@barndoor-ai/sdk 2.26.0-dev.g5124911 → 2.27.0-dev.ga753d9c

package/dist/esm/apis/DlpApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -19,6 +19,7 @@ import { CreateAllowListEntryRequestToJSON, } from '../models/CreateAllowListEnt
 import { CreateCustomDetectionTypeRequestToJSON, } from '../models/CreateCustomDetectionTypeRequest.js';
 import { CreateDetectionEngineRequestToJSON, } from '../models/CreateDetectionEngineRequest.js';
 import { CreateEnforcementPolicyRequestToJSON, } from '../models/CreateEnforcementPolicyRequest.js';
+import { CreateMcpPolicyRequestToJSON, } from '../models/CreateMcpPolicyRequest.js';
 import { CustomDetectionTypeResponseFromJSON, } from '../models/CustomDetectionTypeResponse.js';
 import { CustomDetectionTypesResponseFromJSON, } from '../models/CustomDetectionTypesResponse.js';
 import { DetectionEngineResponseFromJSON, } from '../models/DetectionEngineResponse.js';
@@ -31,9 +32,13 @@ import { FieldControlPoliciesResponseFromJSON, } from '../models/FieldControlPol
 import { FieldControlPolicyResponseFromJSON, } from '../models/FieldControlPolicyResponse.js';
 import { GoogleImpersonationConfigResponseFromJSON, } from '../models/GoogleImpersonationConfigResponse.js';
 import { GoogleImpersonationValidationResponseFromJSON, } from '../models/GoogleImpersonationValidationResponse.js';
+import { McpBaselinePolicyResponseFromJSON, } from '../models/McpBaselinePolicyResponse.js';
+import { McpPoliciesResponseFromJSON, } from '../models/McpPoliciesResponse.js';
+import { McpPolicyResponseFromJSON, } from '../models/McpPolicyResponse.js';
 import { OrgConfigResponseFromJSON, } from '../models/OrgConfigResponse.js';
 import { PaginatedResponseAllowListEntryResponseFromJSON, } from '../models/PaginatedResponseAllowListEntryResponse.js';
 import { ProviderConnectionResponseFromJSON, } from '../models/ProviderConnectionResponse.js';
+import { PutMcpBaselinePolicyRequestToJSON, } from '../models/PutMcpBaselinePolicyRequest.js';
 import { ResolvedProtectionResponseFromJSON, } from '../models/ResolvedProtectionResponse.js';
 import { SetCatalogUnlistedTableActionRequestToJSON, } from '../models/SetCatalogUnlistedTableActionRequest.js';
 import { TestProcessTextRequestToJSON, } from '../models/TestProcessTextRequest.js';
@@ -42,6 +47,7 @@ import { UpdateCustomDetectionTypeRequestToJSON, } from '../models/UpdateCustomD
 import { UpdateDetectionEngineRequestToJSON, } from '../models/UpdateDetectionEngineRequest.js';
 import { UpdateEnforcementPolicyRequestToJSON, } from '../models/UpdateEnforcementPolicyRequest.js';
 import { UpdateFieldControlPolicyRequestToJSON, } from '../models/UpdateFieldControlPolicyRequest.js';
+import { UpdateMcpPolicyRequestToJSON, } from '../models/UpdateMcpPolicyRequest.js';
 import { UpdateOrgConfigRequestToJSON, } from '../models/UpdateOrgConfigRequest.js';
 import { UpsertConnectionRequestToJSON, } from '../models/UpsertConnectionRequest.js';
 import { UpsertFieldControlPolicyRequestToJSON, } from '../models/UpsertFieldControlPolicyRequest.js';
@@ -257,6 +263,7 @@ export class DlpApi extends runtime.BaseAPI {
         };
     }
     /**
+     * Targets MCP servers, model providers, or both (`target`). Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), MCP-targeted writes here are refused with 409 -- create or edit an MCP policy instead; model-provider policies are unaffected.
