Sign in

v50

latestOpenAPI 3.1.0Apache-2.0raw.githubusercontent.com2026-08-01147180956.9 KB
Toolkit Permissions

Dry-run permission evaluation

Answer "what would the broker do for this request?" without calling upstream.

Evaluates the same vendor-pooled rule set the broker sees at request time — rules from all same-vendor bindings on this toolkit compete in one ordered list. The response names which binding contributed the matching rule, which is not obvious from the toolkit id alone under pooling.

post/toolkits/{toolkit_id}/credentials/{credential_id}/permissions:test

Path parameters

toolkit_idstring required
credential_idstring required

Request body

methodstring required

HTTP method of the hypothetical request (case-insensitive).

operation_idstring nullable

Optional OpenAPI operation id resolved from the request URL.

pathstring required

Path of the hypothetical request as the broker would see it.

Response

Successful Response

allowedboolean required

Whether the broker would allow this request under the pooled rules.

credential_idstring nullable

Which binding contributed the matching rule — vendor pooling means this may not equal the credential in the request URL.

effectstring nullable

Effect of the matching rule (allow/deny); null when no match.

is_systemboolean nullable

True when the matching rule was written by the system; null when no match.

matchedboolean required

Whether any rule matched; when false, the outcome is default-deny.

rule_indexinteger nullable

Zero-based index in the vendor-pooled rule list; null when no match.