---
title: "Access Evaluations API"
method: POST
path: "/access/v1/evaluations"
tags: ["authzen"]
---

# Access Evaluations API

`POST /access/v1/evaluations`

## Request

- The document declares no server URL.
- Auth: API key in header `authorization` and API key in header `aserto-tenant-id`
- TypeScript: <https://skmtc.dev/aserto/apis/openid-authzen-access-service/docs/access/v1/evaluations/post.ts> (a function with typed inputs; its response is checked against the schema)

TBD.

## Request body

- V1EvaluationsRequest
  - `action` V1Action
    - `name` string
    - `properties` object
  - `context` object
  - `evaluations` V1EvaluationRequest[]
    - `action` V1Action
      - `name` string
      - `properties` object
    - `context` object
    - `resource` V1Resource
      - `id` string
      - `properties` object
      - `type` string
    - `subject` V1Subject
      - `id` string
      - `properties` object
      - `type` string
  - `options` object
  - `resource` V1Resource
    - `id` string
    - `properties` object
    - `type` string
  - `subject` V1Subject
    - `id` string
    - `properties` object
    - `type` string

## Response `200`

A successful response.

- V1EvaluationsResponse
  - `decisions` V1EvaluationResponse[]
    - `context` object
    - `decision` boolean

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `500`: Internal error
- `default`: An unexpected error response.

## Changes

- **2025-02-28** `5dd53d1e6d2e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/aserto/apis/openid-authzen-access-service/changes/access/v1/evaluations/post.md)

---

[API](https://skmtc.dev/aserto/apis/openid-authzen-access-service.md) - [All operations](https://skmtc.dev/aserto/apis/openid-authzen-access-service/llms.txt) - [OpenAPI document](https://skmtc.dev/aserto/apis/openid-authzen-access-service/revisions/5dd53d1e6d2e?raw)