How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Barndoor Policies API

Manage access control policies for agents and servers

Barndoor Policies API is one of 13 APIs that Barndoor publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Policies. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and authentication docs.

This API exposes 10 operations across 9 paths, and defines 29 schemas. It is described by OpenAPI 3.1.0, at version 1.0.0.

Requests are made against 4 base URLs: https://{organization_id}.platform.barndoor.ai, https://{organization_id}.mcp.barndoor.ai, https://{organization_id}.platform.barndooruat.com, https://{organization_id}.platform.barndoordev.com.

10 operations 9 paths 29 schemas 5 GET1 PATCH2 POST2 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.0
API Version
1.0.0
Base URL
https://{organization_id}.platform.barndoor.ai
Authentication
HTTP Bearer, HTTP Bearer
Resource Areas
1

Authentication & Security 2

Barndoor Policies API declares 2 security schemes for authenticating requests. It accepts HTTP bearer tokens (JWT) (BearerAuth). It accepts HTTP bearer tokens (HTTPBearer). By default, every request must be authenticated.

  • BearerAuth — JWT token obtained through Auth0 OAuth 2.0 flow with PKCE. The token should be included in the Authorization header: Authorization: Bearer Use the Barndoor SDK…

Paths & Operations 10

Across 9 paths, the API surfaces 10 operations — 5 GET, 1 PATCH, 2 POST, 2 PUT. Each is listed below with its method, path, parameters, and response codes.

Policies 10

Manage access control policies for agents and servers

POST
/api/v2/policies/{policy_id}/clone
Clone Policy
clone_policy_admin_v2_policies__policy_id__clone_post 1 param → 200422
PUT
/api/policies/restrictions/disable/{restriction_name}
Disable Restriction
disable_restriction_admin_policies_restrictions_disable__restriction_name__put 2 params → 200422
PUT
/api/policies/restrictions/enable/{restriction_name}
Enable Restriction
enable_restriction_admin_policies_restrictions_enable__restriction_name__put 2 params → 200422
GET
/api/v2/policies/filter-definitions
Get Filter Definitions
get_filter_definitions_admin_v2_policies_filter_definitions_get → 200
GET
/api/v2/policies/summary
Get Policies Summary
get_policies_summary_admin_v2_policies_summary_get → 200
GET
/api/v2/policies/{policy_id}
Get Policy
get_policy_admin_v2_policies__policy_id__get 1 param → 200422
PATCH
/api/v2/policies/{policy_id}
Update Policy
update_policy_admin_v2_policies__policy_id__patch 1 param body → 200422
GET
/api/v2/policies
List Policies
list_policies_admin_v2_policies_get 6 params → 200422
GET
/api/v2/policies/{policy_id}/revisions
List Policy Revisions
list_policy_revisions_admin_v2_policies__policy_id__revisions_get 4 params → 200422
POST
/api/v2/policies/validate
Validate Policy
validate_policy_admin_v2_policies_validate_post body → 200422

Schemas 29

The contract defines 29 schemas that model the data the API accepts and returns. The most detailed are PolicyDetail (14 properties), PolicySummary (13 properties), UpdatePolicy (7 properties), PolicyRevisionSummary (7 properties). Each schema is shown below with its type and property counts.

UpdatePolicy
object
Request body for partial updates to an existing policy.
7 properties
OperatorNone-Output
object
1 property 1 required
FilterCategory
object
Category of filter options for the advanced filter UI.
3 properties 2 required
ValidationError
object
5 properties 3 required
PolicyDetail
object
Detailed representation of a policy including rules.
14 properties 9 required
OperatorAny-Input
object
1 property 1 required
PolicyRule-Output
object
Represents a single policy rule with compatible conditions.
5 properties
PaginationResponse_PolicySummary_
object
2 properties 2 required
FilterOption
object
Individual filter option.
2 properties 2 required
PolicyDetailResponse
object
Envelope for detail responses.
1 property 1 required
PolicyRevisionSummary
object
Summary of a policy revision.
7 properties 5 required
Expression
object
1 property 1 required
OperatorAll-Input
object
1 property 1 required
OperatorAll-Output
object
1 property 1 required
ConditionOf-Input
object
1 property 1 required
ValidatePolicyResponse
object
Response for policy validation.
3 properties 2 required
HTTPValidationError
object
1 property
PolicyRule-Input
object
Represents a single policy rule with compatible conditions.
5 properties
ValidatePolicyRequest
object
Request body for validating a policy before creation.
4 properties 1 required
PolicySummaryResponse
object
Summary counts of policies by status.
5 properties
PolicyStatus
string
Policy lifecycle status.
ConditionOf-Output
object
1 property 1 required
PolicyRuleCondition-Output
object
1 property 1 required
PaginationMeta
object
Pagination metadata.
6 properties 6 required
PolicySummary
object
Summary row used for policy list views.
13 properties 6 required
OperatorNone-Input
object
1 property 1 required
OperatorAny-Output
object
1 property 1 required
PaginationResponse_PolicyRevisionSummary_
object
2 properties 2 required
PolicyRuleCondition-Input
object
1 property 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

barndoor-policies-api-openapi.yml Raw ↑

Other APIs Barndoor publishes across the network.

Barndoor Python SDK
Barndoor TypeScript SDK
Barndoor Go SDK
Official MCP Rust SDK
Cerbos Rust SDK
MCP OAuth Compliance Suite
Barndoor + Crew AI Example
Barndoor Agents API
Barndoor Connections API
Barndoor MCP Proxy API
Barndoor Policy API
Barndoor Servers API
Where this information came from

This is an independent, third-party profile of Barndoor Policies API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.