Bitwarden

Bitwarden Policies API

The Policies API from Bitwarden — 3 operation(s) for policies.

GitHub OpenAPI

Operations 3

GET /public/policies/{type} Retrieve a policy.
GET /public/policies List all policies.
PUT /public/policies/{id} Update a policy.

Documentation

📖
Documentation
https://bitwarden.com/help/api/
📖
Documentation
https://bitwarden.com/help/api/#tag/Groups
📖
Documentation
https://bitwarden.com/help/api/#tag/Collections
📖
Documentation
https://bitwarden.com/help/api/#tag/Policies
📖
Documentation
https://bitwarden.com/help/event-logs/

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/bitwarden/refs/heads/main/openapi/bitwarden-policies-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/bitwarden-policies-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

bitwarden-policies-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Bitwarden Public Collections Policies API
  description: The Bitwarden public APIs.
  contact:
    name: Bitwarden Support
    url: https://bitwarden.com
    email: support@bitwarden.com
  license:
    name: GNU Affero General Public License v3.0
    url: https://github.com/bitwarden/server/blob/master/LICENSE.txt
  version: latest
servers:
- url: https://api.bitwarden.com
security:
- OAuth2 Client Credentials:
  - api.organization
tags:
- name: Policies
paths:
  /public/policies/{type}:
    get:
      tags:
      - Policies
      summary: Retrieve a policy.
      description: Retrieves the details of a policy.
      parameters:
      - name: type
        in: path
        description: The type of policy to be retrieved.
        required: true
        schema:
          $ref: '#/components/schemas/PolicyType'
      responses:
        '200':
          description: Success
          content:
            text/plain:
              schema:
                $ref: '#/components/schemas/GroupResponseModel'
            application/json:
              schema:
                $ref: '#/components/schemas/GroupResponseModel'
            text/json:
              schema:
                $ref: '#/components/schemas/GroupResponseModel'
        '404':
          description: Not Found
  /public/policies:
    get:
      tags:
      - Policies
      summary: List all policies.
      description: Returns a list of your organization's policies.
      responses:
        '200':
          description: Success
          content:
            text/plain:
              schema:
                $ref: '#/components/schemas/PolicyResponseModelListResponseModel'
            application/json:
              schema:
                $ref: '#/components/schemas/PolicyResponseModelListResponseModel'
            text/json:
              schema:
                $ref: '#/components/schemas/PolicyResponseModelListResponseModel'
  /public/policies/{id}:
    put:
      tags:
      - Policies
      summary: Update a policy.
      description: 'Updates the specified policy. If a property is not provided,

        the value of the existing property will be reset.'
      parameters:
      - name: type
        in: query
        description: The type of policy to be updated.
        schema:
          $ref: '#/components/schemas/PolicyType'
      - name: id
        in: path
        required: true
        schema:
          type: string
      requestBody:
        description: The request model.
        content:
          application/json-patch+json:
            schema:
              $ref: '#/components/schemas/PolicyUpdateRequestModel'
          application/json:
            schema:
              $ref: '#/components/schemas/PolicyUpdateRequestModel'
          text/json:
            schema:
              $ref: '#/components/schemas/PolicyUpdateRequestModel'
          application/*+json:
            schema:
              $ref: '#/components/schemas/PolicyUpdateRequestModel'
      responses:
        '200':
          description: Success
          content:
            text/plain:
              schema:
                $ref: '#/components/schemas/PolicyResponseModel'
            application/json:
              schema:
                $ref: '#/components/schemas/PolicyResponseModel'
            text/json:
              schema:
                $ref: '#/components/schemas/PolicyResponseModel'
        '400':
          description: Bad Request
          content:
            text/plain:
              schema:
                $ref: '#/components/schemas/ErrorResponseModel'
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponseModel'
            text/json:
              schema:
                $ref: '#/components/schemas/ErrorResponseModel'
        '404':
          description: Not Found
components:
  schemas:
    GroupResponseModel:
      required:
      - accessAll
      - id
      - name
      - object
      type: object
      properties:
        object:
          type: string
          description: String representing the object's type. Objects of the same type share the same properties.
          readOnly: true
          example: group
        id:
          type: string
          description: The group's unique identifier.
          format: uuid
          example: 539a36c5-e0d2-4cf9-979e-51ecf5cf6593
        collections:
          type:
          - array
          - 'null'
          items:
            $ref: '#/components/schemas/AssociationWithPermissionsResponseModel'
          description: The associated collections that this group can access.
        name:
          maxLength: 100
          minLength: 0
          type: string
          description: The name of the group.
          example: Development Team
        accessAll:
          type: boolean
          description: 'Determines if this group can access all collections within the organization, or only the associated

