Skip to main content
POST
Create an approval policy. The policy fires when a worker tool-call’s name matches any of tool_patterns. Without auto_approve_rules, every match pauses the job and creates an ApprovalRequest for human review. With auto-approve rules, matches are silently approved based on the rule (rate-limit windows, allow-listed input subsets, etc. — see operator docs). Admin scope only — these gates are security-sensitive.

Request body

ApprovalPolicyRequest
string
required
Human-readable policy name (≤128 chars). Used in audit logs.
string[]
Tool-name patterns that trigger this policy. Glob-style: computer:* matches every computer-tool action, bash:rm * matches bash with rm-prefixed input. Each pattern ≤256 chars.
object
Optional rules that auto-approve a matching tool call without human review. Free-form dict — see operator docs for the supported keys (max_per_hour, allow_safe_subset, etc.).

Response

ApprovalPolicySummary
string
required
string
required
string[]
required
object
required
boolean
required
string
required
string
required

Status codes