Platform

Set per-user spend policy override

Changed on

Replace the per-user spend policy for a connected user (deactivates the previous active row, then inserts). Requires plt_ platform auth. Optional Idempotency-Key header must cover the full request body — reusing the same key with different parameters returns 409.

put/v1/platform/connections/{connectionId}/spend-policy

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/platform/connections/{connectionId}/spend-policy
  • Auth: HTTP bearer

Path parameters

connectionIdstring uuid required

Headers

Idempotency-Keystring

Optional replay protection; same key + body returns cached response (409 on body mismatch).

Request body

user_idstring uuid

Scope to a specific user (app-level policies only)

to_allowliststring[]

Permitted destination addresses (empty = unrestricted)

to_denyliststring[]

Blocked destination addresses

max_value_per_tx_ethstring

Maximum value per transaction in ETH (decimal string)

daily_limit_ethstring

Rolling 24h spend cap in ETH (decimal string)

allowed_chainsstring[]

Chains the user may transact on (empty = all enabled)

allowed_tokensstring[]

Permitted ERC-20 token contract addresses

max_transactions_per_dayinteger

Maximum number of transactions per 24h window

inference_allowance_usdstring

Monthly LLM inference allowance in USD (decimal string)

inference_reserved_pctinteger

Percent of allowance held in reserve (not spendable)

inference_hard_stopboolean

When true, block inference when allowance is exhausted

inference_allowance_mode'policy' | 'credits'
max_request_cost_usdstring

Maximum estimated cost per LLM request in USD

human_factor_authobject

Human factor auth requirements for send/swap/export. Fields: send, swap, export (password_or_passkey | passkey_only | passkey_required | password_only | reauth_token_only), conditional.require_passkey_above_usd, conditional.require_passkey_for_new_recipient.

Response

Spend policy set (or idempotent replay)

idstring uuid required
org_idstring uuid required
platform_app_idstring uuid nullable
user_idstring uuid nullable
to_allowliststring[]
to_denyliststring[]
max_value_per_tx_ethstring nullable
daily_limit_ethstring nullable
allowed_chainsstring[]
allowed_tokensstring[]
max_transactions_per_dayinteger nullable
inference_allowance_usdstring nullable
inference_reserved_pctinteger nullable
inference_hard_stopboolean nullable
inference_allowance_modestring nullable
max_request_cost_usdstring nullable
human_factor_authobject nullable
is_activeboolean required
created_atstring date-time required
updated_atstring date-time required

Changes

  • 5fa0918f3b41Revision changes
    • breaking

      the response property became nullable for the status

    • breaking

      the response property became nullable for the status

    • breaking

      the response property became optional for the status

    • breaking

      the response property became optional for the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status