# Read the account's sending policy

`GET /api/v1/email/policy`

- Authentication: Secret API key as a bearer token
- Billing: Free.
- Group: Email

The rules behind `ok_to_send` on every email lookup this account runs: the signals that block, the risk-score ceiling and the mailbox-confidence floor. The policy belongs to the account, so every member reads and changes the same one. An undeliverable verdict is always blocked whatever the policy says.

## Example request

```bash
curl https://spaw.co/api/v1/email/policy \
  -H "Authorization: Bearer sk_live_…"
```

## Responses

### 200 — The policy in force.

```json
{
    "success": true,
    "data": {
        "max_risk_score": 60,
        "block_signals": [
            "disposable",
            "likely_typo",
            "parked_domain",
            "mx_blocklisted",
            "no_reply"
        ],
        "min_mailbox_confidence": null,
        "is_default": true,
        "updated_at": null
    }
}
```

## Error codes

- `UNAUTHENTICATED` — https://spaw.co/docs/errors/UNAUTHENTICATED
- `RATE_LIMITED` — https://spaw.co/docs/errors/RATE_LIMITED

---

Canonical page: https://spaw.co/docs/api/get-email-policy · OpenAPI document: https://spaw.co/openapi.json · All endpoints: https://spaw.co/docs/api