Skip to main content
GET
Get vault policy
Returns one policy version, its authorization state and its current next action.

Authorizations

Authorization
string
header
required

HTTP Basic auth. Username is the Stableyard app ID. Password is the app secret. The optional Stableyard-Version request header must match the environment pin.

Headers

Stableyard-Version
enum<string>

Optional contract-version assertion. Omit it to use the app environment's pinned version. A different supported version is accepted only after that environment is explicitly migrated.

Available options:
2026-09-09

Path Parameters

accountId
string
required

Canonical account id returned by the Accounts API.

Example:

"acct_123"

policyId
string
required

Response

Vault policy

id
string
required
Example:

"vault_policy_123"

vaultId
string
required
Example:

"vault_123"

version
integer
required
Required range: x >= 1
policySchemaVersion
integer
required
Required range: x >= 1
status
enum<string>
required
Available options:
draft,
pending_authorization,
authorized,
installing,
active,
superseded,
revoked,
failed
ownershipMode
enum<string>
required
Available options:
external,
stableyard
allowedTokens
object[]
required
spendLimits
object
required
yieldRules
object
required
resourceVersion
integer
required
Required range: x >= 1
createdAt
string<date-time>
required
updatedAt
string<date-time>
required
authorization
object

Present on single-policy responses while authorization is pending.

nextAction
Vault action required · object | null
reason
string | null
failureCode
string | null