Get an access grant | Passport from Postman

{
  "data": {
    "id": "7b3f2c1d-8e9a-4b5c-6d7e-8f9a0b1c2d3e",
    "userId": "user_01ABC",
    "namespaceId": "3f7c2b6e-1c2d-4a5b-9e8f-0a1b2c3d4e5f",
    "namespaceName": "Payments",
    "scopeType": "endpoint",
    "scopeValue": "c4d2e1f0-1111-2222-3333-444455556666",
    "scopeName": null,
    "endpoint": {
      "method": "POST",
      "host": "api.stripe.com",
      "path": "/v1/charges"
    },
    "status": "active",
    "reason": "access_request:1f0a9b8c-7d6e-5f4a-3b2c-1d0e9f8a7b6c",
    "expiresAt": "2026-02-01T00:00:00.000Z",
    "revokedAt": null,
    "createdAt": "2026-01-02T10:15:00.000Z",
    "updatedAt": "2026-01-02T10:15:00.000Z"
  }
}

Fetch one grant by id, in the same shape as a list item. Admin only (a member key is rejected with 403). A non-UUID id is rejected with 400; a grant from another organization is invisible and returns 404.

Authentication

AuthorizationBearer

WorkOS API key (Authorization: Bearer sk_…). Scope comes from the key’s permissions: a key carrying passport:admin has admin scope (full catalog CRUD), any other key has member scope (reads + access requests). Organization-owned keys are admin by ownership and carry no associated user; keys minted for a user carry theirs, which is what access requests and createdBy are attributed to.

Path parameters

accessGrantIdstringRequiredformat: "uuid"

The grant’s id (from the list). A non-UUID value is rejected with 400.

Response headers

RateLimit-LimitintegerOptional

Requests allowed in the current window.

RateLimit-RemainingintegerOptional

Requests remaining in the current window.

RateLimit-ResetintegerOptional

Unix epoch seconds when the window resets.

Response

dataobject

A live access grant — who (userId) can reach what scope in a namespace. Minted when an access request is approved; revoke flips status to revoked and stamps revokedAt while keeping the row for history. teamId is omitted (implicit from the API key’s organization).

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

429

Too Many Requests Error

500

Internal Server Error

503

Service Unavailable Error