# Get policy


[API catalog](/reference/api/) · [AI Governance overview](/reference/api/ai-governance/latest/) · [Product manual](https://docs.docker.com/ai/sandboxes/governance/) · [OpenAPI specification](/reference/api/ai-governance/api.yaml)

API version: 1



`GET /orgs/{org_name}/governance/policies/{policy_id}`

Returns the full policy including its `allowlist_v0` rule set.

## Connection and access

[API connection and authentication guidance](/reference/api/ai-governance/latest/#authentication)


Server: `https://hub.docker.com/v2`

Effective security: alternatives are OR; schemes within an alternative are AND. An empty array declares no HTTP authentication requirement.

```json
[
  {
    "bearerAuth": []
  }
]
```
## Example request

Replace placeholders and provide the required credentials or request body.

```console
curl \
  --request GET \
  --header "Authorization: Bearer ${TOKEN}" \
  --header 'Accept: application/json' \
  'https://hub.docker.com/v2/orgs/<ORG_NAME>/governance/policies/<POLICY_ID>'
```

## Parameters

### org_name

Location: path. Required: yes.

Docker Hub organization name.

```json
{
  "description": "Docker Hub organization name.",
  "examples": {
    "default": {
      "value": "my-org"
    }
  },
  "in": "path",
  "name": "org_name",
  "pointer": "/paths/~1orgs~1{org_name}~1governance~1policies~1{policy_id}/parameters/0",
  "required": true,
  "schema": {
    "type": "string"
  }
}
```

### policy_id

Location: path. Required: yes.

Unique policy identifier.

```json
{
  "description": "Unique policy identifier.",
  "examples": {
    "default": {
      "value": "pol_06evsmp24r1pg71cm8500546pkbn"
    }
  },
  "in": "path",
  "name": "policy_id",
  "pointer": "/paths/~1orgs~1{org_name}~1governance~1policies~1{policy_id}/parameters/1",
  "required": true,
  "schema": {
    "type": "string"
  }
}
```

## Request and responses

### Response 200 application/json

Full policy including its `allowlist_v0` rule set.


Schema:

```json
{
  "$ref": "#/components/schemas/Policy"
}
```




default:
```json
{
  "allowlist_v0": {
    "domain": "network",
    "rules": [
      {
        "actions": [
          "connect:tcp",
          "connect:udp"
        ],
        "decision": "allow",
        "id": "rule_06evsm9qjm1pdsk0a8nkfaxy7jna",
        "name": "allow research mirrors",
        "resources": [
          "research.mitre.org",
          "cve.mitre.org"
        ]
      }
    ]
  },
  "created_at": "2026-04-22T00:00:00Z",
  "id": "pol_06evsmp24r1pg71cm8500546pkbn",
  "name": "Security Research — hardened",
  "org": "my-org",
  "scope": {
    "teams": [
      "d290f1ee-6c54-4b01-90e6-d701748f0851"
    ]
  },
  "updated_at": "2026-04-22T00:00:00Z"
}
```


### Response 401 application/json

Missing or invalid credentials


Schema:

```json
{
  "$ref": "#/components/schemas/Error"
}
```




default:
```json
{
  "error": {
    "code": "unauthenticated",
    "message": "unauthenticated"
  }
}
```


### Response 403 application/json

Caller lacks the required permission for this org, or the org is not entitled to use governance.



Schema:

```json
{
  "$ref": "#/components/schemas/Error"
}
```




default:
```json
{
  "error": {
    "code": "permission_denied",
    "message": "permission denied"
  }
}
```


### Response 404 application/json

Not found


Schema:

```json
{
  "$ref": "#/components/schemas/Error"
}
```




default:
```json
{
  "error": {
    "code": "not_found",
    "message": "policy not found"
  }
}
```


### Response 500 application/json

Internal server error


Schema:

```json
{
  "$ref": "#/components/schemas/Error"
}
```




default:
```json
{
  "error": {
    "code": "internal",
    "message": "internal error"
  }
}
```


## Complete operation contract

```json
{
  "description": "Returns the full policy including its `allowlist_v0` rule set.",
  "operationId": "getPolicy",
  "responses": {
    "200": {
      "content": {
        "application/json": {
          "examples": {
            "default": {
              "value": {
                "allowlist_v0": {
                  "domain": "network",
                  "rules": [
                    {
                      "actions": [
                        "connect:tcp",
                        "connect:udp"
                      ],
                      "decision": "allow",
                      "id": "rule_06evsm9qjm1pdsk0a8nkfaxy7jna",
                      "name": "allow research mirrors",
                      "resources": [
                        "research.mitre.org",
                        "cve.mitre.org"
                      ]
                    }
                  ]
                },
                "created_at": "2026-04-22T00:00:00Z",
                "id": "pol_06evsmp24r1pg71cm8500546pkbn",
                "name": "Security Research — hardened",
                "org": "my-org",
                "scope": {
                  "teams": [
                    "d290f1ee-6c54-4b01-90e6-d701748f0851"
                  ]
                },
                "updated_at": "2026-04-22T00:00:00Z"
              }
            }
          },
          "schema": {
            "$ref": "#/components/schemas/Policy"
          }
        }
      },
      "description": "Full policy including its `allowlist_v0` rule set."
    },
    "401": {
      "$ref": "#/components/responses/Unauthenticated"
    },
    "403": {
      "$ref": "#/components/responses/PermissionDenied"
    },
    "404": {
      "$ref": "#/components/responses/NotFound"
    },
    "500": {
      "$ref": "#/components/responses/InternalError"
    }
  },
  "summary": "Get policy",
  "tags": [
    "policies"
  ]
}
```

## Referenced schemas

- `#/components/responses/InternalError`

- `#/components/responses/NotFound`

- `#/components/responses/PermissionDenied`

- `#/components/responses/Unauthenticated`

- [#/components/schemas/Policy](/reference/api/ai-governance/latest/schemas/Policy/)