Antfly Row Filter API

Operations related to row-level security filters

Operations 8

GET /auth/v1/users/{userName}/row-filters List row filters for a user #
GET /auth/v1/subjects/{subject}/row-filters List row filters for an auth subject #
GET /auth/v1/subjects/{subject}/row-filters/{table} Get row filter for an auth subject on a table #
PUT /auth/v1/subjects/{subject}/row-filters/{table} Set row filter for an auth subject on a table #
DELETE /auth/v1/subjects/{subject}/row-filters/{table} Remove row filter for an auth subject on a table #
GET /auth/v1/users/{userName}/row-filters/{table} Get row filter for a user on a table #
PUT /auth/v1/users/{userName}/row-filters/{table} Set row filter for a user on a table #
DELETE /auth/v1/users/{userName}/row-filters/{table} Remove row filter for a user on a table #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/antfly:antfly-rowfilter-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

antfly-rowfilter-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Antfly Public Row Filter API
  version: v1alpha1
  description: Joined public contract for the Antfly server. Antfly APIs are served under `/db/v1`, auth APIs under `/auth/v1`, inference APIs under `/ai/v1`, ML prediction APIs under `/ml/v1`, and extension lifecycle APIs under `/extensions/v1`.
servers:
- url: /
security:
- BasicAuth: []
- ApiKeyAuth: []
- BearerAuth: []
tags:
- name: RowFilter
  x-displayName: Row Filter
  description: Operations related to row-level security filters
paths:
  /auth/v1/users/{userName}/row-filters:
    parameters:
    - $ref: '#/components/parameters/UserNamePathParameter'
    get:
      tags:
      - RowFilter
      summary: List row filters for a user
      description: Returns all row filter policies for the specified user.
      operationId: listRowFilters
      responses:
        '200':
          description: Successful operation
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/RowFilterEntry'
        '404':
          description: User not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
      - BasicAuth: []
      - ApiKeyAuth: []
      - BearerAuth: []
  /auth/v1/subjects/{subject}/row-filters:
    parameters:
    - $ref: '#/components/parameters/SubjectPathParameter'
    get:
      tags:
      - RowFilter
      summary: List row filters for an auth subject
      description: Returns row filter policies directly attached to a Casbin subject such as a role or group.
      operationId: listSubjectRowFilters
      responses:
        '200':
          description: Successful operation
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/RowFilterEntry'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
      - BasicAuth: []
      - ApiKeyAuth: []
      - BearerAuth: []
  /auth/v1/subjects/{subject}/row-filters/{table}:
    parameters:
    - $ref: '#/components/parameters/SubjectPathParameter'
    - name: table
      in: path
      required: true
      description: Table name (or '*' for all tables).
      schema:
        type: string
        example: orders
    - name: database
      in: query
      schema:
        type: string
      description: Explicit database; defaults to default when namespace is supplied.
    - name: namespace
      in: query
      schema:
        type: string
      description: Explicit namespace; defaults to public when database is supplied.
    - name: all_tables
      in: query
      schema:
        type: boolean
      description: Select all tables in the explicit namespace instead of the literal path table.
    get:
      tags:
      - RowFilter
      summary: Get row filter for an auth subject on a table
      description: Returns the row filter policy directly attached to the specified subject and table.
      operationId: getSubjectRowFilter
      responses:
        '200':
          description: Successful operation
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RowFilterEntry'
        '404':
          description: Row filter not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
      - BasicAuth: []
      - ApiKeyAuth: []
      - BearerAuth: []
    put:
      tags:
      - RowFilter
      summary: Set row filter for an auth subject on a table
      description: Sets or replaces a row filter policy for a role, group, or other Casbin subject.
      operationId: setSubjectRowFilter
      requestBody:
        description: Antfly query JSON for filtering documents
        required: true
        content:
          application/json:
            schema:
              type: object
              additionalProperties: {}
      responses:
        '200':
          description: Row filter set successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RowFilterEntry'
        '400':
          description: Bad Request (e.g., invalid filter JSON)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
      - BasicAuth: []
      - ApiKeyAuth: []
      - BearerAuth: []
    delete:
      tags:
      - RowFilter
      summary: Remove row filter for an auth subject on a table
      description: Removes a row filter policy directly attached to the specified subject and table.
      operationId: removeSubjectRowFilter
      responses:
        '204':
          description: Row filter removed successfully
        '404':
          description: Row filter not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
      - BasicAuth: []
      - ApiKeyAuth: []
      - BearerAuth: []
