> For clean Markdown content of this page, append .md to this URL. For the complete documentation index, see https://learning.postman.com/llms.txt.

# Configure a plugin

Policies let you enforce governance, access controls, and safe data handling for agent and API interactions.

You can manage your plugin instances under **Policies > Plugin instances**.

<img alt="Plugin instances" src="https://assets.postman.com/postman-docs/v12/fabric-gateway-plugin-instances.png" />

## Create a new plugin instance

To create a new plugin instance, do the following:

1. Click **New instance**.
2. Set the following fields:

   * **Name** — Unique within the tenant.
   * **Plugin** — The policy to attach. The catalog includes `cors`, `token-counter`, `tool-search`, `access-control`, `access-log`, `agent-approval`, `agent-audit`, `agent-scope-gate`, `agent-static-deny`, `pmak-auth`, `rate-limit`, `secret-injector`, `key-auth`, `jwt-auth`, and `llm-router`, among others.
   * **Scope kind** — `global` or `route`. If `route`, also set **Scope name**.
3. Click **Save**.