curl --request GET \
--url https://api.citadel.example/api/v1/policy/drafts/{version} \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.citadel.example/api/v1/policy/drafts/{version}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.citadel.example/api/v1/policy/drafts/{version}"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.citadel.example/api/v1/policy/drafts/{version}"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}{
"version": 4,
"status": "published",
"document": "---\nceiling:\n TRX/6: '100000000'\n USDT/6: '50000000'\nchains:\n tron:\n assets:\n TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t: USDT/6\n native: TRX/6\n chain_module_version: 1\n wallets: {}\n whitelist:\n - TGz2TZmabrZZowj7G8BbyMYg6HacJLuzaj\n - TVsjquD89kcRu2WTSWsoJhYMNLQbFt8xQ4\nreferences: {}\nversion: 4\n",
"key_id": "merchant-policy-admin",
"signature": "dQhrBoRLDdj261cqTZkE1y3lLxq4fkEp/QrHPyFqMhSgkP4/iVx/xghGu3ExStse1SqOK/JMhlDvitcG0WQhBA==",
"approval": {
"id": "0199f1a2-4b6c-7d8e-9f01-23456789abcd",
"status": "approved",
"required": 2,
"approved": 2,
"expires_at": "2026-10-18T13:00:00Z",
"decided_at": "2026-10-18T09:42:00Z"
},
"rejected_reason": null,
"created_at": "2026-10-18T09:00:00Z",
"updated_at": "2026-10-18T09:42:00Z"
}Get a policy draft
One version of the policy document, drafted here or in the console, and what became of it:
draft— signdocumentand publish it;pending— signed; waits for approval (approval);published— sent to your engine;GET /policyreads what is in force;rejected— never sent;rejected_reasonsays why.
Read it to follow a change after POST /policy/publish, or to fetch a draft’s bytes again
before you sign. No network. Needs the read scope. A key limited to vaults is refused
with 403 vault_limited.
curl --request GET \
--url https://api.citadel.example/api/v1/policy/drafts/{version} \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.citadel.example/api/v1/policy/drafts/{version}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.citadel.example/api/v1/policy/drafts/{version}"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.citadel.example/api/v1/policy/drafts/{version}"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}{
"version": 4,
"status": "published",
"document": "---\nceiling:\n TRX/6: '100000000'\n USDT/6: '50000000'\nchains:\n tron:\n assets:\n TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t: USDT/6\n native: TRX/6\n chain_module_version: 1\n wallets: {}\n whitelist:\n - TGz2TZmabrZZowj7G8BbyMYg6HacJLuzaj\n - TVsjquD89kcRu2WTSWsoJhYMNLQbFt8xQ4\nreferences: {}\nversion: 4\n",
"key_id": "merchant-policy-admin",
"signature": "dQhrBoRLDdj261cqTZkE1y3lLxq4fkEp/QrHPyFqMhSgkP4/iVx/xghGu3ExStse1SqOK/JMhlDvitcG0WQhBA==",
"approval": {
"id": "0199f1a2-4b6c-7d8e-9f01-23456789abcd",
"status": "approved",
"required": 2,
"approved": 2,
"expires_at": "2026-10-18T13:00:00Z",
"decided_at": "2026-10-18T09:42:00Z"
},
"rejected_reason": null,
"created_at": "2026-10-18T09:00:00Z",
"updated_at": "2026-10-18T09:42:00Z"
}Authorizations
An API key minted in the console (ctd_…). Authenticates; never authorizes funds. A key
carries scopes (read, wallets.write, transactions.write, events.write,
webhooks.write, policy.write) and may be limited to vaults, to IP addresses, and in
lifetime — see Authentication.
Path Parameters
x >= 1Response
The version and where it stands.
draft — to sign and publish; pending — signed, waits for approval; published — sent to your engine; rejected — never sent.
draft, pending, published, rejected The YAML document: the exact bytes your policy key signs.
The policy key that signed. null for a draft.
Your policy key's signature over document, in standard base64. null for a draft.
The approval a change published through the API waits for, or waited for. null for a draft, and for a version published in the console.
Show child attributes
Show child attributes
Why a rejected change was never sent: an approver declined it, it was not approved in time, or a newer change replaced it or a newer version came into force first.
approval_rejected, approval_expired, superseded, null