Skip to main content
PUT
Update an enforcement policy

Authorizations

Authorization
string
header
required

A Barndoor API key, sent as Authorization: Bearer <key>. Keys are prefixed bdai_ and are opaque — do not attempt to decode one. Interchangeable with an OAuth 2.0 access token.

Path Parameters

id
string
required

Identifier, a UUID

Body

application/json
action
string | null
agent_scope
object | null

Omitted = unchanged.

detection_engine_ids
string<uuid>[] | null
dry_run
boolean | null
mask_format
object | null

Absent = unchanged; null = clear; object = replace.

mcp_targets
object[] | null
model_alias
string | null
name
string | null
principals
object[] | null
priority
integer<int32> | null
provider_ids
string[] | null
runtime_stage
string | null
target_kind
string | null

Response

The updated enforcement policy

action
string
required
agent_scope
object
required
created_at
string
required
created_by
string
required
detection_engine_ids
string[]
required
dry_run
boolean
required
id
string
required
mcp_targets
object[]
required
name
string
required
org_id
string
required
principals
object[]
required
priority
integer<int32>
required
provider_ids
string[]
required
runtime_stage
string
required
target_kind
string
required
updated_at
string
required
updated_by
string
required
mask_format
object | null

The mask_format object stored on dlp.enforcement_policies.mask_format and carried on the admin REST surface. deny_unknown_fields so a typo in a client (or a future key an older server does not understand) fails loudly.

model_alias
string | null