---
title: "Create Federation App Policy"
method: POST
path: "/v1/cvm/federations/{federation_id}/app-policy"
tags: ["CVM Attestation"]
---

# Create Federation App Policy

`POST /v1/cvm/federations/{federation_id}/app-policy`

Create federation app policy records (allowed FAB hashes).

## Path parameters

- `federation_id` string, required

## Headers

- `authorization` string, nullable

## Request body

- FederationAppPolicyCreateRequest — Request schema for federation app policy create.
  - `policies` FederationAppPolicyItem[], required
    - `app_id` string, required — Application identifier carried by the attestation payload.
    - `app_version` string, required
    - `fab_hash` string, required
    - `hash_alg` string
    - `is_active` boolean

## Response `201`

Successful Response

- FederationAppPolicyCreateResponse — Response schema for creating federation app policy.
  - `federation_id` string, required
  - `saved_count` integer, required

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/flower/apis/superlink-api.md) · [All operations](https://skmtc.dev/flower/apis/superlink-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/flower/superlink-api/revisions/58e8351486b3/schema)