# List credential policies

`GET https://api.cademi.com.br/api/v3/credentials/{credential_id}/policies`

Operation ID: `credentials.policies.list` · API v3

Returns the policies in the credential's active policy revision, one item per policy.

A credential without policies returns an empty collection.

Required permissions: `credentials.read`.

## Parameters

| Name | In | Type | Required | Description |
|---|---|---|---|---|
| `credential_id` | path | string | yes |  |

## Responses

### 200

Returns the policies in the active revision.

Body: `data`: array of Policy.

Fields of Policy:

| Field | Type | Required | Description |
|---|---|---|---|
| `capabilities` | array of string | yes |  |
| `id` | string | yes |  |
| `object` | string, one of `policy` | yes |  |
| `published_at` | string or null (date-time) | yes |  |
| `published_by` | object | yes |  |
| `resources` | array of object | yes |  |
| `version` | integer | yes |  |

### 401

The credential is missing, malformed, expired, or revoked.

Body: Error.

### 403

The current credentials do not have the permission required by this operation.

Body: Error.

### 404

The credential was not found or is not accessible with the current credentials.

Body: Error.

Full schema: https://cademi.dev/openapi/v3.json