---
title: "Create"
method: POST
path: "/api/v1/recovery-policies"
tags: ["Recovery Policy"]
---

# Create

`POST /api/v1/recovery-policies`

Create a recovery policy.

## Request body

- C1ApiCredentialInventoryV1RecoveryPolicyServiceCreateRequest — The RecoveryPolicyServiceCreateRequest message.
  - `allowedRecoveryTypes` string[], nullable — The credential types a user may use to recover access.
  - `displayName` string, required — A human-readable name for the policy.
  - `minRecoveryAuthLevel` 'AUTH_LEVEL_UNSPECIFIED' | 'AUTH_LEVEL_NONE' | 'AUTH_LEVEL_SINGLE_FACTOR' | 'AUTH_LEVEL_MULTI_FACTOR' | 'AUTH_LEVEL_PHR' | 'AUTH_LEVEL_PHRH' — The minimum assurance level a recovery ceremony must reach.
  - `priority` integer — When a user matches more than one policy, the policy with the highest priority applies.
  - `revokeOnRecovery` boolean — When true, a successful recovery revokes existing credentials and forces re-enrollment.

## Response `200`

Successful response

- C1ApiCredentialInventoryV1RecoveryPolicyServiceCreateResponse — The RecoveryPolicyServiceCreateResponse message.
  - `recoveryPolicy` C1ApiCredentialInventoryV1RecoveryPolicy — RecoveryPolicy defines how users recover access when they lose their credentials.
    - `allowedRecoveryTypes` string[], nullable — The credential types a user may use to recover access under this policy.
    - `createdAt` string, date-time, nullable
    - `deletedAt` string, date-time, nullable
    - `displayName` string — A human-readable name for the policy.
    - `id` string — Unique identifier for the policy.
    - `isBuiltin` boolean — True for built-in policies provided by ConductorOne. Built-in policies cannot be edited or deleted.
    - `minRecoveryAuthLevel` 'AUTH_LEVEL_UNSPECIFIED' | 'AUTH_LEVEL_NONE' | 'AUTH_LEVEL_SINGLE_FACTOR' | 'AUTH_LEVEL_MULTI_FACTOR' | 'AUTH_LEVEL_PHR' | 'AUTH_LEVEL_PHRH' — The minimum assurance level a recovery ceremony must reach for this policy.
    - `priority` integer — When a user matches more than one policy, the policy with the highest priority applies.
    - `revokeOnRecovery` boolean — When true, a successful recovery revokes the user's existing credentials and forces re-enrollment. When false, recovery adds to the existing set.
    - `updatedAt` string, date-time, nullable

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)