OrgIPPolicy

Per-org IP allowlist policy: mode and the canonical CIDR list applied to authenticated requests.

  • object
    Type: string

    Resource type identifier

  • id
    Type: string

    Unique identifier for the policy.

  • org_id
    Type: string

    Organization this policy belongs to

  • mode
    Type: string

    Enforcement mode: disabled skips evaluation, enforce rejects off-list requests, dry_run allows them but emits an audit event.

  • allowlist
    Type: array of string

    Canonical, deduplicated CIDR list. Bare IPs submitted on PATCH are stored as /32 (IPv4) or /128 (IPv6).

  • updated_by
    Type: Actor

    Actor (session user, personal API key, or org API key) that last updated the policy. Omitted for the never-seeded defensive fallback row.

    Properties: 6
  • created_at
    Type: string

    When the policy row was created.

  • updated_at
    Type: string

    When the policy row was last updated.