Create a policy

curl --request POST \
  --url https://api.igrisecurity.com/api/v1/policies \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "Block delete tools",
  "connectionSlugs": [
    "github-prod"
  ],
  "rules": [
    {
      "target": {
        "kind": "mcp_tool",
        "tool": "delete_*"
      },
      "action": "deny"
    }
  ]
}
'

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    name: 'Block delete tools',
    connectionSlugs: ['github-prod'],
    rules: [{target: {kind: 'mcp_tool', tool: 'delete_*'}, action: 'deny'}]
  })
};

fetch('https://api.igrisecurity.com/api/v1/policies', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.igrisecurity.com/api/v1/policies"

payload = {
    "name": "Block delete tools",
    "connectionSlugs": ["github-prod"],
    "rules": [
        {
            "target": {
                "kind": "mcp_tool",
                "tool": "delete_*"
            },
            "action": "deny"
        }
    ]
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "data": {
    "id": "7b1d4c2e-0000-4000-8000-000000000002",
    "name": "Block delete tools",
    "description": null,
    "serverId": null,
    "connectionSlugs": [
      "github-prod"
    ],
    "rules": [
      {
        "target": {
          "kind": "mcp_tool",
          "tool": "delete_*"
        },
        "action": "deny"
      }
    ],
    "enabled": true,
    "createdByUserId": "usr_123",
    "updatedByUserId": "usr_123",
    "createdAt": "2026-01-01T00:00:00Z",
    "updatedAt": "2026-01-01T00:00:00Z"
  }
}

{
  "error": "Unauthorized"
}

{
  "error": "Policy limit reached",
  "code": "PLAN_LIMIT_REACHED",
  "limit": "maxPolicies",
  "current": 5,
  "max": 5,
  "plan": "free",
  "upgradeTo": "growth"
}

{
  "error": "Rate limits apply to LLM rules only; remove \"limit\" from MCP tool rules."
}