---
title: "The organization's signed edge-evaluator entitlement"
method: GET
path: "/v1/edge/entitlement"
---

# The organization's signed edge-evaluator entitlement

`GET /v1/edge/entitlement`

## Request

- Base URL: `https://api.decionis.com`
- URL: `https://api.decionis.com/v1/edge/entitlement`
- Auth: HTTP bearer

A compact JWS stating what the authenticated organization is licensed
for: its plan, deployment tier (`hosted` | `dedicated` |
`self_managed`), included governed actions per month, volume band
(self-managed only), whether the edge evaluator is included (`edge`),
and how many days after a month ends its usage report is due. Valid
35 days. Issued to every organization, entitled or not: an edge
installation verifies it against the policy-bundle JWKS
(`/.well-known/decionis-policy-bundle-jwks.json`; same key, its own
`typ`) and uses it only to warn — a licence problem never stops or
degrades a decision. Requires an organization API key with
`policy:read` (or `policy:*` / `org:*`).

## Response `200`

The signed entitlement; private and not cacheable

- EdgeEntitlementResponse
  - `entitlement` string, required: Compact JWS: protected header `EdgeEntitlementHeader`, payload `EdgeEntitlementClaims`, verified with the policy-bundle JWKS.
  - `kid` string, required
  - `edge` boolean, required
  - `issued_at` string, date-time, required
  - `expires_at` string, date-time, required

## Other responses

- `401`: Structured API error
- `403`: Structured API error
- `503`: `EDGE_ENTITLEMENT_SIGNING_NOT_CONFIGURED`, or `EDGE_ENTITLEMENT_UNAVAILABLE` (the licence could not be read)

---

[API](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api.md) · [All operations](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/llms.txt) · [OpenAPI document](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/revisions/357f5e459d0c?raw)