# Read the account's SMS policy

`GET /api/v1/phone/policy`

- Authentication: Secret API key as a bearer token
- Billing: Free.
- Group: Phone

The rules behind `ok_to_send` on every phone lookup this account runs: the countries it sends to, the line types it refuses, the signals that block, the risk-score ceiling, whether a live check must have reached the handset, and whether a single lookup of a number the suppression list holds as opted out is blocked. The policy belongs to the account, so every member reads and changes the same one. An invalid number is always blocked whatever the policy says.

`ok_to_send` is a fraud and deliverability decision computed from the answer and these rules. It is not consent to message anyone and not a do-not-call scrub; neither is part of the answer.

## Example request

```bash
curl https://spaw.co/api/v1/phone/policy \
  -H "Authorization: Bearer sk_live_…"
```

## Responses

### 200 — The policy in force.

```json
{
    "success": true,
    "data": {
        "max_risk_score": 60,
        "block_signals": [
            "fictional",
            "disposable",
            "reported_abuse",
            "reported_abuse_widely",
            "premium_rate"
        ],
        "allowed_countries": null,
        "blocked_countries": null,
        "blocked_line_types": [],
        "require_reachable": false,
        "block_opted_out": true,
        "is_default": true,
        "updated_at": null
    }
}
```

## Error codes

- `UNAUTHENTICATED` — https://spaw.co/docs/errors/UNAUTHENTICATED
- `RATE_LIMITED` — https://spaw.co/docs/errors/RATE_LIMITED

---

Canonical page: https://spaw.co/docs/api/get-phone-policy · OpenAPI document: https://spaw.co/openapi.json · All endpoints: https://spaw.co/docs/api