Create an org security profile

curl --request POST \
  --url https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "<string>",
  "devin_mcp_read_only": false,
  "enforcement_level": "recommended",
  "git_access_level": "read_write",
  "mcp_config": {
    "servers": [
      "<string>"
    ]
  },
  "net_policy": {
    "allow": [
      {
        "hostname": "<string>"
      }
    ]
  },
  "remove_github_cli_token": true,
  "slack_channel_access": {
    "channels": [
      {
        "channel_id": "<string>",
        "team_id": "<string>"
      }
    ]
  },
  "teams_channel_access": {
    "channels": [
      {
        "channel_id": "<string>",
        "team_id": "<string>"
      }
    ]
  }
}
'

import requests

url = "https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles"

payload = {
    "name": "<string>",
    "devin_mcp_read_only": False,
    "enforcement_level": "recommended",
    "git_access_level": "read_write",
    "mcp_config": { "servers": ["<string>"] },
    "net_policy": { "allow": [{ "hostname": "<string>" }] },
    "remove_github_cli_token": True,
    "slack_channel_access": { "channels": [
            {
                "channel_id": "<string>",
                "team_id": "<string>"
            }
        ] },
    "teams_channel_access": { "channels": [
            {
                "channel_id": "<string>",
                "team_id": "<string>"
            }
        ] }
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    name: '<string>',
    devin_mcp_read_only: false,
    enforcement_level: 'recommended',
    git_access_level: 'read_write',
    mcp_config: {servers: ['<string>']},
    net_policy: {allow: [{hostname: '<string>'}]},
    remove_github_cli_token: true,
    slack_channel_access: {channels: [{channel_id: '<string>', team_id: '<string>'}]},
    teams_channel_access: {channels: [{channel_id: '<string>', team_id: '<string>'}]}
  })
};

fetch('https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => '<string>',
    'devin_mcp_read_only' => false,
    'enforcement_level' => 'recommended',
    'git_access_level' => 'read_write',
    'mcp_config' => [
        'servers' => [
                '<string>'
        ]
    ],
    'net_policy' => [
        'allow' => [
                [
                                'hostname' => '<string>'
                ]
        ]
    ],
    'remove_github_cli_token' => true,
    'slack_channel_access' => [
        'channels' => [
                [
                                'channel_id' => '<string>',
                                'team_id' => '<string>'
                ]
        ]
    ],
    'teams_channel_access' => [
        'channels' => [
                [
                                'channel_id' => '<string>',
                                'team_id' => '<string>'
                ]
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles"

	payload := strings.NewReader("{\n  \"name\": \"<string>\",\n  \"devin_mcp_read_only\": false,\n  \"enforcement_level\": \"recommended\",\n  \"git_access_level\": \"read_write\",\n  \"mcp_config\": {\n    \"servers\": [\n      \"<string>\"\n    ]\n  },\n  \"net_policy\": {\n    \"allow\": [\n      {\n        \"hostname\": \"<string>\"\n      }\n    ]\n  },\n  \"remove_github_cli_token\": true,\n  \"slack_channel_access\": {\n    \"channels\": [\n      {\n        \"channel_id\": \"<string>\",\n        \"team_id\": \"<string>\"\n      }\n    ]\n  },\n  \"teams_channel_access\": {\n    \"channels\": [\n      {\n        \"channel_id\": \"<string>\",\n        \"team_id\": \"<string>\"\n      }\n    ]\n  }\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"name\": \"<string>\",\n  \"devin_mcp_read_only\": false,\n  \"enforcement_level\": \"recommended\",\n  \"git_access_level\": \"read_write\",\n  \"mcp_config\": {\n    \"servers\": [\n      \"<string>\"\n    ]\n  },\n  \"net_policy\": {\n    \"allow\": [\n      {\n        \"hostname\": \"<string>\"\n      }\n    ]\n  },\n  \"remove_github_cli_token\": true,\n  \"slack_channel_access\": {\n    \"channels\": [\n      {\n        \"channel_id\": \"<string>\",\n        \"team_id\": \"<string>\"\n      }\n    ]\n  },\n  \"teams_channel_access\": {\n    \"channels\": [\n      {\n        \"channel_id\": \"<string>\",\n        \"team_id\": \"<string>\"\n      }\n    ]\n  }\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"name\": \"<string>\",\n  \"devin_mcp_read_only\": false,\n  \"enforcement_level\": \"recommended\",\n  \"git_access_level\": \"read_write\",\n  \"mcp_config\": {\n    \"servers\": [\n      \"<string>\"\n    ]\n  },\n  \"net_policy\": {\n    \"allow\": [\n      {\n        \"hostname\": \"<string>\"\n      }\n    ]\n  },\n  \"remove_github_cli_token\": true,\n  \"slack_channel_access\": {\n    \"channels\": [\n      {\n        \"channel_id\": \"<string>\",\n        \"team_id\": \"<string>\"\n      }\n    ]\n  },\n  \"teams_channel_access\": {\n    \"channels\": [\n      {\n        \"channel_id\": \"<string>\",\n        \"team_id\": \"<string>\"\n      }\n    ]\n  }\n}"

