---
title: "File access request"
method: POST
path: "/access-requests"
tags: ["Access Requests"]
---

# File access request

`POST /access-requests`

File a new access request.

## Request body

- AccessRequestFileRequest — Request body for filing an access request.
  - `items` AccessRequestItemRequest[], required
    - `action` 'bind' | 'grant' | 'create' | 'provision', required
    - `resource_id` string, nullable
    - `resource_reference` object, nullable
    - `resource_type` 'credential' | 'toolkit' | 'scope', required
    - `rules` JenticOneControlWebSchemasAccessRequestsPermissionRuleSchema[], nullable — Permission rules for the binding (credential:bind only). Rules are evaluated first-match-wins by the broker; if no rule matches, the request is denied. Example: [{"effect": "allow", "path": ".*"}].
      - `effect` 'allow' | 'deny' | 'require-approval', required
      - `methods` string[], nullable
      - `operations` string[], nullable
      - `path` string, nullable
    - `to_id` string, nullable
    - `to_type` string, nullable
  - `reason` string, nullable

## Response `202`

Successful Response

- AccessRequestResponse — Response model for an access request envelope.
  - `actor_id` string, required
  - `approve_url` string, required
  - `created_by` string, required
  - `evaluation` EvaluationResponse — Computed evaluation of whether the caller can fulfill a request.
    - `can_fulfill` boolean, required
    - `checks` EvaluationCheckResponse[], required
      - `blocker` string, nullable
      - `check` string, required
      - `passed` boolean, required
  - `expires_at` string, date-time, required
  - `filed_at` string, date-time, required
  - `filer_owner_id` string, nullable
  - `id` string, required
  - `items` AccessRequestItemResponse[], required
    - `action` string, required
    - `applied_effects` object, nullable
    - `credential_name` string, nullable
    - `decided_at` string, date-time, nullable
    - `decided_by` string, nullable
    - `decision_reason` string, nullable
    - `id` string, required
    - `resource_id` string, nullable
    - `resource_reference` object, nullable
    - `resource_type` string, required
    - `rules` object[], nullable
    - `status` string, required
    - `to_id` string, nullable
    - `to_type` string, nullable
    - `toolkit_name` string, nullable
  - `reason` string, nullable
  - `requested_by` string, required
  - `status` string, required

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `422` — Unprocessable Entity
- `500` — Internal Server Error
- `503` — Service Unavailable

## Changes

- **2026-07-24** `7f8d4d76abcd` — 2 info
  - added the new `create` enum value to the request property `items/items/action`
  - added the new `provision` enum value to the request property `items/items/action`
- **2026-07-01** `d65fcba0d25a` — 1 info
  - endpoint added
- **2026-04-13** `76e8f6063728` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/jentic/apis/jentic-control-plane-api/changes/access-requests/post.md)

---

[API](https://skmtc.dev/jentic/apis/jentic-control-plane-api.md) · [All operations](https://skmtc.dev/jentic/apis/jentic-control-plane-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/jentic/jentic-control-plane-api/revisions/7f8d4d76abcd/schema)