OrgIPPolicy

Per-org IP allowlist policy: mode and the canonical CIDR list applied to authenticated requests.

  • object
    Type: string

    Resource type identifier

  • id
    Type: string

    Unique identifier for the policy.

  • org_id
    Type: string

    Organization this policy belongs to

  • mode
    Type: string

    Enforcement mode: disabled skips evaluation, enforce rejects off-list requests, dry_run allows them but emits an audit event.

  • allowlist
    Type: array string[]

    Canonical, deduplicated CIDR list. Bare IPs submitted on PATCH are stored as /32 (IPv4) or /128 (IPv6).

  • updated_by
    Type: object · Actor

    Actor (session user, personal API key, or org API key) that last updated the policy. Omitted for the never-seeded defensive fallback row.

    Principal behind an action. kind is the principal and method is the credential it acted through; the matching nested field (user, personal_key, org_key) is populated when one applies.

    • object
      Type: string

      Resource type identifier

    • kind
      Type: string

      The kind of principal: user, org, visitor, or system.

    • method
      Type: string

      The credential the principal acted through: session, personal_key, org_key, or system.

    • user
      Type: object · User

      Full user profile. Populated for the user kind when the user row is resolvable; null otherwise, including when the user was deleted after the action was recorded.

      User profile with identity and display metadata

    • personal_key
      Type: object · ActorPersonalKey

      Personal API key pointer. Populated only for method personal_key.

      Personal API key pointer inside an Actor envelope.

    • org_key
      Type: object · ActorOrgKey

      Org API key pointer. Populated only for the org kind.

      Org API key pointer inside an Actor envelope.

  • created_at
    Type: string

    When the policy row was created.

  • updated_at
    Type: string

    When the policy row was last updated.