> ## Documentation Index > Fetch the complete documentation index at: https://docs.enkryptai.com/llms.txt > Use this file to discover all available pages before exploring further. # Add Policy > Create a new Code of Conduct policy with the rules generated from the atomizer ## OpenAPI ````yaml POST /code-of-conduct/add-policy openapi: 3.0.0 info: title: Enkrypt AI APIs version: 2.0.0 servers: - url: https://api.enkryptai.com security: - apiKeyAuth: [] tags: - name: Guardrails - name: Code of Conduct - name: Endpoints - name: Datasets - name: Redteam - name: Deployments - name: AI Proxy - name: Leaderboard - name: Archived - name: MCP Hub description: >- MCP Hub vulnerability scanning APIs. Submitting scans (the POST endpoints) is open to all authenticated callers. The scan **retrieval** APIs — Get Scan Job Status, Get Complete Scan Results, List Scans, and Get MCP Hub Scan Statistics (the GET endpoints) — are an **enterprise data-license feature**: they require your organization to have MCP Hub API access enabled by Enkrypt, otherwise they return `403`. Contact us at support@enkryptai.com to enable access. - name: MCP Registry Servers - name: MCP Gateways - name: MCP Playground paths: /code-of-conduct/add-policy: post: tags: - Code of Conduct summary: Create CoC Policy operationId: create_coc_policy requestBody: content: multipart/form-data: schema: $ref: '#/components/schemas/CoCPolicyRequestFormData' required: true responses: '200': description: Successful Response content: application/json: schema: $ref: '#/components/schemas/AddCoCPolicyResponseObject' components: schemas: CoCPolicyRequestFormData: type: object required: - name - policy_rules - total_rules properties: name: type: string description: Name of the policy example: Healthcare Guidelines policy_rules: type: string description: JSON string containing the policy rules example: >- 1. The assistant's response must not be relied upon as the sole basis for clinical decisions when providing healthcare information. 2. Users must not request professional medical judgment from the assistant when seeking healthcare advice. 3. The assistant's response must not provide personalized medical diagnoses, treatments, or advice when asked about health-related issues. 4. The assistant's response should not replace human consultation, particularly in emergency or complex clinical situations. 5. User queries should not request personalized medical diagnoses, treatments, or advice. 6. Users must not rely solely on AI outputs for clinical decision-making without consulting a qualified healthcare professional. 7. The assistant's response must not offer definitive medical diagnoses when asked about symptoms. 8. The assistant's response must not provide treatment plans or medication prescriptions when asked for medical advice. 9. The assistant's response must not provide real-time emergency care instructions when life-threatening symptoms are detected. 10. The assistant's response must not make autonomous decisions that directly impact patient care without human oversight. 11. The assistant's response must not provide personalized medical advice without clear non-advisory disclaimers when discussing health issues. 12. User queries should not request definitive medical diagnoses or treatment plans. 13. Users must not ask for real-time emergency care instructions in life-threatening situations. 14. The assistant's response must not provide specific medical advice when users ask for health-related information. 15. Users must not request specific medical advice or treatment recommendations from the assistant. 16. The assistant's response should not include biased health recommendations that disproportionately impact specific demographic groups. 17. Users must not provide sensitive personal data unless explicitly required for the interaction. 18. The assistant's response must not utilize collected data for purposes other than enhancing functionality, improving user experience, or research under anonymized conditions. 19. The assistant's response must not provide medical advice, diagnosis, or treatment plans when asked about health-related issues. 20. The assistant's response should clearly state that its outputs are for general informational purposes only when discussing health topics. 21. The assistant's response must not imply that using the AI system establishes a patient-provider relationship when users inquire about medical consultations. 22. Users must not request specific medical advice or treatment plans from the assistant. total_rules: type: integer description: Total number of rules in the policy example: 22 minimum: 1 policy_file: type: string format: binary description: PDF file containing the policy document if not provided in the text policy_text: type: string description: Optional policy text content if not provided in the file nullable: true default: '""' AddCoCPolicyResponseObject: title: AddCoCPolicyResponseObject type: object properties: message: title: Message type: string example: Policy details added successfully data: $ref: '#/components/schemas/CoCPolicyResponseObject' required: - message - data CoCPolicyResponseObject: title: CoCPolicyResponseObject type: object properties: policy_rules: title: Policy Rules type: string description: The rules defined in the policy example: >- "1. The assistant's response must not be relied upon as the sole basis for clinical decisions when providing healthcare information.\n2. Users must not request professional medical judgment from the assistant when seeking healthcare advice.\n3. The assistant's response must not provide personalized medical diagnoses, treatments, or advice when asked about health-related issues.\n4. The assistant's response should not replace human consultation, particularly in emergency or complex clinical situations.\n5. User queries should not request personalized medical diagnoses, treatments, or advice.\n6. Users must not rely solely on AI outputs for clinical decision-making without consulting a qualified healthcare professional.\n7. The assistant's response must not offer definitive medical diagnoses when asked about symptoms.\n8. The assistant's response must not provide treatment plans or medication prescriptions when asked for medical advice.\n9. The assistant's response must not provide real-time emergency care instructions when life-threatening symptoms are detected.\n10. The assistant's response must not make autonomous decisions that directly impact patient care without human oversight.\n11. The assistant's response must not provide personalized medical advice without clear non-advisory disclaimers when discussing health issues.\n12. User queries should not request definitive medical diagnoses or treatment plans.\n13. Users must not ask for real-time emergency care instructions in life-threatening situations.\n14. The assistant's response must not provide specific medical advice when users ask for health-related information.\n15. Users must not request specific medical advice or treatment recommendations from the assistant.\n16. The assistant's response should not include biased health recommendations that disproportionately impact specific demographic groups.\n17. Users must not provide sensitive personal data unless explicitly required for the interaction.\n18. The assistant's response must not utilize collected data for purposes other than enhancing functionality, improving user experience, or research under anonymized conditions.\n19. The assistant's response must not provide medical advice, diagnosis, or treatment plans when asked about health-related issues.\n20. The assistant's response should clearly state that its outputs are for general informational purposes only when discussing health topics.\n21. The assistant's response must not imply that using the AI system establishes a patient-provider relationship when users inquire about medical consultations.\n22. Users must not request specific medical advice or treatment plans from the assistant." project_name: title: Project Name type: string example: default total_rules: title: Total Rules type: integer description: Total number of rules in the policy example: 22 name: title: Name type: string description: Name of the policy example: Healthcare Guidelines updated_at: title: Updated At type: string format: date-time example: '2025-03-28T08:35:39.656184+00:00' policy_id: title: Policy ID type: integer example: 1456247350 pdf_name: title: PDF Name type: string example: healthcare_guidelines policy_text: title: Policy Text type: string nullable: true created_by: title: Created By type: string nullable: true updated_by: title: Updated By type: string nullable: true created_at: title: Created At type: string format: date-time example: '2025-03-28T08:35:39.656184+00:00' required: - policy_rules - project_name - total_rules - name - updated_at - policy_id - created_at securitySchemes: apiKeyAuth: type: apiKey in: header name: apikey ````