Create a Project Security Policy
post
/ic/api/integration/v1/projects/{projectId}/mcp/policies/security
Creates a project security policy. Supply a name, a code or id, and a policyType. Supported write types are TOOLS_FILTER and PII_DETECTION; PII_DETECTION requires its feature flag. A policy can be created as a draft without scope or config. Configuration is validated when supplied.
Request
Path Parameters
-
projectId(required): string
Project identifierExample:
MCP_PROJECT
Query Parameters
-
integrationInstance(required): string
This is the name of the service instance. You can get this value from the About page where it is specified in the Service instance field.Example:
example-instance
Supported Media Types
- application/json; charset=utf-8
Root Schema : schema
Match All
Show Source
-
object
MCPPolicyRs
MCP policy details, including scope and type-specific configuration.
-
object
type
Nested Schema : MCPPolicyRs
Type:
objectMCP policy details, including scope and type-specific configuration.
Show Source
-
code: string
Resource code.
-
config: object
config
Additional Properties Allowed:
truePolicy-type-specific configuration. Its required fields depend on the policy type. -
created: string
(date-time)
Time the resource was created.
-
createdBy: string
User who created the resource.
-
description: string
Description of the resource.
-
iconclass: string
Icon CSS class for displaying this policy or template.
-
id: string
Resource identifier.
-
lastUpdated: string
(date-time)
Time the resource was last updated.
-
lastUpdatedBy: string
User who last updated the resource.
-
links: array
links
Links to related resources.
-
name: string
Display name of the resource.
-
policyType: string
Policy type identifier.
-
processingTime: number
(float)
Server-reported processing time.
-
projectCode: string
Optional project code accepted on create or update. It must match the project in the request path; if omitted, the current project is used.
-
projectId: string
Project identifier.
-
projectName: string
Project display name.
-
scope:
scope
Resource scope to which the MCP policy applies.
-
status: string
Allowed Values:
[ "INPROGRESS", "CONFIGURED" ]Current resource state. -
version: string
Resource version. The release accepts only 01.00.0000 on writes and uses it when the version is omitted.
Nested Schema : type
Type:
objectNested Schema : config
Type:
objectAdditional Properties Allowed:
truePolicy-type-specific configuration. Its required fields depend on the policy type.
Nested Schema : links
Type:
arrayLinks to related resources.
Show Source
-
Array of:
object MCP2610_Link
A link to a related REST resource.
Nested Schema : scope
Resource scope to which the MCP policy applies.
Match All
Resource scope to which the MCP policy applies.
Show Source
-
object
PolicyScopeRs
Resource scope to which the MCP policy applies.
Nested Schema : MCP2610_Link
Type:
objectA link to a related REST resource.
Show Source
-
href: string
URL of the linked resource.
-
mediaType: string
Media type of the linked resource.
-
rel: string
Relationship of the linked resource.
Nested Schema : PolicyScopeRs
Type:
objectResource scope to which the MCP policy applies.
Show Source
-
code: string
Resource code.
-
level: string
Scope level.
-
version: string
Version of the referenced resource, defaulting to 01.00.0000 where a version is used.
Response
Supported Media Types
- application/vnd.oracle.model+json;type=singular
- application/json; charset=utf-8
201 Response
Successful operation
Root Schema : MCPPolicyRs
Type:
objectMCP policy details, including scope and type-specific configuration.
Show Source
-
code: string
Resource code.
-
config: object
config
Additional Properties Allowed:
truePolicy-type-specific configuration. Its required fields depend on the policy type. -
created: string
(date-time)
Time the resource was created.
-
createdBy: string
User who created the resource.
-
description: string
Description of the resource.
-
iconclass: string
Icon CSS class for displaying this policy or template.
-
id: string
Resource identifier.
-
lastUpdated: string
(date-time)
Time the resource was last updated.
-
lastUpdatedBy: string
User who last updated the resource.
-
links: array
links
Links to related resources.
-
name: string
Display name of the resource.
-
policyType: string
Policy type identifier.
-
processingTime: number
(float)
Server-reported processing time.
-
projectCode: string
Optional project code accepted on create or update. It must match the project in the request path; if omitted, the current project is used.
-
projectId: string
Project identifier.
-
projectName: string
Project display name.
-
scope:
scope
Resource scope to which the MCP policy applies.
-
status: string
Allowed Values:
[ "INPROGRESS", "CONFIGURED" ]Current resource state. -
version: string
Resource version. The release accepts only 01.00.0000 on writes and uses it when the version is omitted.
Nested Schema : config
Type:
objectAdditional Properties Allowed:
truePolicy-type-specific configuration. Its required fields depend on the policy type.
Nested Schema : links
Type:
arrayLinks to related resources.
Show Source
-
Array of:
object MCP2610_Link
A link to a related REST resource.
Nested Schema : scope
Resource scope to which the MCP policy applies.
Match All
Resource scope to which the MCP policy applies.
Show Source
-
object
PolicyScopeRs
Resource scope to which the MCP policy applies.
Nested Schema : MCP2610_Link
Type:
objectA link to a related REST resource.
Show Source
-
href: string
URL of the linked resource.
-
mediaType: string
Media type of the linked resource.
-
rel: string
Relationship of the linked resource.
Nested Schema : PolicyScopeRs
Type:
objectResource scope to which the MCP policy applies.
Show Source
-
code: string
Resource code.
-
level: string
Scope level.
-
version: string
Version of the referenced resource, defaulting to 01.00.0000 where a version is used.
400 Response
Malformed parameters
401 Response
Unauthorized or insufficient design-time permissions
404 Response
Project or resource not found, or the MCP feature is not available
409 Response
Conflict
500 Response
Server error
Examples
The following example shows how to create a project security policy by submitting a POST request on the REST resource using cURL. For more information about cURL, see Use cURL. For more information about endpoint URL structure, see Send Requests.
Example: Create a Project Security Policy
curl --request POST --include \
--url "${BASE_URL}/ic/api/integration/v1/projects/${PROJECT_ID}/mcp/policies/security?integrationInstance=${INTEGRATION_INSTANCE}" \
--header "Authorization: Bearer ${ACCESS_TOKEN}" \
--header "Accept: application/json" \
--header "Content-Type: application/json; charset=utf-8" \
--data-raw '{
"code": "TOOLS_POLICY",
"name": "Tools Policy",
"policyType": "TOOLS_FILTER"
}'