Create an SLA policy

Creates an uptime target with an optional monitor or Client scope, rolling window and business hours.

POST https://app.upfour.io/v1/sla-policies

A real request. Sending it changes data in your up4 account.

Authorization

AuthorizationA pls_ key. It stays in this browser tab. Needs report.write.

Body

namerequired target_pctrequired The uptime target in percent, above 0 and at most 100, e.g. 99.9.

More fields4

client_id

degraded_counts_as_violation

monitor_id Scopes the policy to one monitor; without it the policy is the default of its client or Company. window_days The rolling window, 1 to 730 days; 30 when omitted or 0.

1 more field is only available in JSON.

Headers

Idempotency-KeyheaderGenerated automatically when empty. How it works

Sent directly from your browser to https://app.upfour.io/v1. Mutating calls get an automatic Idempotency-Key when the field is empty.

Request

Responsenot sent yet

Fill in a key and press Send request (⌘↵).
The answer appears here.

scope report.write stable Idempotency-Key supported returns 201

Body

application/json required 7 fields

namestringrequired

target_pctnumberrequired

The uptime target in percent, above 0 and at most 100, e.g. 99.9.

All other fields7 fields

business_hoursBusinessHours · nullable

Restricts the measurement to these hours; without it the policy measures around the clock.

Nested fields 2 fields

Field	Type	Description
`days` optional	map of string[][]	The weekdays measured, keyed by ISO weekday from 1 (Monday) to 7 (Sunday); each lists its [start, end) windows as HH:MM pairs in tz. A day with no windows is excluded; at least one window is required, and windows of a day may not overlap.
`tz` optional	string	IANA time zone name; UTC when empty.

client_iduuid · nullable

degraded_counts_as_violationboolean

monitor_iduuid · nullable

Scopes the policy to one monitor; without it the policy is the default of its client or Company.

window_daysinteger

The rolling window, 1 to 730 days; 30 when omitted or 0.

Returns

A successful request returns 201 with application/json.

Response fields 1 top-level fields

Field Type Description

data SLAPolicy

SLAPolicy · 14 fields

Field Type Description

created_at string (date-time)

degraded_counts_as_violation boolean

id uuid

name string

organization_id uuid

target_pct number The uptime target in percent.

updated_at string (date-time)

window_days integer

business_hours BusinessHoursResponse

BusinessHoursResponse · 2 fields

Field	Type	Description
`days`	map of string[][] · nullable	The weekdays measured, keyed by ISO weekday from 1 (Monday) to 7 (Sunday); each lists its [start, end) windows as HH:MM pairs in tz. A day with no windows is excluded; at least one window is required, and windows of a day may not overlap.
`tz`	string	IANA time zone name; UTC when empty.

client_id uuid

created_by uuid

monitor_id uuid

Errors

Only the errors this operation can return. Every error uses the same envelope.

Status	Code	Meaning
400	`bad_request`	The request is malformed or fails validation.
404	`not_found`	The requested resource does not exist or is outside the caller's scope.
403	`permission_denied`	The credentials do not permit this action.

Every call can also return unauthorized (401), rate_limit_exceeded (429) or internal_error (500 / 502). See Responses and errors.

curl -s -X POST "https://app.upfour.io/v1/sla-policies" \ -H "Authorization: Bearer $UP4_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "degraded_counts_as_violation": false, "monitor_id": "00000000-0000-4000-8000-000000000001", "name": "Checkout 99.9", "target_pct": 99.9, "window_days": 30 }'

const res = await fetch("https://app.upfour.io/v1/sla-policies", { method: "POST", headers: { Authorization: `Bearer ${process.env.UP4_API_KEY}`, "Content-Type": "application/json", }, body: JSON.stringify({ degraded_counts_as_violation: false, monitor_id: "00000000-0000-4000-8000-000000000001", name: "Checkout 99.9", target_pct: 99.9, window_days: 30, }), }); console.log(res.status, await res.json());

import os import requests res = requests.post( "https://app.upfour.io/v1/sla-policies", headers={"Authorization": f"Bearer {os.environ['UP4_API_KEY']}"}, json={ "degraded_counts_as_violation": False, "monitor_id": "00000000-0000-4000-8000-000000000001", "name": "Checkout 99.9", "target_pct": 99.9, "window_days": 30, }, ) print(res.status_code, res.json())

package main import ( "fmt" "io" "net/http" "os" "strings" ) func main() { payload := strings.NewReader(`{ "degraded_counts_as_violation": false, "monitor_id": "00000000-0000-4000-8000-000000000001", "name": "Checkout 99.9", "target_pct": 99.9, "window_days": 30 }`) req, _ := http.NewRequest("POST", "https://app.upfour.io/v1/sla-policies", payload) req.Header.Set("Authorization", "Bearer "+os.Getenv("UP4_API_KEY")) req.Header.Set("Content-Type", "application/json") res, err := http.DefaultClient.Do(req) if err != nil { panic(err) } defer res.Body.Close() out, _ := io.ReadAll(res.Body) fmt.Println(res.StatusCode, string(out)) }

<?php $payload = <<<'JSON' { "degraded_counts_as_violation": false, "monitor_id": "00000000-0000-4000-8000-000000000001", "name": "Checkout 99.9", "target_pct": 99.9, "window_days": 30 } JSON; $ch = curl_init("https://app.upfour.io/v1/sla-policies"); curl_setopt_array($ch, [ CURLOPT_CUSTOMREQUEST => "POST", CURLOPT_RETURNTRANSFER => true, CURLOPT_HTTPHEADER => [ "Authorization: Bearer " . getenv("UP4_API_KEY"), "Content-Type: application/json", ], CURLOPT_POSTFIELDS => $payload, ]); $response = curl_exec($ch); echo curl_getinfo($ch, CURLINFO_RESPONSE_CODE), " ", $response, "\n"; curl_close($ch);

{ "data": { "created_at": "2026-10-27T09:00:00Z", "created_by": "00000000-0000-4000-8000-000000000002", "degraded_counts_as_violation": false, "id": "00000000-0000-4000-8000-000000000003", "monitor_id": "00000000-0000-4000-8000-000000000001", "name": "Checkout 99.9", "organization_id": "00000000-0000-4000-8000-000000000004", "target_pct": 99.9, "updated_at": "2026-10-27T09:00:00Z", "window_days": 30 } }