Policies

Create an access policy

post/v1/vaults/{vault_id}/policies

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/vaults/{vault_id}/policies
  • Auth: HTTP bearer

Path parameters

vault_idstring uuid required

Request body

secret_path_patternstring required
principal_type'user' | 'agent' required
principal_idstring required
permissionsstring[] required
conditionsobject
expires_atstring date-time
effect'allow' | 'deny'
priorityinteger
attribute_conditionsobject
approval_idstring uuid

Optional completed approval ID for control-plane consensus bypass. When control-plane consensus policies match, resubmit with this field after the approval has been executed.

policy_schema_versioninteger

Policy schema version. Version 1 = legacy field-matching only. Version 2 = expression engine support in tx_conditions.

Response

Policy created

idstring uuid required
vault_idstring uuid required
secret_path_patternstring required
principal_typestring required
principal_idstring required
permissionsstring[] required
conditionsobject
expires_atstring date-time
created_bystring
created_by_typestring
created_atstring date-time required
effect'allow' | 'deny'
priorityinteger
attribute_conditionsobject
policy_schema_versioninteger

Policy schema version (1 = legacy, 2 = expression engine)

Changes

No recorded changes to this operation across all 2 revisions of this API.