Create DLP rule
Create a DLP rule.
Create a DLP rule.
ApiKeyAuthAuthorizationBearer <token>Bearer token authentication. Send an API key (a saai_api_-prefixed token) as Authorization: Bearer <token>.
Required permission
manage_data_protectionapplication/json- body
A data-protection rule that rewrites tool responses after a policy has allowed the call. It never decides whether a call runs; it only redacts matching content on the way back to the agent. Every rule whose scope matches is applied, not just the first.
name*stringShort label for the rule, shown in the rule list.
description?|Optional note explaining what the rule protects against.
status?DlpRuleStatusWhether a DLP rule takes part in filtering.
"active""draft""disabled"target?"mcp_tool_response"Which responses the rule inspects.
"mcp_tool_response"scope*Which agents, users, MCP servers, and tools this rule's filters apply to.
action?"redact"What the rule does to matched content.
"redact"filters*array<|>Filters run against each matching response. Every matching filter is applied.
on_error?stringFailure routing for this rule's filters. Treated as block when unset.
"block""allow"The request has succeeded and a new resource has been created as a result.
application/json- response
A data-protection rule that rewrites tool responses after a policy has allowed the call. It never decides whether a call runs; it only redacts matching content on the way back to the agent. Every rule whose scope matches is applied, not just the first.
id*stringuuidname*stringShort label for the rule, shown in the rule list.
description?|Optional note explaining what the rule protects against.
status?DlpRuleStatusWhether a DLP rule takes part in filtering.
"active""draft""disabled"target?"mcp_tool_response"Which responses the rule inspects.
"mcp_tool_response"scope*Which agents, users, MCP servers, and tools this rule's filters apply to.
action?"redact"What the rule does to matched content.
"redact"filters*array<|>Filters run against each matching response. Every matching filter is applied.
on_error?stringFailure routing for this rule's filters. Treated as block when unset.
"block""allow"created_at*stringdate-timeupdated_at*stringdate-timecurl -X POST "https://example.com/dlp/rules" \ -H "Content-Type: application/json" \ -d '{ "name": "string", "scope": {}, "filters": [ { "type": "regex", "pattern": "string" } ] }'{ "id": null, "name": "string", "description": "string", "status": "active", "target": "mcp_tool_response", "scope": { "mcp_ids": [ "c2c9208c-a7ac-41cc-84f1-8c1caec92987" ], "agent_slugs": [ "string" ], "agent_instance_ids": [ "bc3f18ff-0dcd-4cc7-8f61-6ca61814f10b" ], "user_ids": [ "2d98503d-4ab4-41bd-8fc6-78cc006fd2db" ], "groups": [ "string" ], "agent_slug_tag_ids": [ "e428595a-d9dd-4887-8327-2d9cad5b7425" ], "mcp_tag_ids": [ "17d4a46c-d971-4171-9a66-88ec59ce6eeb" ], "tool_tag_ids": [ "41068329-9b4f-4cc3-b249-3ec2a7a2cee8" ], "tool_patterns": [ "string" ], "condition": "string", "condition_description": "string" }, "action": "redact", "filters": [ { "type": "regex", "pattern": "string", "replacement": "string" } ], "on_error": "block", "created_at": "2019-08-24T14:15:22Z", "updated_at": "2019-08-24T14:15:22Z"}