Skip to content

verdict query

Query stored facts and predicates derived from policy rules, returning values for wildcards. Use fact list to retrieve only stored facts.

Runs against the selected server connection. Effects: read server state.

ArgumentTypeRequiredDefaultDescription
<predicate>positionalyesNo parser defaultPredicate name or literal, for stored facts or derived predicates
--jsonbooleannofalseOutput as JSON
--endpointstringnoNo parser defaultInstance base URL, including any subpath (env: VERDICT_HOST, fallback: http://localhost:4891)
--hoststringnoNo parser defaultAlias for —endpoint
--api-keystringnoNo parser defaultAPI key (env: VERDICT_API_KEY takes precedence)
--profilestringnoNo parser defaultStored profile (env: VERDICT_PROFILE)
--localbooleannofalseUse http://localhost:4891 without stored or environment credentials

--help (-h) shows command help without executing the command. Boolean flags support --no-<flag>. Defaults stated in descriptions may be resolved by the handler or configuration rather than the argument parser.

A predicate literal or a predicate name followed by separate terms.

File input: unsupported. Standard input: unsupported. The predicate positional accepts additional terms or paths.

{
"kind": "protobuf",
"reference": "verdict.v1.QueryResponse",
"projection": "Rows of wildcard values in position order; empty results omit rows.",
"encoding": "ProtoJSON; int64 constants are decimal strings."
}

By default, the command renders human-readable records. --json writes one JSON result to stdout. Operational failures use status 1; JSON failures contain an error object with code and message. See shared output semantics.

  • 0: the command completed its operation.

Argument, I/O, and other failures handled by the CLI runner use status 1.

verdict query 'role(User:alice, _)' --json