---
title: "Check permissions"
method: POST
path: "/preview/v2/permissions/check"
tags: ["Permissions"]
---

# Check permissions

`POST /preview/v2/permissions/check`

## Request

- Base URL: `https://api.sfcompute.com`
- URL: `https://api.sfcompute.com/preview/v2/permissions/check`
- Auth: HTTP bearer

> ⚠️ This endpoint is in [public preview](/preview/roadmap).

Evaluate one or more `"resource:verb"` actions against the caller's grants and return a single aggregated verdict. Pass `workspace` to check workspace-scoped grants, or omit it to check org-scoped grants.

## Request body

- SfcApiCheckPermissionRequest
  - `workspace` string
  - `actions` string[], required: One or more `"resource:verb"` actions (e.g. `"node:read"`, `"order:write"`) to evaluate. The response is a single aggregated verdict across the whole list.

## Response `200`

Permission evaluated.

- SfcApiPermissionCheckResponse
  - `allowed` boolean, required: Whether the caller can perform every action in the request directly without approval.

## Other responses

- `400`: Bad request.
- `401`: Unauthorized.
- `500`: Internal server error.

## Changes

- **2026-05-18** `b819ba3108b3`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/sfcompute/apis/san-francisco-compute-documentation/changes/preview/v2/permissions/check/post.md)

---

[API](https://skmtc.dev/sfcompute/apis/san-francisco-compute-documentation.md) - [All operations](https://skmtc.dev/sfcompute/apis/san-francisco-compute-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/sfcompute/apis/san-francisco-compute-documentation/revisions/93dd7661e9bb?raw)