Aserto Authorizer API
type: WebAPI
description: Real-time authorization decision engine powered by Open Policy Agent. Evaluates Rego policies against identity, resource, and policy context.
documentation: https://docs.aserto.com/docs/authorizer-guide/overview
provider: Aserto

Aserto Directory API
type: WebAPI
description: Google Zanzibar-inspired relationship-based access control (ReBAC) directory for managing users, groups, objects, relations, and permissions.
documentation: https://docs.aserto.com/docs/api-reference

Aserto Decision Logs API
type: WebAPI
description: Audit trail of authorization decisions made by connected Authorizer instances, supporting compliance and analytics use cases.
documentation: https://docs.aserto.com/docs/api-reference

Is (Authorization Check)
type: EntryPoint
description: POST /api/v2/authz/is — Evaluate policy decisions for a given identity and resource context.
http method: POST
url template: https://authorizer.prod.aserto.com/api/v2/authz/is
encoding type: application/json

Query (OPA Query)
type: EntryPoint
description: POST /api/v2/authz/query — Execute an arbitrary Rego query against the loaded policy.
http method: POST
url template: https://authorizer.prod.aserto.com/api/v2/authz/query

Decision Tree
type: EntryPoint
description: POST /api/v2/authz/decisiontree — Return decision values for all policy paths for a given identity.
http method: POST
url template: https://authorizer.prod.aserto.com/api/v2/authz/decisiontree

Compile (Partial Evaluation)
type: EntryPoint
description: POST /api/v2/authz/compile — Compile a Rego query to partial evaluation conditions for query filtering.
http method: POST
url template: https://authorizer.prod.aserto.com/api/v2/authz/compile