            collections. If set to {true}, this option overrides any collection assignments.'
        externalId:
          maxLength: 300
          minLength: 0
          type:
          - string
          - 'null'
          description: External identifier for reference or linking this group to another system, such as a user directory.
          example: external_id_123456
      additionalProperties: false
      description: A user group.
    PolicyResponseModel:
      required:
      - enabled
      - id
      - object
      - type
      type: object
      properties:
        object:
          type: string
          description: String representing the object's type. Objects of the same type share the same properties.
          readOnly: true
          example: policy
        id:
          type: string
          description: The policy's unique identifier.
          format: uuid
          example: 539a36c5-e0d2-4cf9-979e-51ecf5cf6593
        type:
          allOf:
          - $ref: '#/components/schemas/PolicyType'
          description: The type of policy.
        enabled:
          type: boolean
          description: Determines if this policy is enabled and enforced.
        data:
          type:
          - object
          - 'null'
          additionalProperties:
            type: object
            additionalProperties: false
          description: Data for the policy.
      additionalProperties: false
      description: A policy.
    PolicyUpdateRequestModel:
      required:
      - enabled
      type: object
      properties:
        enabled:
          type: boolean
          description: Determines if this policy is enabled and enforced.
        data:
          type:
          - object
          - 'null'
          additionalProperties:
            type: object
            additionalProperties: false
          description: Data for the policy.
      additionalProperties: false
    AssociationWithPermissionsResponseModel:
      required:
      - id
      - readOnly
      type: object
      properties:
        id:
          type: string
          description: The associated object's unique identifier.
          format: uuid
          example: bfbc8338-e329-4dc0-b0c9-317c2ebf1a09
        readOnly:
          type: boolean
          description: When true, the read only permission will not allow the user or group to make changes to items.
      additionalProperties: false
    PolicyResponseModelListResponseModel:
      required:
      - data
      - object
      type: object
      properties:
        object:
          type: string
          description: String representing the object's type. Objects of the same type share the same properties.
          readOnly: true
          example: list
        data:
          type: array
          items:
            $ref: '#/components/schemas/PolicyResponseModel'
          description: An array containing the actual response elements, paginated by any request parameters.
        continuationToken:
          type:
          - string
          - 'null'
          description: A cursor for use in pagination.
      additionalProperties: false
    ErrorResponseModel:
      required:
      - message
      - object
      type: object
      properties:
        object:
          type: string
          description: String representing the object's type. Objects of the same type share the same properties.
          readOnly: true
          example: error
        message:
          type: string
          description: A human-readable message providing details about the error.
          example: The request model is invalid.
        errors:
          type:
          - object
          - 'null'
          additionalProperties:
            type: array
            items:
              type: string
          description: 'If multiple errors occurred, they are listed in dictionary. Errors related to a specific

            request parameter will include a dictionary key describing that parameter.'
      additionalProperties: false
    PolicyType:
      enum:
      - 0
      - 1
      - 2
      type: integer
      format: int32
  securitySchemes:
    OAuth2_Client_Credentials:
      type: oauth2
      flows:
        clientCredentials:
          tokenUrl: https://identity.bitwarden.com/connect/token
          scopes:
            api.organization: Organization APIs