set-policies

Replace an environment’s complete ordered policy list. An empty list removes every policy. The operation is atomic and accepts at most 50 policies.

Usage

unkey api gateway set-policies [flags]

Flags

string

required

Project ID or slug.

string

required

Application ID or slug.

string

required

Environment ID or slug.

JSON string

required

The complete policy list in evaluation order. Each policy requires name and enabled, and exactly one of keyauth, ratelimit, firewall, or openapi.

Show JSON schema

string

required

Dashboard name.

boolean

required

Whether evaluation is enabled.

array

Optional path, method, header, or query parameter match expressions.

object

Keyspaces, locations, permission query, and rate limits.

object

Limit, windowMs, and identifier.

object

Firewall action.

object

OpenAPI validation configuration.

Global Flags

Flag	Type	Description
`--root-key`	string	Override root key (`$UNKEY_ROOT_KEY`)
`--api-url`	string	Override API base URL (default: `https://api.unkey.com`)
`--config`	string	Path to config file (default: `~/.unkey/config.toml`)
`--output`	string	Output format, use `json` for raw JSON
`--body`	string	Send this JSON string as the request body. You cannot combine it with request-building flags.

Examples

unkey api gateway set-policies --project=payments --app=payments-api --environment=production --policies='[{"name":"Block internal","enabled":true,"firewall":{"action":"ACTION_DENY"}}]'

See the API reference.

Getting Started

Platform

Build & Deploy

Networking

Observability

CLI

Security

Keyspaces

AI Code Gen

Audit Logs

CLI

Errors

Usage

Flags

Global Flags

Examples

​Usage

​Flags

​Global Flags

​Examples

Usage

Flags

Global Flags

Examples