---
title: "List Org Alert Policies"
method: GET
path: "/orgs/{org_slug}/alert-policies"
tags: ["alert-policies"]
---

# List Org Alert Policies

`GET /orgs/{org_slug}/alert-policies`

## Request

- Base URL: `https://api.socket.dev/v0`
- URL: `https://api.socket.dev/v0/orgs/{org_slug}/alert-policies`
- Auth: one of:
  - HTTP bearer
  - HTTP basic

List the alert policies of an organization. The default policy (which applies to all repositories without a policy label) is always first, followed by custom policies ordered by creation time. Requires a token with org-wide repository access; repo-restricted tokens receive 403.

This endpoint consumes 1 unit of your quota.

This endpoint requires the following org token scopes:
- alert-policy:list

## Path parameters

- `org_slug` string, required

## Response `200`

Lists alert policies for the specified organization.

- object
  - `items` object[], required
    - `id` string, required: The ID of the policy: a UUID, or `default` for the default policy until it is first customized.
    - `name` string, nullable, required: The policy name. Null for the default policy, which applies to all repositories without a policy label.
    - `description` string, nullable, required: Operator-provided description.
    - `apply_method` 'labeled_repos' | 'unlabeled_repos', required: How the policy scopes to repositories: `labeled_repos` applies to repositories carrying the policy repo label; `unlabeled_repos` is the default policy for all unlabeled repositories.
    - `repo_label_id` string, nullable, required: The repo label that scopes this policy. Null for the default policy.
    - `repository_ids` string[], required: Repositories the policy scopes to. Empty for the default policy and for policies with no repository assignments.
    - `baseline` string, nullable, required: Baseline rule bundle the policy starts from. One of: essential, balanced, comprehensive. Null when the policy has no baseline.
    - `created_by` string, nullable, required: User ID that created the policy.
    - `updated_by` string, nullable, required: User ID that last updated the policy.
    - `created_at` string, nullable, required: ISO-8601 creation timestamp. Null for the default policy until it is first customized.
    - `updated_at` string, nullable, required: ISO-8601 last-update timestamp. Null for the default policy until it is first customized.

## Other responses

- `400`: Bad request
- `401`: Unauthorized
- `403`: Insufficient max_quota for API method
- `404`: Resource not found
- `429`: Insufficient quota for API route

## Changes

- **2026-11-03** `5ad8bf36b1e7`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/socket-dev/apis/socket/changes/orgs/:org_slug/alert-policies/get.md)

---

[API](https://skmtc.dev/socket-dev/apis/socket.md) - [All operations](https://skmtc.dev/socket-dev/apis/socket/llms.txt) - [OpenAPI document](https://skmtc.dev/socket-dev/apis/socket/revisions/5ad8bf36b1e7?raw)