).

## Other responses

- `401` — Unauthorized - Authentication failed
- `403` — Forbidden - the API key is missing the scope required by this endpoint
- `503` — Service Unavailable - authz/OPA is not configured in this environment

## Changes

> 65 revisions in range; 12 not diffed.

- **2026-06-17** `05add33422b2` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/qlonolink/apis/qaip-apis/changes/authz/policies/get.md)

---

[API](https://skmtc.dev/qlonolink/apis/qaip-apis.md) · [All operations](https://skmtc.dev/qlonolink/apis/qaip-apis/llms.txt) · [OpenAPI document](https://skmtc.dev/qlonolink/apis/qaip-apis/revisions/430440bbcc56?raw)