---
title: "Evaluate authorization request"
url: https://hexelstudio.com/docs/api/ciam-iam/authz/evaluate
---

# Evaluate authorization request

**POST** `/authz/evaluate`

## Headers

- `Authorization: string`

  `Bearer <token>`.

## Returns

`200` OK (`EvalResponse`)

- `action: optional string`

- `allowed: optional boolean`

- `environment_id: optional string`

- `evaluation_ms: optional integer`

- `principal: optional string`

- `reason: optional string`

- `resource_id: optional string`

- `resource_type: optional string`

- `workspace_id: optional string`

## Errors

- `400` Bad Request

## Example

```bash
curl --request POST \
  --url 'https://api.hexelstudio.com/v1/authz/evaluate' \
  --header "Authorization: Bearer $ACCESS_TOKEN"
```

### Response (200)

```json
{
  "action": "string",
  "allowed": true,
  "environment_id": "string",
  "evaluation_ms": 0,
  "principal": "string",
  "reason": "string",
  "resource_id": "string",
  "resource_type": "string",
  "workspace_id": "string"
}
```

### Response (400)

```json
{
  "key": "string"
}
```