How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Nexla Access Control API

Operations for managing access control to resources

Nexla Access Control API is one of 72 APIs that Nexla publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Access Control. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and authentication docs.

This API exposes 48 operations across 12 paths, and defines 10 schemas. It is described by OpenAPI 3.2.0, at version v1.

Requests are made against a single base URL, https://{nexla-api-host}.

48 operations 12 paths 10 schemas 12 DELETE12 GET12 POST12 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
v1
Base URL
https://dataops.nexla.io/nexla-api
Authentication
HTTP Bearer, API Key, HTTP Basic, HTTP Basic, HTTP Bearer
License
Terms of Service
Resource Areas
1

Authentication & Security 5

Nexla Access Control API declares 5 security schemes for authenticating requests. It accepts HTTP bearer tokens (JWT) (NexlaSessionToken). An API key is passed in the query as api_key (NexlaApiKeyQuery). It accepts HTTP basic authentication (NexlaApiKeyHeader). It accepts HTTP basic authentication (basicAuth). It accepts HTTP bearer tokens (JWT) (GoogleSSOToken). By default, every request must be authenticated.

  • NexlaSessionToken — The first step in calling the Nexla API or Nexla CLI is to fetch a Session access token by logging on to your Nexla UI instance. This ensures that your authent…
  • NexlaApiKeyQuery — Important: Never share your API keys. Keep them guarded and secure. If you think the key has been compromised, you can rotate the API key by calling relevant A…
  • NexlaApiKeyHeader — Important: Never share your API keys. Keep them guarded and secure. If you think the key has been compromised, you can rotate the API key by calling relevant A…
  • GoogleSSOToken — The token that is used when logging into Nexla via Google SSO.

Paths & Operations 48

Across 12 paths, the API surfaces 48 operations — 12 DELETE, 12 GET, 12 POST, 12 PUT. Each is listed below with its method, path, parameters, and response codes.

