Replace guardrail policies - Flowyte

Error

A valid request URL is required to generate request examples

{
  "success": true,
  "data": [
    {
      "id": "grd_9a1c",
      "agentId": "agt_4f9c2b7e10a24d51",
      "organizationId": "org_2b6f",
      "policyType": "verify_before_disclose",
      "appliesToSkillType": "account_lookup",
      "config": {
        "fields": [
          "balance",
          "ssn"
        ]
      },
      "isEnabled": true
    },
    {
      "id": "grd_7f22",
      "agentId": "agt_4f9c2b7e10a24d51",
      "organizationId": "org_2b6f",
      "policyType": "rate_limit",
      "config": {
        "maxPerCall": 3,
        "windowSeconds": 60
      },
      "isEnabled": true
    }
  ]
}

{
  "type": "about:blank",
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "instance": "<string>",
  "code": "<string>",
  "errors": [
    {
      "field": "<string>",
      "message": "<string>"
    }
  ]
}

{
  "type": "about:blank",
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "instance": "<string>",
  "code": "<string>",
  "errors": [
    {
      "field": "<string>",
      "message": "<string>"
    }
  ]
}

{
  "type": "about:blank",
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "instance": "<string>",
  "code": "<string>",
  "errors": [
    {
      "field": "<string>",
      "message": "<string>"
    }
  ]
}

{
  "type": "about:blank",
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "instance": "<string>",
  "code": "<string>",
  "errors": [
    {
      "field": "<string>",
      "message": "<string>"
    }
  ]
}

{
  "type": "about:blank",
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "instance": "<string>",
  "code": "<string>",
  "errors": [
    {
      "field": "<string>",
      "message": "<string>"
    }
  ]
}

PUT

/

agents

/

{agentId}

/

guardrails

Error

A valid request URL is required to generate request examples

{
  "success": true,
  "data": [
    {
      "id": "grd_9a1c",
      "agentId": "agt_4f9c2b7e10a24d51",
      "organizationId": "org_2b6f",
      "policyType": "verify_before_disclose",
      "appliesToSkillType": "account_lookup",
      "config": {
        "fields": [
          "balance",
          "ssn"
        ]
      },
      "isEnabled": true
    },
    {
      "id": "grd_7f22",
      "agentId": "agt_4f9c2b7e10a24d51",
      "organizationId": "org_2b6f",
      "policyType": "rate_limit",
      "config": {
        "maxPerCall": 3,
        "windowSeconds": 60
      },
      "isEnabled": true
    }
  ]
}

{
  "type": "about:blank",
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "instance": "<string>",
  "code": "<string>",
  "errors": [
    {
      "field": "<string>",
      "message": "<string>"
    }
  ]
}

{
  "type": "about:blank",
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "instance": "<string>",
  "code": "<string>",
  "errors": [
    {
      "field": "<string>",
      "message": "<string>"
    }
  ]
}

{
  "type": "about:blank",
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "instance": "<string>",
  "code": "<string>",
  "errors": [
    {
      "field": "<string>",
      "message": "<string>"
    }
  ]
}

{
  "type": "about:blank",
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "instance": "<string>",
  "code": "<string>",
  "errors": [
    {
      "field": "<string>",
      "message": "<string>"
    }
  ]
}

{
  "type": "about:blank",
  "title": "<string>",
  "status": 123,
  "detail": "<string>",
  "instance": "<string>",
  "code": "<string>",
  "errors": [
    {
      "field": "<string>",
      "message": "<string>"
    }
  ]
}

Authorizations

Authorization

string

header

required

Flowyte secret API key (Authorization: Bearer flowyte_sk_live_…). Scope-gated; is scoped to your organization — a key can never reach another tenant. The listed scopes in each operation's apiKey requirement are the scopes that key must hold. The tokenUrl is nominal: keys are minted in the dashboard.

Path Parameters

agentId

string

required

The agent this resource is scoped to (the UUID returned by createAgent / listAgents).

Body

application/json

id

string

required

Server-assigned policy id.

agentId

string

required

The agent this policy is scoped to.

organizationId

string

required

The owning organization (server-set).

policyType

enum<string>

required

The kind of guard, which determines the shape of config: verify_before_disclose — require a passed caller-verification before answering (config: { "fields": ["balance","ssn"] } — the sensitive fields gated); allowed_fields — allowlist the fields a skill may return (config: { "fields": ["order_status","eta"] }); write_gate — require explicit confirmation before a mutating skill runs (config: { "requireConfirmation": true }); rate_limit — cap how often a skill/action fires (config: { "maxPerCall": 3, "windowSeconds": 60 }); business_hours — only allow the action inside configured hours (config: { "timezone": "America/New_York", "openHour": 8, "closeHour": 18 }); content_policy — block/redact disallowed content (config: { "blocklist": ["competitor pricing"] }).

Available options:

verify_before_disclose,

allowed_fields,

write_gate,

rate_limit,

business_hours,

content_policy

appliesToSkillType

string

Optional — restrict this policy to one skill type (e.g. order_lookup). Omit to apply agent-wide.

config

object

Policy-type-specific settings. Free-form by contract, but the expected keys depend on policyType (see the enum descriptions above). Send the object shape that matches the type.

isEnabled

boolean

Whether the policy is active. Disabled policies are retained but not enforced.

Response

Saved policies.

success

boolean

required

data

object[]

required

Show child attributes

message

string

errors

object[]

Show child attributes