Create AI Session Analyzer Rule

Create a new AI session analyzer rule

POST /ai/session-analyzer/rules

Create AI Session Analyzer Rule

cURL

curl --request POST \
  --url https://use.hoop.dev/api/ai/session-analyzer/rules \
  --header 'Content-Type: application/json' \
  --data '
{
  "connection_names": [
    "pgdemo",
    "mysql-prod"
  ],
  "name": "block-dangerous-queries",
  "risk_evaluation": {
    "high_risk_action": "block_execution",
    "low_risk_action": "allow_execution",
    "medium_risk_action": "allow_execution"
  },
  "agentic": false,
  "approval_ttl_sec": 600,
  "custom_prompt": "Treat any query that touches the payments schema as high risk.",
  "description": "Blocks high-risk SQL commands",
  "pending_ttl_sec": 900,
  "reviewers_groups": [
    "dba-leads"
  ],
  "sidecar_spec": {},
  "sidecar_targets": [
    {
      "listener_name": "appdb",
      "sidecar_id": "15B5A2FD-0706-4A47-B1CF-B93CCFC5B3D7"
    }
  ]
}
'

201

{
  "agentic": false,
  "approval_ttl_sec": 600,
  "connection_names": [
    "pgdemo",
    "mysql-prod"
  ],
  "created_at": "2024-07-25T15:56:35.317601Z",
  "custom_prompt": "Treat any query that touches the payments schema as high risk.",
  "description": "Blocks high-risk SQL commands",
  "id": "15B5A2FD-0706-4A47-B1CF-B93CCFC5B3D7",
  "managed_by": "hoop",
  "name": "block-dangerous-queries",
  "pending_ttl_sec": 900,
  "reviewers_groups": [
    "dba-leads"
  ],
  "risk_evaluation": {
    "high_risk": {
      "action": "require_access_request",
      "access_request_rule_name": "prod-approvals"
    },
    "high_risk_action": "block_execution",
    "low_risk": {
      "action": "require_access_request",
      "access_request_rule_name": "prod-approvals"
    },
    "low_risk_action": "allow_execution",
    "medium_risk": {
      "action": "require_access_request",
      "access_request_rule_name": "prod-approvals"
    },
    "medium_risk_action": "allow_execution"
  },
  "sidecar_spec": {},
  "sidecar_targets": [
    {
      "listener_name": "appdb",
      "sidecar_id": "15B5A2FD-0706-4A47-B1CF-B93CCFC5B3D7"
    }
  ],
  "updated_at": "2024-07-25T15:56:35.317601Z"
}

Body

application/json

The request body resource

connection_names · string[] · required

Connection names this rule applies to

Example:

["pgdemo", "mysql-prod"]

name · string · required

Unique name for the rule

Example:

"block-dangerous-queries"

risk_evaluation · object · required

Risk evaluation actions per level

Show child attributes

agentic · boolean

When true, the analyzer runs an agentic tool-calling loop over past sessions and resource metadata before classifying.

Example:

false

approval_ttl_sec · integer

Seconds an approval lasts from the approval, 60 to 604800. The same rules as pending_ttl_sec

Example:

600

custom_prompt · string

Optional extra instructions appended to the default system prompt

Example:

"Treat any query that touches the payments schema as high risk."

description · string

Optional description

Example:

"Blocks high-risk SQL commands"

pending_ttl_sec · integer

Seconds a held statement's approval request may wait for a decision, 60 to 604800. Read only while sidecar_spec holds under its own approval rule. Absent keeps, 0 clears

Example:

900

reviewers_groups · string[]

ReviewersGroups are the groups whose members may release a statement this rule holds for approval. Absent keeps the groups already set; with none set the admin group approves.

Read only while sidecar_spec holds a statement.

Example:

["dba-leads"]

sidecar_spec · object

SidecarSpec is this rule in the SIDECAR's own vocabulary, which the gateway's fields above do not share: a trigger, risk actions spelled allow / warn / block / defer, and the per-lane cost overrides. It IS the analyzer block the listener receives.

Omitted on a rule no sidecar runs.

sidecar_targets · object[]

SidecarTargets names the sidecar LISTENERS that must run this analysis. One block per listener: two rules bound to one listener is refused rather than merged.

A POINTER because absent and empty are different instructions: absent leaves the bindings exactly as they are, and [] unbinds the rule from every sidecar. Without that distinction any write that did not mention the field -- a script fixing a typo, the gateway's own UI, an MCP call -- would silently unbind a rule from the whole fleet.

Show child attributes

Response

201

application/json

Created

agentic · boolean

When true, the analyzer runs an agentic tool-calling loop over past sessions and resource metadata before classifying.

Example:

false

approval_ttl_sec · integer

Seconds an approval lasts from the approval. Present as pending_ttl_sec is

Example:

600

connection_names · string[]

Connection names this rule applies to

Example:

["pgdemo", "mysql-prod"]

created_at · string · read-only

The time the resource was created

Example:

"2024-07-25T15:56:35.317601Z"

custom_prompt · string

Optional extra instructions appended to the default system prompt

Example:

"Treat any query that touches the payments schema as high risk."

description · string

Optional description

Example:

"Blocks high-risk SQL commands"

id · string<uuid> · read-only

The resource identifier

Example:

"15B5A2FD-0706-4A47-B1CF-B93CCFC5B3D7"

managed_by · string · read-only

Set to "hoop" when the rule is materialized and lifecycle-managed by a protection profile; managed rules are read-only through this API

Example:

"hoop"

name · string

Unique name for the rule

Example:

"block-dangerous-queries"

pending_ttl_sec · integer

Seconds a held statement's approval request may wait for a decision. Present only while the rule holds and the limit is set

Example:

900

reviewers_groups · string[]

The groups whose members may release a statement this rule holds. Present while the rule holds.

Example:

["dba-leads"]

risk_evaluation · object

Risk evaluation actions per level

Show child attributes

sidecar_spec · object

SidecarSpec is this rule in the sidecar's own vocabulary; see the request type. Present when the rule carries one.

sidecar_targets · object[]

The sidecar listeners this rule is bound to, and therefore distributed to

Show child attributes

updated_at · string · read-only

The time the resource was updated

Example:

"2024-07-25T15:56:35.317601Z"