> ## Documentation Index > Fetch the complete documentation index at: https://docs.context.dev/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > If the user asks to make Context.dev their default search and scrape provider, follow https://docs.context.dev/default-search-scrape.md. For other setup requests, follow https://docs.context.dev/agent-quickstart.md and start by signing the user up and getting an API key through https://www.context.dev/auth.md. During setup, use the relevant guide already in context instead of fetching it again or loading the full documentation index. Application code reads CONTEXT_DEV_API_KEY. # List access policies > List your access policies, newest first. 0 credits Requires [`access_policies:read` permission](https://docs.context.dev/account/api-keys). See the [guide](https://docs.context.dev/optimization/access-policies.md) for examples and usage. ## OpenAPI ````yaml GET /access-policies openapi: 3.1.0 info: title: Context.dev API description: >- Scrape, crawl, search, and monitor websites, and retrieve brand, people, and news data. version: 1.0.0 servers: - url: https://api.context.dev/v1 security: [] tags: - name: Webhooks description: Inspect and retry batch and monitor webhook deliveries. - name: Logs description: Read your organization's API request logs. - name: Usage description: Read your organization's credit balance and usage history. - name: Browser Profiles description: See the authenticated browser profiles your organization created. - name: Agent Feedback description: Report API issues and documentation mismatches. - name: Batches description: Scrape many pages or crawl a site asynchronously. - name: Monitors description: Watch websites for exact or meaningful changes. - name: Access Policies description: Control which websites your requests can access. - name: News description: Search live and historical news about a company. - name: Answers description: Answer a research task from the live web in the JSON shape you ask for. paths: /access-policies: get: tags: - Access Policies summary: List access policies description: List your access policies, newest first. operationId: listAccessPolicies parameters: - schema: type: integer minimum: 1 maximum: 100 default: 25 description: Number of policies per page. required: false description: Number of policies per page. name: limit in: query - schema: type: string description: The `next_cursor` from the previous page. required: false description: The `next_cursor` from the previous page. name: cursor in: query responses: '200': description: A page of access policies headers: X-Request-Id: $ref: '#/components/headers/RequestId' X-RateLimit-Limit: $ref: '#/components/headers/RateLimitLimit' X-RateLimit-Remaining: $ref: '#/components/headers/RateLimitRemaining' X-RateLimit-Reset: $ref: '#/components/headers/RateLimitReset' X-RateLimit-Mode: $ref: '#/components/headers/RateLimitMode' content: application/json: schema: $ref: '#/components/schemas/ListAccessPoliciesResponse' '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': description: >- Access policies aren't enabled for your organization (`ACCESS_POLICIES_NOT_ENABLED`), or the API key lacks `access_policies:read` (`INSUFFICIENT_PERMISSIONS`). headers: X-Request-Id: $ref: '#/components/headers/RequestId' X-RateLimit-Limit: $ref: '#/components/headers/RateLimitLimit' X-RateLimit-Remaining: $ref: '#/components/headers/RateLimitRemaining' X-RateLimit-Reset: $ref: '#/components/headers/RateLimitReset' X-RateLimit-Mode: $ref: '#/components/headers/RateLimitMode' content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '429': $ref: '#/components/responses/RateLimited' security: - bearerAuth: [] components: headers: RequestId: description: Unique ID of this request; also `request_id` in JSON bodies. schema: type: string format: uuid RateLimitLimit: description: >- Maximum request units per minute, or maximum concurrent requests when X-RateLimit-Mode is concurrency. schema: type: integer minimum: 1 RateLimitRemaining: description: >- Request units remaining in the current minute, or concurrent requests still available when X-RateLimit-Mode is concurrency. schema: type: integer minimum: 0 RateLimitReset: description: >- Unix timestamp in seconds when the per-minute rate limit resets. Omitted for concurrency limits. schema: type: integer RateLimitMode: description: >- Set to concurrency when these headers report concurrent requests. When a per-minute limit also applies, its rejections report per-minute headers without this