Get one Cedar policy with its version history.
Returns a single Cedar policy scoped to the authenticated org, plus its full version history (newest first). A policy id belonging to another org returns 404.
Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.
In: header
Path Parameters
The policy id.
Response Body
application/json
curl -X GET "https://example.com/api/policies/string"{
"policy": {
"id": "string",
"workspaceId": "string",
"name": "string",
"description": "string",
"cedarPolicy": "string",
"scope": "string",
"scopeId": "string",
"status": "string",
"version": 0,
"regulatoryTags": [
"string"
],
"metadata": {
"property1": null,
"property2": null
},
"createdBy": "string",
"createdAt": "string",
"updatedAt": "string",
"archivedAt": "string"
},
"versions": [
{
"id": "string",
"policyId": "string",
"version": 0,
"cedarPolicy": "string",
"changedBy": "string",
"changeReason": "string",
"createdAt": "string"
}
]
}List Cedar policies for the authenticated org.
Returns Cedar policies scoped to the authenticated org (policies.workspaceId), optionally filtered by status or scope. Human principals only: a browser session or a WorkOS user-token bearer is accepted; rsk_* API keys and BYOA OAuth-agent tokens authenticate but are rejected 403.
List incidents for the authenticated org.
Returns incidents scoped to the authenticated org, filterable by status (comma-separated), severity, or source, with limit/offset pagination. Bearer-reachable for human principals (user token or browser session); rsk_* API keys and BYOA OAuth-agent tokens are rejected 403.