Read immutable policy history

Returns retained snapshots newest first, a page at a time, including the deletion tombstone after a policy is removed. Page with before set to pagination.nextBefore; the cursor is stable while new versions are added. pagination.earliestVersion is the oldest retained version, so a decision citing an older one predates retained history. Older overwritten versions are not reconstructed; baseline entries mark migration-time evidence. Scoped to the credential environment. Tenant or environment erasure removes its retained history.

GET/api/v2/approval-policies/{policyId}/versions

Authorization

AuthorizationBearer token (Anlyon API key) · headerrequired

Workspace API key sent as Authorization: Bearer <key>.

better-auth.session_tokenAPI key · cookierequired

Browser session used by dashboard-only operations.

Path parameters

policyIdstringrequired

Public approval-policy id (apol_xxx).

Query parameters

limitinteger

Versions per page, newest first. Default 50.

min 1 · max 100 · default: 50

beforeinteger

Version cursor: return versions older than this. Use pagination.nextBefore from the previous page.

min 1

Header parameters

X-Request-Idstring

Optional caller correlation ID. Unsafe or oversized values are replaced.

max length 128

Responses

200

One page of retained versions, newest first.

successbooleanrequired

Allowed:true

dataApprovalPolicyVersion[]required

Show properties

Array of ApprovalPolicyVersion

policyIdstringrequired

versionintegerrequired

operationstringrequired

Allowed:createdupdateddeletedbaseline

snapshotobjectrequired

Immutable database row snapshot with snake_case field names. A deletion tombstone carries the next version number.

contentHashstringrequired

SHA-256 of PostgreSQL snapshot jsonb text encoded as UTF-8. An integrity digest, not a signature.

actorobject | nullrequired

Show properties

typestringrequired

Allowed:api_keyuserunknown

idstringrequired

changeNotestring | nullrequired

createdAtstring<date-time>required

paginationobjectrequired

Show properties

limitintegerrequired

min 1 · max 100

nextBeforeinteger | nullrequired

Pass as before for the next (older) page. Null on the last page.

earliestVersionintegerrequired

The oldest retained version.

min 1

latestVersionintegerrequired

min 1

400

Bad Request - Invalid input data

successbooleanrequired

requestIdstringrequired

Correlation ID matching the X-Request-Id response header.

errorobjectrequired

Show properties

codestring

messagestring

detailsobject

401

Unauthorized - Invalid or missing API key

successbooleanrequired

requestIdstringrequired

Correlation ID matching the X-Request-Id response header.

errorobjectrequired

Show properties

codestring

messagestring

detailsobject

403

Authenticated credential lacks the required scope or workspace access.

successbooleanrequired

requestIdstringrequired

Correlation ID matching the X-Request-Id response header.

errorobjectrequired

Show properties

codestring

messagestring

detailsobject

404

Not Found - Resource does not exist

successbooleanrequired

requestIdstringrequired

Correlation ID matching the X-Request-Id response header.

errorobjectrequired

Show properties

codestring

messagestring

detailsobject

429

Too Many Requests - Rate limit exceeded

successbooleanrequired

requestIdstringrequired

Correlation ID matching the X-Request-Id response header.

errorobjectrequired

Show properties

codestring

messagestring

detailsobject

Try it

Server

Base URLCustom base URLOverrides the selected server when set.

Authorization

Bearer token (Anlyon API key)Remember on this deviceInclude my values in samples

Parameters

X-Request-IdheaderOptional caller correlation ID. Unsafe or oversized values are replaced.policyIdpath*Public approval-policy id (apol_xxx).limitqueryVersions per page, newest first. Default 50.beforequeryVersion cursor: return versions older than this. Use `pagination.nextBefore` from the previous page.

Request

curl -X GET 'https://api.anlyon.com/api/v2/approval-policies/string/versions' \
  -H 'Authorization: Bearer YOUR_TOKEN'

const response = await fetch("https://api.anlyon.com/api/v2/approval-policies/string/versions", {
  method: "GET",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN"
  }
});

import requests

response = requests.get(
    "https://api.anlyon.com/api/v2/approval-policies/string/versions",
    headers={
        "Authorization": "Bearer YOUR_TOKEN"
    },
)

Response

{
  "success": true,
  "data": [
    {
      "policyId": "string",
      "version": 0,
      "operation": "created",
      "snapshot": {},
      "contentHash": "string",
      "actor": {
        "type": "api_key",
        "id": "string"
      },
      "changeNote": "string",
      "createdAt": "2019-08-24T14:15:22Z"
    }
  ],
  "pagination": {
    "limit": 1,
    "nextBefore": 0,
    "earliestVersion": 1,
    "latestVersion": 1
  }
}

{
  "success": false,
  "error": {
    "code": "VALIDATION_ERROR",
    "message": "Invalid request data",
    "details": {
      "url": "Invalid URL format"
    }
  }
}

{
  "success": false,
  "error": {
    "code": "AUTHENTICATION_ERROR",
    "message": "Invalid or missing API key"
  }
}

{
  "success": false,
  "requestId": "req_0123456789abcdef0123456789abcdef",
  "error": {
    "code": "VALIDATION_ERROR",
    "message": "Invalid request data",
    "details": {}
  }
}

{
  "success": false,
  "error": {
    "code": "NOT_FOUND",
    "message": "Resource not found"
  }
}

{
  "success": false,
  "error": {
    "code": "RATE_LIMIT_EXCEEDED",
    "message": "Rate limit exceeded. Please try again later."
  }
}