> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mandate.md/llms.txt
> Use this file to discover all available pages before exploring further.

# List agent policies

> Returns all policies for the agent, ordered by creation date (newest first). The active policy has `is_active: true`.



## OpenAPI

````yaml /openapi.json get /api/agents/{agentId}/policies
openapi: 3.1.0
info:
  title: Mandate API
  version: 1.2.0
  description: >-
    Non-custodial agent wallet policy layer. Enforces spend limits, allowlists,
    and approval workflows for AI agent transactions without ever receiving
    private keys.
  contact:
    name: Mandate
    url: https://mandate.md
    email: support@mandate.md
  license:
    name: MIT
    url: https://opensource.org/licenses/MIT
servers:
  - url: https://app.mandate.md
    description: Production
security: []
tags:
  - name: Registration
    description: >-
      Agent registration and claiming. No auth required for register; Sanctum
      auth for claim.
  - name: Agent API
    description: >-
      Endpoints authenticated with a runtime key (Bearer mndt_live_... or
      mndt_test_...). Used by agents to validate transactions, post events, and
      poll status.
  - name: Intent Lifecycle
    description: >-
      Post transaction hashes after broadcast and poll intent status until
      confirmed.
  - name: Dashboard
    description: >-
      Dashboard endpoints for human operators. Authenticated via Sanctum
      (cookie-based session).
  - name: Policies
    description: >-
      Policy management for agents. List, create, and view policy
      configurations.
  - name: Approvals
    description: Approval queue for transactions that require human review.
paths:
  /api/agents/{agentId}/policies:
    get:
      tags:
        - Policies
      summary: List agent policies
      description: >-
        Returns all policies for the agent, ordered by creation date (newest
        first). The active policy has `is_active: true`.
      operationId: listPolicies
      parameters:
        - name: agentId
          in: path
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: List of policies.
          content:
            application/json:
              schema:
                type: object
                properties:
                  policies:
                    type: array
                    items:
                      $ref: '#/components/schemas/Policy'
        '404':
          description: Agent not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
        - SanctumAuth: []
components:
  schemas:
    Policy:
      type: object
      properties:
        id:
          type: string
          format: uuid
        agent_id:
          type: string
          format: uuid
        spend_limit_per_tx_usd:
          type:
            - number
            - 'null'
        spend_limit_per_day_usd:
          type:
            - number
            - 'null'
        spend_limit_per_month_usd:
          type:
            - number
            - 'null'
        allowed_addresses:
          type:
            - array
            - 'null'
          items:
            type: string
        allowed_contracts:
          type:
            - array
            - 'null'
          items:
            type: string
        blocked_selectors:
          type:
            - array
            - 'null'
          items:
            type: string
        blocked_actions:
          type:
            - array
            - 'null'
          items:
            type: string
        require_approval_selectors:
          type:
            - array
            - 'null'
          items:
            type: string
        require_approval_actions:
          type:
            - array
            - 'null'
          items:
            type: string
        require_approval_above_usd:
          type:
            - number
            - 'null'
        max_slippage_bps:
          type:
            - integer
            - 'null'
        max_gas_limit:
          type:
            - string
            - 'null'
        max_value_wei:
          type:
            - string
            - 'null'
        schedule:
          type:
            - object
            - 'null'
        guard_rules:
          type:
            - string
            - 'null'
        is_active:
          type: boolean
        version:
          type: integer
        created_at:
          type: string
          format: date-time
        updated_at:
          type: string
          format: date-time
    ErrorResponse:
      type: object
      required:
        - error
      properties:
        error:
          type: string
          description: Human-readable error message.
  securitySchemes:
    SanctumAuth:
      type: apiKey
      in: cookie
      name: laravel_session
      description: >-
        Laravel Sanctum cookie-based session authentication. Obtained via GitHub
        OAuth login on the dashboard.

````