Delete a policy

DELETE/api/public/v1/policies/{public_id}

Deletes it (the one exit of an AIP): it stops running in its Autonomy Zone and cannot be used again — the history is kept, because the decisions it already made are evidence, and the deleted AIP stays readable from GET /policies/{public_id}. To run its rules in another zone, copy it first with POST /policies/{public_id}/copy. A zone_id that holds no attachment of it answers 409 INHERITED_HERE. An agent (OAuth) caller must send the version of the policy it read as a query parameter: missing answers 428 POLICY_VERSION_REQUIRED, one that is no longer current 409 POLICY_VERSION_STALE; an already-retired policy is checked too.

cURL

curl --fail-with-body -X DELETE 'https://app.openlatch.ai/api/public/v1/policies/<policy_public_id>' \
  -H "Authorization: Bearer $OPENLATCH_API_KEY"

Python

import json
import os
import urllib.request

request = urllib.request.Request(
    'https://app.openlatch.ai/api/public/v1/policies/<policy_public_id>',
    method='DELETE',
    headers={
        'Authorization': 'Bearer ' + os.environ['OPENLATCH_API_KEY'],
    },
)
with urllib.request.urlopen(request) as response:
    text = response.read().decode()
    print(json.dumps(json.loads(text), indent=2) if text else response.status)

Bash

#!/usr/bin/env bash
set -euo pipefail

curl -sS --fail-with-body -X DELETE 'https://app.openlatch.ai/api/public/v1/policies/<policy_public_id>' \
  -H "Authorization: Bearer $OPENLATCH_API_KEY" | jq .

PowerShell

$headers = @{
  Authorization = "Bearer $env:OPENLATCH_API_KEY"
}
Invoke-RestMethod -Method DELETE -Uri 'https://app.openlatch.ai/api/public/v1/policies/<policy_public_id>' -Headers $headers | ConvertTo-Json -Depth 20

Authorization

Role in the organization	This endpoint
owner	Allowed
admin	Allowed
editor	Allowed
viewer	Not allowed

A key carries the role its owner holds in the organization. See Authentication.

API key scope: policies:write

Path parameters

Parameter	Type	Description
public_id	string	Required.

Query parameters

Parameter	Type	Description
zone_id	string (uuid) or null
version	integer or null	The version of the policy the caller read; required of an agent (OAuth) caller.

Header parameters

Parameter	Type	Description
Idempotency-Key	string or null	Optional. Makes the request safe to retry: the same key and the same request, within 24 hours, returns the stored response with Idempotent-Replayed: true and runs once.

Response

• 200 OK — the call succeeded.
• 401 Unauthorized — UNAUTHORIZED
• 402 Payment Required — license_expired
• 403 Forbidden — FEATURE_DISABLED, FORBIDDEN, INSUFFICIENT_SCOPE
• 404 Not Found — NOT_FOUND
• 409 Conflict — IDEMPOTENCY_IN_PROGRESS, INHERITED_HERE, POLICY_VERSION_STALE
• 422 Unprocessable Content — IDEMPOTENCY_KEY_REUSED, INVALID_ID, VALIDATION_ERROR
• 428 Precondition Required — POLICY_VERSION_REQUIRED
• 429 Too Many Requests — TOO_MANY_REQUESTS
• 500 Internal Server Error — INTERNAL_SERVER_ERROR, tenant_isolation_violation
• 503 Service Unavailable — FEATURE_STATE_UNAVAILABLE, SERVICE_UNAVAILABLE

Response fields

Field	Type	Description
public_id	string	Required.
retired_at	string or null
status	string	Required.

Example response

{
  "public_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
  "retired_at": "2026-01-15T14:32:05Z",
  "status": "string"
}

Related

• POST State sentences as a policy
• GET Read one ratified policy
• PATCH Change the mode of a policy in one Autonomy Zone