AuthZEN access evaluation (Sanction as PDP)

OpenID AuthZEN Authorization API 1.0 single-evaluation endpoint. POST the standard subject/action/resource tuple and receive { decision: boolean } — evaluated against the same engine as /v1/authorize, but decision-only: nothing is persisted, no budget debited, no approval opened (the contract of ?simulate=true). resource.type routes the request: 'tool' → the tool block/allow/escalate ladder; 'spend' and 'provision' → the dollar ladders against live budget state. subject.id must be the authenticated agent's id or name. Echoes X-Request-ID.

post/access/v1/evaluation

Request

  • Base URL: https://getsanction.com/api
  • URL: https://getsanction.com/api/access/v1/evaluation
  • Auth: API key in header x-api-key

Request body

contextobject

Response

Evaluation result — a deny is HTTP 200 with decision:false

decisionboolean required

Changes

No recorded changes to this operation across all 1 revision of this API.