Create Policy

Create a new access policy

POST /v1/policies

cURL

curl -X POST https://api.raily.ai/v1/policies \
  -H "Authorization: Bearer raily_sk_xxxxx" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Enterprise Access",
    "description": "Full access for enterprise partners",
    "rules": [
      {
        "action": "allow",
        "priority": 1,
        "conditions": {
          "licenseType": "enterprise"
        },
        "permissions": ["full_access", "commercial_use"],
        "rateLimit": {
          "requests": 10000,
          "period": "hour"
        }
      },
      {
        "action": "deny",
        "priority": 99,
        "conditions": { "default": true },
        "message": "Enterprise license required"
      }
    ],
    "defaultAction": "deny"
  }'

Success (201)

{
  "id": "pol_xyz789",
  "object": "policy",
  "name": "Enterprise Access",
  "description": "Full access for enterprise partners",
  "rules": [
    {
      "action": "allow",
      "priority": 1,
      "conditions": { "licenseType": "enterprise" },
      "permissions": ["full_access", "commercial_use"],
      "rateLimit": { "requests": 10000, "period": "hour" }
    },
    {
      "action": "deny",
      "priority": 99,
      "conditions": { "default": true },
      "message": "Enterprise license required"
    }
  ],
  "defaultAction": "deny",
  "version": 1,
  "created": "2024-01-15T10:30:00Z"
}

Request Body

name · string · required

Human-readable policy name

description · string

Policy description

rules · array · required

Array of rule objects

Show Rule Object

action · string · required

allow, deny, or review

priority · integer

Rule priority (lower = higher priority)

conditions · object · required

Conditions that trigger this rule

permissions · array

Granted permissions (for allow rules)

rateLimit · object

Rate limiting configuration

message · string

Custom message for denials

defaultAction · string · default: "deny"

Action when no rules match: allow or deny

cURL

curl -X POST https://api.raily.ai/v1/policies \
  -H "Authorization: Bearer raily_sk_xxxxx" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Enterprise Access",
    "description": "Full access for enterprise partners",
    "rules": [
      {
        "action": "allow",
        "priority": 1,
        "conditions": {
          "licenseType": "enterprise"
        },
        "permissions": ["full_access", "commercial_use"],
        "rateLimit": {
          "requests": 10000,
          "period": "hour"
        }
      },
      {
        "action": "deny",
        "priority": 99,
        "conditions": { "default": true },
        "message": "Enterprise license required"
      }
    ],
    "defaultAction": "deny"
  }'

Success (201)

{
  "id": "pol_xyz789",
  "object": "policy",
  "name": "Enterprise Access",
  "description": "Full access for enterprise partners",
  "rules": [
    {
      "action": "allow",
      "priority": 1,
      "conditions": { "licenseType": "enterprise" },
      "permissions": ["full_access", "commercial_use"],
      "rateLimit": { "requests": 10000, "period": "hour" }
    },
    {
      "action": "deny",
      "priority": 99,
      "conditions": { "default": true },
      "message": "Enterprise license required"
    }
  ],
  "defaultAction": "deny",
  "version": 1,
  "created": "2024-01-15T10:30:00Z"
}