Skip to main content
Create a named workspace Actions policy

Authorizations

Authorization
string
header
required

BoxRouter API key; never an upstream provider key.

Headers

X-CSRF-Token
string

Session-bound CSRF token. Required for browser-session calls, together with a matching configured Origin header; omit it when calling with an API key.

Idempotency-Key
string

Optional for this operation. Preserve the same stable identifier when retrying an uncertain response; never reuse it for new work. If omitted where allowed, Cloud generates a request-scoped key that cannot reconcile a later retry. Do not include credentials or payloads. Stable identifier for one logical mutation.

Required string length: 1 - 128

Body

application/json
name
string
required
Required string length: 1 - 64
Pattern: ^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$
settings
object
required

Response

Created workspace policy and revision.

id
string
required
Required string length: 1 - 128
Pattern: ^[^\u0000]*$
name
string
required
Required string length: 1 - 64
Pattern: ^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$
settings
object
required
revision
integer
required
Required range: x >= 1
updated_at
string<date-time>
required