Skip to main content
GET
/
v1
/
maip
/
policies
List MAIP Policies
curl --request GET \
  --url https://api.truthlocks.com/v1/maip/policies \
  --header 'X-API-Key: <api-key>'
[
  {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "tenant_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "name": "<string>",
    "description": "<string>",
    "category": "scope",
    "status": "active",
    "priority": 123,
    "rules": [
      {
        "conditions": [
          {
            "field": "trust_score",
            "op": "eq",
            "value": "<unknown>"
          }
        ],
        "effect": "allow",
        "requires_approval": true
      }
    ],
    "created_at": "2023-11-07T05:31:56Z",
    "updated_at": "2023-11-07T05:31:56Z"
  }
]

​
List MAIP Policies

GET /v1/maip/policies Returns all MAIP agent policies configured for the authenticated tenant. Policies define runtime enforcement rules that govern what agents can do based on trust scores, scopes, delegation depth, and agent type.

​
Authentication

Requires X-API-Key header or Bearer JWT token. Tenant-scoped via cookie or JWT claim.

​
Response

Returns an array of policy objects.
​
id
string
UUID primary key of the policy.
​
tenant_id
string
UUID of the owning tenant.
​
name
string
Human-readable policy name. Used in denial messages and audit logs.
​
description
string
Detailed description of what the policy enforces.
​
category
string
Policy category. One of: "scope", "trust", "rate", "custom".
​
status
string
Policy lifecycle status. One of: "active", "disabled", "archived". Only active policies are evaluated during policy checks.
​
priority
integer
Evaluation priority. Lower numbers are evaluated first. Default: 100.
​
rules
object
JSON array of policy rules. Each rule contains conditions, an effect ("allow", "deny", "require_approval"), and an optional requires_approval flag. See Create Policy for the full rule schema.
​
created_at
string
ISO 8601 creation timestamp.
​
updated_at
string
ISO 8601 last-updated timestamp.

​
Example

curl https://api.truthlocks.com/v1/maip/policies \
  -H "X-API-Key: tl_live_..."

const response = await fetch("https://api.truthlocks.com/v1/maip/policies", {
  headers: { "X-API-Key": "tl_live_..." },
});
const policies = await response.json();

import requests

response = requests.get(
    "https://api.truthlocks.com/v1/maip/policies",
    headers={"X-API-Key": "tl_live_..."},
)
policies = response.json()

Authorizations

​
X-API-Key
string
header
required

API key for machine-to-machine authentication

Response

Array of policies

​
id
string<uuid>

UUID primary key

​
tenant_id
string<uuid>

UUID of the owning tenant

​
name
string

Human-readable policy name

​
description
string

Detailed policy description

​
category
enum<string>

Policy category

Available options:
scope,
trust,
rate,
custom
​
status
enum<string>

Policy lifecycle status

Available options:
active,
disabled,
archived
​
priority
integer

Evaluation priority (lower = first)

​
rules
object[]

Array of policy rules

​
created_at
string<date-time>
​
updated_at
string<date-time>