---
title: "Access Control Decision API"
method: GET
path: "/decisions"
tags: ["api"]
---

# Access Control Decision API

`GET /decisions`

> This endpoint works with all HTTP Methods (GET, POST, PUT, ...) and matches every path prefixed with /decisions.

This endpoint mirrors the proxy capability of ORY Oathkeeper's proxy functionality but instead of forwarding the
request to the upstream server, returns 200 (request should be allowed), 401 (unauthorized), or 403 (forbidden)
status codes. This endpoint can be used to integrate with other API Proxies like Ambassador, Kong, Envoy, and many more.

## Response `200`

An empty response

## Other responses

- `401` — genericError
- `403` — genericError
- `404` — genericError
- `500` — genericError

---

[API](https://skmtc.net/ory/apis/ory-oathkeeper.md) · [All operations](https://skmtc.net/ory/apis/ory-oathkeeper/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ory/ory-oathkeeper/versions/60c3888c6dfb/schema)