response = http.request(request)
puts response.read_body

{
  "created_at": 123,
  "devin_mcp_read_only": true,
  "enforcement_level": "recommended",
  "git_access_level": "read_only",
  "name": "<string>",
  "org_id": "<string>",
  "profile_id": "<string>",
  "remove_github_cli_token": true,
  "updated_at": 123,
  "mcp_config": {
    "servers": [
      "<string>"
    ]
  },
  "net_policy": {
    "allow": [
      {
        "hostname": "<string>"
      }
    ]
  },
  "slack_channel_access": {
    "mode": "none",
    "channels": [
      {
        "channel_id": "<string>",
        "team_id": "<string>"
      }
    ]
  },
  "slack_dm_scope": "disabled",
  "teams_channel_access": {
    "mode": "none",
    "channels": [
      {
        "channel_id": "<string>",
        "team_id": "<string>"
      }
    ]
  },
  "teams_dm_scope": "disabled",
  "teams_group_chat_scope": "disabled"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "error_code": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "error_code": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "error_code": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "error_code": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "error_code": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "error_code": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

POST

v3beta1

organizations

{org_id}

security-profiles

Create an org security profile

curl --request POST \
  --url https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "<string>",
  "devin_mcp_read_only": false,
  "enforcement_level": "recommended",
  "git_access_level": "read_write",
  "mcp_config": {
    "servers": [
      "<string>"
    ]
  },
  "net_policy": {
    "allow": [
      {
        "hostname": "<string>"
      }
    ]
  },
  "remove_github_cli_token": true,
  "slack_channel_access": {
    "channels": [
      {
        "channel_id": "<string>",
        "team_id": "<string>"
      }
    ]
  },
  "teams_channel_access": {
    "channels": [
      {
        "channel_id": "<string>",
        "team_id": "<string>"
      }
    ]
  }
}
'

import requests

url = "https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles"

payload = {
    "name": "<string>",
    "devin_mcp_read_only": False,
    "enforcement_level": "recommended",
    "git_access_level": "read_write",
    "mcp_config": { "servers": ["<string>"] },
    "net_policy": { "allow": [{ "hostname": "<string>" }] },
    "remove_github_cli_token": True,
    "slack_channel_access": { "channels": [
            {
                "channel_id": "<string>",
                "team_id": "<string>"
            }
        ] },
    "teams_channel_access": { "channels": [
            {
                "channel_id": "<string>",
                "team_id": "<string>"
            }
        ] }
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    name: '<string>',
    devin_mcp_read_only: false,
    enforcement_level: 'recommended',
    git_access_level: 'read_write',
    mcp_config: {servers: ['<string>']},
    net_policy: {allow: [{hostname: '<string>'}]},
    remove_github_cli_token: true,
    slack_channel_access: {channels: [{channel_id: '<string>', team_id: '<string>'}]},
    teams_channel_access: {channels: [{channel_id: '<string>', team_id: '<string>'}]}
  })
};

fetch('https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => '<string>',
    'devin_mcp_read_only' => false,
    'enforcement_level' => 'recommended',
    'git_access_level' => 'read_write',
    'mcp_config' => [
        'servers' => [
                '<string>'
        ]
    ],
    'net_policy' => [
        'allow' => [
                [
                                'hostname' => '<string>'
                ]
        ]
    ],
    'remove_github_cli_token' => true,
    'slack_channel_access' => [
        'channels' => [
                [
                                'channel_id' => '<string>',
                                'team_id' => '<string>'
                ]
        ]
    ],
    'teams_channel_access' => [
        'channels' => [
                [
                                'channel_id' => '<string>',
                                'team_id' => '<string>'
                ]
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles"

