OpenMetadata AI Governance Policies API
`AI Governance Policies` define rules, compliance requirements, bias thresholds, and control measures for AI agents and models.
`AI Governance Policies` define rules, compliance requirements, bias thresholds, and control measures for AI agents and models.
openapi: 3.0.1
info:
title: OpenMetadata APIs Agent Executions AI Governance Policies API
description: Common types and API definition for OpenMetadata
contact:
name: OpenMetadata
url: https://open-metadata.org
email: openmetadata-dev@googlegroups.com
license:
name: Apache 2.0
url: https://www.apache.org/licenses/LICENSE-2.0
version: '1.13'
servers:
- url: /api
description: Current Host
- url: http://localhost:8585/api
description: Endpoint URL
security:
- BearerAuth: []
tags:
- name: AI Governance Policies
description: '`AI Governance Policies` define rules, compliance requirements, bias thresholds, and control measures for AI agents and models.'
paths:
/v1/aiGovernancePolicies/{id}/followers:
put:
tags:
- AI Governance Policies
summary: Add a follower
description: Add a user identified by `userId` as follower of this policy
operationId: addFollower_1
parameters:
- name: id
in: path
description: Id of the AI Governance Policy
required: true
schema:
type: string
format: uuid
requestBody:
description: Id of the user to be added as follower
content:
application/json:
schema:
type: string
format: uuid
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/ChangeEvent'
'404':
description: policy for instance {id} is not found
/v1/aiGovernancePolicies:
get:
tags:
- AI Governance Policies
summary: List AI governance policies
description: Get a list of AI governance policies. Use `fields` parameter to get only necessary fields. Use cursor-based pagination to limit the number entries in the list using `limit` and `before` or `after` query params.
operationId: listAIGovernancePolicies
parameters:
- name: fields
in: query
description: Fields requested in the returned resource
schema:
type: string
example: owners,followers,tags,extension,domains
- name: limit
in: query
description: Limit the number policies returned. (1 to 1000000, default = 10)
schema:
maximum: 1000000
minimum: 0
type: integer
format: int32
default: 10
- name: before
in: query
description: Returns list of policies before this cursor
schema:
type: string
- name: after
in: query
description: Returns list of policies after this cursor
schema:
type: string
- name: include
in: query
description: Include all, deleted, or non-deleted entities.
schema:
type: string
default: non-deleted
enum:
- all
- deleted
- non-deleted
responses:
'200':
description: List of policies
content:
application/json:
schema:
$ref: '#/components/schemas/AIGovernancePolicyList'
put:
tags:
- AI Governance Policies
summary: Create or update an AI governance policy
description: Create a new AI governance policy, if it does not exist or update an existing policy.
operationId: createOrUpdateAIGovernancePolicy
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/CreateAIGovernancePolicy'
responses:
'200':
description: The policy
content:
application/json:
schema:
$ref: '#/components/schemas/AIGovernancePolicy'
'400':
description: Bad request
post:
tags:
- AI Governance Policies
summary: Create an AI governance policy
description: Create a new AI governance policy.
operationId: createAIGovernancePolicy
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/CreateAIGovernancePolicy'
responses:
'200':
description: AI Governance Policy
content:
application/json:
schema:
$ref: '#/components/schemas/AIGovernancePolicy'
'400':
description: Bad request
/v1/aiGovernancePolicies/{id}:
get:
tags:
- AI Governance Policies
summary: Get an AI governance policy by Id
description: Get an AI governance policy by `Id`.
operationId: getAIGovernancePolicyByID
parameters:
- name: id
in: path
description: Id of the AI Governance Policy
required: true
schema:
type: string
format: uuid
- name: fields
in: query
description: Fields requested in the returned resource
schema:
type: string
example: owners,followers,tags,extension,domains
- name: include
in: query
description: Include all, deleted, or non-deleted entities.
schema:
type: string
default: non-deleted
enum:
- all
- deleted
- non-deleted
- name: includeRelations
in: query
description: 'Per-relation include control. Format: field:value,field2:value2. Example: owners:non-deleted,followers:all. Valid values: all, deleted, non-deleted. If not specified for a field, uses the entity''s include value.'
schema:
type: string
example: owners:non-deleted,followers:all
responses:
'200':
description: The policy
content:
application/json:
schema:
$ref: '#/components/schemas/AIGovernancePolicy'
'404':
description: Policy for instance {id} is not found
delete:
tags:
- AI Governance Policies
summary: Delete an AI governance policy by Id
description: Delete an AI governance policy by `Id`.
