---
title: "Create or update the organisation's destination rule"
method: PUT
path: "/v1/organizations/{organizationId}/destination-rule"
tags: ["Destination Rules"]
---

# Create or update the organisation's destination rule

`PUT /v1/organizations/{organizationId}/destination-rule`

## Request

- Base URL: `https://api.prod.keyban.io`
- URL: `https://api.prod.keyban.io/v1/organizations/{organizationId}/destination-rule`
- Auth: one of:
  - API key in header `X-Api-Key`
  - `bearer` (a scheme the document does not define)

## Path parameters

- `organizationId` string, uuid, required

## Request body

- UpsertDestinationRuleDto
  - `mode` 'allow' | 'deny', required: Whether the lists below are allow-lists (only these are permitted) or deny-lists (these are forbidden).
  - `recipients` string[], nullable: EVM addresses (case-insensitive) gating relay/USDC transfers at this level. Null = relay not restricted here.
  - `domains` string[], nullable: Bare domain names gating x402 payments at this level, normalized to lowercase. A domain also matches its sub-domains. Null = x402 not restricted here.

## Response `200`

- DestinationRuleDtoOutput
  - `scope` 'organization' | 'application' | 'wallet', required
  - `scopeId` string, required
  - `mode` 'allow' | 'deny', required
  - `recipients` string[], nullable, required
  - `domains` string[], nullable, required

---

[API](https://skmtc.dev/keyban/apis/keyban-rest-apis.md) · [All operations](https://skmtc.dev/keyban/apis/keyban-rest-apis/llms.txt) · [OpenAPI document](https://skmtc.dev/keyban/apis/keyban-rest-apis/revisions/0bb79a1da961?raw)