---
title: "Replace the organization's Code policy"
method: PUT
path: "/code/policy"
---

# Replace the organization's Code policy

`PUT /code/policy`

## Request

- Base URL: `https://api.caveman.so/api/v1`
- URL: `https://api.caveman.so/api/v1/code/policy`
- Auth: one of:
  - OAuth 2
    - Authorization code: `/api/v1/oauth/authorize`
    - Token URL: `/api/v1/oauth/token` scopes: `org:update`
  - HTTP bearer
  - API key in cookie `cave_access`
  - API key in cookie `__Secure-cave_identity.session_token`

PUT /api/v1/code/policy on the Caveman Cloud control plane. Requires the org:update scope. Not exposed to autonomous agents: Service accounts, their code:run keys and the organization's Code policy are a person's decisions (org:update). No agent connection mints credentials, disables an account or changes the policy.

## Request body

- CodePolicy
  - `allowed_engines` string[]
  - `allowed_models` string[]
  - `max_budget_usd` number, nullable
  - `paused` boolean: The kill switch: no session starts while it is on.
  - `paused_at` string, date-time, nullable
  - `paused_reason` string
  - `egress_default` 'install' | 'environment_only'
  - `event_retention_days` integer
  - `updated_at` string, date-time, nullable

## Response `200`

The policy

- CodePolicy
  - `allowed_engines` string[]
  - `allowed_models` string[]
  - `max_budget_usd` number, nullable
  - `paused` boolean: The kill switch: no session starts while it is on.
  - `paused_at` string, date-time, nullable
  - `paused_reason` string
  - `egress_default` 'install' | 'environment_only'
  - `event_retention_days` integer
  - `updated_at` string, date-time, nullable

## Other responses

- `2XX`: Successful response. Exact status depends on synchronous or durable delivery outcome.
- `4XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.
- `5XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.

---

[API](https://skmtc.dev/caveman/apis/caveman-cloud-api.md) - [All operations](https://skmtc.dev/caveman/apis/caveman-cloud-api/llms.txt) - [OpenAPI document](https://skmtc.dev/caveman/apis/caveman-cloud-api/revisions/508312d01cfc?raw)