Skip to main content


The query API is the most abstract API for interacting with the Authorizer. It allows the caller to send a general query to the Authorizer, along with an input, and returns the output from the Authorizer.


POST .../api/v2/authz/query

Input payload

"identityContext": {
"identity": "[topaz-user-guid]",
"type": "IDENTITY_TYPE_*"
"policyContext": {
"decisions": ["string"],
"path": "string"
"resourceContext": {
"additionalProp1": "string",
"additionalProp2": "string",
"additionalProp3": "string"
"input": "string",
"query": "string",
"options": {
"instrument": true,
"metrics": true,
"trace": "TRACE_LEVEL_*",
"traceSummary": true

The identityContext map is documented here.

The policyContext map is documented here.

The resourceContext map is documented here.

The input parameter is a string that encodes a JSON document, and is mapped into the input in the context of evaluating the policy.

The query parameter is a rego query that is evaluated over the policy.

The options map allows the caller to instrument the query, retrieve metrics, set a trace level, and get a trace summary.

Trace levels

The trace levels can be one of the following values: