Skip to content
Port OS

Evaluate Access Control Rule

← HTTP API reference
View source specification ↗
POST /access-control-rules/evaluate

Evaluate an access control rule.

Requires a signed user/session or the existing authenticated client flow. The anonymous DCR delegated device profile cannot invoke this operation.

Required scope

Any authenticated access token

Request body

Fields

requesterContextAccessControlRequesterContextRequired
resourceContextAccessControlResourceContextRequired
entitiesarray<AccessControlEntity>Required
operationstringRequired
operationContextAccessControlOperationContext

Attributes of the requested operation that rule conditions are evaluated against.

Returns

200

Access control rule evaluated successfully

Fields

resultstring

Allowed values: ALLOW, DENY.

errorError

The one Port OS error shape, returned by every REST error response and every MCP tool error. `code` names the specific failure and `family` its broad class; both are closed enums, so clients branch on them and show `message`, which says what failed and what to do next.

Errors

400

Invalid request payload

Check the request fields and any validation details, then correct the payload.

500

Internal server error

Retry with backoff only when the operation is safe to repeat. Include the error code when reporting persistent failures.