Legacy endpoint API Policy