> ## Documentation Index
> Fetch the complete documentation index at: https://docs.openmail.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# Get correspondent policy

> Read the correspondent policy for a scope (account by default, or a pod/inbox). Returns the mode this scope sets for each direction, the effective mode after inheritance, this scope's own rules, and the rules inherited from parent scopes. Requires an account-wide API key — pod- and inbox-scoped keys are rejected, so an agent holding its own operational key cannot read or reason about the boundary confining it.



## OpenAPI

````yaml /api-reference/openapi.json get /v1/policy
openapi: 3.0.3
info:
  title: OpenMail API
  description: >-
    Email infrastructure API for AI agents. Create inboxes, send and receive
    email, and get real-time notifications via webhooks.
  version: 1.0.0
  license:
    name: Proprietary
servers:
  - url: https://api.openmail.sh
security:
  - bearerAuth: []
tags:
  - name: pods
    description: Isolated sub-accounts for your end users or tenants
  - name: inboxes
    description: Email inboxes and their webhook configuration
  - name: messages
    description: Sending and listing messages
  - name: threads
    description: Conversation threads and read status
  - name: attachments
    description: Downloading and extracting text from attachments
  - name: policy
    description: >-
      Correspondent policy — provider-enforced allow/block rules and allowlist
      mode, scoped per account, pod, or inbox. Account-wide key only.
  - name: feedback
    description: Reporting bugs, friction, and feature requests to the OpenMail team
paths:
  /v1/policy:
    get:
      tags:
        - policy
      summary: Get correspondent policy
      description: >-
        Read the correspondent policy for a scope (account by default, or a
        pod/inbox). Returns the mode this scope sets for each direction, the
        effective mode after inheritance, this scope's own rules, and the rules
        inherited from parent scopes. Requires an account-wide API key — pod-
        and inbox-scoped keys are rejected, so an agent holding its own
        operational key cannot read or reason about the boundary confining it.
      operationId: getPolicy
      parameters:
        - schema:
            type: string
          in: query
          name: podId
          required: false
          description: >-
            Confine the operation to one pod's policy. Accepts the pod ID.
            Mutually exclusive with `inboxId`.
        - schema:
            type: string
          in: query
          name: inboxId
          required: false
          description: >-
            Confine the operation to one inbox's policy. Mutually exclusive with
            `podId`.
      responses:
        '200':
          description: The resolved policy for the scope
          content:
            application/json:
              schema:
                description: The resolved policy for the scope
                type: object
                additionalProperties: true
        '403':
          description: >-
            The authenticating key is scoped and cannot read policy
            (`forbidden`)
          content:
            application/json:
              schema:
                description: >-
                  The authenticating key is scoped and cannot read policy
                  (`forbidden`)
                allOf:
                  - $ref: '#/components/schemas/Error'
        '404':
          description: Pod or inbox not found
          content:
            application/json:
              schema:
                description: Pod or inbox not found
                allOf:
                  - $ref: '#/components/schemas/Error'
components:
  schemas:
    Error:
      type: object
      additionalProperties: true
      properties:
        error:
          type: string
        message:
          type: string
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: API key

````