GoodMemList authorization grants
GET /v1/access-policy/grants: Lists grants attached to one resource. MANAGE_ACCESS is required on that resource; continuation tokens are bound to the caller and filters.
Lists grants attached to one resource. MANAGE_ACCESS is required on that resource; continuation tokens are bound to the caller and filters.
In: header
Query Parameters
Required target resource kind
"INSTANCE" | "USER" | "SERVICE_IDENTITY" | "SPACE" | "API_KEY" | "EMBEDDER" | "RERANKER" | "LLM" | "MEMORY" | "EXTENSION" | "RETRIEVE_MEMORY_LOG_POLICY"Required target UUID except when resourceKind is INSTANCE
Include revoked history
falsePage size; 0 or omission uses the default of 50, maximum 1,000
50int32Opaque continuation token
Header Parameters
Optional waiting budget in milliseconds, measured from REST servlet ingress and shared across all internal gRPC calls. Supply one decimal integer from 1 to 86400000. Omission adds no deadline. Existing shorter deadlines still apply. Expiry returns HTTP 504 before streaming starts; after streaming starts, no successful completion event is sent. Use SSE or opt into GoodMem-Stream-Terminal for an explicit terminal outcome. Retrieval work is cooperatively cancelled. An accepted mutation may still commit after timeout or disconnect; a failed response does not imply rollback.
int641 <= value <= 86400000Response Body
curl -X GET "https://your-goodmem-server.example.com/v1/access-policy/grants?resourceKind=SPACE&resourceId=550e8400-e29b-41d4-a716-446655440000&includeRevoked=true&maxResults=100&nextToken=string" \ -H "GoodMem-Timeout-Ms: 30000"{
"grants": [
{
"grantId": "f276b9a4-73d6-4e04-95c5-87b974221f92",
"audience": {
"principalId": "70e025f6-76ca-4cbe-b8fc-7dab8e84590a"
},
"rule": {
"assignedResource": {
"resourceId": "550e8400-e29b-41d4-a716-446655440000"
}
},
"createdById": "70e025f6-76ca-4cbe-b8fc-7dab8e84590a",
"revokedById": "114ad558-323d-4b76-85b8-37af103b8650"
}
],
"nextToken": "string"
}Get a scoped role assignment
GET /v1/access-policy/role-assignments/{id}: Reads one live assignment, or one revoked historical assignment when includeRevoked is true, after requiring MANAGE_ACCESS on its policy target.
List scoped role assignments
GET /v1/access-policy/role-assignments: Lists assignments attached to one required INSTANCE or SPACE boundary after requiring MANAGE_ACCESS. Continuation tokens are bound to the caller and filters.