1. Docs
  2. API Reference
  3. Bulk evaluate authorization

Bulk evaluate authorization

POST/api/v1/permissions/evaluate/bulk

Authentication

  • Bearer Token Authorization

    JWT access token

  • API Key X-API-Key

    API key for management-tier access

Request body

  • checksEvaluateCheckDto[]*

Code samples

cURLJavaScriptPythonGo
curl -X POST "https://api.canopy.dev/api/v1/permissions/evaluate/bulk" \
  -H "X-API-Key: $CANOPY_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "checks": [
      {
        "identity_id": "string",
        "permission": "string",
        "scope": "node",
        "node_id": "string"
      }
    ]
  }'

Responses

200 Authorization decisions returned
{
  "items": [
    {
      "allowed": false,
      "permission": "string",
      "scope_evaluated": "node",
      "effective_node_id": "string",
      "granting_roles": [
        "string"
      ],
      "denial_reason": "string"
    }
  ]
}

application/json

  • itemsEvaluateResponseDto[]*
401 Invalid or expired token
403 Scoped API key is missing the `permissions.evaluate` scope (full_access keys and admin JWTs are unrestricted)

Returned object

On this page

Related endpoints

GETList permission catalog
POSTRegister new permission(s)
GETGet a permission
PATCHUpdate permission metadata
DELETERemove a permission
POSTEvaluate authorization