Access Control 48

Operations for managing access control to resources

GET
/data_sources/{data_source_id}/accessors
Get Access Rules on Data Source
get_data_source_accessors 1 param → 200401403404
POST
/data_sources/{data_source_id}/accessors
Replace Access Rules on Data Source
replace_data_source_accessors 1 param body → 200401403404
PUT
/data_sources/{data_source_id}/accessors
Add Access Rules on Data Source
add_data_source_accessors 1 param body → 200401403404
DELETE
/data_sources/{data_source_id}/accessors
Delete Access Rules on Data Source
delete_data_source_accessors 1 param body → 200401403404
GET
/data_sets/{data_set_id}/accessors
Get Access Rules on Nexset
get_nexset_accessors 1 param → 200401403404
POST
/data_sets/{data_set_id}/accessors
Replace Access Rules on Nexset
replace_nexset_accessors 1 param body → 200401403404
PUT
/data_sets/{data_set_id}/accessors
Add Access Rules on Nexset
add_nexset_accessors 1 param body → 200401403404
DELETE
/data_sets/{data_set_id}/accessors
Delete Access Rules on Nexset
delete_nexset_accessors 1 param body → 200401403404
GET
/data_sinks/{data_sink_id}/accessors
Get Access Rules on Data Sink
get_data_sink_accessors 1 param → 200401403404
POST
/data_sinks/{data_sink_id}/accessors
Replace Access Rules on Data Sink
replace_data_sink_accessors 1 param body → 200401403404
PUT
/data_sinks/{data_sink_id}/accessors
Add Access Rules on Data Sink
add_data_sink_accessors 1 param body → 200401403404
DELETE
/data_sinks/{data_sink_id}/accessors
Delete Access Rules on Data Sink
delete_data_sink_accessors 1 param body → 200401403404
GET
/data_maps/{data_map_id}/accessors
Get Access Rules on Data Map
get_data_map_accessors 1 param → 200401403404
POST
/data_maps/{data_map_id}/accessors
Replace Access Rules on Data Map
replace_data_map_accessors 1 param body → 200401403404
PUT
/data_maps/{data_map_id}/accessors
Add Access Rules on Data Map
add_data_map_accessors 1 param body → 200401403404
DELETE
/data_maps/{data_map_id}/accessors
Delete Access Rules on Data Map
delete_data_map_accessors 1 param body → 200401403404
GET
/data_credentials/{data_credential_id}/accessors
Get Access Rules on Data Credential
get_data_credential_accessors 1 param → 200401403404
POST
/data_credentials/{data_credential_id}/accessors
Replace Access Rules on Data Credential
replace_data_credential_accessors 1 param body → 200401403404
PUT
/data_credentials/{data_credential_id}/accessors
Add Access Rules on Data Credential
add_data_credential_accessors 1 param body → 200401403404
DELETE
/data_credentials/{data_credential_id}/accessors
Delete Access Rules on Data Credential
delete_data_credential_accessors 1 param body → 200401403404
GET
/projects/{project_id}/accessors
Get Project Accessors
get_project_accessors 1 param → 200401403404
POST
/projects/{project_id}/accessors
Replace Access Rules on Project
replace_project_accessors 1 param body → 200401403404
PUT
/projects/{project_id}/accessors
Add Project Accessors
add_project_accessors 1 param body → 200401403404
DELETE
/projects/{project_id}/accessors
Delete Project Accessors
delete_project_accessors 1 param body → 200401403404
GET
/flows/{flow_id}/accessors
Get Access Rules on Flow
get_flow_accessors 1 param → 200401403404
POST
/flows/{flow_id}/accessors
Replace Access Rules on Flow
replace_flow_accessors 1 param body → 200401403404
PUT
/flows/{flow_id}/accessors
Add Access Rules on Flow
add_flow_accessors 1 param body → 200401403404
DELETE
/flows/{flow_id}/accessors
Delete Access Rules on Flow
delete_flow_accessors 1 param body → 200401403404
GET
/data_flows/{data_flow_id}/accessors
Get Access Rules on Flow (Deprecated)
get_flow_accessors_(deprecated) 1 param → 200401403404
POST
/data_flows/{data_flow_id}/accessors
Replace Access Rules on Flow (Deprecated)
replace_flow_accessors_(deprecated) 1 param body → 200401403404
PUT
/data_flows/{data_flow_id}/accessors
Add Access Rules on Flow (Deprecated)
add_flow_accessors_(deprecated) 1 param body → 200401403404
DELETE
/data_flows/{data_flow_id}/accessors
Delete Access Rules on Flow (Deprecated)
delete_flow_accessors_(deprecated) 1 param body → 200401403404
GET
/data_schemas/{data_schema_id}/accessors
Get Access Rules on Data Schema
get_data_schema_accessors 1 param → 200401403404
POST
/data_schemas/{data_schema_id}/accessors
Replace Access Rules on Data Schema
replace_data_schema_accessors 1 param body → 200401403404
PUT
/data_schemas/{data_schema_id}/accessors
Add Access Rules on Data Schema
add_data_schema_accessors 1 param body → 200401403404
DELETE
/data_schemas/{data_schema_id}/accessors
Delete Access Rules on Data Schema
delete_data_schema_accessors 1 param body → 200401403404
GET
/doc_containers/{doc_container_id}/accessors
Get Access Rules on Document
get_doc_container_accessors 1 param → 200401403404
POST
/doc_containers/{doc_container_id}/accessors
Replace Access Rules on Document
replace_doc_container_accessors 1 param body → 200401403404
PUT
/doc_containers/{doc_container_id}/accessors
Add Access Rules on Document
add_doc_container_accessors 1 param body → 200401403404
DELETE
/doc_containers/{doc_container_id}/accessors
Delete Access Rules on Document
delete_doc_container_accessors 1 param body → 200401403404
GET
/code_containers/{code_container_id}/accessors
Get Access Rules on Code Container
get_code_container_accessors 1 param → 200401403404
POST
/code_containers/{code_container_id}/accessors
Replace Access Rules on Code Container
replace_code_container_accessors 1 param body → 200401403404
PUT
/code_containers/{code_container_id}/accessors
Add Access Rules on Code Container
add_code_container_accessors 1 param body → 200401403404
DELETE
/code_containers/{code_container_id}/accessors
Delete Access Rules on Code Container
delete_code_container_accessors 1 param body → 200401403404
GET
/teams/{team_id}/accessors
Get Team Accessors
get_team_accessors 1 param → 200401403404
POST
/teams/{team_id}/accessors
Replace Team Accessors List
replace_team_accessors 1 param body → 200401403404
PUT
/teams/{team_id}/accessors
Add Team Accessors
add_team_accessors 1 param body → 200401403404
DELETE
/teams/{team_id}/accessors
Delete Team Accessors
delete_team_accessors 1 param body → 200401403404

Schemas 10

The contract defines 10 schemas that model the data the API accepts and returns. The most detailed are RequestUserAccessor (4 properties), ResponseOrgAccessor (3 properties), ResponseUserAccessor (2 properties), RequestOrgAccessor (2 properties). Each schema is shown below with its type and property counts.

RequestTeamAccessor
object
2 properties
AccessorsMutable
ResponseTeamAccessor
object
2 properties
AccessRoles
array
This property reflects all the permissions the user/team/organization has to this resource. 1. collaborator: The user/team/organization can view the resource b…
AccessorsResponseSchema
AccessorsRequestSchema
object
1 property
RequestUserAccessor
object
4 properties
RequestOrgAccessor
object
2 properties
ResponseUserAccessor
object
2 properties
ResponseOrgAccessor
object
3 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

nexla-access-control-api-openapi.yml Raw ↑

Other APIs Nexla publishes across the network.

Nexla Approval Requests API
Nexla Async Tasks API
Nexla Audit Logs API
Nexla Bulk Evaluation API
Nexla Bulk Query API
Nexla Clear Dataset Cache API
Nexla Clear Token Cache API
Nexla Code API
Nexla Code Containers API
Nexla Credential Mappings API
Nexla Credentials API
Nexla Custom Runtimes API
Where this information came from

This is an independent, third-party profile of Nexla Access Control API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.