Rensei docs
API ReferencePolicies

Create an active or draft Cedar policy with immutable version 1.

Create an active or draft Cedar policy with immutable version 1. - Rensei REST API operation reference.

POST
/api/policies

Authorization

headerAuthorizationBearer <rsk_live_*>

Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.

Request Body

application/json
  1. body
name*string
Length1 <= length
description?string|null
cedarPolicy*string
Length1 <= length
scope?string
Value in"workspace""project"
scopeId?string|null
regulatoryTags?array<string>
metadata?
status?string
Value in"active""draft"

Response Body

Policy and immutable version 1 created.

application/json
  1. response
policy*
Example Request
curl -X POST 'https://app.rensei.ai/api/policies' \  -H 'Content-Type: application/json' \  -d '{  "name": "string",  "cedarPolicy": "string"}'
Example Response
{  "policy": {    "id": "string",    "workspaceId": "string",    "name": "string",    "description": "string",    "cedarPolicy": "string",    "scope": "string",    "scopeId": "string",    "status": "string",    "version": 0,    "regulatoryTags": [      "string"    ],    "metadata": {      "property1": null,      "property2": null    },    "createdBy": "string",    "createdAt": "string",    "updatedAt": "string",    "archivedAt": "string"  }}

List Cedar policies for the authenticated org.

Returns Cedar policies scoped to the authenticated org (policies.workspaceId), optionally filtered by status or scope. Human principals only: a browser session or a WorkOS user-token bearer is accepted; rsk_* API keys and BYOA OAuth-agent tokens authenticate but are rejected 403.

Get one Cedar policy with its version history.

Returns a single Cedar policy scoped to the authenticated org, plus its full version history (newest first). A policy id belonging to another org returns 404.