Check authorization
Check authorization
Check whether the caller is allowed to perform actions on resources.
POST
Check authorization
gRPC method: AuthCanI
- The API server is
https://api.coreweave.com. - Replace
{API_ACCESS_TOKEN}with your CoreWeave API access token. - For required permissions, see IAM Access Policies.
verdict that is true only
if the caller is allowed to perform all listed actions on
all listed resources. Both actions and resources are
required.
data.json
Example request
Authorizations
CoreWeave API access token sent as a bearer token in the Authorization header (the value is prefixed with Bearer). Used by every operation except the SAML/OIDC token-exchange endpoints (anonymous) and the container credentials GET (which uses ContainerCredentialsAuth).
Body
application/json
Response
OK
The verdict for an authorization check.
true only if the caller is allowed to perform every requested action on every requested resource; false otherwise.
Last modified on July 13, 2026