Allowlist

Add terms to the allowlist to bypass detection for known-safe content. For example, your company name might trigger PII detection — allowlisting it prevents false positives. Entries can be scoped to a specific detection domain or apply globally.

Plan requirement: Allowlist entries are limited by plan — Trial allows 10 entries, Pro and Starter allow up to 200, Education allows 200, Professional allows 1,000, and Enterprise is unlimited. Personal plans do not include allowlist access.

GET

/v1/allowlist

List all allowlisted terms for your organization.

Response

200 OK

{
  "allowlist": [
    {
      "id": "uuid",
      "term": "Acme Corp",
      "domain": "pii",
      "created_at": "2026-01-15T10:00:00Z"
    },
    {
      "id": "uuid",
      "term": "University of Example",
      "domain": null,
      "created_at": "2026-01-14T08:00:00Z"
    }
  ]
}

POST

/v1/allowlist

Add a term to the allowlist.

Request Body

Parameter	Type	Required	Description
`term`	string	Yes	The term to allowlist (case-sensitive)
`domain`	string	No	Scope to a domain: pii, education, cultural, reidentification, injection. Omit for global.

Create Response

201 Created

{
  "entry": {
    "id": "uuid",
    "term": "Acme Corp",
    "domain": "pii",
    "created_at": "2026-01-15T10:00:00Z"
  }
}

Duplicate entries (same term + domain) return a 400 error.

DELETE

/v1/allowlist/:id

Remove a term from the allowlist.

Path Parameters

Parameter	Type	Required	Description
`id`	string	Yes	The allowlist entry ID

Delete Response

200 OK

{ "deleted": true }

Valid Domains

Domain	Description
`pii`	Personal identifiable information (names, SSNs, emails, phone numbers)
`education`	FERPA-protected education records (student IDs, grades, transcripts)
`cultural`	Indigenous cultural knowledge (ceremonies, sacred sites, traditional practices)
`reidentification`	Patterns that could re-identify anonymized individuals
`injection`	Prompt injection and jailbreak attempts

Examples

SDK

// Add a term scoped to PII detection
await armor.addAllowlistEntry({
  term: 'Acme Corp',
  domain: 'pii',
});

// Add a global allowlist entry (all domains)
await armor.addAllowlistEntry({
  term: 'University of Example',
});

// List all entries
const allowlist = await armor.listAllowlist();

// Remove an entry
await armor.removeAllowlistEntry(allowlist[0].id);

cURL — Add

curl -X POST https://indigiarmor.com/v1/allowlist \
  -H "Authorization: Bearer ia_sk_..." \
  -H "Content-Type: application/json" \
  -d '{"term": "Acme Corp", "domain": "pii"}'