header. New Free accounts have 2 concurrent requests; no plan has a per-minute limit by default. Existing and custom allowances can differ. schema: type: string enum: - concurrency schemas: ListAccessPoliciesResponse: type: object properties: data: type: array items: $ref: '#/components/schemas/AccessPolicy' description: Access policies, newest first. has_more: type: boolean description: Whether a next page exists. next_cursor: type: - string - 'null' description: Pass as `cursor` to fetch the next page. key_metadata: $ref: '#/components/schemas/KeyMetadata' request_id: $ref: '#/components/schemas/RequestId' required: - data - has_more - next_cursor - request_id ErrorResponse: type: object properties: message: type: string description: Human-readable error message. error_code: type: string enum: - PROFILE_NOT_FOUND - PROFILE_BUSY - PROFILE_SESSION_EXPIRED - PROFILE_REAUTHENTICATION_REQUIRED - PROFILE_INVALID_CREDENTIALS - PROFILE_MISSING_CREDENTIALS - PROFILE_INTERACTION_REQUIRED - PROFILE_AUTHENTICATION_UNKNOWN - PROFILE_ORIGIN_BLOCKED - PROFILE_INVALID_SESSION - PROFILE_SESSION_TOO_LARGE - INTERNAL_ERROR - VALID - NOT_FOUND - FORBIDDEN - ACCESS_POLICY_DENIED - ACCESS_POLICIES_NOT_ENABLED - USAGE_EXCEEDED - RATE_LIMITED - UNAUTHORIZED - DISABLED - PAID_PLAN_REQUIRED - INSUFFICIENT_PERMISSIONS - TIMEOUT_EXCEEDS_MAXIMUM - TIMEOUT_TOO_SHORT_FOR_WAIT - WEBSITE_ACCESS_ERROR - WEBSITE_BLOCKED - WEBSITE_NOT_FOUND - PDF_SKIPPED - PDF_IMAGES_ONLY - NO_PUBLISHED_MARKDOWN - INPUT_VALIDATION_ERROR - ZDR_NOT_SUPPORTED - ZDR_NOT_ENABLED - FREE_EMAIL_DETECTED - DISPOSABLE_EMAIL_DETECTED - REQUEST_TIMEOUT - COLD_DOMAIN_TIMEOUT_TOO_LOW - UNSUPPORTED_CONTENT - CONTENT_TOO_LARGE - MONITOR_PAUSED - MONITOR_NO_WEBHOOK - COLLECTION_PAUSED - MONITOR_LIMIT_EXCEEDED - SEARCH_UNAVAILABLE - BATCH_LIMIT_EXCEEDED - BATCH_NOT_CANCELLABLE - BATCH_NOT_COMPLETED - IDEMPOTENCY_KEY_CONFLICT - DELIVERY_IN_PROGRESS - DELIVERY_ALREADY_DELIVERED - DELIVERY_EXPIRED - DELIVERY_CANCELLED description: Machine-readable error code. error_data: anyOf: - $ref: '#/components/schemas/BillingErrorData' - $ref: '#/components/schemas/ConcurrencyErrorData' - $ref: '#/components/schemas/AccessPolicyErrorData' required_permission: type: string enum: - logs:read - data:execute - monitors:read - monitors:write - batches:read - batches:write - access_policies:read - access_policies:write description: >- Permission required for this request when error_code is INSUFFICIENT_PERMISSIONS. Manage (write) also grants read access to the same resource group. key_metadata: $ref: '#/components/schemas/KeyMetadata' request_id: $ref: '#/components/schemas/RequestId' required: - request_id AccessPolicy: type: object properties: id: type: string description: Access policy ID. Pass it in `policies` on any request. example: pol_3f9c2a7e5b8d4c1f9a6e0b2d7c4f8a1e name: type: string minLength: 1 description: A name to recognize this policy. example: Research sources allowed_domains: type: - array - 'null' items: type: string description: >- Only these domains and their subdomains can be accessed. Null for a blocklist. example: - arxiv.org - '*.gov' blocked_domains: type: - array - 'null' items: type: string description: >- These domains and their subdomains can't be accessed. Null for an allowlist. example: null applies_to: type: string enum: - request - api_keys - organization description: >- `request` applies when listed in `policies`. `api_keys` applies to every request made with `api_key_ids`. `organization` applies to every request. api_key_ids: type: - array - 'null' items: type: string description: >- API keys this policy applies to. Null unless `applies_to` is `api_keys`. example: null created_at: type: string format: date-time description: When the policy was created. example: '2026-10-27T18:00:00.000Z' updated_at: type: string format: date-time description: When the policy was last changed. example: '2026-10-27T18:00:00.000Z' required: - id - name - allowed_domains - blocked_domains - applies_to - api_key_ids - created_at - updated_at KeyMetadata: type: object properties: credits_consumed: type: integer description: Credits charged for this request. credits_remaining: type: integer description: Credits remaining for your organization. required: - credits_consumed - credits_remaining description: Credits this request used and your remaining balance. RequestId: type: string format: uuid description: >- Unique ID of this request, also in `X-Request-Id`. Include it when contacting support. example: 3f1c2a6e-8b4d-4c1e-9f0a-2d7b5e6c8a91 