Skip to main content
Use this endpoint to treat policy configuration as code.

POST /v1/policies/sync

Canonical policy sync endpoint.

POST /v1/sync

Alias endpoint with the same behavior and response contract as /v1/policies/sync.

Auth

Dashboard user session auth (not workspace API key).

Idempotency

You can set Idempotency-Key header to make repeated CI retries safe.

Response patterns

Dry run:
Conflict:

Junior developer workflow

  1. Run dry_run=true first in CI.
  2. Validate diff output.
  3. Apply with dry_run=false and idempotency key.
  4. Fail the pipeline on sync_conflict and rebase policy source.

What gets synchronized

In addition to policy upserts, the sync process materializes group-to-policy bindings and group memberships from the submitted spec.