How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Credo AI Policy Controls API

Endpoints for policy controls management

Credo AI Policy Controls API is one of 40 APIs that Credo AI publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, a getting-started guide, and authentication docs.

This API exposes 11 operations across 6 paths, and defines 15 schemas. It is described by OpenAPI 3.2.0.

Requests are made against a single base URL, /api/v2/credoai.

11 operations 6 paths 15 schemas 2 DELETE6 GET1 PATCH2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
Base URL
https://api.credo.ai/api/v2/{tenant}
Authentication
API Key
Resource Areas
1

Authentication & Security 1

Credo AI Policy Controls API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (Bearer).

Paths & Operations 11

Across 6 paths, the API surfaces 11 operations — 2 DELETE, 6 GET, 1 PATCH, 2 POST. Each is listed below with its method, path, parameters, and response codes.

policy_controls 11

Endpoints for policy controls management

GET
/policy_control_bases/{id}/versions
Retrieves a list of all versions associated with a specific policy control base.
CredoAIWeb.API.V2.PolicyControl.VersionController.index 1 param → 200401
POST
/policy_control_bases/{id}/versions
Creates a new version for a specified policy control base.
CredoAIWeb.API.V2.PolicyControl.VersionController.create 1 param body → 201401403
GET
/policy_controls
List all latest policy controls
CredoAIWeb.API.V2.PolicyControlController.index 8 params → 200401
DELETE
/policy_control_versions/{id}
Deletes a specific version of a policy control identified by its unique ID.
CredoAIWeb.API.V2.PolicyControl.VersionController.delete 1 param → 204401403404
GET
/policy_control_versions/{id}
Fetches the details of a specific version of a policy control by its unique ID.
CredoAIWeb.API.V2.PolicyControl.VersionController.show 1 param → 200401404
PATCH
/policy_control_versions/{id}
Updates the attributes of an existing version of a policy control identified by its unique ID.
CredoAIWeb.API.V2.PolicyControl.VersionController.update 1 param body → 200401403404
GET
/policy_controls/{id}
Get policy control
CredoAIWeb.API.V2.PolicyControlController.show 1 param → 200401404
GET
/policy_control_bases
Retrieves a list of all policy control bases available.
CredoAIWeb.API.V2.PolicyControl.BaseController.index → 200401
POST
/policy_control_bases
Creates a new custom policy control base with the provided attributes.
CredoAIWeb.API.V2.PolicyControl.BaseController.create body → 201401403
DELETE
/policy_control_bases/{id}
Deletes a specific policy control base identified by its unique ID.
CredoAIWeb.API.V2.PolicyControl.BaseController.delete 1 param → 204401403404
GET
/policy_control_bases/{id}
Fetches the details of a specific policy control base identified by its unique ID.
CredoAIWeb.API.V2.PolicyControl.BaseController.show 1 param → 200401404

Schemas 15

The contract defines 15 schemas that model the data the API accepts and returns. The most detailed are PolicyControlBaseResource (4 properties), PolicyControlVersionResource (4 properties), PolicyControlResource (4 properties), PolicyControlResponse (2 properties). Each schema is shown below with its type and property counts.

PolicyControlVersionUpdateRequest
object
1 property
PolicyControlBasesResponse
object
A collection of [PolicyControlBaseResource](policycontrolbaseresource)
1 property 1 required
PolicyControlBaseResponse
object
A JSON-API document with a single [PolicyControlBaseResource](policycontrolbaseresource) resource
2 properties 1 required
PolicyControlResource
object
4 properties
PolicyControlVersionResponse
object
A JSON-API document with a single [PolicyControlVersionResource](policycontrolversionresource) resource
2 properties 1 required
PolicyControlVersionCreateRequest
object
1 property
NotFoundError
object
1 property
PolicyControlBaseCreateRequest
object
1 property
PolicyControlVersionsResponse
object
A collection of [PolicyControlVersionResource](policycontrolversionresource)
1 property 1 required
PolicyControlResponse
object
A JSON-API document with a single [PolicyControlResource](policycontrolresource) resource
2 properties 1 required
PolicyControlBaseResource
object
4 properties
ForbiddenError
object
1 property
PolicyControlVersionResource
object
4 properties
AuthError
object
1 property
PolicyControlsCollectionResponse
object
A collection of [PolicyControlResource](policycontrolresource)
1 property 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

credo-ai-policy-controls-api-openapi.yml Raw ↑

Other APIs Credo AI publishes across the network.

Credo AI Governance Intelligence Pro MCP Server
Credo AI Alerts API
Credo AI Audit Logs API
Credo AI Comment Threads API
Credo AI Entities API
Credo AI Entity Control Assignments API
Credo AI Entity Controls API
Credo AI Entity Evidences API
Credo AI Entity Policy Packs API
Credo AI Entity Risk Scenario Controls API
Credo AI Entity Risk Scenarios API
Credo AI Entity Section Assignments API
Where this information came from

This is an independent, third-party profile of Credo AI Policy Controls API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.