List policy rules (organization)
Lists the organization scope’s non-default policy-engine rules: the DRAFT working copy by default, or the enforced set with status=published. Draft lists include system-managed blocklist/equipment rows alongside custom rules.
Authorizations
API key obtained from the dashboard or GET /user/api-key
Query Parameters
draft, published Response
The rules, in first-match priority order
project, organization draft, published 0 for the draft working copy; the snapshot number for published rows.
First-match order (lower evaluates first).
True on the scope's terminal Default Rule.
Generation-stable identity; compare rules across draft/published by this, never by id.
custom (user-owned, editable), default (the Default Rule), or system-managed rows: blocklist (compiled from app blocklists) and — at project scope — grant (compiled from agent grants; managed through the Grants endpoints, never edited as rules). Older deployments may also carry legacy app_permission/equipment rows.
allow, block minute, hour, day, null A conditions array, a session-policy object ({repositories} / {folders}), or null.