Get the tool policy
Retrieve your organization’s tool policy: the rules that deny tool types, or hold their calls for approval, on every Responses request in the organization, including saved agent runs. When the organization has no policy, rules is empty and updated_at is null.
Authorizations
Send Authorization: Bearer , using an MKA1 API key for automation or an OAuth API access token for a signed-in application. Use a dynamic security callback to refresh OAuth access tokens. Browser session-only operations still require their declared cookie.
Headers
Optional external end-user identifier forwarded by the API gateway.
Response
OK
An organization's tool policy. It applies to every Responses request in the organization, including saved agent runs, and overrides what the request or agent configures.
The organization's rules. When several rules match a tool, the strictest action applies: deny, then require_approval.
When the policy was last changed; null when the organization has no policy.