How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

M3ter PermissionPolicy API

Endpoints for Permission Policy related operations such as creation, update, add and retrieve.Permission Policies can restrict or grant access to specific resources for both Users *(people)* and Service Users *(automated processes with direct API access)*. This enables you to control precisely what a User can do in your m3ter Organization.For more details, see [Understanding, Creating, and Managing Permission Policies](https://www.m3ter.com/docs/guides/organization-and-access-management/creating-and-managing-permissions#permission-policy-statements---available-actions-and-resources) in our main Documentation.

M3ter PermissionPolicy API is one of 58 APIs that M3ter publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include PermissionPolicy. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, authentication docs, and a getting-started guide.

This API exposes 13 operations across 10 paths, and defines 12 schemas. It is described by OpenAPI 3.0.1, at version 1.0.

Requests are made against a single base URL, https://api.m3ter.com.

13 operations 10 paths 12 schemas 1 DELETE2 GET9 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.1
API Version
1.0
Base URL
https://api.m3ter.com
Authentication
OAuth 2.0
Resource Areas
1

Authentication & Security 1

M3ter PermissionPolicy API declares 1 security scheme for authenticating requests. It supports OAuth 2.0 (OAuth2) using the clientCredentials and authorizationCode flows, exposing 6 scopes. By default, every request must be authenticated.

  • OAuth2 — m3ter supports machine to machine authentication using the clientCredentials OAuth2 flow. The authorizationCode flow controls access for human users via the m3…

Paths & Operations 13

Across 10 paths, the API surfaces 13 operations — 1 DELETE, 2 GET, 9 POST, 1 PUT. Each is listed below with its method, path, parameters, and response codes.

PermissionPolicy 13

Endpoints for Permission Policy related operations such as creation, update, add and retrieve. Permission Policies can restrict or grant access to specific resources for both User…

POST
/organizations/{orgId}/permissionpolicies/{permissionPolicyId}/addtousergroup
Add a PermissionPolicy to a user group
AddPermissionPolicyToUserGroup 2 params body → 2004XX5XX
POST
/organizations/{orgId}/permissionpolicies/{permissionPolicyId}/removefromuser
Remove a PermissionPolicy from a user
RemovePermissionPolicyFromUser 2 params body → 2004XX5XX
POST
/organizations/{orgId}/permissionpolicies/{permissionPolicyId}/addtouser
Add a PermissionPolicy to a user
AddPermissionPolicyToUser 2 params body → 2004XX5XX
POST
/organizations/{orgId}/permissionpolicies/{permissionPolicyId}/addtosupportusers
Add a PermissionPolicy to support users for an organization
AddPermissionPolicyToSupportUsers 2 params body → 2004XX5XX
POST
/organizations/{orgId}/permissionpolicies/{permissionPolicyId}/addtoserviceuser
Add a PermissionPolicy to a service user
AddPermissionPolicyToServiceUser 2 params body → 2004XX5XX
POST
/organizations/{orgId}/permissionpolicies/{permissionPolicyId}/removefromserviceuser
Remove a PermissionPolicy from a service user
RemovePermissionPolicyFromServiceUser 2 params body → 2004XX5XX
GET
/organizations/{orgId}/permissionpolicies
List PermissionPolicies
ListPermissionPolicies 3 params → 2004XX5XX
POST
/organizations/{orgId}/permissionpolicies
Create Permission Policy
PostPermissionPolicy 1 param body → 2004XX5XX
POST
/organizations/{orgId}/permissionpolicies/{permissionPolicyId}/removefromsupportusers
Remove a PermissionPolicy from support users for an organization
RemovePermissionPolicyFromSupportUsers 2 params → 2004XX5XX
POST
/organizations/{orgId}/permissionpolicies/{permissionPolicyId}/removefromusergroup
Remove a PermissionPolicy from a user group
RemovePermissionPolicyFromUserGroup 2 params body → 2004XX5XX
GET
/organizations/{orgId}/permissionpolicies/{id}
Retrieve Permission Policy
GetPermissionPolicy 2 params → 2004XX5XX
PUT
/organizations/{orgId}/permissionpolicies/{id}
Update Permission Policy
PutPermissionPolicy 2 params body → 2004XX5XX
DELETE
/organizations/{orgId}/permissionpolicies/{id}
Delete Permission Policy
DeletePermissionPolicy 2 params → 2004XX5XX

Schemas 12

The contract defines 12 schemas that model the data the API accepts and returns. The most detailed are PermissionPolicyRequest (3 properties), PermissionStatement (3 properties), AbstractResponse (2 properties), PaginatedPermissionPolicyResponseData (2 properties). Each schema is shown below with its type and property counts.

PermissionPolicyRequest
object
3 properties 2 required
PrincipalPermissionResponse
object
PermissionRequest
PermissionStatement
object
3 properties 3 required
PrincipalPermissionRequest
object
AbstractResponse
object
2 properties 1 required
PermissionEffect
string
PermissionPolicyResponse
object
PrincipalType
string
AbstractRequest
object
1 property
PermissionAction
string
PaginatedPermissionPolicyResponseData
object
2 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

m3ter-permissionpolicy-api-openapi.yml Raw ↑

Other APIs M3ter publishes across the network.

M3ter Account API
M3ter AccountPlan API
M3ter Aggregation API
M3ter Auth API
M3ter BalanceChargeSchedule API
M3ter Balances API
M3ter BalanceTransactionSchedule API
M3ter Bill API
M3ter BillConfig API
M3ter BillGroupingKey API
M3ter BillJob API
M3ter Charge API
Where this information came from

This is an independent, third-party profile of M3ter PermissionPolicy API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.