API ReferenceManagementAuth Access Policy Management
GET
/v1/mgmt/authaccess/rule

Authorization

Descope Project ID and Management Key
AuthorizationBearer <token>

Project ID:Management Key as bearer token.

In: header

Get a single project-level auth access policy rule by id, using a valid management key.

curl -X GET "https://api.descope.com/v1/mgmt/authaccess/rule"
{  "id": "string",  "name": "string",  "description": "string",  "enabled": true,  "effect": "string",  "conditions": null,  "createdTime": 0,  "modifiedTime": 0,  "evaluationOrder": 0,  "expireTime": 0}
/** * conditions is a list of {key, operator, values} objects, all of which must match. key is one of request.ip, *  request.country, user.email, user.emailDomain, user.loginId and user.phone. operator is one of equal, notEqual, in, *  notIn, inCidr and notInCidr, where equal, notEqual, inCidr and notInCidr take exactly one value. Values must be in *  canonical form: lowercase emails and domains, uppercase countries, E.164 phones and compressed IP addresses. With *  equal and notEqual the value may instead be a reference of the form {{jwtClaims.<name>}}, which compares the *  attribute against the named top-level custom claim of the token the caller presented. An absent claim never *  matches, notEqual included. */export interface Response {/** * Server-generated, rejected on create and required on update. */id?: stringname?: stringdescription?: string/** * Defaults to true on create. */enabled?: boolean/** * Required on create. Evaluation is first-match. */effect?: string/** * Represents a dynamically typed value which can be either null, a number, a string, a boolean, a recursive struct value, or a list of values. */conditions?: {[k: string]: unknown}/** * int32 epoch seconds: proto3 emits int64 as JSON string. See .claude/rules/proto-files.md. */createdTime?: numbermodifiedTime?: number/** * 1-based position in the evaluation order, set through the reorder and settings endpoints. */evaluationOrder?: number/** * Epoch seconds after which the rule is no longer evaluated. 0 means never. */expireTime?: number}
Was this helpful?