Create a policy

curl --request POST \
  --url https://api.kordio.io/control/v1/workspaces/{workspace_slug}/policies \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "agent_id": "7d2a6c15-3f89-4b02-9e64-8a15d7c0b3f2",
  "per_transaction_cap_cents": 50000,
  "approval_threshold_cents": 20000,
  "velocity_cap_cents": 200000,
  "velocity_window_seconds": 3600
}
'

{
  "data": {
    "mode": "blocklist",
    "per_transaction_cap_cents": 123,
    "velocity_window_seconds": 123,
    "velocity_cap_cents": 123,
    "approval_threshold_cents": 123,
    "monthly_cap_cents": 123,
    "counterparty_allowlist": [
      "<string>"
    ],
    "imports": [
      "<string>"
    ],
    "rules": [
      {
        "kind": "action_allowlist",
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "rule_name": "<string>",
        "action_types": [
          "<string>"
        ],
        "allow": [
          "<string>"
        ],
        "max_cents": 123,
        "window_seconds": 2,
        "max_actions": 2,
        "above_cents": 123,
        "effect": "deny",
        "when": {
          "all_of": "<array>",
          "any_of": "<array>",
          "not": "<unknown>",
          "field": "metadata.preapproved",
          "operator": "eq",
          "value": "<unknown>"
        }
      }
    ],
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "agent_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "status": "active",
    "created_at": "2023-11-07T05:31:56Z",
    "updated_at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "message": "Insufficient role",
    "code": "insufficient_role"
  }
}

{
  "error": {
    "message": "<string>",
    "code": "runtime_key_required"
  }
}

{
  "error": {
    "message": "<string>",
    "code": "runtime_key_required"
  }
}

POST

control

workspaces

{workspace_slug}

policies

curl --request POST \
  --url https://api.kordio.io/control/v1/workspaces/{workspace_slug}/policies \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "agent_id": "7d2a6c15-3f89-4b02-9e64-8a15d7c0b3f2",
  "per_transaction_cap_cents": 50000,
  "approval_threshold_cents": 20000,
  "velocity_cap_cents": 200000,
  "velocity_window_seconds": 3600
}
'

{
  "data": {
    "mode": "blocklist",
    "per_transaction_cap_cents": 123,
    "velocity_window_seconds": 123,
    "velocity_cap_cents": 123,
    "approval_threshold_cents": 123,
    "monthly_cap_cents": 123,
    "counterparty_allowlist": [
      "<string>"
    ],
    "imports": [
      "<string>"
    ],
    "rules": [
      {
        "kind": "action_allowlist",
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "rule_name": "<string>",
        "action_types": [
          "<string>"
        ],
        "allow": [
          "<string>"
        ],
        "max_cents": 123,
        "window_seconds": 2,
        "max_actions": 2,
        "above_cents": 123,
        "effect": "deny",
        "when": {
          "all_of": "<array>",
          "any_of": "<array>",
          "not": "<unknown>",
          "field": "metadata.preapproved",
          "operator": "eq",
          "value": "<unknown>"
        }
      }
    ],
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "agent_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "status": "active",
    "created_at": "2023-11-07T05:31:56Z",
    "updated_at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "message": "Insufficient role",
    "code": "insufficient_role"
  }
}

{
  "error": {
    "message": "<string>",
    "code": "runtime_key_required"
  }
}

{
  "error": {
    "message": "<string>",
    "code": "runtime_key_required"
  }
}

Authorizations

Authorization

string

header

required

An identity bearer token for a person or your backend. Capabilities are per member, per workspace. This credential can manage the workspace and can never authorize an action as an agent.

Path Parameters

workspace_slug

string

required

Body

application/json

The policy shape, without an agent binding. Used for previews.

agent_id

string<uuid>

Required on create.

status

enum<string>

default:active

Available options:

active,

disabled

mode

enum<string>

default:blocklist

blocklist permits unless a rule denies. allowlist inverts it: denied unless an allow rule matches, reported as not_allowlisted. Each allowlist policy is an independent gate, so attaching two means both must be satisfied. A deny still overrides an allow.

Available options:

blocklist,

allowlist

per_transaction_cap_cents

integer | null

velocity_window_seconds

integer | null

velocity_cap_cents

integer | null

approval_threshold_cents

integer | null

monthly_cap_cents

integer | null

counterparty_allowlist

string[]

imports

string[]

Policy module names. Their rules compile in ahead of rules.

rules

object[]

Show child attributes

Response

The policy, with a stable id assigned to every rule.

data

object

The policy shape, without an agent binding. Used for previews.

Show child attributes

Get started

Core concepts

Guides

Guarantees

Reference

Endpoints

Create a policy

Authorizations

Path Parameters

Body

Response