curl -X GET 'https://api.github.com/orgs/example-org/actions/policies?per_page=30&page=1&has_parents=true' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10'

# GET /orgs/{org}/actions/policies (GitHub API)
Base URL: https://api.github.com
Auth: Authorization; GitHub token; required.
Last verified: 2026-09-18

> List organization Actions policies

## Critical Gotchas
* GitHub recommends an `Accept: application/vnd.github+json` header and an explicit `X-GitHub-Api-Version` header.
* Fine-grained tokens only authorize repositories and permissions selected when the token is created.

## cURL
curl -X GET 'https://api.github.com/orgs/example-org/actions/policies?per_page=30&page=1&has_parents=true' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10'

## Parameters
| Name | In | Type | Required | Description |
| :--- | :--- | :--- | :--- | :--- |
| org | path | string | Yes | The organization name. The name is not case sensitive. |
| per_page | query | integer | No | The number of results per page (max 100). For more information, see "[Using p... |
| page | query | integer | No | The page number of the results to fetch. For more information, see "[Using pa... |
| has_parents | query | boolean | No | Include policies configured at higher levels that apply to this organization |

## Response example
{"total_count":0,"policies":[{}]}

---
Need an API key? Get one at https://github.com/settings/tokens

GET

GET /orgs/{org}/actions/policies — GitHub API

GitHub token (required); https://api.github.com

GitHub API

List organization Actions policies

Base URL: https://api.github.com
Auth: Authorization: Bearer <GITHUB_API_KEY>
Last verified: 2026-09-18 · upstream hash matched

Actions Try in browser→

Agents: curl -H "Accept: text/markdown" this URL
→ 253 tokens · Vary: Accept

Critical gotchas

GitHub recommends an Accept: application/vnd.github+json header and an explicit X-GitHub-Api-Version header.

Fine-grained tokens only authorize repositories and permissions selected when the token is created.

cURL

curl -X GET 'https://api.github.com/orgs/example-org/actions/policies?per_page=30&page=1&has_parents=true' \  -H "Authorization: Bearer $GITHUB_TOKEN" \  -H 'Accept: application/vnd.github+json' \  -H 'X-GitHub-Api-Version: 2026-03-10'

Parameters

Name	In	Type	Required	Description
org	path	string	Yes	The organization name. The name is not case sensitive.
per_page	query	integer	No	The number of results per page (max 100). For more information, see "[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api)."
page	query	integer	No	The page number of the results to fetch. For more information, see "[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api)."
has_parents	query	boolean	No	Include policies configured at higher levels that apply to this organization

Response 200 OK

{
  "total_count": 0,
  "policies": [
    {
      "id": 0,
      "name": "string",
      "target": "actions",
      "source_type": "Repository",
      "source": "string",
      "enforcement": "disabled",
      "conditions": {},
      "rules": [
        {
          "type": "restrict_actions_actors",
          "parameters": {
            "allowed_actors": "[recursive or deeply nested schema]"
          }
        }
      ],
      "node_id": "string",
      "_links": {
        "self": {
          "href": "string"
        },
        "html": {
          "href": "string"
        }
      },
      "created_at": "2026-09-03T00:00:00Z",
      "updated_at": "2026-09-03T00:00:00Z"
    }
  ]
}

Get a free GitHub API key → sponsored