Skip to main content
POST
Check authorization

gRPC method: AuthCanI

The endpoint returns a single verdict that is true only if the caller is allowed to perform all listed actions on all listed resources. Both actions and resources are required.
data.json
Example request

Authorizations

Authorization
string
header
default:Bearer {API_ACCESS_TOKEN}
required

CoreWeave API access token sent as a bearer token in the Authorization header (the value is prefixed with Bearer). Used by every operation except the SAML/OIDC token-exchange endpoints (anonymous) and the container credentials GET (which uses ContainerCredentialsAuth).

Body

application/json

Inputs for an authorization check. Both fields are required.

actions
string[]

The list of actions to check (for example, cwobject:ListBucketInfo).

resources
string[]

The list of resources to check the actions against. Use ["*"] to check against every resource.

Response

OK

The verdict for an authorization check.

verdict
boolean

true only if the caller is allowed to perform every requested action on every requested resource; false otherwise.

Last modified on July 13, 2026