Skip to main content
POST
Create policy group

Authorizations

Authorization
string
header
required

MeshQu API key passed as a bearer token: Authorization: Bearer mqu_…. Mint one in the console (Settings → API keys).

X-MeshQu-Tenant-Id
string
header
required

Tenant UUID for multi-tenant isolation. Required on all authenticated routes — validated before authentication (middleware/tenant.ts), so a missing or non-UUID header returns 400 (MISSING_TENANT_ID / INVALID_TENANT_ID) before the API key is checked.

Body

application/json
code
string
required

Unique code within tenant (e.g., "ACME-MSA-2024")

Required string length: 1 - 50
name
string
required

Human-readable name

Required string length: 1 - 200
description
string

Detailed description

Maximum string length: 2000
metadata
object

Extensible metadata for integration

Response

Default Response

id
string<uuid>
required
tenant_id
string<uuid>
required
code
string
required
name
string
required
description
string | null
required
is_active
boolean
required
metadata
object
required
created_at
string<date-time>
required
created_by
string | null
required
updated_at
string<date-time>
required