operationId: deleteAIGovernancePolicy
parameters:
- name: hardDelete
in: query
description: Hard delete the entity. (Default = `false`)
schema:
type: boolean
default: false
- name: id
in: path
description: Id of the AI Governance Policy
required: true
schema:
type: string
format: uuid
responses:
'200':
description: OK
'404':
description: policy for instance {id} is not found
patch:
tags:
- AI Governance Policies
summary: Update an AI governance policy
description: Update an existing AI governance policy using JsonPatch.
externalDocs:
description: JsonPatch RFC
url: https://tools.ietf.org/html/rfc6902
operationId: patchAIGovernancePolicy_1
parameters:
- name: id
in: path
description: Id of the AI Governance Policy
required: true
schema:
type: string
format: uuid
requestBody:
description: JsonPatch with array of operations
content:
application/json-patch+json:
schema:
$ref: '#/components/schemas/JsonPatch'
example: '[{op:remove, path:/a},{op:add, path: /b, value: val}]'
responses:
default:
description: default response
content:
application/json: {}
/v1/aiGovernancePolicies/name/{fqn}:
get:
tags:
- AI Governance Policies
summary: Get an AI governance policy by fully qualified name
description: Get an AI governance policy by fully qualified name.
operationId: getAIGovernancePolicyByFQN
parameters:
- name: fqn
in: path
description: Fully qualified name of AI Governance Policy
required: true
schema:
type: string
- name: fields
in: query
description: Fields requested in the returned resource
schema:
type: string
example: owners,followers,tags,extension,domains
- name: include
in: query
description: Include all, deleted, or non-deleted entities.
schema:
type: string
default: non-deleted
enum:
- all
- deleted
- non-deleted
- name: includeRelations
in: query
description: 'Per-relation include control. Format: field:value,field2:value2. Example: owners:non-deleted,followers:all. Valid values: all, deleted, non-deleted. If not specified for a field, uses the entity''s include value.'
schema:
type: string
example: owners:non-deleted,followers:all
responses:
'200':
description: The policy
content:
application/json:
schema:
$ref: '#/components/schemas/AIGovernancePolicy'
'404':
description: Policy for instance {fqn} is not found
delete:
tags:
- AI Governance Policies
summary: Delete an AI governance policy by fully qualified name
description: Delete an AI governance policy by `fullyQualifiedName`.
operationId: deleteAIGovernancePolicyByFQN
parameters:
- name: hardDelete
in: query
description: Hard delete the entity. (Default = `false`)
schema:
type: boolean
default: false
- name: recursive
in: query
description: Recursively delete this entity and it's children. (Default `false`)
schema:
type: boolean
default: false
- name: fqn
in: path
description: Name of the AI Governance Policy
required: true
schema:
type: string
responses:
'200':
description: OK
'404':
description: policy for instance {fqn} is not found
patch:
tags:
- AI Governance Policies
summary: Update an AI governance policy by name.
description: Update an existing AI governance policy using JsonPatch.
externalDocs:
description: JsonPatch RFC
url: https://tools.ietf.org/html/rfc6902
operationId: patchAIGovernancePolicy
parameters:
- name: fqn
in: path
description: Name of the AI Governance Policy
required: true
schema:
type: string
requestBody:
description: JsonPatch with array of operations
content:
application/json-patch+json:
schema:
$ref: '#/components/schemas/JsonPatch'
example: '[{op:remove, path:/a},{op:add, path: /b, value: val}]'
responses:
default:
description: default response
content:
application/json: {}
/v1/aiGovernancePolicies/async/{id}:
delete:
tags:
- AI Governance Policies
summary: Asynchronously delete an AI governance policy by Id
description: Asynchronously delete an AI governance policy by `Id`.
operationId: deleteAIGovernancePolicyAsync
parameters:
- name: hardDelete
in: query
description: Hard delete the entity. (Default = `false`)
schema:
type: boolean
default: false
- name: recursive
in: query
description: Recursively delete this entity and it's children. (Default `false`)
schema:
type: boolean
default: false
- name: id
in: path
description: Id of the AI Governance Policy
required: true
schema:
type: string
format: uuid
responses:
'202':
description: Accepted
'404':
description: policy for instance {id} is not found
/v1/aiGovernancePolicies/{id}/followers/{userId}:
delete:
tags:
- AI Governance Policies
summary: Remove a follower
description: Remove the user identified `userId` as a follower of the policy.
