# Access Context Manager API API

> Access Context Manager API API on Apizie: 24 endpoints (Lists all access policies in an organization., Creates an access policy. This method fails if the organization already has an access policy. The…, Gets the GcpUserAccessBinding with the given name., Updates a GcpUserAccessBinding. Completion of this long-running operation does not necessarily signify that…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `analytics:googleapis-accesscontextmanager`
- Category: Analytics
- Status: byok
- Source: https://cloud.google.com/access-context-manager/docs/reference/rest/
- Page: https://apizie.tech/api/analytics/googleapis-accesscontextmanager
- OpenAPI: https://apizie.tech/api/analytics/googleapis-accesscontextmanager/openapi.json

An API for setting attribute based access control to requests to Google Cloud services. *Warning:* Do not mix *v1alpha* and *v1* API usage in the same access policy. The v1alpha API supports new Access Context Manager…

## Endpoints

### Lists all access policies in an organization.
`GET https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| pageSize | integer | no | Number of AccessPolicy instances to include in the list. Default 100. |
| pageToken | string | no | Next page token for the next batch of AccessPolicy instances. Defaults to the first page of results. |
| parent | string | no | Required. Resource name for the container to list AccessPolicy instances from. Format: `organizations/{org_id}` |

### Creates an access policy. This method fails if the organization already has an access policy. The…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-create` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| body | object | yes | JSON request body |

### Gets the GcpUserAccessBinding with the given name.
`GET https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-organizations-gcp-user-access-bindings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N" |

### Updates a GcpUserAccessBinding. Completion of this long-running operation does not necessarily signify that…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-organizations-gcp-user-access-bindings-2` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| append | boolean | no | Optional. This field controls whether or not certain repeated settings in the update request overwrite or append to existing settings on… |
| name | string | yes | Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as… |
| updateMask | string | no | Required. Only the fields specified in this mask are updated. Because name and group_key cannot be changed, update_mask is required and… |
| body | object | yes | JSON request body |

### Deletes a GcpUserAccessBinding. Completion of this long-running operation does not necessarily signify that…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-organizations-gcp-user-access-bindings-3` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N" |

### Gets the IAM policy for the specified Access Context Manager access policy.
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-get-iam-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| resource | string | yes | REQUIRED: The resource for which the policy is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names)… |
| body | object | yes | JSON request body |

### Sets the IAM policy for the specified Access Context Manager access policy. This method replaces the…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-set-iam-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| resource | string | yes | REQUIRED: The resource for which the policy is being specified. See [Resource names](https://cloud.google.com/apis/design/resource_names)… |
| body | object | yes | JSON request body |

### Returns the IAM permissions that the caller has on the specified Access Context Manager resource. The…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-service-perimeters-test` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| resource | string | yes | REQUIRED: The resource for which the policy detail is being requested. See [Resource… |
| body | object | yes | JSON request body |

### Lists all access levels for an access policy.
`GET https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-access-levels-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| accessLevelFormat | string | no | Whether to return `BasicLevels` in the Cloud Common Expression language, as `CustomLevels`, rather than as `BasicLevels`. Defaults to… |
| pageSize | integer | no | Number of Access Levels to include in the list. Default 100. |
| pageToken | string | no | Next page token for the next batch of Access Level instances. Defaults to the first page of results. |
| parent | string | yes | Required. Resource name for the access policy to list Access Levels from. Format: `accessPolicies/{policy_id}` |

### Creates an access level. The long-running operation from this RPC has a successful status after the access…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-access-levels-create` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| parent | string | yes | Required. Resource name for the access policy which owns this Access Level. Format: `accessPolicies/{policy_id}` |
| body | object | yes | JSON request body |

### Replaces all existing access levels in an access policy with the access levels provided. This is done…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-access-levels-replace-a` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| parent | string | yes | Required. Resource name for the access policy which owns these Access Levels. Format: `accessPolicies/{policy_id}` |
| body | object | yes | JSON request body |

### Lists all authorized orgs descs for an access policy.
`GET https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-authorized-orgs-descs-l` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| pageSize | integer | no | Number of Authorized Orgs Descs to include in the list. Default 100. |
| pageToken | string | no | Next page token for the next batch of Authorized Orgs Desc instances. Defaults to the first page of results. |
| parent | string | yes | Required. Resource name for the access policy to list Authorized Orgs Desc from. Format: `accessPolicies/{policy_id}` |

