diff --git a/data/apps/allow-api-routes.yaml b/data/apps/allow-api-routes.yaml
new file mode 100644
index 00000000..0cc3e3bf
--- /dev/null
+++ b/data/apps/allow-api-routes.yaml
@@ -0,0 +1,6 @@
+- name: allow-api-routes
+  action: ALLOW
+  expression:
+    all:
+    - '!(method == "HEAD" || method == "GET")'
+    - path.startsWith("/api/")
\ No newline at end of file