Create a network policy
Creates an immutable policy: the set of hosts an agent version carrying it may reach, the connection whose credential is injected per host, and whether a request to a host parks as a human approval first. Model traffic is NOT egress: the sandbox loop calls the platform model relay, which runs the call on the platform’s own inference binding, so the platform’s own model host is refused as a policy host. Authorization: org admin.
Authentication
AuthorizationBearer
Bearer authentication of the form Bearer <token>, where token is your auth token.
Request
This endpoint expects an object.
name
hosts
Host → rule. A key is an exact lowercase public DNS hostname: no port, no wildcard, no path, no IP literal, no internal or private target. At most 50.
Response
The new policy.
data
Errors
400
Bad Request Error
403
Forbidden Error
422
Unprocessable Entity Error