Create a policy rule

Creates a new policy rule. Rules control how agents interact with external services:

• block — reject matching requests outright.
• rate_limit — allow up to N requests per time window. Requires rateLimit and rateLimitWindow.
• manual_approval — hold matching requests for human approval before forwarding.

POST /rules

Create a policy rule

cURL

curl --request POST \
  --url https://api.onecli.sh/v1/rules \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "Block destructive GitHub API calls",
  "hostPattern": "api.github.com",
  "enabled": true,
  "pathPattern": "/repos/*/delete",
  "agentId": "<string>",
  "rateLimit": 500000,
  "conditions": [
    {
      "target": "<string>",
      "operator": "<string>",
      "value": "<string>",
      "key": "<string>"
    }
  ]
}
'

201

{
  "id": "<string>",
  "name": "<string>",
  "hostPattern": "<string>",
  "pathPattern": "<string>",
  "enabled": true,
  "agentId": "<string>",
  "rateLimit": 123,
  "scope": "<string>",
  "metadata": {},
  "conditions": [
    {
      "target": "<string>",
      "operator": "<string>",
      "value": "<string>",
      "key": "<string>"
    }
  ],
  "createdAt": "2023-11-07T05:31:56Z"
}

Authorizations

Authorization · string · header · required

API key obtained from the dashboard or GET /user/api-key

Body

application/json

name · string · required

Required string length: 1 - 255

Example:

"Block destructive GitHub API calls"

hostPattern · string · required

Required string length: 1 - 1000

Example:

"api.github.com"

action · enum<string> · required

Available options: block, rate_limit, manual_approval

enabled · boolean · required

pathPattern · string

Maximum string length: 1000

Example:

"/repos/*/delete"

method · enum<string>

Available options: GET, POST, PUT, PATCH, DELETE

agentId · string

Scope rule to a specific agent (omit for all agents)

rateLimit · integer

Required when action is rate_limit

Required range: 1 <= x <= 1000000

rateLimitWindow · enum<string>

Required when action is rate_limit

Available options: minute, hour, day

conditions · object[]

Maximum array length: 10

Show child attributes

Response

201

application/json

Rule created

id · string

name · string

hostPattern · string

pathPattern · string | null

method · enum<string> | null

Available options: GET, POST, PUT, PATCH, DELETE, null

action · enum<string>

Available options: block, rate_limit, manual_approval

enabled · boolean

agentId · string | null

rateLimit · integer | null

rateLimitWindow · enum<string> | null

Available options: minute, hour, day, null

scope · string

metadata · object

conditions · object[]

Show child attributes

createdAt · string<date-time>