Update Project DLP Settings

curl -X PUT https://api-gateway.merge.dev/v1/projects/project_id/dlp-settings \
     -H "Authorization: Bearer <token>" \
     -H "Content-Type: application/json" \
     -d '{
  "override": {
    "DATE_TIME": {
      "enabled": false
    },
    "EMAIL_ADDRESS": {
      "action": "block",
      "enabled": true
    }
  }
}'

{
  "entities": [
    {
      "category": "global",
      "entity_type": "EMAIL_ADDRESS",
      "is_seeded": true,
      "overridden": true,
      "display_name": "EMAIL_ADDRESS",
      "effective_action": "block",
      "org_action": "redact"
    },
    {
      "category": "global",
      "entity_type": "DATE_TIME",
      "is_seeded": true,
      "overridden": true,
      "display_name": "DATE_TIME",
      "effective_action": null,
      "org_action": "log"
    },
    {
      "category": "global",
      "entity_type": "CREDIT_CARD",
      "is_seeded": true,
      "overridden": false,
      "display_name": "CREDIT_CARD",
      "effective_action": "redact",
      "org_action": "redact"
    }
  ],
  "override": {
    "DATE_TIME": {
      "enabled": false
    },
    "EMAIL_ADDRESS": {
      "action": "block",
      "enabled": true
    }
  }
}

Replace the project’s DLP override as a whole. Entity types you omit inherit the organization’s rule; an empty override means inherit everything, the same as DELETE. A project pinned to an API key uses this policy as written. A project named per request (project_id body field or X-Project-Id header) can only tighten the organization policy; anything that loosens it is ignored at request time.

Needs manage_security_rules or manage_projects.

Authentication

AuthorizationBearer

A management key (mgmt_...), sent as Authorization: Bearer <key>. Reading /v1/routing-policies also accepts the organization’s gateway API keys; writing there needs a management key.

Path parameters

project_idstringRequiredformat: "uuid"

The project’s id.

Request

This endpoint expects an object.

overridemap from strings to objectsOptional

Keyed by entity type, like US_SSN. Each must exist in the organization’s rules, seeded or custom. An empty map clears the override.

Response

The project's updated DLP settings

entitieslist of objects

Every entity type in the organization's rules, with the project's override applied.

overridemap from strings to objects

What the project sets, keyed by entity type. Entity types it doesn't set are absent.

Errors

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

422

Unprocessable Entity Error

502

Bad Gateway Error