operationId: deleteFollower_1
parameters:
- name: id
in: path
description: Id of the AI Governance Policy
required: true
schema:
type: string
format: uuid
- name: userId
in: path
description: Id of the user being removed as follower
required: true
schema:
type: string
format: uuid
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/ChangeEvent'
/v1/aiGovernancePolicies/{id}/versions/{version}:
get:
tags:
- AI Governance Policies
summary: Get a version of the AI governance policy
description: Get a version of the AI governance policy by given `id`
operationId: getSpecificAIGovernancePolicyVersion
parameters:
- name: id
in: path
description: Id of the AI Governance Policy
required: true
schema:
type: string
format: uuid
- name: version
in: path
description: AI Governance Policy version number in the form `major`.`minor`
required: true
schema:
type: string
example: 0.1 or 1.1
responses:
'200':
description: AIGovernancePolicy
content:
application/json:
schema:
$ref: '#/components/schemas/AIGovernancePolicy'
'404':
description: AI Governance Policy for instance {id} and version {version} is not found
/v1/aiGovernancePolicies/history:
get:
tags:
- AI Governance Policies
summary: List all entity versions within a time range
description: 'Get a paginated list of all entity versions within a given time range specified by `startTs` and `endTs` in milliseconds since epoch. '
operationId: listAllEntityVersionsByTimestamp_1
parameters:
- name: startTs
in: query
description: Start timestamp in milliseconds since epoch
required: true
schema:
type: integer
format: int64
- name: endTs
in: query
description: End timestamp in milliseconds since epoch
required: true
schema:
type: integer
format: int64
- name: limit
in: query
description: Limit the number of entity returned (1 to 1000000, default = 10)
schema:
maximum: 500
minimum: 1
type: integer
format: int32
default: 10
- name: before
in: query
description: Returns list of entity versions before this cursor
schema:
type: string
- name: after
in: query
description: Returns list of entity versions after this cursor
schema:
type: string
responses:
'200':
description: List of all versions
content:
application/json:
schema:
$ref: '#/components/schemas/ResultList'
/v1/aiGovernancePolicies/{id}/versions:
get:
tags:
- AI Governance Policies
summary: List AI governance policy versions
description: Get a list of all the versions of an AI Governance Policy identified by `id`
operationId: listAllAIGovernancePolicyVersion
parameters:
- name: id
in: path
description: Id of the AI Governance Policy
required: true
schema:
type: string
format: uuid
responses:
'200':
description: List of AI Governance Policy versions
content:
application/json:
schema:
$ref: '#/components/schemas/EntityHistory'
/v1/aiGovernancePolicies/restore:
put:
tags:
- AI Governance Policies
summary: Restore a soft deleted AI governance policy
description: Restore a soft deleted AI Governance Policy.
operationId: restore_1
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/RestoreEntity'
responses:
'200':
description: 'Successfully restored the AIGovernancePolicy '
content:
application/json:
schema:
$ref: '#/components/schemas/AIGovernancePolicy'
components:
schemas:
TagLabelRecognizerMetadata:
required:
- recognizerId
- recognizerName
- score
type: object
properties:
recognizerId:
type: string
format: uuid
recognizerName:
type: string
score:
type: number
format: double
target:
type: string
enum:
- content
- column_name
patterns:
type: array
items:
$ref: '#/components/schemas/PatternMatch'
DimensionThresholds:
type: object
properties:
gender:
type: number
format: double
race:
type: number
format: double
age:
type: number
format: double
religion:
type: number
format: double
disability:
type: number
format: double
nationality:
type: number
format: double
socioeconomic:
type: number
format: double
AIGovernancePolicy:
required:
- id
- name
- policyType
type: object
properties:
id:
type: string
format: uuid
name:
maxLength: 256
minLength: 1
pattern: ^((?!::).)*$
type: string
fullyQualifiedName:
maxLength: 3072
minLength: 1
type: string
displayName:
type: string
description:
type: string
policyType:
type: string
enum:
- ModelApproval
- DataAccess
- BiasThreshold
- ComplianceCheck
- CostControl
- PerformanceStandard
- SecurityControl
rules:
type: array
items:
$ref: '#/components/schemas/PolicyRule'
biasThresholds:
$ref: '#/components/schemas/BiasThreshold'
dataAccessControls:
$ref: '#/components/schemas/DataAccessControl'