      * Create an enforcement policy
      */
     async createEnforcementPolicyRaw(requestParameters, initOverrides) {
@@ -265,12 +272,70 @@ export class DlpApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => EnforcementPolicyResponseFromJSON(jsonValue));
     }
     /**
+     * Targets MCP servers, model providers, or both (`target`). Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), MCP-targeted writes here are refused with 409 -- create or edit an MCP policy instead; model-provider policies are unaffected.
      * Create an enforcement policy
      */
     async createEnforcementPolicy(requestParameters, initOverrides) {
         const response = await this.createEnforcementPolicyRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for createMcpPolicy without sending the request
+     */
+    async createMcpPolicyRequestOpts(requestParameters) {
+        if (requestParameters['createMcpPolicyRequest'] == null) {
+            throw new runtime.RequiredError('createMcpPolicyRequest', 'Required parameter "createMcpPolicyRequest" was null or undefined when calling createMcpPolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-policies`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: CreateMcpPolicyRequestToJSON(requestParameters['createMcpPolicyRequest']),
+        };
+    }
+    /**
+     * Creates a policy covering the given MCP server ids; each server belongs to at most one policy (the Baseline policy covers every server left out). Each rule names a `runtime_boundary` (`TOOL_INPUT`, `TOOL_OUTPUT` or `BOTH`), an `action`, the detection engines that trigger it, and optional `agent_scope` / `principal_scope` restrictions (`mode: ALL` by default; `ONLY` or `EXCEPT` with explicit agent or group/role ids otherwise). Refused with 409 while the organization is still on `LEGACY`.
+     * Create an MCP policy for one or more servers
+     */
+    async createMcpPolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.createMcpPolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => McpPolicyResponseFromJSON(jsonValue));
+    }
+    /**
+     * Creates a policy covering the given MCP server ids; each server belongs to at most one policy (the Baseline policy covers every server left out). Each rule names a `runtime_boundary` (`TOOL_INPUT`, `TOOL_OUTPUT` or `BOTH`), an `action`, the detection engines that trigger it, and optional `agent_scope` / `principal_scope` restrictions (`mode: ALL` by default; `ONLY` or `EXCEPT` with explicit agent or group/role ids otherwise). Refused with 409 while the organization is still on `LEGACY`.
+     * Create an MCP policy for one or more servers
+     */
+    async createMcpPolicy(requestParameters, initOverrides) {
+        const response = await this.createMcpPolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for deleteAllowListEntry without sending the request
      */
@@ -470,6 +535,7 @@ export class DlpApi extends runtime.BaseAPI {
         };
     }
     /**
+     * Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), deleting an MCP-targeted policy is refused with 409 -- delete the corresponding MCP policy instead; model-provider policies are unaffected.
      * Delete an enforcement policy
      */
     async deleteEnforcementPolicyRaw(requestParameters, initOverrides) {
@@ -478,6 +544,7 @@ export class DlpApi extends runtime.BaseAPI {
         return new runtime.VoidApiResponse(response);
     }
     /**
+     * Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), deleting an MCP-targeted policy is refused with 409 -- delete the corresponding MCP policy instead; model-provider policies are unaffected.
      * Delete an enforcement policy
      */
     async deleteEnforcementPolicy(requestParameters, initOverrides) {
@@ -536,6 +603,61 @@ export class DlpApi extends runtime.BaseAPI {
     async deleteFieldControlPolicy(requestParameters, initOverrides) {
         await this.deleteFieldControlPolicyRaw(requestParameters, initOverrides);
     }
+    /**
+     * Creates request options for deleteMcpPolicy without sending the request
+     */
+    async deleteMcpPolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling deleteMcpPolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-policies/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Deletes the policy; every server it covered is immediately governed by the Baseline policy instead. The Baseline policy itself can\'t be deleted through this route.
+     * Delete an MCP policy; its servers fall back to the Baseline policy
+     */
+    async deleteMcpPolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.deleteMcpPolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Deletes the policy; every server it covered is immediately governed by the Baseline policy instead. The Baseline policy itself can\'t be deleted through this route.
