Auth0 AuthZenService API

The AuthZenService API from Auth0 — 6 operation(s) for authzenservice.

Business capability
Identity & Access Management BC-620.20

Operations 6

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /.well-known/authzen-configuration/{store_id} Get a store's AuthZEN PDP configuration · [Experimental] Get AuthZEN PDP configuration and capabilities #
Ask an LLM
“Which AuthZEN endpoints and capabilities does my store's policy decision point support?”
“Can I discover the AuthZEN metadata for an authorization store?”
Tell an agent
Show the AuthZEN configuration for store {store_id}.
Get PDP capabilities of store {store_id}.
POST /stores/{store_id}/access/v1/evaluation Decide if a subject may act on a resource · [Experimental] Evaluate whether a subject can perform an action on a resource #
Ask an LLM
“Can I ask the AuthZEN endpoint whether one user may perform an action on a resource?”
“What does a single AuthZEN access evaluation return?”
Tell an agent
Check in store {store_id} if {subject} can perform {action} on {resource}.
Evaluate whether subject {subject} is allowed {action} on {resource} in store {store_id}.
POST /stores/{store_id}/access/v1/evaluations Run a batch of AuthZEN access evaluations · [Experimental] Check whether one or more users are authorized to access… #
Ask an LLM
“Can I check many subject-action-resource combinations in one AuthZEN request?”
“Is there a way to set default subject or action for a batch of evaluations?”
Tell an agent
Run the AuthZEN evaluations {evaluations} in store {store_id}.
Batch-check {evaluations} for subject {subject} in store {store_id}.
POST /stores/{store_id}/access/v1/search/action Find actions a subject can take on a resource · [Experimental] Search for actions a subject can perform on a resource #
Ask an LLM
“What can a given user do with this document?”
“Can I list every action a subject is allowed on one resource?”
Tell an agent
List actions {subject} can perform on {resource} in store {store_id}.
Search store {store_id} for what {subject} may do to {resource}.
POST /stores/{store_id}/access/v1/search/resource Find resources a subject can access · [Experimental] Search for resources a subject has access to #
Ask an LLM
“Which documents can a user read?”
“Can I search for all resources of a type that someone has a given action on?”
Tell an agent
Find resources like {resource} that {subject} can {action} in store {store_id}.
Search store {store_id} for {resource} items where {subject} holds {action}.
POST /stores/{store_id}/access/v1/search/subject Find subjects with access to a resource · [Experimental] Search for subjects with access to a resource #
Ask an LLM
“Who can read this document?”
“Can I list all users who hold a given action on a resource through AuthZEN?”
Tell an agent
Find subjects of type {subject} who can {action} {resource} in store {store_id}.
Search store {store_id} for who has {action} on {resource}, matching {subject}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/auth0:auth0-authzenservice-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

auth0-authzenservice-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: OpenFGA Auth Zen Service API
  description: A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
  version: 1.x
  contact:
    name: OpenFGA
    url: https://openfga.dev
    email: community@openfga.dev
  license:
    name: Apache-2.0
    url: https://github.com/openfga/openfga/blob/main/LICENSE
tags:


# --- truncated at 32 KB (37 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/openapi/auth0-authzenservice-api-openapi.yml