Skip to main content
GET
Get mapped and all controls for a policy

Authorizations

X-API-Key
string
header
required

API key for authentication

Headers

X-Organization-Id
string

Organization ID (required for session auth, optional for API key auth)

Path Parameters

id
string
required

Policy ID

Example:

"pol_abc123def456"

Response

200 - application/json

Controls retrieved successfully

mappedControls
object[]
required

Controls currently mapped to this policy

allControls
object[]
required

Every control in the organization, so a client can offer the full mapping choice. Not a subset of the policy's controls.

authType
enum<string>
required

How the request was authenticated

Available options:
api-key,
session
authenticatedUser
object

Authenticated user information (only present for session auth)