verdict authorize

Source command definition

Check permission for actor, action and resource, using separate arguments or a predicate literal.

Runs against the selected server connection. Effects: read server state.

Aliases

• verdict authorise

Arguments and flags

Argument	Type	Required	Default	Description
<first>	positional	yes	No parser default	Actor identity or predicate literal
<second>	positional	no	No parser default	Action string when supplied as a separate argument
<third>	positional	no	No parser default	Resource identity when supplied as a separate argument
--json	boolean	no	false	Output as JSON
--endpoint	string	no	No parser default	Instance base URL, including any subpath (env: VERDICT_HOST, fallback: http://localhost:4891)
--host	string	no	No parser default	Alias for —endpoint
--api-key	string	no	No parser default	API key (env: VERDICT_API_KEY takes precedence)
--profile	string	no	No parser default	Stored profile (env: VERDICT_PROFILE)
--local	boolean	no	false	Use http://localhost:4891 without stored or environment credentials

--help (-h) shows command help without executing the command. Boolean flags support --no-<flag>. Defaults stated in descriptions may be resolved by the handler or configuration rather than the argument parser.

Input

One three-term predicate literal, or separate actor, action, and resource arguments.

File input: unsupported. Standard input: unsupported.

• Actor and resource must be identities; action must be a string constant.

Result

{
  "kind": "json-schema",
  "schema": {
    "type": "object",
    "required": [],
    "additionalProperties": false,
    "properties": {
      "allowed": {
        "type": "boolean",
        "nullable": true
      }
    }
  },
  "example": {
    "allowed": true
  }
}

By default, the command renders human-readable records. --json writes one JSON result to stdout. Operational failures use status 1; JSON failures contain an error object with code and message. See shared output semantics.

Exit status

• 0: permission allowed.
• 1: permission denied; JSON output is {}.

Argument, I/O, and other failures handled by the CLI runner use status 1.

Examples

verdict authorize User:alice read Document:report --json