+     * Delete an MCP policy; its servers fall back to the Baseline policy
+     */
+    async deleteMcpPolicy(requestParameters, initOverrides) {
+        await this.deleteMcpPolicyRaw(requestParameters, initOverrides);
+    }
     /**
      * Creates request options for deleteProviderConnection without sending the request
      */
@@ -856,6 +978,114 @@ export class DlpApi extends runtime.BaseAPI {
         const response = await this.getFieldControlPolicyRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for getMcpBaselinePolicy without sending the request
+     */
+    async getMcpBaselinePolicyRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-baseline-policy`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Returns `policy: null` until the Baseline policy\'s first save -- until then no rule applies to servers that have no policy of their own.
+     * Fetch the Baseline policy, which covers every server without its own policy
+     */
+    async getMcpBaselinePolicyRaw(initOverrides) {
+        const requestOptions = await this.getMcpBaselinePolicyRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => McpBaselinePolicyResponseFromJSON(jsonValue));
+    }
+    /**
+     * Returns `policy: null` until the Baseline policy\'s first save -- until then no rule applies to servers that have no policy of their own.
+     * Fetch the Baseline policy, which covers every server without its own policy
+     */
+    async getMcpBaselinePolicy(initOverrides) {
+        const response = await this.getMcpBaselinePolicyRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for getMcpPolicy without sending the request
+     */
+    async getMcpPolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling getMcpPolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-policies/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Returns the policy\'s servers and rules. Each rule\'s `agent_scope` and `principal_scope` default to `mode: ALL` (every AI agent, or every user); `ONLY`/`EXCEPT` narrow it to the given registry agent ids, or IdP group/role ids.
+     * Fetch one MCP policy
+     */
+    async getMcpPolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.getMcpPolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => McpPolicyResponseFromJSON(jsonValue));
+    }
+    /**
+     * Returns the policy\'s servers and rules. Each rule\'s `agent_scope` and `principal_scope` default to `mode: ALL` (every AI agent, or every user); `ONLY`/`EXCEPT` narrow it to the given registry agent ids, or IdP group/role ids.
+     * Fetch one MCP policy
+     */
+    async getMcpPolicy(requestParameters, initOverrides) {
+        const response = await this.getMcpPolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for getProviderConnection without sending the request
      */
@@ -1281,6 +1511,58 @@ export class DlpApi extends runtime.BaseAPI {
         const response = await this.listFieldControlPoliciesRaw(initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for listMcpPolicies without sending the request
+     */
+    async listMcpPoliciesRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-policies`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Returns every MCP policy, the Baseline policy first and the rest by name, plus `policy_model`: `SERVER_POLICIES` once the organization manages MCP traffic as one policy per MCP server with a Baseline fallback, or `LEGACY` while it still manages MCP traffic through `/enforcement-policies`. These routes are read-only on `LEGACY` -- writes return 409 until the organization converts.
+     * List the organization\'s MCP policies
+     */
+    async listMcpPoliciesRaw(initOverrides) {
+        const requestOptions = await this.listMcpPoliciesRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => McpPoliciesResponseFromJSON(jsonValue));
+    }
+    /**
+     * Returns every MCP policy, the Baseline policy first and the rest by name, plus `policy_model`: `SERVER_POLICIES` once the organization manages MCP traffic as one policy per MCP server with a Baseline fallback, or `LEGACY` while it still manages MCP traffic through `/enforcement-policies`. These routes are read-only on `LEGACY` -- writes return 409 until the organization converts.