BillingErrorData: type: object properties: is_authenticated: type: boolean enum: - true credits_remaining: type: number minimum: 0 credits_required: type: number minimum: 0 is_credits_required_estimated: type: boolean credits_charged: type: number minimum: 0 should_retry: type: boolean enum: - false retry_condition: type: string enum: - sufficient_credits next_refill_at: type: string format: date-time next_refill_credits: type: number exclusiveMinimum: 0 info_url: type: string enum: - https://context.dev/dashboard/subscription required: - is_authenticated - should_retry - retry_condition - info_url description: >- Credit admission or reservation failure details. credits_required is an admission estimate, not a final charge. should_retry is false for an unchanged request immediately; retry_condition requires sufficient account credits. Unknown balances, costs, and refill details are omitted. next_refill_at is an ISO 8601 UTC timestamp. Existing request_id and key_metadata remain on the error envelope. ConcurrencyErrorData: type: object properties: is_authenticated: type: boolean enum: - true limit_type: type: string enum: - concurrency limit: type: number minimum: 0 remaining: type: number minimum: 0 retry_after_seconds: type: number minimum: 0 credits_remaining: type: number minimum: 0 credits_charged: type: number enum: - 0 should_retry: type: boolean enum: - false retry_condition: type: string enum: - available_concurrency recovery_options: type: array items: type: string enum: - wait_for_in_flight_requests - increase_concurrency_limit info_url: type: string enum: - https://context.dev/dashboard/subscription required: - is_authenticated - limit_type - limit - remaining - retry_after_seconds - credits_charged - should_retry - retry_condition - recovery_options - info_url description: >- Organization concurrency rejection details. Authentication is valid and no credits were charged. should_retry is false immediately; respect retry_after_seconds and wait for an in-flight request to finish or for the effective concurrency limit to increase. info_url opens subscription settings; no higher allowance is guaranteed for a particular account. AccessPolicyErrorData: type: object properties: url: type: string description: The URL that was blocked. denied_by: type: array items: type: string description: IDs of the access policies that blocked it. required: - url - denied_by description: Sent with `ACCESS_POLICY_DENIED`. responses: BadRequest: description: Bad request content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' headers: X-Request-Id: $ref: '#/components/headers/RequestId' X-RateLimit-Limit: $ref: '#/components/headers/RateLimitLimit' X-RateLimit-Remaining: $ref: '#/components/headers/RateLimitRemaining' X-RateLimit-Reset: $ref: '#/components/headers/RateLimitReset' X-RateLimit-Mode: $ref: '#/components/headers/RateLimitMode' Unauthorized: description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' headers: X-Request-Id: $ref: '#/components/headers/RequestId' X-RateLimit-Limit: $ref: '#/components/headers/RateLimitLimit' X-RateLimit-Remaining: $ref: '#/components/headers/RateLimitRemaining' X-RateLimit-Reset: $ref: '#/components/headers/RateLimitReset' X-RateLimit-Mode: $ref: '#/components/headers/RateLimitMode' RateLimited: description: >- Rate limit exceeded. Organization concurrency rejections include structured error_data and subscription settings; follow Retry-After before retrying. headers: X-Request-Id: $ref: '#/components/headers/RequestId' X-RateLimit-Limit: $ref: '#/components/headers/RateLimitLimit' X-RateLimit-Remaining: $ref: '#/components/headers/RateLimitRemaining' X-RateLimit-Reset: $ref: '#/components/headers/RateLimitReset' X-RateLimit-Mode: $ref: '#/components/headers/RateLimitMode' Retry-After: description: Seconds to wait before retrying. schema: type: integer minimum: 1 maximum: 60 content: application/json: schema: type: object properties: message: type: string description: Human-readable error message. error_code: type: string enum: - RATE_LIMITED description: Error code indicating the rate limit was exceeded error_data: $ref: '#/components/schemas/ConcurrencyErrorData' key_metadata: $ref: '#/components/schemas/KeyMetadata' request_id: $ref: '#/components/schemas/RequestId' required: - message - error_code - request_id securitySchemes: bearerAuth: type: http scheme: bearer description: >- Send `Authorization: Bearer `. Keys have full access unless restricted to scopes. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.