> ## Documentation Index > Fetch the complete documentation index at: https://docs.browserbase.com/llms.txt > Use this file to discover all available pages before exploring further. # List Navigation Policies > List the project's navigation policies, ordered by name. ## OpenAPI ````yaml get /v1/navigation-policies openapi: 3.0.0 info: title: Browserbase API description: Browserbase API for 3rd party developers version: v1 servers: - url: https://api.browserbase.com description: Public endpoint variables: {} security: - BrowserbaseAuth: [] tags: [] paths: /v1/navigation-policies: get: summary: List Navigation Policies description: List the project's navigation policies, ordered by name. operationId: NavigationPolicies_list responses: '200': description: The project's navigation policies. content: application/json: schema: description: The project's navigation policies. type: object properties: data: description: The project's navigation policies, ordered by name. type: array items: $ref: '#/components/schemas/NavigationPolicy' required: - data x-codeSamples: - lang: javascript label: Node.js source: |- import Browserbase from "@browserbasehq/sdk"; const bb = new Browserbase({ apiKey: process.env.BROWSERBASE_API_KEY, }); const { data: policies } = await bb.navigationPolicies.list(); for (const policy of policies) { console.log(policy.id, policy.name); } - lang: python label: Python source: |- import os from browserbase import Browserbase bb = Browserbase(api_key=os.environ["BROWSERBASE_API_KEY"]) policies = bb.navigation_policies.list().data for policy in policies: print(policy.id, policy.name) - lang: bash label: cURL source: |- curl --request GET \ --url https://api.browserbase.com/v1/navigation-policies \ --header "X-BB-API-Key: $BROWSERBASE_API_KEY" components: schemas: NavigationPolicy: description: >- Rules for which domains a browser session may navigate to. Bind a policy to a session with `browserSettings.riskPolicyId`; Browserbase then allows or blocks each navigation by the policy's overrides, its category rules, and finally its default decision. A session keeps the policy as it was when the session started: edits, disables, and deletes apply to sessions that start afterwards. A policy checks navigations: page loads, iframes, popups, and each redirect. It doesn't check requests a page makes itself, such as scripts, images, and `fetch` calls. In a session that loads a Context, pages skip their service workers so that the policy checks every navigation. type: object properties: id: description: Unique identifier for the navigation policy. type: string projectId: description: The project the policy belongs to. type: string name: description: Display name. A policy's id identifies it, not its name. type: string maxLength: 128 minLength: 1 description: description: Free-form notes about the policy. type: string maxLength: 1024 enabled: description: >- Whether the policy can be bound to new sessions. Running sessions keep the policy they started with. A disabled policy stays editable and can be re-enabled. type: boolean defaultDecision: description: >- Decision for each of a domain's categories that has no category rule. The strictest of a domain's category decisions applies, and overrides take precedence. type: string enum: - allow - block allowedCategories: description: >- Navigation categories. Browserbase blocks a domain in any blocked category, even if it is also in an allowed one. type: array items: type: string enum: - adult - ai-tools - alcohol-tobacco - business - child-abuse - communication - dating - drugs - education - entertainment - finance - gambling - games - government-military - hacking - hate - health - illegal-activity - infrastructure - kids - lifestyle - malware - newly-registered - news - parked-inactive - phishing-scams - piracy - proxy-anonymizer - search-portal - self-harm - shopping - social-media - society-culture - sports - technology - terrorism-extremism - travel - url-shortener - violence - weapons uniqueItems: true blockedCategories: description: >- Navigation categories. Browserbase blocks a domain in any blocked category, even if it is also in an allowed one. type: array items: type: string enum: - adult - ai-tools - alcohol-tobacco - business - child-abuse - communication - dating - drugs - education - entertainment - finance - gambling - games - government-military - hacking - hate - health - illegal-activity - infrastructure - kids - lifestyle - malware - newly-registered - news - parked-inactive - phishing-scams - piracy - proxy-anonymizer - search-portal - self-harm - shopping - social-media - society-culture - sports - technology - terrorism-extremism - travel - url-shortener - violence - weapons uniqueItems: true unknownDomainBehavior: description: >- Decision for a domain, or one of its categories, that Browserbase can't classify. It counts as one of the domain's category decisions, so the strictest still applies. type: string enum: - allow - block domainOverrides: description: >- Per-host decisions that take precedence over category rules and the default. Each host may appear once. type: array items: additionalProperties: false type: object properties: domain: description: >- Host the override applies to, for example `example.com`. Matching is case-insensitive and covers subdomains. type: string format: hostname maxLength: 253 minLength: 1 decision: description: Decision for navigations to this host. type: string enum: - allow - block required: - domain - decision maxItems: 500 createdAt: type: string format: date-time updatedAt: type: string format: date-time required: - id - projectId - name - description - enabled - defaultDecision - allowedCategories - blockedCategories - unknownDomainBehavior - domainOverrides - createdAt - updatedAt securitySchemes: BrowserbaseAuth: type: apiKey in: header name: X-BB-API-Key description: Your [Browserbase API Key](https://www.browserbase.com/settings). ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.