	payload := strings.NewReader("{\n  \"name\": \"<string>\",\n  \"devin_mcp_read_only\": false,\n  \"enforcement_level\": \"recommended\",\n  \"git_access_level\": \"read_write\",\n  \"mcp_config\": {\n    \"servers\": [\n      \"<string>\"\n    ]\n  },\n  \"net_policy\": {\n    \"allow\": [\n      {\n        \"hostname\": \"<string>\"\n      }\n    ]\n  },\n  \"remove_github_cli_token\": true,\n  \"slack_channel_access\": {\n    \"channels\": [\n      {\n        \"channel_id\": \"<string>\",\n        \"team_id\": \"<string>\"\n      }\n    ]\n  },\n  \"teams_channel_access\": {\n    \"channels\": [\n      {\n        \"channel_id\": \"<string>\",\n        \"team_id\": \"<string>\"\n      }\n    ]\n  }\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"name\": \"<string>\",\n  \"devin_mcp_read_only\": false,\n  \"enforcement_level\": \"recommended\",\n  \"git_access_level\": \"read_write\",\n  \"mcp_config\": {\n    \"servers\": [\n      \"<string>\"\n    ]\n  },\n  \"net_policy\": {\n    \"allow\": [\n      {\n        \"hostname\": \"<string>\"\n      }\n    ]\n  },\n  \"remove_github_cli_token\": true,\n  \"slack_channel_access\": {\n    \"channels\": [\n      {\n        \"channel_id\": \"<string>\",\n        \"team_id\": \"<string>\"\n      }\n    ]\n  },\n  \"teams_channel_access\": {\n    \"channels\": [\n      {\n        \"channel_id\": \"<string>\",\n        \"team_id\": \"<string>\"\n      }\n    ]\n  }\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.devin.ai/v3beta1/organizations/{org_id}/security-profiles")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"name\": \"<string>\",\n  \"devin_mcp_read_only\": false,\n  \"enforcement_level\": \"recommended\",\n  \"git_access_level\": \"read_write\",\n  \"mcp_config\": {\n    \"servers\": [\n      \"<string>\"\n    ]\n  },\n  \"net_policy\": {\n    \"allow\": [\n      {\n        \"hostname\": \"<string>\"\n      }\n    ]\n  },\n  \"remove_github_cli_token\": true,\n  \"slack_channel_access\": {\n    \"channels\": [\n      {\n        \"channel_id\": \"<string>\",\n        \"team_id\": \"<string>\"\n      }\n    ]\n  },\n  \"teams_channel_access\": {\n    \"channels\": [\n      {\n        \"channel_id\": \"<string>\",\n        \"team_id\": \"<string>\"\n      }\n    ]\n  }\n}"

response = http.request(request)
puts response.read_body

{
  "created_at": 123,
  "devin_mcp_read_only": true,
  "enforcement_level": "recommended",
  "git_access_level": "read_only",
  "name": "<string>",
  "org_id": "<string>",
  "profile_id": "<string>",
  "remove_github_cli_token": true,
  "updated_at": 123,
  "mcp_config": {
    "servers": [
      "<string>"
    ]
  },
  "net_policy": {
    "allow": [
      {
        "hostname": "<string>"
      }
    ]
  },
  "slack_channel_access": {
    "mode": "none",
    "channels": [
      {
        "channel_id": "<string>",
        "team_id": "<string>"
      }
    ]
  },
  "slack_dm_scope": "disabled",
  "teams_channel_access": {
    "mode": "none",
    "channels": [
      {
        "channel_id": "<string>",
        "team_id": "<string>"
      }
    ]
  },
  "teams_dm_scope": "disabled",
  "teams_group_chat_scope": "disabled"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "error_code": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "error_code": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "error_code": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "error_code": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "error_code": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "error_code": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

Creates a security profile owned by the organization. Creating a profile does not apply it to anything; bind it as a default with Set org security profile defaults.

Permissions

Requires a service user or personal access token with the ManageSecureModeProfiles permission at the organization level. Tokens used by a running Devin session are rejected, so a session cannot change the profiles that govern it.

Behavior

Only name is required. Profile names must be unique within the organization.
When net_policy is omitted, the profile starts from an allowlist containing only the git integration host (the same starting point as the settings page). An explicit null means the profile has no network opinion, not deny-all.
remove_github_cli_token defaults to true. Keeping the token (false) requires git_access_level: read_write and, when a network policy is set, an allowlist that includes api.github.com.
git_access_level defaults to read_write and enforcement_level to recommended.

