PATCH
/
v1
/
policies
/
{policy_id}
curl --request PATCH \
  --url https://api.privy.io/v1/policies/{policy_id} \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --header 'privy-app-id: <privy-app-id>' \
  --data '{
  "name": "Allowlisted stablecoins",
  "rules": [
    {
      "name": "Allowlist USDC contract on Base",
      "method": "eth_sendTransaction",
      "conditions": [
        {
          "field_source": "ethereum_transaction",
          "field": "to",
          "operator": "eq",
          "value": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
        }
      ],
      "action": "ALLOW"
    }
  ]
}'
{
  "id": "tb54eps4z44ed0jepousxi4n",
  "name": "Allowlisted stablecoins",
  "chain_type": "ethereum",
  "rules": [
    {
      "name": "Allowlist USDC contract on Base",
      "method": "eth_sendTransaction",
      "conditions": [
        {
          "field_source": "ethereum_transaction",
          "field": "to",
          "operator": "eq",
          "value": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
        }
      ],
      "action": "ALLOW"
    }
  ],
  "owner_id": null,
  "version": "1.0",
  "created_at": 1741833088894
}

Authorizations

Authorization
string
header
required

App secret authentication

Headers

privy-app-id
string
required

ID of your Privy app

privy-authorization-signature
string

Request authorization signature. If multiple signatures are required, they should be comma separated.

Path Parameters

policy_id
string
required
Required string length: 24

Body

application/json
name
string

Name to assign to policy.

Required string length: 1 - 50
rules
object[]

The rules that apply to each method the policy covers.

Response

200 - application/json
Updated policy object.
version
enum<string>
required

Version of the policy. Currently, 1.0 is the only version.

Available options:
1.0
name
string
required

Name to assign to policy.

Maximum length: 50
chain_type
enum<string>
required

Chain type the policy applies to.

Available options:
ethereum
rules
object[]
required

The rules that apply to each method the policy covers.

id
string
required

Unique ID of the created policy. This will be the primary identifier when using the policy in the future.

Required string length: 24
owner_id
string | null
required

The ID of the policy owner.

created_at
number
required

Unix timestamp of when the policy was created in milliseconds.