  /auth/v1/users/{userName}/row-filters/{table}:
    parameters:
    - $ref: '#/components/parameters/UserNamePathParameter'
    - name: table
      in: path
      required: true
      description: Table name (or '*' for all tables).
      schema:
        type: string
        example: orders
    - name: database
      in: query
      schema:
        type: string
      description: Explicit database; defaults to default when namespace is supplied.
    - name: namespace
      in: query
      schema:
        type: string
      description: Explicit namespace; defaults to public when database is supplied.
    - name: all_tables
      in: query
      schema:
        type: boolean
      description: Select all tables in the explicit namespace instead of the literal path table.
    get:
      tags:
      - RowFilter
      summary: Get row filter for a user on a table
      description: Returns the row filter policy for the specified user and table.
      operationId: getRowFilter
      responses:
        '200':
          description: Successful operation
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RowFilterEntry'
        '404':
          description: User or row filter not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
      - BasicAuth: []
      - ApiKeyAuth: []
      - BearerAuth: []
    put:
      tags:
      - RowFilter
      summary: Set row filter for a user on a table
      description: Sets or replaces the row filter policy for the specified user and table. The request body is the Antfly query JSON.
      operationId: setRowFilter
      requestBody:
        description: Antfly query JSON for filtering documents
        required: true
        content:
          application/json:
            schema:
              type: object
              additionalProperties: {}
      responses:
        '200':
          description: Row filter set successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RowFilterEntry'
        '400':
          description: Bad Request (e.g., invalid filter JSON)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: User not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
      - BasicAuth: []
      - ApiKeyAuth: []
      - BearerAuth: []
    delete:
      tags:
      - RowFilter
      summary: Remove row filter for a user on a table
      description: Removes the row filter policy for the specified user and table.
      operationId: removeRowFilter
      responses:
        '204':
          description: Row filter removed successfully
        '404':
          description: User or row filter not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
      - BasicAuth: []
      - ApiKeyAuth: []
      - BearerAuth: []
components:
  schemas:
    RowFilterEntry:
      type: object
      description: A row filter policy for a user on a specific table.
      properties:
        table:
          type: string
          description: Table name (or '*' for all tables).
          example: orders
        table_target:
          $ref: '#/components/schemas/CatalogTableScope'
        filter:
          type: object
          additionalProperties: {}
          description: Antfly query JSON that documents must match to be visible.
          example:
            term:
              department: engineering
      required:
      - table
      - filter
    CatalogTableScope:
      type: object
      description: A table or all tables in an explicit namespace. A missing table selects the namespace; a table named '*' remains literal.
      properties:
        database:
          type: string
          default: default
        namespace:
          type: string
          default: public
        table:
          type: string
      additionalProperties: false
    Error:
      type: object
      properties:
        code:
          type: string
          description: Optional stable machine-readable error code for programmatic handling.
        error:
          type: string
          example: An error message
          description: Legacy human-readable error text.
        message:
          type: string
          description: Human-readable error description when supplied by the endpoint.
        retryable:
          type: boolean
          description: Whether retrying the operation may succeed without changing the request.
        retry_after_ms:
          type: integer
          format: int32
          minimum: 1
          description: Suggested minimum retry delay in milliseconds.
      required:
      - error
  parameters:
    UserNamePathParameter:
      name: userName
      in: path
      required: true
      description: The username.
      schema:
        type: string
        example: johndoe
    SubjectPathParameter:
      name: subject
      in: path
      required: true
      description: Casbin subject name, such as role:tenant_reader or group:eng.
      schema:
        type: string
        example: role:tenant_reader
  securitySchemes:
    BasicAuth:
      type: http
      scheme: basic
    ApiKeyAuth:
      type: apiKey
      in: header
      name: Authorization
    BearerAuth:
      type: http
      scheme: bearer
x-tagGroups:
- name: Antfly
  tags:
  - cluster_management
  - table_management
  - data_operations
  - query_operations
  - index_management
- name: Auth
  tags:
  - User
  - Permission
  - ApiKey
  - RowFilter
- name: Inference
  tags: []
- name: Extensions
  tags:
  - Packages
  - Installed