Check multiple resource authorizations

POST/v1/authorization/batch-check

Evaluates a bounded batch through the same policy decision point used by single checks.

How to call this endpoint

Every ACP API request uses bearer authentication. The examples here show the actual request path, auth header, and body shape that the platform expects.

Path, query, and header parameters

These parameters control which ACP object the endpoint acts on and how the request is processed.

Path parameters
None.
Query parameters
None.
Header parameters
NameLocationTypeRequiredDescription
X-Computer-Agents-OrganizationheaderstringNoActive organization context. If omitted, the authenticated user's personal organization is used.

Body schema

Content type: application/json · Required

FieldTypeRequiredDescription
checksobject[]Yes
checks[].actionIdstringYesCanonical registered resource action
checks[].resourceobjectYes
checks[].resource.typestringYesRegistered persisted resource type
checks[].resource.idstringYesUnique identifier.
checks[].requestIdstringNo
checks[].attributesobjectNo

What the API returns

Each response code below includes the documented payload shape for the ACP API.

200Explainable authorization decisionsapplication/json
FieldTypeRequiredDescription
dataobject[]Yes
data[].idstringYesUnique identifier.
data[].organizationIdstringYes
data[].requestIdstringNo
data[].principalKindhuman | agent | service | systemYes
data[].principalIdstringYes
data[].actorUserIdstringNo
data[].agentIdstringNoAgent ID.
data[].agentVersionIdstringNo
data[].delegationIdstringNo
data[].policyVersionIdstringNo
data[].actionIdstringYes
data[].resourceTypestringYes
data[].resourceIdstringYes
data[].effectallow | deny | approval_requiredYes
data[].allowedbooleanYes
data[].approvalRequiredbooleanYes
data[].reasonCodestringYes
data[].stepsobject[]Yes
data[].steps[].sourcetenant_boundary | ownership | organization_governance | organization_policy | team_policy | delegation | approval | service_scope | default_denyYes
data[].steps[].effectallow | deny | approval_requiredYes
data[].steps[].reasonCodestringYes
data[].steps[].detailstringNo
data[].steps[].permissionAccessfull_access | ask_permission | read_only | no_accessNo
data[].steps[].principalIdstringNo
data[].steps[].teamIdstringNo
data[].contextobjectNo
data[].createdAtstringYesISO 8601 timestamp.
400Invalid batch
None.
Check multiple resource authorizations
Loading...
Response 200
Loading...
See the ACP quickstart and SDK flow