Get policy
Returns a policy with its selected version, version state, permissions and available actions.
Authorizations
MeshQu API key passed as a bearer token: Authorization: Bearer mqu_…. Mint one in the console (Settings → API keys).
Tenant UUID for multi-tenant isolation. Required on authenticated routes. A missing or non-UUID value returns 400 MISSING_TENANT_ID or INVALID_TENANT_ID before API-key authentication.
Path Parameters
Query Parameters
Version to return. Defaults to latest: a draft if one exists, otherwise the active ratified version, otherwise the highest version number. active selects the active ratified version; draft selects the first draft; a number selects that exact version. Returns 404 if the selected version does not exist.
^(active|draft|latest|[1-9][0-9]*)$Response
Default Response
When true, violations are logged but DENY becomes ALERT
Policy group this policy belongs to
Regulatory references this policy implements
Warnings for regulatory_refs entries not found in the clause registry. Informational only — the save proceeded.
Lifecycle state of the selected version. discarded never governed a decision and cannot be restored. reopened, set_aside and replaced are pending versions closed without governing; they remain available for comparison.
active Convenience permission flags. Clients MUST use actions[] as the source of truth for availability; permissions are for disable-state/tooltip hints only.