Create a new policy

POST

api

agents

{agentId}

policies

Create a new policy

curl --request POST \
  --url https://app.mandate.md/api/agents/{agentId}/policies \
  --header 'Content-Type: application/json' \
  --cookie laravel_session= \
  --data '
{
  "spendLimitPerTxUsd": 200,
  "spendLimitPerDayUsd": 2000,
  "spendLimitPerMonthUsd": 10000,
  "allowedAddresses": [
    "0x71C7656EC7ab88b098defB751B7401B5f6d8976F"
  ],
  "requireApprovalAboveUsd": 500,
  "blockedActions": [
    "bridge"
  ]
}
'

const options = {
  method: 'POST',
  headers: {cookie: 'laravel_session=', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    spendLimitPerTxUsd: 200,
    spendLimitPerDayUsd: 2000,
    spendLimitPerMonthUsd: 10000,
    allowedAddresses: ['0x71C7656EC7ab88b098defB751B7401B5f6d8976F'],
    requireApprovalAboveUsd: 500,
    blockedActions: ['bridge']
  })
};

fetch('https://app.mandate.md/api/agents/{agentId}/policies', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://app.mandate.md/api/agents/{agentId}/policies"

payload = {
    "spendLimitPerTxUsd": 200,
    "spendLimitPerDayUsd": 2000,
    "spendLimitPerMonthUsd": 10000,
    "allowedAddresses": ["0x71C7656EC7ab88b098defB751B7401B5f6d8976F"],
    "requireApprovalAboveUsd": 500,
    "blockedActions": ["bridge"]
}
headers = {
    "cookie": "laravel_session=",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "agent_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "spend_limit_per_tx_usd": 123,
  "spend_limit_per_day_usd": 123,
  "spend_limit_per_month_usd": 123,
  "allowed_addresses": [
    "<string>"
  ],
  "allowed_contracts": [
    "<string>"
  ],
  "blocked_selectors": [
    "<string>"
  ],
  "blocked_actions": [
    "<string>"
  ],
  "require_approval_selectors": [
    "<string>"
  ],
  "require_approval_actions": [
    "<string>"
  ],
  "require_approval_above_usd": 123,
  "max_slippage_bps": 123,
  "max_gas_limit": "<string>",
  "max_value_wei": "<string>",
  "schedule": {},
  "guard_rules": "<string>",
  "is_active": true,
  "version": 123,
  "created_at": "2023-11-07T05:31:56Z",
  "updated_at": "2023-11-07T05:31:56Z"
}

{
  "error": "<string>"
}

{
  "message": "<string>",
  "errors": {}
}

Authorizations

laravel_session

string

required

Laravel Sanctum cookie-based session authentication. Obtained via GitHub OAuth login on the dashboard.

Path Parameters

agentId

string<uuid>

required

Body

application/json

spendLimitPerTxUsd

number | null

Max USD per transaction.

Required range: x >= 0

spendLimitPerDayUsd

number | null

Max USD per day.

Required range: x >= 0

spendLimitPerMonthUsd

number | null

Max USD per month.

Required range: x >= 0

allowedAddresses

string[] | null

Allowlist of recipient addresses. If set, only these addresses are permitted.

allowedContracts

string[] | null

Allowlist of contract addresses.

blockedSelectors

string[] | null

Blocked EVM function selectors (e.g. "0xa9059cbb").

blockedActions

string[] | null

Blocked action types (e.g. ["bridge", "bet"]).

requireApprovalSelectors

string[] | null

EVM selectors that require human approval.

requireApprovalActions

string[] | null

Action types that require human approval.

requireApprovalAboveUsd

number | null

USD threshold above which approval is required.

Required range: x >= 0

maxSlippageBps

integer | null

Max slippage in basis points.

Required range: x >= 0

maxGasLimit

string | null

Max gas limit per transaction.

maxValueWei

string | null

Max native token value in wei.

schedule

object | null

Time-based schedule restrictions (days/hours).

guardRules

string | null

Custom guard rules in natural language (mandate.md format).

Maximum string length: 10000

Response

Policy created.

string<uuid>

agent_id

string<uuid>

spend_limit_per_tx_usd

number | null

spend_limit_per_day_usd

number | null

spend_limit_per_month_usd

number | null

allowed_addresses

string[] | null

allowed_contracts

string[] | null

blocked_selectors

string[] | null

blocked_actions

string[] | null

require_approval_selectors

string[] | null

require_approval_actions

string[] | null

require_approval_above_usd

number | null

max_slippage_bps

integer | null

max_gas_limit

string | null

max_value_wei

string | null

schedule

object | null

guard_rules

string | null

is_active

boolean

version

integer

created_at

string<date-time>

updated_at

string<date-time>

Toggle circuit breakerToggles the circuit breaker for the agent. When active, all transactions are blocked with `circuit_breaker_active`.

Create a new policy

curl --request POST \
  --url https://app.mandate.md/api/agents/{agentId}/policies \
  --header 'Content-Type: application/json' \
  --cookie laravel_session= \
  --data '
{
  "spendLimitPerTxUsd": 200,
  "spendLimitPerDayUsd": 2000,
  "spendLimitPerMonthUsd": 10000,
  "allowedAddresses": [
    "0x71C7656EC7ab88b098defB751B7401B5f6d8976F"
  ],
  "requireApprovalAboveUsd": 500,
  "blockedActions": [
    "bridge"
  ]
}
'

const options = {
  method: 'POST',
  headers: {cookie: 'laravel_session=', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    spendLimitPerTxUsd: 200,
    spendLimitPerDayUsd: 2000,
    spendLimitPerMonthUsd: 10000,
    allowedAddresses: ['0x71C7656EC7ab88b098defB751B7401B5f6d8976F'],
    requireApprovalAboveUsd: 500,
    blockedActions: ['bridge']
  })
};

fetch('https://app.mandate.md/api/agents/{agentId}/policies', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://app.mandate.md/api/agents/{agentId}/policies"

payload = {
    "spendLimitPerTxUsd": 200,
    "spendLimitPerDayUsd": 2000,
    "spendLimitPerMonthUsd": 10000,
    "allowedAddresses": ["0x71C7656EC7ab88b098defB751B7401B5f6d8976F"],
    "requireApprovalAboveUsd": 500,
    "blockedActions": ["bridge"]
}
headers = {
    "cookie": "laravel_session=",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "agent_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "spend_limit_per_tx_usd": 123,
  "spend_limit_per_day_usd": 123,
  "spend_limit_per_month_usd": 123,
  "allowed_addresses": [
    "<string>"
  ],
  "allowed_contracts": [
    "<string>"
  ],
  "blocked_selectors": [
    "<string>"
  ],
  "blocked_actions": [
    "<string>"
  ],
  "require_approval_selectors": [
    "<string>"
  ],
  "require_approval_actions": [
    "<string>"
  ],
  "require_approval_above_usd": 123,
  "max_slippage_bps": 123,
  "max_gas_limit": "<string>",
  "max_value_wei": "<string>",
  "schedule": {},
  "guard_rules": "<string>",
  "is_active": true,
  "version": 123,
  "created_at": "2023-11-07T05:31:56Z",
  "updated_at": "2023-11-07T05:31:56Z"
}

{
  "error": "<string>"
}

{
  "message": "<string>",
  "errors": {}
}

API Reference

Agent API

Dashboard API

Create a new policy

Authorizations

Path Parameters

Body

Response