---
title: "Changes to Create a policy."
method: POST
path: "/tyk/policies"
---

# Changes to Create a policy.

`POST /tyk/policies`

> Every recorded change to this endpoint, newest first.

## Timeline

Changed in 7 of 52 revisions.

- **2026-04-08** `dd3336b65081` — 2 info
- **2025-02-07** `3d8e4f5b3dab` — 3 info
- **2024-09-18** `111affa17abe` — 4 breaking, 1 warning, 33 info
- **2024-08-21** `31989871353c` — 1 warning, 1 info
- **2024-06-17** `1938d97cb6b5` — 2 info
- **2023-03-07** `02e5d48c583d` — 5 warning
- **2022-05-24** `111d8ca21864` — 5 breaking, 3 warning, 9 info

## Changes

- **2026-04-08** `dd3336b65081` — 2 info
  - added the new optional request property `post_expiry_action`
  - added the new optional request property `post_expiry_grace_period`
- **2025-02-07** `3d8e4f5b3dab` — 3 info
  - the request property `access_rights/additionalProperties/endpoints/items/methods/items/limit/smoothing` became nullable
  - the request property `access_rights/additionalProperties/limit/smoothing` became nullable
  - the request property `smoothing` became nullable
- **2024-09-18** `111affa17abe` — 4 breaking, 1 warning, 33 info
  - the `_id` request property type/format changed from `object`/`` to `string`/``
  - the `key_expires_in` request property type/format changed from `number`/`int64` to `integer`/`int64`
  - the `max_query_depth` request property type/format changed from `number`/`` to `integer`/``
  - the `throttle_retry_limit` request property type/format changed from `number`/`` to `integer`/``
  - removed the request property `access_rights/additionalProperties/limit/set_by_policy`
  - added the new optional request property `access_rights/additionalProperties/allowance_scope`
  - added the new optional request property `access_rights/additionalProperties/allowed_types`
  - added the new optional request property `access_rights/additionalProperties/disable_introspection`
  - added the new optional request property `access_rights/additionalProperties/field_access_rights`
  - added the new optional request property `access_rights/additionalProperties/limit/max_query_depth`
  - added the new optional request property `access_rights/additionalProperties/limit/smoothing`
  - added the new optional request property `access_rights/additionalProperties/restricted_types`
  - the request property `access_rights` became nullable
  - the request property `access_rights/additionalProperties/allowed_urls` became nullable
  - the request property `access_rights/additionalProperties/allowed_urls/items/methods` became nullable
  - the request property `access_rights/additionalProperties/versions` became nullable
  - the request property `graphql_access_rights` became nullable
  - the request property `meta_data` became nullable
  - the request property `tags` became nullable
  - the `access_rights/additionalProperties/endpoints/items/methods/items/limit/per` request property type/format was generalized from `number`/`double` to `number`/``
  - the `access_rights/additionalProperties/endpoints/items/methods/items/limit/rate` request property type/format was generalized from `number`/`double` to `number`/``
  - the `access_rights/additionalProperties/endpoints/items/methods/items/limit/smoothing/delay` request property type/format was generalized from `integer`/`int64` to `integer`/``
  - the `access_rights/additionalProperties/endpoints/items/methods/items/limit/smoothing/step` request property type/format was generalized from `integer`/`int64` to `integer`/``
  - the `access_rights/additionalProperties/endpoints/items/methods/items/limit/smoothing/threshold` request property type/format was generalized from `integer`/`int64` to `integer`/``
  - the `access_rights/additionalProperties/endpoints/items/methods/items/limit/smoothing/trigger` request property type/format was generalized from `number`/`double` to `number`/``
  - the `access_rights/additionalProperties/limit/per` request property type/format was generalized from `number`/`double` to `number`/``
  - the `access_rights/additionalProperties/limit/quota_max` request property type/format was generalized from `integer`/`int64` to `integer`/``
  - the `access_rights/additionalProperties/limit/quota_remaining` request property type/format was generalized from `integer`/`int64` to `integer`/``
  - the `access_rights/additionalProperties/limit/quota_renewal_rate` request property type/format was generalized from `integer`/`int64` to `integer`/``
  - the `access_rights/additionalProperties/limit/quota_renews` request property type/format was generalized from `integer`/`int64` to `integer`/``
  - the `access_rights/additionalProperties/limit/rate` request property type/format was generalized from `number`/`double` to `number`/``
  - the `access_rights/additionalProperties/limit/throttle_interval` request property type/format was generalized from `number`/`double` to `number`/``
  - the `access_rights/additionalProperties/limit/throttle_retry_limit` request property type/format was generalized from `integer`/`int64` to `integer`/``
  - the `smoothing/delay` request property type/format was generalized from `integer`/`int64` to `integer`/``
  - the `smoothing/step` request property type/format was generalized from `integer`/`int64` to `integer`/``
  - the `smoothing/threshold` request property type/format was generalized from `integer`/`int64` to `integer`/``
  - the `smoothing/trigger` request property type/format was generalized from `number`/`double` to `number`/``
  - added the non-success response with the status `403`
- **2024-08-21** `31989871353c` — 1 warning, 1 info
  - removed the request property `access_rights/additionalProperties/limit/smoothing`
  - added the new optional request property `access_rights/additionalProperties/endpoints`
- **2024-06-17** `1938d97cb6b5` — 2 info
  - added the new optional request property `access_rights/additionalProperties/limit/smoothing`
  - added the new optional request property `smoothing`
- **2023-03-07** `02e5d48c583d` — 5 warning
  - removed the request property `access_rights/allowed_urls`
  - removed the request property `access_rights/api_id`
  - removed the request property `access_rights/api_name`
  - removed the request property `access_rights/limit`
  - removed the request property `access_rights/versions`
- **2022-05-24** `111d8ca21864` — 5 breaking, 3 warning, 9 info
  - the request property `access_rights` became not nullable
  - the request property `graphql_access_rights` became not nullable
  - the request property `meta_data` became not nullable
  - the request property `tags` became not nullable
  - the `_id` request property type/format changed from `string`/`` to `object`/``
  - removed the request property `post_expiry_action`
  - removed the request property `post_expiry_grace_period`
  - removed the request property `smoothing`
  - added the new optional request property `access_rights/allowed_urls`
  - added the new optional request property `access_rights/api_id`
  - added the new optional request property `access_rights/api_name`
  - added the new optional request property `access_rights/limit`
  - added the new optional request property `access_rights/versions`
  - the `key_expires_in` request property type/format was generalized from `integer`/`int64` to `number`/`int64`
  - the `max_query_depth` request property type/format was generalized from `integer`/`` to `number`/``
  - the `throttle_retry_limit` request property type/format was generalized from `integer`/`` to `number`/``
  - removed the non-success response with the status `403`

---

[Operation](https://skmtc.dev/tyktechnologies/apis/tyk-gateway-api/docs/tyk/policies/post.md) · [API](https://skmtc.dev/tyktechnologies/apis/tyk-gateway-api.md) · [Page](https://skmtc.dev/tyktechnologies/apis/tyk-gateway-api/changes/tyk/policies/post)