Create an organization rule

Creates a new policy rule at the organization level. Organization rules apply across all projects and cannot be assigned to specific agents. Requires admin role. Cloud only.

POST /org/rules

Create an organization rule

cURL

curl --request POST \
  --url https://api.onecli.sh/v1/org/rules \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "<string>",
  "hostPattern": "<string>",
  "enabled": true,
  "pathPattern": "<string>",
  "rateLimit": 2,
  "conditions": [
    {
      "target": "<string>",
      "operator": "<string>",
      "value": "<string>",
      "key": "<string>"
    }
  ]
}
'

201

{
  "id": "<string>",
  "name": "<string>",
  "hostPattern": "<string>",
  "pathPattern": "<string>",
  "enabled": true,
  "agentId": "<string>",
  "rateLimit": 123,
  "scope": "<string>",
  "metadata": {},
  "conditions": [
    {
      "target": "<string>",
      "operator": "<string>",
      "value": "<string>",
      "key": "<string>"
    }
  ],
  "createdAt": "2023-11-07T05:31:56Z"
}

Authorizations

Authorization · string · header · required

API key obtained from the dashboard or GET /user/api-key

Body

application/json

name · string · required

Required string length: 1 - 255

hostPattern · string · required

action · enum<string> · required

Available options: block, rate_limit, manual_approval

enabled · boolean · required

pathPattern · string

method · enum<string>

Available options: GET, POST, PUT, PATCH, DELETE

rateLimit · integer

Required range: x >= 1

rateLimitWindow · enum<string>

Available options: minute, hour, day

conditions · object[]

Show child attributes

Response

201

application/json

Rule created

id · string

name · string

hostPattern · string

pathPattern · string | null

method · enum<string> | null

Available options: GET, POST, PUT, PATCH, DELETE, null

action · enum<string>

Available options: block, rate_limit, manual_approval

enabled · boolean

agentId · string | null

rateLimit · integer | null

rateLimitWindow · enum<string> | null

Available options: minute, hour, day, null

scope · string

metadata · object

conditions · object[]

Show child attributes

createdAt · string<date-time>