Add Policy

Add a policy to an organization

post

Root user only. Policies define which users can perform which transaction types.

Authorizations

X-StampstringRequired

Base64URL-encoded JSON: { "publicKey": "<hex ed25519 pubkey>", "signature": "<hex ed25519 sig>" }. The signature covers JSON.stringify([binding, Object.entries(params)]), where binding is "<METHOD> <routePath>" (the server's route pattern, e.g. "POST /waas/create-wallet") and params is the request body (POST) or query params (GET). This binds the stamp to its own route so it cannot be replayed against a different endpoint. The one parameterized route, GET /waas/scheduled-transaction/{scheduleId}, binds to the literal "GET /waas/scheduled-transaction/:scheduleId", not the concrete ID. See the Signing Requests guide for runnable examples.

Body

organizationIdstringRequired

noncestringRequired

Responses

200

Policies list

application/json

400

Bad request

application/json

401

Invalid or missing X-Stamp

application/json

403

Insufficient permissions

application/json

500

Internal server error

application/json

post/waas/add-policy

POST /waas/add-policy HTTP/1.1
Host: api.hinkal.io
X-Stamp: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 90

{
  "organizationId": "text",
  "policy": {
    "userIds": [
      "text"
    ],
    "actionType": "text"
  },
  "nonce": "text"
}

{
  "status": "success",
  "data": {
    "organizationId": "text",
    "policies": [
      {
        "policyId": "text",
        "userIds": [
          "text"
        ],
        "actionType": "text"
      }
    ]
  }
}