costControls:
$ref: '#/components/schemas/CostControl'
complianceRequirements:
type: array
items:
$ref: '#/components/schemas/ComplianceRequirement'
performanceStandards:
$ref: '#/components/schemas/PerformanceStandard'
appliesTo:
type: array
items:
$ref: '#/components/schemas/EntityReference'
enforcementLevel:
type: string
enum:
- Advisory
- Warning
- Blocking
enabled:
type: boolean
effectiveDate:
type: integer
format: int64
expirationDate:
type: integer
format: int64
approvedBy:
type: string
violations:
type: array
items:
$ref: '#/components/schemas/PolicyViolation'
owners:
type: array
items:
$ref: '#/components/schemas/EntityReference'
followers:
type: array
items:
$ref: '#/components/schemas/EntityReference'
domain:
$ref: '#/components/schemas/EntityReference'
tags:
type: array
items:
$ref: '#/components/schemas/TagLabel'
version:
type: number
format: double
updatedAt:
type: integer
format: int64
updatedBy:
type: string
href:
type: string
format: uri
changeDescription:
$ref: '#/components/schemas/ChangeDescription'
incrementalChangeDescription:
$ref: '#/components/schemas/ChangeDescription'
deleted:
type: boolean
extension:
type: object
domains:
type: array
items:
$ref: '#/components/schemas/EntityReference'
votes:
$ref: '#/components/schemas/Votes'
lifeCycle:
$ref: '#/components/schemas/LifeCycle'
sourceHash:
maxLength: 32
minLength: 1
type: string
provider:
type: string
enum:
- system
- user
- automation
children:
type: array
items:
$ref: '#/components/schemas/EntityReference'
service:
$ref: '#/components/schemas/EntityReference'
style:
$ref: '#/components/schemas/Style'
experts:
type: array
items:
$ref: '#/components/schemas/EntityReference'
reviewers:
type: array
items:
$ref: '#/components/schemas/EntityReference'
dataProducts:
type: array
items:
$ref: '#/components/schemas/EntityReference'
impersonatedBy:
type: string
dataContract:
$ref: '#/components/schemas/EntityReference'
usageSummary:
$ref: '#/components/schemas/UsageDetails'
entityStatus:
type: string
enum:
- Draft
- In Review
- Approved
- Archived
- Deprecated
- Rejected
- Unprocessed
certification:
$ref: '#/components/schemas/AssetCertification'
ChangeSummaryMap:
type: object
AccessDetails:
required:
- timestamp
type: object
properties:
timestamp:
type: integer
format: int64
accessedBy:
$ref: '#/components/schemas/EntityReference'
accessedByAProcess:
type: string
FieldChange:
type: object
properties:
name:
type: string
oldValue:
type: object
newValue:
type: object
CoverImage:
type: object
properties:
url:
type: string
position:
type: string
RestoreEntity:
required:
- id
type: object
properties:
id:
type: string
format: uuid
PerformanceStandard:
type: object
properties:
minAccuracy:
type: number
format: double
maxLatencyMs:
type: number
format: double
minSuccessRate:
type: number
format: double
maxErrorRate:
type: number
format: double
evaluationDataset:
$ref: '#/components/schemas/EntityReference'
LifeCycle:
type: object
properties:
created:
$ref: '#/components/schemas/AccessDetails'
updated:
$ref: '#/components/schemas/AccessDetails'
accessed:
$ref: '#/components/schemas/AccessDetails'
EntityHistory:
required:
- entityType
- versions
type: object
properties:
entityType:
type: string
versions:
type: array
items:
type: object
AssetCertification:
required:
- appliedDate
- expiryDate
- tagLabel
type: object
properties:
tagLabel:
$ref: '#/components/schemas/TagLabel'
appliedDate:
type: integer
format: int64
expiryDate:
type: integer
format: int64
ResultList:
required:
- data
type: object
properties:
data:
type: array
items:
type: object
paging:
$ref: '#/components/schemas/Paging'
errors:
type: array
items:
$ref: '#/components/schemas/EntityError'
warningsCount:
type: integer
format: int32
warnings:
type: array
items:
$ref: '#/components/schemas/EntityError'
DataAccessControl:
type: object
properties:
allowedDataSources:
type: array
items:
$ref: '#/components/schemas/EntityReference'
prohibitedDataSources:
type: array
items:
$ref: '#/components/schemas/EntityReference'
maxSensitivityLevel:
type: string
enum:
- Public
- Internal
- Confidential
- Restricted
piiAccessAllowed:
type: boolean
requireApprovalForSensitiveData:
type: boolean
dataRetentionDays:
type: integer
format: int32
Paging:
required:
- total
type: object
properties:
before:
type: string
after:
type: string
offset:
type: integer
format: int32
limit:
type: integer
format: int32
total:
type: integer
format: int32
JsonPatch:
type: object
ChangeDescription:
type: object
properties:
fieldsAdded:
type: array
items:
$ref: '#/components/schemas/FieldChange'
fieldsUpdated:
type: array
items:
$ref: '#/components/schemas/FieldChange'
fieldsDeleted:
type: array
items:
$ref: '#/components/schemas/FieldChange'
previousVersion:
type: number
format: double
changeSummary:
$ref: '#/components/schemas/ChangeSummaryMap'
PolicyViolation:
type: object
properties:
violatedRule:
type: string
violatingEntity:
$ref: '#/components/schemas/EntityReference'
timestamp:
type: integer
format: int64
details:
type: string
resolved:
type: boolean
resolvedBy:
type: string
resolvedAt:
type: integer
format: int64
CostControl:
type: object
properties:
dailyBudget:
type: number
format: double
monthlyBudget:
type: number
format: double
perExecutionLimit:
type: number
format: double
warningThreshold:
type: number
format: double
currency:
type: string
ChangeEvent:
required:
- entityId
- entityType
- eventType
- id
- timestamp
type: object
properties:
id:
type: string
format: uuid
eventType:
type: string
enum:
- entityCreated
- entityUpdated
- entityFieldsChanged
- entityNoChange
- entitySoftDeleted
- entityDeleted
- entityRestored
- threadCreated
- threadUpdated
- postCreated
- postUpdated
- taskResolved
- taskClosed
- logicalTestCaseAdded
- suggestionCreated
- suggestionUpdated
- suggestionAccepted
- suggestionRejected
- suggestionDeleted
- userLogin
- userLogout
entityType:
type: string
entityId:
type: string
format: uuid
domains:
type: array
items:
type: string
format: uuid
entityFullyQualifiedName:
type: string
previousVersion:
type: number
format: double
currentVersion:
type: number
format: double
userName:
type: string
impersonatedBy:
type: string
timestamp:
type: integer
format: int64
changeDescription:
$ref: '#/components/schemas/ChangeDescription'
incrementalChangeDescription:
$ref: '#/components/schemas/ChangeDescription'
entity:
type: object
PolicyRule:
required:
- action
- name
- ruleType
type: object
properties:
name:
type: string
description:
type: string
ruleType:
type: string
enum:
- Threshold
- Approval
- Prohibition
- Requirement
- Notification
condition:
type: string
action:
type: string
enum:
- Block
- Warn
- Notify
- Require_Approval
- Log
severity:
type: string
enum:
- Low
- Medium
- High
- Critical
enabled:
type: boolean
UsageStats:
required:
- count
type: object
properties:
count:
minimum: 0
exclusiveMinimum: false
type: integer
format: int32
percentileRank:
type: number
format: double
ComplianceRequirement:
type: object
properties:
standard:
type: string
enum:
- GDPR
- HIPAA
- SOC2
- ISO27001
- NIST_AI_RMF
- EU_AI_Act
- OWASP_LLM_Top10
- Custom
requirements:
type: array
items:
type: string
attestationRequired:
type: boolean
auditFrequency:
type: string
enum:
- Continuous
- Weekly
- Monthly
- Quarterly
- Annually
Style:
type: object
properties:
color:
type: string
iconURL:
type: string
coverImage:
$ref: '#/components/schemas/CoverImage'
Votes:
type: object
properties:
upVotes:
type: integer
format: int32
downVotes:
type: integer
format: int32
upVoters:
type: array
items:
$ref: '#/components/schemas/EntityReference'
downVoters:
type: array
items:
$ref: '#/components/schemas/EntityReference'
TagLabel:
required:
- labelType
- source
- state
- tagFQN
type: object
properties:
tagFQN:
type: string
name:
type: string
displayName:
type: string
description:
type: string
style:
$ref: '#/components/schemas/Style'
source:
type: string
enum:
- Classification
- Glossary
labelType:
type: string
enum:
- Manual
- Propagated
- Automated
- Derived
- Generated
state:
type: string
enum:
- Suggested
- Confirmed
href:
type: string
format: uri
reason:
type: string
appliedAt:
type: string
format: date-time
appliedBy:
type: string
metadata:
$ref: '#/components/schemas/TagLabelMetadata'
PatternMatch:
required:
- name
- score
type: object
properties:
name:
type: string
regex:
type: string
score:
type: number
format: double
TagLabelMetadata:
type: object
properties:
recognizer:
$ref: '#/components/schemas/TagLabelRecognizerMetadata'
expiryDate:
type: integer
format: int64
EntityError:
type: object
properties:
message:
type: string
entity:
type: object
CreateAIGovernancePolicy:
required:
- name
- policyType
type: object
properties:
name:
maxLength: 256
minLength: 1
pattern: ^((?!::).)*$
type: string
displayName:
type: string
description:
type: string
# --- truncated at 32 KB (35 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/openmetadata/refs/heads/main/openapi/openmetadata-ai-governance-policies-api-openapi.yml