curl -X PUT "https://app.runtm.com/api/cloud/organizations/org_abc123/allowlist-policy" \
  -H "Authorization: Bearer runtm_xxx" \
  -H "X-Organization-Id: org_abc123" \
  -H "Content-Type: application/json" \
  -d '{
    "default_policy": "deny"
  }'

import requests

org_id = "org_abc123"

resp = requests.put(
    f"https://app.runtm.com/api/cloud/organizations/{org_id}/allowlist-policy",
    headers={
        "Authorization": "Bearer runtm_xxx",
        "X-Organization-Id": org_id,
        "Content-Type": "application/json",
    },
    json={"default_policy": "deny"},
)
print(resp.json())

const orgId = "org_abc123";

const resp = await fetch(
  `https://app.runtm.com/api/cloud/organizations/${orgId}/allowlist-policy`,
  {
    method: "PUT",
    headers: {
      Authorization: "Bearer runtm_xxx",
      "X-Organization-Id": orgId,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({ default_policy: "deny" }),
  }
);
const data = await resp.json();

{
  "organization_id": "org_abc123",
  "default_policy": "deny",
  "updated_at": "2026-05-09T18:00:00Z"
}