# Add a rule binding a secret to host

`POST /v1/proxy/rules`

**In this build:** Real.

**Scope:** `credential.write`

**CLI:** `harebox proxy rule add`

## Request: `ProxyRule`

| Field | Type | Notes |
|---|---|---|
| `id` | `string` |  |
| `secret_ref` (required) | `string` | Built-in secret name or vault path. |
| `host` (required) | `string` |  |
| `path_prefix` | `string` |  |
| `methods` | `array` |  |
| `header` | `string` |  |
| `template` | `string` |  |
| `label_selector` | `string` |  |

## Response: 201

`ProxyRule`

| Field | Type | Notes |
|---|---|---|
| `id` | `string` |  |
| `secret_ref` (required) | `string` | Built-in secret name or vault path. |
| `host` (required) | `string` |  |
| `path_prefix` | `string` |  |
| `methods` | `array` |  |
| `header` | `string` |  |
| `template` | `string` |  |
| `label_selector` | `string` |  |

Errors follow [one format](../errors.html).