--- title: "Create an AI Gateway Policy" method: POST path: "/v1/ai-gateways/{gatewayId}/policies" tags: ["AI Gateway Policies"] --- # Create an AI Gateway Policy `POST /v1/ai-gateways/{gatewayId}/policies` ## Request - Base URL: `https://global.api.konghq.com` - URL: `https://global.api.konghq.com/v1/ai-gateways/{gatewayId}/policies` - Auth: one of: - HTTP bearer - HTTP bearer - HTTP bearer - HTTP bearer Registers a new policy for the AI Gateway. ## Request body - CreateAIGatewayPolicyRequest - `display_name` string, required: The display name for this policy instance. - `name` string, required: Identifier for an AI Gateway entity. In some cases, this may be the entity name or ID. - `type` string, required: The type of the Policy. This is equivalent to the Kong 3 plugin name. Some examples are: 'ai-sanitizer', 'ai-prompt-guard', and 'rate-limiting'. Note: Plugins have been renamed to Policies in Kong AI Gateway. Policy types and configuration documentation can be found in the [Developer Docs](https://developer.konghq.com/plugins/). - `enabled` boolean: Whether the policy is enabled. - `global` boolean: Whether the policy is globally applied to all resources. - `config` object, required: Configuration for the policy. This is equivalent to the Kong 3 plugin configuration. Note: Plugins have been renamed to Policies in Kong AI Gateway. Policy types and configuration documentation can be found in the [Developer Docs](https://developer.konghq.com/plugins/). - `condition` string, nullable: An expression used for conditional control over plugin execution. If the expression evaluates to `true` during the request flow, the plugin is executed; otherwise, it is skipped. **Requires a minimum runtime version of `2.1`**. - `labels` PublicLabels: Public labels store information about an entity that can be used for filtering a list of objects. Public labels are intended to store **PUBLIC** metadata. Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_". - `managed_by` ManagedBy: Stores information about what manages this entity, such as the tool or system responsible for its lifecycle (for example, `terraform`). Keys must be 1–63 characters long and start with an alphanumeric character. ## Response `201` Policy created successfully. - AIGatewayPolicy - `display_name` string, required: The display name for this policy instance. - `name` string, required: Identifier for an AI Gateway entity. In some cases, this may be the entity name or ID. - `type` string, required: The type of the Policy. This is equivalent to the Kong 3 plugin name. Some examples are: 'ai-sanitizer', 'ai-prompt-guard', and 'rate-limiting'. Note: Plugins have been renamed to Policies in Kong AI Gateway. Policy types and configuration documentation can be found in the [Developer Docs](https://developer.konghq.com/plugins/). - `enabled` boolean: Whether the policy is enabled. - `global` boolean: Whether the policy is globally applied to all resources. - `config` object, required: Configuration for the policy. This is equivalent to the Kong 3 plugin configuration. Note: Plugins have been renamed to Policies in Kong AI Gateway. Policy types and configuration documentation can be found in the [Developer Docs](https://developer.konghq.com/plugins/). - `condition` string, nullable: An expression used for conditional control over plugin execution. If the expression evaluates to `true` during the request flow, the plugin is executed; otherwise, it is skipped. **Requires a minimum runtime version of `2.1`**. - `labels` PublicLabels: Public labels store information about an entity that can be used for filtering a list of objects. Public labels are intended to store **PUBLIC** metadata. Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_". - `managed_by` ManagedBy: Stores information about what manages this entity, such as the tool or system responsible for its lifecycle (for example, `terraform`). Keys must be 1–63 characters long and start with an alphanumeric character. - `id` string, uuid, required: Contains a unique identifier used for this resource. - `created_at` string, date-time, required: An ISO-8601 timestamp representation of entity creation date. - `updated_at` string, date-time, required: An ISO-8601 timestamp representation of entity update date. ## Other responses - `400`: Bad Request - `401`: Unauthorized - `403`: Forbidden - `404`: Not Found - `409`: Conflict - `429`: Too Many Requests ## Changes - **2026-10-15** `7aab863a6daa`: 1 breaking, 2 warning - added `#/components/schemas/InvalidParameterMinimumTime, #/components/schemas/InvalidParameterMaximumTime` to the `invalid_parameters/items/` response property `oneOf` list for the response status `400` - added the new `key_invalid` enum value to the `invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400` - added the new `unique` enum value to the `invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400` - **2026-09-25** `68d43091b84d`: 4 warning - added the new `400.00` enum value to the `status` response property for the response status `400` - added the new `403.00` enum value to the `status` response property for the response status `403` - added the new `404.00` enum value to the `status` response property for the response status `404` - added the new `409.00` enum value to the `status` response property for the response status `409` - **2026-09-22** `f82fa1eee23a`: 2 info - added the new optional request property `condition` - added the optional property `condition` to the response with the `201` status - …earlier changes not shown [Operation history](https://skmtc.dev/kong/apis/konnect-api-go-sdk/changes/v1/ai-gateways/:gatewayId/policies/post.md) --- [API](https://skmtc.dev/kong/apis/konnect-api-go-sdk.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api-go-sdk/llms.txt) · [OpenAPI document](https://skmtc.dev/kong/apis/konnect-api-go-sdk/revisions/7aab863a6daa?raw)