Skip to main content
Auth0 Fine-Grained Authorization (FGA) lets you manage authorization models, relationship tuples, and assertions, run relationship queries, read permissions index expansions, and search store logs programmatically. Select an operation from the navigation to explore its parameters, responses, and request examples. For an introduction, see Auth0 FGA.

​
Before you start

Create a store and obtain a client ID and client secret as described in Get your API keys. Obtain an access token using the client credentials grant at https://auth.fga.dev/oauth/token with the audience for your store’s region. Each operation lists its required OAuth scopes. Select the API base URL matching your store’s locality: US (https://api.us1.fga.dev), Europe (https://api.eu1.fga.dev), or Australia (https://api.au1.fga.dev). The corresponding token audience is the base URL with a trailing slash. See regional environment variables for details. The right-hand examples include cURL for every operation and Node.js, Go, .NET, Python, and Java when an SDK method has been verified. The managed-only endpoints have cURL examples without unverified SDK calls.
This reference is built from the public Auth0 FGA OpenAPI schema each time the site is deployed. The documentation adds only the three documented regional servers and reviewed code samples; operations, parameters, and OAuth scopes come from the upstream schema. Use credentials for your own store and region.
Legacy Swagger links to /api/service may contain an operation fragment (the part after #). Browsers do not send fragments to a server, so incoming links with those fragments cannot be redirected to individual operations. Choose the equivalent operation from this navigation instead.