Skip to main content
POST
/
control-plane
/
policies
Create a policy
curl --request POST \
  --url https://v1.api.altostrat.io/control-plane/policies \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "Branch Office Policy",
  "trusted_networks": [
    "10.100.0.0/16"
  ],
  "winbox": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "ssh": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "http": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "https": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "telnet": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "ftp": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "api": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "api_ssl": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "custom_input_rules": true,
  "sites": [
    "d290f1ee-6c54-4b01-90e6-d701748f0851"
  ]
}
'
{
  "id": "a1b2c3d4-e5f6-7890-1234-567890abcdef",
  "name": "Default Corporate Policy",
  "slug": "default-corporate-policy-a1b2c3d4e5",
  "default": true,
  "custom_input_rules": true,
  "trusted_networks": [
    "10.0.0.0/8"
  ],
  "winbox": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "ssh": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "http": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "https": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "telnet": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "ftp": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "api": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "api_ssl": {
    "enabled": true,
    "port": 8291,
    "networks": [
      "198.51.100.0/24"
    ]
  },
  "sites": [
    "d290f1ee-6c54-4b01-90e6-d701748f0851"
  ],
  "created_at": "2025-10-29T01:00:00Z",
  "updated_at": "2025-10-29T02:30:00Z"
}

Documentation Index

Fetch the complete documentation index at: https://altostrat.io/docs/llms.txt

Use this file to discover all available pages before exploring further.

Authorizations

​
Authorization
string
header
required

Enter your JWT bearer token.

Body

application/json
​
name
string
required

A human-readable name for the policy.

Maximum string length: 100
Example:

"Branch Office Policy"

​
trusted_networks
string[]
required

A list of CIDR networks that are considered trusted across all services in this policy.

A valid IPv4 CIDR notation.

​
winbox
object
required
​
ssh
object
required
​
http
object
required
​
https
object
required
​
telnet
object
required
​
ftp
object
required
​
api
object
required
​
api_ssl
object
required
​
custom_input_rules
boolean
default:true

Whether custom input rules are being used.

Example:

true

​
sites
string<uuid>[]

An array of Site UUIDs to apply this policy to upon creation or update.

Example:
["d290f1ee-6c54-4b01-90e6-d701748f0851"]

Response

The newly created policy object.

​
id
string<uuid>

The unique identifier for the policy.

Example:

"a1b2c3d4-e5f6-7890-1234-567890abcdef"

​
name
string

A human-readable name for the policy.

Example:

"Default Corporate Policy"

​
slug
string

A unique, URL-friendly identifier for the policy.

Example:

"default-corporate-policy-a1b2c3d4e5"

​
default
boolean

Whether this is the default policy for the workspace.

Example:

true

​
custom_input_rules
boolean

Whether custom input rules are being used.

Example:

true

​
trusted_networks
string[]

A list of CIDR networks that are considered trusted across all services in this policy.

​
winbox
object
​
ssh
object
​
http
object
​
https
object
​
telnet
object
​
ftp
object
​
api
object
​
api_ssl
object
​
sites
string<uuid>[]

A list of Site UUIDs that this policy is applied to.

Example:
["d290f1ee-6c54-4b01-90e6-d701748f0851"]
​
created_at
string<date-time>

The timestamp when the policy was created.

Example:

"2025-10-29T01:00:00Z"

​
updated_at
string<date-time>

The timestamp when the policy was last updated.

Example:

"2025-10-29T02:30:00Z"