Yes, you can.
You have to sent this as a POST request and the body can look like this:
Of course you have to be authenticated and also send the authtoken in the header of the request.
In the response you then see the property appliedPolicies containing all the policies applied to the agent.
Excellent. thank you so much Patrick