---
title: "Attach/detach policies on an assistant revision"
method: PUT
path: "/v1/assistants/revisions/{revision_id}/policies"
tags: ["policies"]
---

# Attach/detach policies on an assistant revision

`PUT /v1/assistants/revisions/{revision_id}/policies`

## Request

- The document declares no server URL.
- Auth: API key in header `x-api-key`
- TypeScript: <https://skmtc.dev/oneloop-hq/apis/feather-api/docs/v1/assistants/revisions/:revision_id/policies/put.ts> (a function with typed inputs; its response is checked against the schema)

## Path parameters

- `revision_id` string, uuid, required

## Request body

- PolicyAttachmentUpdate: Full-replace of an assistant revision's policy attachment. ``policy_refs`` is the complete attached set (``[]`` detaches all; omit to leave unchanged). ``policies_enabled`` flips the per-revision master switch; omit to leave unchanged.
  - `policy_refs` PolicyRefSpec[], nullable
    - `policy_id` string, uuid, required
  - `policies_enabled` boolean, nullable

## Response `200`

Successful Response

- PolicyAttachmentResponse: The assistant revision's current policy attachment after a write/read.
  - `revision_id` string, uuid, required
  - `policies_enabled` boolean, required
  - `policy_refs` object[]
  - `inert_tool_policies` InertToolPolicy[]
    - `policy_id` string, uuid, required
    - `name` string, required
    - `tool_target` string, required
    - `reason` string

## Other responses

- `400`: Bad request
- `401`: Authentication required
- `404`: Resource not found
- `422`: Validation Error

## Changes

- **2026-08-12** `5a5597ebb2d6`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/oneloop-hq/apis/feather-api/changes/v1/assistants/revisions/:revision_id/policies/put.md)

---

[API](https://skmtc.dev/oneloop-hq/apis/feather-api.md) - [All operations](https://skmtc.dev/oneloop-hq/apis/feather-api/llms.txt) - [OpenAPI document](https://skmtc.dev/oneloop-hq/apis/feather-api/revisions/9cd7291d4228?raw)