Resolve Access

Resolve why (and how) a subject can access a resource.

allowed is computed via the graph backend; paths are derived by traversing workspace relationships directly so the UI can render the derivation.

post/v1/access-control/resolve

Request body

resource_idstring required

resource_kind'skill' | 'collection' | 'mcp' | 'agent' required

subject_idstring required

Successful Response

allowedboolean required

effective_relationstring nullable required

verbstring required