---
title: "Read a mailbox's effective policy (derived mode, enforcement state, what binds this key)"
method: GET
path: "/v1/mailboxes/{id}/policy"
tags: ["policy"]
---

# Read a mailbox's effective policy (derived mode, enforcement state, what binds this key)

`GET /v1/mailboxes/{id}/policy`

## Request

- Base URL: `https://api.replylayer.ai`
- URL: `https://api.replylayer.ai/v1/mailboxes/{id}/policy`
- Auth: HTTP bearer

## Path parameters

- `id` string, required

## Response `200`

Success

- object
  - `agent_authoring_mode` 'send_and_draft' | 'draft_only' | 'read_only', required
  - `agent_send_policy` 'restricted' | 'open', required
  - `allow_thread_replies` boolean, required
  - `approval_expiry` '24h' | '72h' | '7d' | 'never', required
  - `binding` object, required
    - `permitted_verbs` string[], required
    - `scope` 'admin' | 'agent', required
  - `enforcement` object, required
    - `risky_only` 'off' | 'shadow' | 'enforce', required
    - `send_window` 'off' | 'shadow' | 'enforce', required
  - `hitl_mode` 'disabled' | 'all_outbound' | 'risky_only', required
  - `last_applied_policy_mode` string, nullable, required
  - `latest_revision_id` string, nullable, required
  - `mailbox_id` string, required
  - `policy_mode` 'read_only' | 'draft_only' | 'supervised' | 'trusted' | 'custom', required
  - `recipient_policy_mode` 'blocklist' | 'allowlist', required
  - `restricted_by` 'mailbox_allowlist' | 'agent_containment' | 'null', nullable, required
  - `send_window` object, nullable, required

## Other responses

- `401`: Missing or invalid API key (code: UNAUTHORIZED)
- `404`: Not found
- `429`: Rate limited (code: RATE_LIMITED)
- `500`: Internal error (code: INTERNAL_ERROR)

---

[API](https://skmtc.dev/replylayer/apis/replylayer-api.md) · [All operations](https://skmtc.dev/replylayer/apis/replylayer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/replylayer/apis/replylayer-api/revisions/2cae6fbd127e?raw)