---
title: "Saturate License Policy (Legacy)"
method: POST
path: "/saturate-license-policy"
tags: ["deprecated"]
deprecated: true
---

# Saturate License Policy (Legacy)

`POST /saturate-license-policy`

## Request

- Base URL: `https://api.socket.dev/v0`
- URL: `https://api.socket.dev/v0/saturate-license-policy`
- Auth: one of:
  - HTTP bearer
  - HTTP basic

> **Deprecated.**

**This endpoint is deprecated.** Use the [successor version](https://docs.socket.dev/reference/updateorglicensepolicy) instead.

Get the "saturated" version of a license policy's allow list, filling in the entire set of allowed
license data. For example, the saturated form of a license allow list which only specifies that
licenses in the tier "maximal copyleft" are allowed is shown below (note the expanded `allowedStrings` property):

```json
{
  "allowedApprovalSources": [],
  "allowedFamilies": [],
  "allowedTiers": [
    "maximal copyleft"
  ],
  "allowedStrings": [
    "Parity-6.0.0",
    "QPL-1.0-INRIA-2004",
    "QPL-1.0",
    "RPL-1.1",
    "RPL-1.5"
  ],
  "allowedPURLs": [],
  "focusAlertsHere": false
}
```

This may be helpful for users who want to compose more complex sets of allowed license data via
the "allowedStrings" property, or for users who want to know more about the contents of a particular
license group (family, tier, or approval source).

## Allow List Schema

```json
```

where

PermissiveTier ::= "model permissive" | "gold" | "silver" | "bronze" | "lead"
CopyleftTier ::= "maximal copyleft" | "network copyleft" | "strong copyleft" | "weak copyleft"

## Return Value

The returned value has the same shape as a license allow list:

```json
{
  allowedApprovalSources?: Array<"fsf" | "osi">,
  allowedFamilies?: Array<"copyleft" | "permissive">,
  allowedTiers?: Array<PermissiveTier | CopyleftTier>,
  allowedStrings?: Array<string>
  allowedPURLs?: Array<string>
  focusAlertsHere?: boolean
}
```

where

PermissiveTier ::= "model permissive" | "gold" | "silver" | "bronze" | "lead"
CopyleftTier ::= "maximal copyleft" | "network copyleft" | "strong copyleft" | "weak copyleft"

readers can learn more about [copyleft tiers](https://blueoakcouncil.org/copyleft) and [permissive tiers](https://blueoakcouncil.org/list) by reading the linked resources.

### Example request bodies:
```json
{
  "allowedApprovalSources": ["fsf"],
  "allowedPURLs": [],
  "allowedFamilies": ["copyleft"],
  "allowedTiers": ["model permissive"],
  "allowedStrings": ["License :: OSI Approved :: BSD License"],
  "focusAlertsHere": false
}
```

This endpoint consumes 100 units of your quota.

This endpoint requires the following org token scopes:
- packages:list

## Request body

- object
  - `allow` LicenseAllowList, required
    - `strings` string[], required
  - `warn` LicenseAllowList, required
    - `strings` string[], required
  - `monitor` LicenseAllowList, required
    - `strings` string[], required
  - `allowedApprovalSources` string[], nullable, required
  - `allowedFamilies` string[], nullable, required
  - `allowedTiers` string[], nullable, required
  - `allowedStrings` string[], nullable, required
  - `allowedPURLs` string[], nullable, required
  - `focusAlertsHere` boolean, nullable, required

## Response `200`

Saturated License Allow List

- LicensePolicy
  - `allow` LicenseAllowListElabbed, required
    - `strings` string[], required
    - `classes` string[], required
    - `packageURLs` string[], required
    - `disjs` string[], required
  - `warn` LicenseAllowListElabbed, required
    - `strings` string[], required
    - `classes` string[], required
    - `packageURLs` string[], required
    - `disjs` string[], required
  - `monitor` LicenseAllowListElabbed, required
    - `strings` string[], required
    - `classes` string[], required
    - `packageURLs` string[], required
    - `disjs` string[], required

## Other responses

- `400`: Bad request
- `401`: Unauthorized
- `403`: Insufficient max_quota for API method
- `404`: Resource not found
- `429`: Insufficient quota for API route
- `500`: Internal server error

## Changes

- **2026-11-03** `5ad8bf36b1e7`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/socket-dev/apis/socket/changes/saturate-license-policy/post.md)

---

[API](https://skmtc.dev/socket-dev/apis/socket.md) - [All operations](https://skmtc.dev/socket-dev/apis/socket/llms.txt) - [OpenAPI document](https://skmtc.dev/socket-dev/apis/socket/revisions/5ad8bf36b1e7?raw)