---
title: "List who besides the owner may open an owned machine's private app"
method: GET
path: "/api/nodes/{node_id}/shares/{service_name}/access-rules"
tags: ["nodes"]
---

# List who besides the owner may open an owned machine's private app

`GET /api/nodes/{node_id}/shares/{service_name}/access-rules`

## Request

- Base URL: `https://app.nerdit.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://app.nerdit.ai/api/nodes/{node_id}/shares/{service_name}/access-rules`
- Auth: none declared

The app's active rules, and the lock: one machine call when rules exist.

## Path parameters

- `service_name` string, required
- `node_id` string, uuid, required

## Response `200`

Successful Response

- AccessRulesView: Who besides the owner may open one private hosted app. Rules apply to a ``private`` share only: a ``public`` one is served to everybody whatever its rules say (ADR-W9, "public wins").
  - `node_id` string, uuid, required
  - `service_name` string, required
  - `rules` AccessRuleView[], required
    - `id` string, uuid, required
    - `kind` 'email' | 'google_domain' | 'group', required
    - `value` string, required
    - `created_at` string, date-time, required
    - `active_sessions` integer, required
    - `group_name` string, nullable
    - `group_people` integer, nullable
  - `invitations` boolean, required
  - `lock` 'locked' | 'pending' | 'unknown' | 'off', nullable, required
  - `agent_url` string, nullable
  - `identity_header` boolean

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `409`: Conflict
- `422`: Unprocessable Content
- `502`: Bad Gateway

---

[API](https://skmtc.dev/nerdit/apis/nerdit-cloud-web.md) · [All operations](https://skmtc.dev/nerdit/apis/nerdit-cloud-web/llms.txt) · [OpenAPI document](https://skmtc.dev/nerdit/apis/nerdit-cloud-web/revisions/06e3b44b58be?raw)