Skip to main content
POST
Create
🔑 Requires the policies.create scope.

Authorizations

Authorization
string
header
required

API key from your incident.io dashboard (Settings → API keys)

Body

application/json
conditions
object[]
required

Conditions which determine which resources are in scope for this policy

Example:
description
string
required

Human readable description of the policy

Example:

"All critical incidents must export follow-ups to an external issue tracker before 7 days has passed since closure."

name
string
required

Human readable name of the policy

Example:

"Critical incidents must export follow-ups"

policy_type
enum<string>
required

Type of the policy, specifying what this applies to. Cannot be changed after the policy is created.

Available options:
debrief,
follow_up,
on_call_readiness,
post_mortem,
schedule,
vacation_conflict
Example:

"follow_up"

assignment_rules
object
Example:
debrief
object

Set when policy_type is debrief.

Example:
expressions
object[]

The expressions to use in this policy

Example:
follow_up
object

Set when policy_type is follow_up.

Example:
on_call_readiness
object

Set when policy_type is on_call_readiness. The assignee is always the user in violation and cannot be configured.

Example:
post_mortem
object

Set when policy_type is post_mortem.

Example:
schedule
object

Detects gaps in on-call coverage. Set when policy_type is schedule.

Example:
status
enum<string>

Defaults to enabled on create. Settable on update — there is no separate disable endpoint.

Available options:
enabled,
disabled
Example:

"enabled"

Response

Created response.

policy
object
required