Check multiple resource authorizations
POST
/v1/authorization/batch-checkEvaluates a bounded batch through the same policy decision point used by single checks.
How to call this endpoint
Every ACP API request uses bearer authentication. The examples here show the actual request path, auth header, and body shape that the platform expects.
Path, query, and header parameters
These parameters control which ACP object the endpoint acts on and how the request is processed.
Path parameters
None.
Query parameters
None.
Header parameters
| Name | Location | Type | Required | Description |
|---|---|---|---|---|
| X-Computer-Agents-Organization | header | string | No | Active organization context. If omitted, the authenticated user's personal organization is used. |
Body schema
Content type: application/json · Required
| Field | Type | Required | Description |
|---|---|---|---|
| checks | object[] | Yes | — |
| checks[].actionId | string | Yes | Canonical registered resource action |
| checks[].resource | object | Yes | — |
| checks[].resource.type | string | Yes | Registered persisted resource type |
| checks[].resource.id | string | Yes | Unique identifier. |
| checks[].requestId | string | No | — |
| checks[].attributes | object | No | — |
What the API returns
Each response code below includes the documented payload shape for the ACP API.
200Explainable authorization decisionsapplication/json
| Field | Type | Required | Description |
|---|---|---|---|
| data | object[] | Yes | — |
| data[].id | string | Yes | Unique identifier. |
| data[].organizationId | string | Yes | — |
| data[].requestId | string | No | — |
| data[].principalKind | human | agent | service | system | Yes | — |
| data[].principalId | string | Yes | — |
| data[].actorUserId | string | No | — |
| data[].agentId | string | No | Agent ID. |
| data[].agentVersionId | string | No | — |
| data[].delegationId | string | No | — |
| data[].policyVersionId | string | No | — |
| data[].actionId | string | Yes | — |
| data[].resourceType | string | Yes | — |
| data[].resourceId | string | Yes | — |
| data[].effect | allow | deny | approval_required | Yes | — |
| data[].allowed | boolean | Yes | — |
| data[].approvalRequired | boolean | Yes | — |
| data[].reasonCode | string | Yes | — |
| data[].steps | object[] | Yes | — |
| data[].steps[].source | tenant_boundary | ownership | organization_governance | organization_policy | team_policy | package_policy | project_location_policy | delegation | agent_permission | approval | service_scope | default_deny | Yes | — |
| data[].steps[].effect | allow | deny | approval_required | Yes | — |
| data[].steps[].reasonCode | string | Yes | — |
| data[].steps[].detail | string | No | — |
| data[].steps[].permissionAccess | full_access | ask_for_permission | ask_permission | read_only | no_access | No | — |
| data[].steps[].principalId | string | No | — |
| data[].steps[].teamId | string | No | — |
| data[].context | object | No | — |
| data[].createdAt | string | Yes | ISO 8601 timestamp. |
400Invalid batch
None.
Check multiple resource authorizations
Loading...
Response 200
Loading...