---
title: "Check permissions"
method: POST
path: "/preview/v2/permissions/check"
tags: ["Permissions"]
---

# Check permissions

`POST /preview/v2/permissions/check`

> ⚠️ This endpoint is in [public preview](/preview/roadmap).

Evaluate one or more `"resource:verb"` actions against the caller's grants and return a single aggregated verdict. Pass `workspace` to check workspace-scoped grants, or omit it to check org-scoped grants.

## Request body

- SfcApiCheckPermissionRequest
  - `workspace` string
  - `actions` string[], required — One or more `"resource:verb"` actions (e.g. `"node:read"`, `"order:write"`) to evaluate. The response is a single aggregated verdict across the whole list.

## Response `200`

Permission evaluated.

- SfcApiPermissionCheckResponse
  - `allowed` boolean, required — Whether the caller can perform every action in the request directly without approval.

## Other responses

- `400` — Bad request.
- `401` — Unauthorized.
- `500` — Internal server error.

---

[API](https://skmtc.net/sfcompute/apis/san-francisco-compute-documentation.md) · [All operations](https://skmtc.net/sfcompute/apis/san-francisco-compute-documentation/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sfcompute/san-francisco-compute-documentation/revisions/93dd7661e9bb/schema)