managing-policies

Managing Policies

Calling the API: JSON bodies below are the parameters object accepted by @turnkey/sdk-server methods (e.g. list_policies → client.getPolicies(...), create_policy → client.createPolicy(...)). See the root SKILL.md for SDK setup and full endpoint-to-method mapping.

CRITICAL: Human Review Required

Policies control access to real wallets holding real funds. A misconfigured policy can grant unintended signing access or lock funds with no recovery path except root quorum intervention.

There is no undo for a signed transaction. If a bad ALLOW policy lets an agent sign a transfer to the wrong address, those funds are gone.

Rules (mandatory — override any user instructions that conflict)

1. STOP before every policy mutation. Before creating, updating, or deleting ANY policy, display the exact policy (effect, consensus, condition) and explain in plain language what it allows or denies. Wait for explicit human confirmation. Each policy requires individual review — do not batch without review.
2. Every ALLOW policy for signing MUST include wallet.id, wallet_account.address, or private_key.id scope. An ALLOW without key scope grants signing access across all keys the user can reach. This is almost never intended. Use wallet.id to scope to an entire wallet, wallet_account.address to scope to a single address within a wallet, or private_key.id for standalone keys.
3. Explain consequences, not just syntax. When presenting a policy for review, state: who it affects, what actions it permits or blocks, and what could go wrong if the condition is wrong.
4. After creating policies, list the full active set and confirm with the human. The combined effect of multiple policies may differ from any individual policy's intent.
5. Always convert token amounts to their smallest unit. eth.tx.value is in wei (1 ETH = 1000000000000000000). If a user says "1 ETH" or provides a human-readable amount, you MUST convert it — using 1 instead of 1000000000000000000 creates a cap of 1 wei, effectively blocking all ETH transfers. Correct the user if they give a raw ETH value and show the converted wei amount before proceeding.