OpenapiO11y
Evaluates a batch of transactions — relation plus object — for the…
Evaluates a batch of transactions — relation plus object — for the authenticated caller and answers each with its authorization verdict, in the order they…
POST /v1/o11y/authz/check
| Address | https://api.hanzo.ai/v1/o11y/authz/check |
| Method | POST |
| Operation | AuthzCheck |
| Auth | Authorization: Bearer $HANZO_API_KEY |
Evaluates a batch of transactions — relation plus object — for the authenticated caller and answers each with its authorization verdict, in the order they were asked. It is the read a UI uses to decide which controls to show.
Request
6 fields, body application/json (required).
| Field | In | Type | Required | Description |
|---|---|---|---|---|
[].object | body | o11y.O11yObject | — | |
[].object.resource | body | o11y.O11yResourceRef | — | |
[].object.resource.kind | body | string | — | Kind is the resource kind the type belongs to. |
[].object.resource.type | body | string | — | Type is the resource type, e.g. |
[].object.selector | body | string | — | Selector picks the instance — an FGA object string, wildcard allowed. |
[].relation | body | string | — | Relation is the verb being asked about, e.g. |
Response
| Status | Body | Meaning |
|---|---|---|
200 | o11y.O11yCheckOut | ok |
200 body — 9 fields.
| Field | In | Type | Always | Description |
|---|---|---|---|---|
data | body | o11y.O11yTransactionResult[] | — | Data holds the verdicts. |
data[].authorized | body | boolean | — | Authorized says whether the caller may do it. |
data[].object | body | o11y.O11yObject | — | |
data[].object.resource | body | o11y.O11yResourceRef | — | |
data[].object.resource.kind | body | string | — | Kind is the resource kind the type belongs to. |
data[].object.resource.type | body | string | — | Type is the resource type, e.g. |
data[].object.selector | body | string | — | Selector picks the instance — an FGA object string, wildcard allowed. |
data[].relation | body | string | — | Relation is the verb that was asked about. |
status | body | string | — | Status is "success". |
Failure carries the platform error shape — see Errors.
Examples
hanzo o11y authz checkimport { Configuration, O11yApi } from 'hanzoai';
const api = new O11yApi(new Configuration({ accessToken: process.env.HANZO_API_KEY }));
const { data } = await api.authzCheck();from hanzoai.cloud import ApiClient, Configuration
from hanzoai.cloud.api import O11yApi
client = ApiClient(Configuration(access_token=os.environ["HANZO_API_KEY"]))
result = O11yApi(client).authz_check()cfg := cloud.NewConfiguration()
cfg.AddDefaultHeader("Authorization", "Bearer "+os.Getenv("HANZO_API_KEY"))
client := cloud.NewAPIClient(cfg)
resp, _, err := client.O11yAPI.AuthzCheck(context.Background()).Execute()
if err != nil {
return err
}use hanzo_cloud::apis::{configuration::Configuration, o11y_api};
let mut cfg = Configuration::new();
cfg.bearer_access_token = std::env::var("HANZO_API_KEY").ok();
let result = o11y_api::authz_check(&cfg, Default::default()).await?;import ai.hanzo.cloud.ApiClient;
import ai.hanzo.cloud.api.O11yApi;
ApiClient client = new ApiClient();
client.setRequestInterceptor(b -> b.header("Authorization", "Bearer " + System.getenv("HANZO_API_KEY")));
var result = new O11yApi(client).authzCheck();curl -X POST https://api.hanzo.ai/v1/o11y/authz/check \
-H "Authorization: Bearer $HANZO_API_KEY"Tool o11y, op AuthzCheck — POST the JSON-RPC envelope to https://api.hanzo.ai/v1/mcp.
curl -X POST https://api.hanzo.ai/v1/mcp \
-H "Authorization: Bearer $HANZO_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "o11y",
"arguments": {
"op": "AuthzCheck",
"input": {}
}
}
}'How is this guide?