Authorizations

Authorization

string

header

required

Service User credential (prefix: cog_)

Path Parameters

org_id

string

required

Organization ID (prefix: org-)

Example:

"org-abc123def456"

Body

application/json

name

string

required

Required string length: 1 - 128

devin_mcp_read_only

boolean

default:false

enforcement_level

enum<string>

default:recommended

Available options:

recommended,

mandatory

git_access_level

enum<string>

default:read_write

Available options:

read_only,

read_write

mcp_config

SecurityProfileMcpConfig · object | null

Show child attributes

net_policy

SecurityProfileNetPolicy · object | null

Omitted = an allow list containing only the git integration host (the same default the Security Profiles UI starts from); explicit null = this profile has no network opinion (it does NOT mean deny-all). Because the default allow list does not include api.github.com, a request with remove_github_cli_token=false must supply net_policy explicitly (or null).

Show child attributes

remove_github_cli_token

boolean

default:true

slack_channel_access

SecurityProfileSlackChannelAccess · object | null

Omitted or null = this profile has no Slack channel opinion (the organization's Slack setting applies).

Show child attributes

slack_dm_scope

enum<string> | null

Omitted or null = this profile has no Slack DM opinion (the organization's Slack setting applies).

Available options:

disabled,

org_members,

workspace

teams_channel_access

SecurityProfileTeamsChannelAccess · object | null

Omitted or null = this profile has no Teams channel opinion (the organization's Teams Default Access applies).

Show child attributes

teams_dm_scope

enum<string> | null

Omitted or null = this profile has no Teams DM opinion (the organization's Teams Default Access applies).

Available options:

disabled,

installed_users

teams_group_chat_scope

enum<string> | null

Omitted or null = this profile has no Teams group-chat opinion (derived from the organization's Teams Default Access like DMs).

Available options:

disabled,

origin_chat

Response

Successful Response

An organization-owned security profile.

created_at

integer

required

devin_mcp_read_only

boolean

required

When true, sessions may only call read-only Devin MCP tools (no session creation, automation management, or other write operations).

enforcement_level

enum<string>

required

recommended profiles can be overridden by descendant bindings; mandatory profiles are a floor that descendant policies only narrow.

Available options:

recommended,

mandatory

git_access_level

enum<string>

required

Available options:

read_only,

read_write

name

string

required

org_id

string

required

profile_id

string

required

The security profile's ID.

remove_github_cli_token

boolean

required

When true, the GitHub CLI token is removed from the session's machine, preventing direct GitHub API access.

updated_at

integer

required

mcp_config

SecurityProfileMcpConfig · object | null

null = this profile has no MCP opinion.

Show child attributes

net_policy

SecurityProfileNetPolicy · object | null

null = this profile has no network opinion (it does NOT mean deny-all).

Show child attributes

slack_channel_access

SecurityProfileSlackChannelAccess · object | null

Ceiling on the Slack channels sessions governed by this profile may read and post in. null = this profile has no opinion and the organization's Slack setting applies.

Show child attributes

slack_dm_scope

enum<string> | null

Ceiling on who may DM Devin in Slack under this profile. null = this profile has no opinion and the organization's Slack setting applies. 'workspace' is narrowed to 'org_members' for enterprise accounts.

Available options:

disabled,

org_members,

workspace

teams_channel_access

SecurityProfileTeamsChannelAccess · object | null

Ceiling on the Microsoft Teams channels sessions governed by this profile may read and post in. null = this profile has no opinion and the organization's Teams Default Access applies.

Show child attributes

teams_dm_scope

enum<string> | null

Ceiling on who Devin may DM in Microsoft Teams under this profile. null = this profile has no opinion and the organization's Teams Default Access applies.

Available options:

disabled,

installed_users

teams_group_chat_scope

enum<string> | null

Ceiling on which Teams group chats Devin may read under this profile; origin_chat = only the group chat the session was started from; null = no opinion, derived from the org's Teams Default Access like DMs.

Available options:

disabled,

origin_chat

Getting Started

Concepts

Agent Lifecycle

Context Management

Environment Management

Automation

Integrations

Analytics

Observability

Devin for Security

Infrastructure

Identity & Access

Configuration

Legacy API v1

Legacy API v2

Create an org security profile

Permissions

Behavior

Authorizations

Path Parameters

Body

Response

​Permissions

​Behavior

Authorizations

Path Parameters

Body

Response

Permissions

Behavior