---
title: "Combine explicitly scoped, published policy versions (owner/admin)"
method: POST
path: "/api/v1/risk/compositions"
tags: ["Risk"]
---

# Combine explicitly scoped, published policy versions (owner/admin)

`POST /api/v1/risk/compositions`

## Request

- Base URL: `https://api.korala.ai`
- URL: `https://api.korala.ai/api/v1/risk/compositions`
- Auth: one of:
  - API key in header `X-API-Key`
  - `bearer` (a scheme the document does not define)

## Headers

- `Idempotency-Key` string
- `X-Risk-Mode` string
- `X-Korala-Mode` 'live' | 'test'
- `idempotency-key` string, required

## Request body

- CreateRiskCompositionDto
  - `key` string, required
  - `components` RiskCompositionComponentInputDto[], required
    - `policyVersionId` string, uuid, required
    - `scope` 'subject' | 'current_context', required

## Response `201`

- RiskCompositionVersionDto
  - `id` string, uuid, required
  - `key` string, required
  - `version` number, required
  - `components` RiskCompositionComponentDto[], required
    - `policyVersionId` string, uuid, required
    - `scope` 'subject' | 'current_context', required
    - `policyKey` string, required

---

[API](https://skmtc.dev/korala/apis/korala-public-api.md) · [All operations](https://skmtc.dev/korala/apis/korala-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/korala/apis/korala-public-api/revisions/5c4d7810c507?raw)