Create Approval Policy V1
Create an approval policy. The policy fires when a worker tool-call’s name matches any of tool_patterns…
POST
Create an approval policy.
The policy fires when a worker tool-call’s name matches any of
tool_patterns. Without auto_approve_rules, every match
pauses the job and creates an ApprovalRequest for human
review. With auto-approve rules, matches are silently approved
based on the rule (rate-limit windows, allow-listed input
subsets, etc. — see operator docs).
Admin scope only — these gates are security-sensitive.
Request body
ApprovalPolicyRequest
string
required
Human-readable policy name (≤128 chars). Used in audit logs.
string[]
Tool-name patterns that trigger this policy. Glob-style:
computer:* matches every computer-tool action, bash:rm * matches bash with rm-prefixed input. Each pattern ≤256 chars.object
Optional rules that auto-approve a matching tool call without human review. Free-form dict — see operator docs for the supported keys (
max_per_hour, allow_safe_subset, etc.).Response
ApprovalPolicySummary
string
required
string
required
string[]
required
object
required
boolean
required
string
required
string
required