Network policies

See Network policies for how a host is decided.

The policy object

{
  "id": "f1e2d3c4-…",
  "name": "Checkout agent",
  "defaultAction": "block",
  "allow": { "domains": ["shop.example.com", "stripe.com"] },
  "block": { "domains": [] },
  "version": 3,
  "createdAt": "2026-11-01T09:00:00.000Z",
  "updatedAt": "2026-11-09T10:00:00.000Z"
}

version goes up with each change.

List policies

GET /network-policies → a page of policies

Create a policy

POST /network-policies → 201 the policy

Field
name	Required, up to 100 characters
defaultAction	allow (the default) or block: what a host no entry covers gets
allow.domains, block.domains	Domains, each covering its subdomains. 10,000 in a policy at most

422 for an entry that is not a domain, a domain in both lists, or a 101st policy.

Get, update and delete

• GET /network-policies/{id} → the policy
• PATCH /network-policies/{id} → the policy. Takes the create’s fields; a field left out is kept, a list sent replaces the list. Running browsers with the policy follow within a second.
• DELETE /network-policies/{id} → 204. Its running browsers are no longer limited by it.