List Permission Rules

curl -X GET 'https://app.memorylake.ai/openapi/memorylake/admin/v1/permission-rules' \
  -H 'Authorization: Bearer sk_xxxxxx'

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "items": [
      {
        "action": "example",
        "editable": false,
        "effect": "allow",
        "resource": "example",
        "rule_id": "e15be74d9ecc690478b6de3c80b98886",
        "subject_id": "e44cc30b3cc8c0e0c437912296ab9d73",
        "subject_type": "role"
      }
    ],
    "continuation_token": "eyJvZmZzZXQiOjIwfQ",
    "total": 1
  }
}

curl -X GET 'https://app.memorylake.ai/openapi/memorylake/admin/v1/permission-rules' \
  -H 'Authorization: Bearer sk_xxxxxx'

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "items": [
      {
        "action": "example",
        "editable": false,
        "effect": "allow",
        "resource": "example",
        "rule_id": "e15be74d9ecc690478b6de3c80b98886",
        "subject_id": "e44cc30b3cc8c0e0c437912296ab9d73",
        "subject_type": "role"
      }
    ],
    "continuation_token": "eyJvZmZzZXQiOjIwfQ",
    "total": 1
  }
}

GET /openapi/memorylake/admin/v1/permission-rules

Lists the permission rules of your team — rules on roles (including the built-in ones) and rules set on individual members. Filter by subject_type, and by subject_id within it. Access scopes, permission levels on resources and access-group permissions have their own endpoints and are not listed here.

Permission required: policy:manage

Query Parameters

string

Only rules of this subject type. One of: role, member.

string

Only rules of this subject; requires subject_type

integer

Page size, 1–100 (default 20)

string

Token from the previous page

curl -X GET 'https://app.memorylake.ai/openapi/memorylake/admin/v1/permission-rules' \
  -H 'Authorization: Bearer sk_xxxxxx'

Response

object

Show Load More Response Permission Rule object

array

List of items in the current page

Show Permission Rule object

string

Action

boolean

false for the rules of the built-in roles (owner, admin, member), which cannot be changed

string

allow grants the action; deny takes it away and wins over an allow from any non-owner source. Only allow rules can be created; deny rules may still appear on older data.

string

Resource type (see GET /permission-catalog), or one instance of it as <resource_type>:<instance_id>

string

Opaque identifier; pass it to Delete Permission Rule. Do not parse it.

string

Role key, or the member’s principal_id

string

What the rule applies to. One of: role, member.

string

Token to fetch the next page; absent on the last page

integer

Total number of items matching the filter across all pages; omitted when the count is unavailable

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "items": [
      {
        "action": "example",
        "editable": false,
        "effect": "allow",
        "resource": "example",
        "rule_id": "e15be74d9ecc690478b6de3c80b98886",
        "subject_id": "e44cc30b3cc8c0e0c437912296ab9d73",
        "subject_type": "role"
      }
    ],
    "continuation_token": "eyJvZmZzZXQiOjIwfQ",
    "total": 1
  }
}

Errors

Errors answer with success: false, a message and an error_code. See Error Codes for every code.

Status	Meaning
`400`	A parameter or the body is invalid
`401`	The API key is missing, invalid, disabled or expired
`403`	The key is not allowed to do this
`404`	The resource does not exist
`422`	The body or a parameter failed validation
`429`	Too many requests. Wait for the time in `Retry-After`
`500`	Server-side error

MemoryLake API

Memory Router API

Query Parameters

Response

Errors

​Query Parameters

​Response

​Errors

Query Parameters

Response

Errors