+     * List the organization\'s MCP policies
+     */
+    async listMcpPolicies(initOverrides) {
+        const response = await this.listMcpPoliciesRaw(initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for listProviderConnections without sending the request
      */
@@ -1487,6 +1769,63 @@ export class DlpApi extends runtime.BaseAPI {
         const response = await this.providerConnectionGoogleImpersonationConfigRaw(initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for putMcpBaselinePolicy without sending the request
+     */
+    async putMcpBaselinePolicyRequestOpts(requestParameters) {
+        if (requestParameters['putMcpBaselinePolicyRequest'] == null) {
+            throw new runtime.RequiredError('putMcpBaselinePolicyRequest', 'Required parameter "putMcpBaselinePolicyRequest" was null or undefined when calling putMcpBaselinePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-baseline-policy`;
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: PutMcpBaselinePolicyRequestToJSON(requestParameters['putMcpBaselinePolicyRequest']),
+        };
+    }
+    /**
+     * Replaces the Baseline policy\'s whole rule set (keep an existing rule by passing its `id` back); there is no partial update. The Baseline policy has no server list of its own -- it covers whatever servers no other policy claims.
+     * Replace the Baseline policy\'s rules, creating it on first save
+     */
+    async putMcpBaselinePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.putMcpBaselinePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => McpPolicyResponseFromJSON(jsonValue));
+    }
+    /**
+     * Replaces the Baseline policy\'s whole rule set (keep an existing rule by passing its `id` back); there is no partial update. The Baseline policy has no server list of its own -- it covers whatever servers no other policy claims.
+     * Replace the Baseline policy\'s rules, creating it on first save
+     */
+    async putMcpBaselinePolicy(requestParameters, initOverrides) {
+        const response = await this.putMcpBaselinePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for setFieldControlCatalogUnlistedTableAction without sending the request
      */
@@ -1821,6 +2160,7 @@ export class DlpApi extends runtime.BaseAPI {
         };
     }
     /**
+     * Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), updates to an MCP-targeted policy are refused with 409 -- edit the corresponding MCP policy instead; model-provider policies are unaffected.
      * Update an enforcement policy
      */
     async updateEnforcementPolicyRaw(requestParameters, initOverrides) {
@@ -1829,6 +2169,7 @@ export class DlpApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => EnforcementPolicyResponseFromJSON(jsonValue));
     }
     /**
+     * Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), updates to an MCP-targeted policy are refused with 409 -- edit the corresponding MCP policy instead; model-provider policies are unaffected.
      * Update an enforcement policy
      */
     async updateEnforcementPolicy(requestParameters, initOverrides) {
@@ -1894,6 +2235,67 @@ export class DlpApi extends runtime.BaseAPI {
         const response = await this.updateFieldControlPolicyRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for updateMcpPolicy without sending the request
+     */
+    async updateMcpPolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling updateMcpPolicy().');
+        }
+        if (requestParameters['updateMcpPolicyRequest'] == null) {
+            throw new runtime.RequiredError('updateMcpPolicyRequest', 'Required parameter "updateMcpPolicyRequest" was null or undefined when calling updateMcpPolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-policies/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: UpdateMcpPolicyRequestToJSON(requestParameters['updateMcpPolicyRequest']),
+        };
+    }
+    /**
+     * Partial update: omitted fields are left unchanged, and a `rules` list replaces the whole set (keep an existing rule by passing its `id` back). The Baseline policy can\'t be edited here -- use `/mcp-baseline-policy`.
+     * Update an MCP policy\'s name, servers or rules
+     */
+    async updateMcpPolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.updateMcpPolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => McpPolicyResponseFromJSON(jsonValue));
+    }
+    /**
+     * Partial update: omitted fields are left unchanged, and a `rules` list replaces the whole set (keep an existing rule by passing its `id` back). The Baseline policy can\'t be edited here -- use `/mcp-baseline-policy`.
+     * Update an MCP policy\'s name, servers or rules
+     */
+    async updateMcpPolicy(requestParameters, initOverrides) {
+        const response = await this.updateMcpPolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for upsertConnection without sending the request
      */

package/dist/esm/apis/IdentityApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/IdentityApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/LlmGatewayApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/LlmGatewayApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/NotificationApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/NotificationApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/PolicyApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/PolicyApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/RegistryApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/RegistryApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/SystemManagementApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/SystemManagementApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/models/AWSTrustInfoResponse.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/models/AWSTrustInfoResponse.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.26.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).