Create a trusted device policy

Authentication and request headers

Call with an application API key. This endpoint checks only the scope above; read, manage and execute permissions do not imply one another.

Name	Location	Type	Required	Description	Example
Authorization	header	string	Yes	Application API key, passed as a Bearer token.	Bearer qwk_***
X-Request-Id	header	string	No	Optional request tracing identifier; generated by the server if omitted.	req-20260831-001

Name	Location	Type	Required	Description	Example
Idempotency-Key	header	string	Required	Idempotency key used to prevent duplicate submissions	"<string>"
description	body	string	No	Policy group description	"<string>"
first_device_auto_trust	body	boolean	Required	Automatically trust the first device	false
name	body	string	Required	Policy name	"<string>"
priority	body	integer · int64	Required	Priority	1
scope_type	body	string	Required	User scope type	"all"
subjects	body	array ｜ null	Required	Selected users	[{"id":"<uuid>","name":"<string>","type":"department"}]
validation_enabled	body	boolean	Required	Enable trusted device verification	false

cURL

201 Created

Name	Type	Required	Description	Example
created_at	string ｜ null · date-time	Yes	Created at	"2026-08-27T10:00:00Z"
created_by	string ｜ null · uuid	No	Creator ID	"<uuid>"
created_by_email	string	No	Creator email	"<string>"
created_by_name	string	No	Created by	"<string>"
description	string	Yes	Policy group description	"<string>"
first_device_auto_trust	boolean	Yes	Automatically trust the first device	false
id	string · uuid	Yes	Policy group ID	"<uuid>"
is_default	boolean	Yes	Whether this is the default policy group	false
name	string	Yes	Policy name	"<string>"
priority	integer ｜ null · int64	Yes	Priority	0
scope_type	string	Yes	User scope type	"all"
subjects	array<OpenapifacadeScopeSubject>	Yes	Selected users	[{"id":"<uuid>","name":"<string>","type":"department"}]
subjects[].id	string · uuid	Yes	Scope subject ID	"<uuid>"
subjects[].name	string	Yes	Scope subject name	"<string>"
subjects[].type	string	Yes	Object type	"department"
updated_at	string ｜ null · date-time	Yes	Updated at	"2026-08-27T10:00:00Z"
updated_by	string ｜ null · uuid	No	Updater ID	"<uuid>"
updated_by_email	string	No	Updater email	"<string>"
updated_by_name	string	No	Updated by	"<string>"
validation_enabled	boolean	Yes	Enable trusted device verification	false
version	integer · int64	Yes	Version used for concurrent update checks	0

Response example

default Flat business error

Name	Type	Required	Description	Example
code	string	No	Stable business error code	"<string>"
detail	string	Yes	Human-readable error description	"<string>"
details	OpenapiErrorDetails	No	Error details	{"field":"<string>","reason":"<string>","suggestion":"<string>"}
details.field	string	No	Request field that failed validation	"<string>"
details.reason	string	No	Stable validation failure reason	"<string>"
details.suggestion	string	No	Suggested normalized value	"<string>"
error	string	Yes	Stable HTTP error type	"<string>"

Response example