Skip to main content
POST
Save policy

Authorizations

Authorization
string
header
required

Bearer token in the Authorization header. Two token types are accepted:

  • Organization API key (sk_...) issued via the dashboard. Org-scoped, long-lived, for server-to-server use.
  • User JWT obtained via the OAuth 2.1 authorization code flow with PKCE. User-scoped, short-lived. Discover the authorization server at /.well-known/oauth-authorization-server and the protected-resource metadata at /.well-known/oauth-protected-resource/api.

Body

application/json
policy_id
string
required

Lowercase alphanumeric with underscores

Example:

"my_brand_safety"

version
string
required
Example:

"1.0.0"

name
string
required
Example:

"Acme Corp Brand Safety"

category
enum<string>
required
Available options:
regulation,
standard
enforcement
enum<string>
required
Available options:
must,
should,
may
policy
string
required
Example:

"Ads must not appear adjacent to content depicting violence..."

description
string
jurisdictions
string[]
region_aliases
object
policy_categories
string[]
channels
string[]
effective_date
string
sunset_date
string
governance_domains
string[]
source_url
string

Must use http:// or https://

source_name
string
guidance
string
exemplars
object
ext
object

Response

Policy saved

success
enum<boolean>
required
Available options:
true
message
string
required
policy_id
string
required
revision_number
integer | null
required