---
title: "Get Policy Route"
method: GET
path: "/api/v1/policies/{policy_id}"
tags: ["policies"]
---

# Get Policy Route

`GET /api/v1/policies/{policy_id}`

## Request

- Base URL: `https://cp.xenovia.io` (the document declares no server; this is the origin it was published from)
- URL: `https://cp.xenovia.io/api/v1/policies/{policy_id}`
- Auth: none declared

## Path parameters

- `policy_id` string, uuid, required

## Headers

- `Authorization` string, nullable

## Response `200`

Successful Response

- PolicyRead
  - `id` string, uuid, required
  - `agent_id` string, uuid, nullable, required
  - `org_id` string, uuid, required
  - `owner_id` string, uuid, nullable, required
  - `name` string, required
  - `category` string, required
  - `summary` string, required
  - `rego` string, required
  - `enabled` boolean, required
  - `stage` string, required
  - `enforcement_mode` string
  - `response_body_mode` string
  - `template_id` string, nullable
  - `template_version` integer, nullable
  - `framework_tags` string[], nullable
  - `control_mappings` ControlMapping[], nullable
    - `framework` string, required
    - `controls` string[], required
    - `rationale` string
  - `parameter_values` object, nullable
  - `version` integer
  - `baseline_target` object, nullable
  - `conformance_cases` ConformanceCase[], nullable
    - `name` string, required
    - `stage` 'request' | 'response', nullable
    - `parameters` object
    - `input` object, required
    - `expect` ConformanceExpectation, required
      - `action` string, required
      - `rule` string, nullable
  - `conformance` ConformanceResult: The last run of a policy's cases: what an auditor reads next to the control the policy is evidence for.
    - `ran_at` string, date-time, required
    - `opa_version` string, nullable, required
    - `source` 'template' | 'policy', required
    - `passed` integer, required
    - `failed` integer, required
    - `cases` ConformanceCaseResult[], required
      - `name` string, required
      - `stage` 'request' | 'response', required
      - `expected_action` string, required
      - `expected_rule` string, nullable
      - `got_action` string, required
      - `got_rule` string, nullable
      - `ok` boolean, required
      - `error` string, nullable
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required
  - `warnings` string[], required
  - `group` string, required
  - `template_controls_outdated` boolean, required

## Other responses

- `422`: Validation Error

## Changes

- **2026-10-04** `2f4b4b338b8f`: 6 info
  - added the optional property `baseline_target` to the response with the `200` status
  - added the optional property `conformance` to the response with the `200` status
  - added the optional property `conformance_cases` to the response with the `200` status
  - added the optional property `control_mappings` to the response with the `200` status
  - …2 more
- **2026-09-27** `b20a3bdd6219`: 1 breaking, 1 info
  - removed the required property `proxy_id` from the response with the `200` status
  - added the required property `agent_id` to the response with the `200` status
- **2026-09-22** `66575c8854c1`: 2 info
  - added the required property `group` to the response with the `200` status
  - added the required property `warnings` to the response with the `200` status
- **2026-08-18** `4e9892b1f604`: 2 info
  - added the optional property `enforcement_mode` to the response with the `200` status
  - added the optional property `response_body_mode` to the response with the `200` status

[Operation history](https://skmtc.dev/xenovia/apis/controlplane/changes/api/v1/policies/:policy_id/get.md)

---

[API](https://skmtc.dev/xenovia/apis/controlplane.md) - [All operations](https://skmtc.dev/xenovia/apis/controlplane/llms.txt) - [OpenAPI document](https://skmtc.dev/xenovia/apis/controlplane/revisions/3e25bef24f8f?raw)