---
title: "Get the approval policy"
method: GET
path: "/v1/approval-policy"
tags: ["Board"]
---

# Get the approval policy

`GET /v1/approval-policy`

## Request

- Base URL: `https://api.shardflux.dev`
- URL: `https://api.shardflux.dev/v1/approval-policy`
- Auth: HTTP bearer

## Query parameters

- `organization_id` string, uuid
- `project_id` string, uuid: UUIDv7, lowercase canonical form.

## Response `200`

ask: every permission request comes to Needs you. routine: tests, builds, reads and installs are approved without you. trusted: everything except deploys, pushes to main and spending.

- ApprovalPolicy: ask: every permission request comes to Needs you. routine: tests, builds, reads and installs are approved without you. trusted: everything except deploys, pushes to main and spending.
  - `default` 'ask' | 'routine' | 'trusted', required
  - `projects` object, required: Per-project overrides of the default, by project id.
  - `rules` ApprovalRule[], required
    - `id` string, required
    - `tool` string, required: The tool as the harness names it (Bash, WebFetch, Edit).
    - `pattern` string, required: The command prefix (or path, URL) it allows; empty allows every use of the tool.
    - `project_id` string, uuid, nullable, required: UUIDv7, lowercase canonical form.
    - `created_at` string, date-time, required: RFC 3339 UTC timestamp with Z.

## Other responses

- `4XX`: Default Response
- `5XX`: Default Response

---

[API](https://skmtc.dev/shardflux/apis/shardflux-api.md) · [All operations](https://skmtc.dev/shardflux/apis/shardflux-api/llms.txt) · [OpenAPI document](https://skmtc.dev/shardflux/apis/shardflux-api/revisions/ea685f7b39c4?raw)