Dynamic Policies

Update a dynamic policy

Update an existing dynamic policy. Only provided fields are updated. If category is changed, the new value must still start with dynamic- or media-.

put/api/v1/dynamic-policies/{id}

Request

Headers

X-User-IDstring
Example:user@company.com

User identifier for audit logging

Request body

namestring
descriptionstring
type'content' | 'user' | 'risk' | 'cost' | 'context_aware' | 'media' | 'rate-limit' | 'budget' | 'time-access' | 'role-access' | 'mcp' | 'connector'

Policy type determines evaluation context:

  • content: Evaluates request/response content
  • user: Evaluates user attributes
  • risk: Evaluates risk scores
  • cost: Evaluates cost estimates
  • context_aware: Context-aware controls (tenant isolation, debug restriction, sensitive-data control)
  • media: Media governance policies (multimodal image governance)
  • rate-limit, budget, time-access: MCP rate/budget controls
  • role-access, mcp, connector: MCP access controls
categorystring

Policy category. Only changeable on non-system policies.

priorityinteger
enabledboolean
tagsstring[]

Tags for categorization

Example request

{
  "actions": [
    {
      "config": {
        "message": "Request blocked by policy",
        "channel": "security-alerts"
      }
    }
  ]
}

Response

Dynamic policy updated

Example response

{
  "policy": {
    "id": "pol_abc123def456",
    "name": "Block PII Access",
    "description": "Prevent unauthorized access to personally identifiable information",
    "category": "dynamic-risk",
    "actions": [
      {
        "config": {
          "message": "Request blocked by policy",
          "channel": "security-alerts"
        }
      }
    ]
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.