Sonatype Nexus Repository

Sonatype Nexus Repository Security management: API access API

The Security management: API access API from Sonatype Nexus Repository — 1 operation(s) for security management: api access.

Documentation GitHub OpenAPI

Operations 1

POST /internal/ui/security/access-check Check if a user or role has access to an API endpoint #

Specifications

⚙

OpenAPI

https://artifacts.apis.io/nexus/openapi/nexus-security-management-api-access-api-openapi.yml

Schemas & Data

📊

JSONSchema

https://artifacts.apis.io/nexus/json-schema/nexus-api-access-check-xo-schema.json

📊

JSONSchema

https://artifacts.apis.io/nexus/json-schema/nexus-api-access-result-xo-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/nexus:nexus-security-management-api-access-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: 'Nexus Repository Manager REST Security management: API…'
  version: 3.97.2-02
servers:
- url: /service/rest
tags:
- name: 'Security management: API access'
paths:
  /internal/ui/security/access-check:
    post:
      tags:
      - 'Security management: API access'
      summary: Check if a user or role has access to an API endpoint
      operationId: createInternalUiSecurityAccessCheck
      requestBody:
        description: Access check request
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ApiAccessCheckXo'
        required: true
      responses:
        '200':
          description: Access check result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiAccessResultXo'
        '400':
          description: Invalid request - userId and roleId are mutually exclusive, or missing required fields
        '403':
          description: Insufficient permissions to perform access check
        '404':
          description: User or role not found
components:
  schemas:
    ApiAccessCheckXo:
      required:
      - endpoint
      - method
      type: object
      properties:
        userId:
          pattern: ^[a-zA-Z0-9._-]{1,200}$
          type: string
          description: The user ID to check access for. If omitted, checks access for the current user.
          example: john.doe
        roleId:
          pattern: ^[a-zA-Z0-9._-]{1,200}$
          type: string
          description: The role ID to check access for. Mutually exclusive with userId.
          example: nx-admin
        endpoint:
          minLength: 1
          type: string
          description: The API endpoint to check access for.
          example: /service/rest/v1/repositories
        method:
          minLength: 1
          type: string
          description: The HTTP method for the endpoint.
          example: GET
    RelatedEndpointXo:
      required:
      - endpoint
      - method
      type: object
      properties:
        method:
          type: string
          description: The HTTP method
        endpoint:
          type: string
          description: The API endpoint path
        description:
          type: string
          description: Description of the endpoint
        permission:
          type: string
          description: The permission required for this endpoint
      description: Related API endpoints that use similar permissions
    ApiAccessResultXo:
      required:
      - hasAccess
      type: object
      properties:
        hasAccess:
          type: boolean
          description: Whether the user/role has access to the endpoint
        requiredPermission:
          type: string
          description: The permission required to access the endpoint
        chains:
          type: array
          description: The permission chains showing how access is granted (user -> role -> privilege -> permission)
          items:
            $ref: '#/components/schemas/PermissionChainXo'
        relatedEndpoints:
          type: array
          description: Related API endpoints that use similar permissions
          items:
            $ref: '#/components/schemas/RelatedEndpointXo'
    EntityRefXo:
      required:
      - id
      type: object
      properties:
        id:
          type: string
          description: The entity ID
        name:
          type: string
          description: The entity display name
      description: The privilege in the permission chain
    PermissionChainXo:
      type: object
      properties:
        user:
          $ref: '#/components/schemas/EntityRefXo'
        role:
          $ref: '#/components/schemas/EntityRefXo'
        privilege:
          $ref: '#/components/schemas/EntityRefXo'
        permission:
          type: string
          description: The permission string
      description: The permission chains showing how access is granted (user -> role -> privilege -> permission)