Skip to main content
POST
Create a policy

Authorizations

Authorization
string
header
required

Enter your JWT bearer token.

Body

application/json
name
string
required

A human-readable name for the policy.

Maximum string length: 100
Example:

"Branch Office Policy"

trusted_networks
string[]
required

A list of CIDR networks that are considered trusted across all services in this policy.

A valid IPv4 CIDR notation.

winbox
object
required
ssh
object
required
http
object
required
https
object
required
telnet
object
required
ftp
object
required
api
object
required
api_ssl
object
required
custom_input_rules
boolean
default:true

Whether custom input rules are being used.

Example:

true

sites
string<uuid>[]

An array of Site UUIDs to apply this policy to upon creation or update.

Example:

Response

The newly created policy object.

id
string<uuid>

The unique identifier for the policy.

Example:

"a1b2c3d4-e5f6-7890-1234-567890abcdef"

name
string

A human-readable name for the policy.

Example:

"Default Corporate Policy"

slug
string

A unique, URL-friendly identifier for the policy.

Example:

"default-corporate-policy-a1b2c3d4e5"

default
boolean

Whether this is the default policy for the workspace.

Example:

true

custom_input_rules
boolean

Whether custom input rules are being used.

Example:

true

trusted_networks
string[]

A list of CIDR networks that are considered trusted across all services in this policy.

winbox
object
ssh
object
http
object
https
object
telnet
object
ftp
object
api
object
api_ssl
object
sites
string<uuid>[]

A list of Site UUIDs that this policy is applied to.

Example:
created_at
string<date-time>

The timestamp when the policy was created.

Example:

"2025-10-29T01:00:00Z"

updated_at
string<date-time>

The timestamp when the policy was last updated.

Example:

"2025-10-29T02:30:00Z"