---
title: "Create ACL rule"
method: POST
path: "/acl/rules"
tags: ["acl"]
---

# Create ACL rule

`POST /acl/rules`

## Request body

- ACLRuleInput
  - `name` string, required
  - `type` 'whitelist' | 'blacklist', required
  - `condition` ACLCondition, required
    - `field` 'ip' | 'geoip' | 'user-agent' | 'url' | 'method' | 'header'
    - `operator` 'equals' | 'contains' | 'regex'
    - `value` string
  - `action` 'allow' | 'deny' | 'challenge', required
  - `enabled` boolean

## Response `201`

Rule created

---

[API](https://skmtc.dev/tinyactive/apis/nginx-modsecurity-admin-portal-api.md) · [All operations](https://skmtc.dev/tinyactive/apis/nginx-modsecurity-admin-portal-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/tinyactive/nginx-modsecurity-admin-portal-api/revisions/9df19884247b/schema)