### Creates an authorized orgs desc. The long-running operation from this RPC has a successful status after the…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-authorized-orgs-descs-c` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| parent | string | yes | Required. Resource name for the access policy which owns this Authorized Orgs Desc. Format: `accessPolicies/{policy_id}` |
| body | object | yes | JSON request body |

### Commits the dry-run specification for all the service perimeters in an access policy. A commit operation on…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-service-perimeters-comm` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| parent | string | yes | Required. Resource name for the parent Access Policy which owns all Service Perimeters in scope for the commit operation. Format:… |
| body | object | yes | JSON request body |

### Lists all service perimeters for an access policy.
`GET https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-service-perimeters-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| deletedPrincipalSyntax | string | no | Optional. If true, the response will contain the deleted principal syntax for identities that support it. |
| pageSize | integer | no | Number of Service Perimeters to include in the list. Default 100. |
| pageToken | string | no | Next page token for the next batch of Service Perimeter instances. Defaults to the first page of results. |
| parent | string | yes | Required. Resource name for the access policy to list Service Perimeters from. Format: `accessPolicies/{policy_id}` |

### Creates a service perimeter. The long-running operation from this RPC has a successful status after the…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-service-perimeters-crea` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| parent | string | yes | Required. Resource name for the access policy which owns this Service Perimeter. Format: `accessPolicies/{policy_id}` |
| body | object | yes | JSON request body |

### Replace all existing service perimeters in an access policy with the service perimeters provided. This is…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-service-perimeters-repl` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| parent | string | yes | Required. Resource name for the access policy which owns these Service Perimeters. Format: `accessPolicies/{policy_id}` |
| body | object | yes | JSON request body |

### Looks up the configured service perimeter for a given resource Format: ['projects/{projectNumber}',…
`GET https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-projects-lookup-configured-service-peri` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| resource | string | yes | Required. The Resource to resolve (e.g. "projects/123", "folders/456"). |

### Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-operations-cancel` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | The name of the operation resource to be cancelled. |
| body | object | yes | JSON request body |

### Lists all GcpUserAccessBindings for a Google Cloud organization.
`GET https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-organizations-gcp-user-access-bindings-4` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| filter | string | no | Optional. The literal filter to apply to the results returned. See https://google.aip.dev/160 for more details. Accepts values: *… |
| pageSize | integer | no | Optional. Maximum number of items to return. The server may return fewer items. If left blank, the server may return any number of items. |
| pageToken | string | no | Optional. If left blank, returns the first page. To enumerate all items, use the next_page_token from your previous list operation. |
| parent | string | yes | Required. Example: "organizations/256" |

### Creates a GcpUserAccessBinding. If the client specifies a name, the server ignores it. Fails if a resource…
`POST https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-organizations-gcp-user-access-bindings-5` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| parent | string | yes | Required. Example: "organizations/256" |
| body | object | yes | JSON request body |

### Lists all supported permissions in VPC Service Controls ingress and egress rules for Granular Controls.
`GET https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-permissions-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| pageSize | integer | no | Optional. This flag specifies the maximum number of services to return per page. Default value is 100. |
| pageToken | string | no | Optional. Use this token to retrieve a specific page of results. Default is the first page. |

### Returns a VPC-SC supported service based on the service name. **IAM Permissions**: Requires the following…
`GET https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-services-get` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | The name of the service to get information about. The names must be in the same format as used in defining a service perimeter, for… |

### Lists all VPC-SC supported services. **IAM Permissions**: Requires the following IAM permissions to use this…
`GET https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-services-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| pageSize | integer | no | This flag specifies the maximum number of services to return per page. Default value is 100. |
| pageToken | string | no | Use this token to retrieve a specific page of results. Default is the first page. |

## Example
```
curl "https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-list" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Access Context Manager API API?
Create a free Apizie key, then send GET https://apizie.tech/v1/analytics:googleapis-accesscontextmanager/accesscontextmanager-access-policies-list with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Access Context Manager API API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Access Context Manager API itself also needs your own key from googleapis.com.

### Can AI agents use the Access Context Manager API API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key analytics:googleapis-accesscontextmanager.

### What is the status of the Access Context Manager API API?
Needs your own provider key (bring your own key)