> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ankra.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get one imported cluster's NetworkPolicy over-privilege score



## OpenAPI

````yaml https://platform.ankra.app/openapi.json get /org/clusters/imported/{cluster_id}/security/network-policy-overprivilege
openapi: 3.1.0
info:
  title: FastAPI
  version: 0.1.0
servers:
  - url: https://platform.ankra.app
security: []
paths:
  /org/clusters/imported/{cluster_id}/security/network-policy-overprivilege:
    get:
      tags:
        - Security
      summary: Get one imported cluster's NetworkPolicy over-privilege score
      operationId: get_imported_cluster_security_network_policy_overprivilege
      parameters:
        - in: path
          name: cluster_id
          required: true
          schema:
            format: uuid
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ClusterOverPrivilegeReport'
          description: >-
            The cluster's two-axis NetworkPolicy over-privilege score computed
            from live policy and workload objects; a direction with
            total_workloads 0 is a no-data state (score 100 by construction)
            that callers must not present as tightness.
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityPermissionDenied'
          description: Missing the security.read permission
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityDetailError'
          description: Organization-scoped resource not found
        '422':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
          description: Request validation error
        '500':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityDetailError'
          description: Internal server error
        '503':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityAgentDegradedError'
          description: >-
            Cluster offline, no agent, or agent timeout (frozen degraded
            envelope with a Retry-After header)
components:
  schemas:
    ClusterOverPrivilegeReport:
      properties:
        cluster_id:
          format: uuid
          type: string
        cluster_name:
          type: string
        egress:
          $ref: '#/components/schemas/ClusterOverPrivilegeDirectionScore'
        findings:
          items:
            $ref: '#/components/schemas/ClusterOverPrivilegeFinding'
          type: array
        findings_truncated:
          type: integer
        ingress:
          $ref: '#/components/schemas/ClusterOverPrivilegeDirectionScore'
        policy_mode:
          anyOf:
            - type: string
            - type: 'null'
      required:
        - cluster_id
        - cluster_name
        - policy_mode
        - ingress
        - egress
        - findings
        - findings_truncated
      title: ClusterOverPrivilegeReport
      type: object
    SecurityPermissionDenied:
      properties:
        detail:
          enum:
            - permission_denied
          type: string
        permission:
          type: string
        scope_type:
          type: string
      required:
        - detail
        - permission
        - scope_type
      type: object
    SecurityDetailError:
      properties:
        detail:
          type: string
      required:
        - detail
      type: object
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          title: Detail
          type: array
      title: HTTPValidationError
      type: object
    SecurityAgentDegradedError:
      properties:
        detail:
          type: string
        error_code:
          enum:
            - CLUSTER_OFFLINE
            - NO_AGENT
            - AGENT_TIMEOUT
          type: string
        retry_after:
          type: integer
      required:
        - error_code
        - detail
        - retry_after
      type: object
    ClusterOverPrivilegeDirectionScore:
      properties:
        broad_rules:
          type: integer
        over_privilege_rate:
          type: number
        score:
          type: integer
        total_admitting_rules:
          type: integer
        total_workloads:
          type: integer
        unprotected_workloads:
          type: integer
      required:
        - score
        - over_privilege_rate
        - unprotected_workloads
        - total_workloads
        - total_admitting_rules
        - broad_rules
      title: ClusterOverPrivilegeDirectionScore
      type: object
    ClusterOverPrivilegeFinding:
      properties:
        affected_count:
          type: integer
        direction:
          enum:
            - ingress
            - egress
          type: string
        id:
          type: string
        namespace:
          type: string
        policy_name:
          type: string
        reason:
          type: string
        remediation:
          type: string
        severity:
          type: string
        title:
          type: string
        workload:
          type: string
      required:
        - id
        - direction
        - title
        - severity
        - remediation
        - namespace
        - workload
        - policy_name
        - reason
        - affected_count
      title: ClusterOverPrivilegeFinding
      type: object
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          title: Location
          type: array
        msg:
          title: Message
          type: string
        type:
          title: Error Type
          type: string
      required:
        - loc
        - msg
        - type
      title: ValidationError
      type: object

````