# Binary Authorization API API

> Binary Authorization API API on Apizie: 12 endpoints (Gets the current system policy in the specified location., Replaces a platform policy. Returns `NOT_FOUND` if the policy doesn't exist., Deletes a platform policy. Returns `NOT_FOUND` if the policy doesn't exist., Lists attestors. Returns `INVALID_ARGUMENT` if the project does not exist., …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `analytics:googleapis-binaryauthorization`
- Category: Analytics
- Status: byok
- Source: https://cloud.google.com/binary-authorization/
- Page: https://zieapi.vercel.app/api/analytics/googleapis-binaryauthorization
- OpenAPI: https://zieapi.vercel.app/api/analytics/googleapis-binaryauthorization/openapi.json

The management interface for Binary Authorization, a service that provides policy-based deployment validation and control for images deployed to Google Kubernetes Engine (GKE), Anthos Service Mesh, Anthos Clusters, and…

## Endpoints

### Gets the current system policy in the specified location.
`GET https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-systempolicy-get-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. The resource name, in the format `locations/*/policy`. Note that the system policy is not associated with a project. |

### Replaces a platform policy. Returns `NOT_FOUND` if the policy doesn't exist.
`POST https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-projects-platforms-policies-replace-plat` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Output only. The relative resource name of the Binary Authorization platform policy, in the form of `projects/*/platforms/*/policies/*`. |
| body | object | yes | JSON request body |

### Deletes a platform policy. Returns `NOT_FOUND` if the policy doesn't exist.
`POST https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-projects-platforms-policies-delete` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| etag | string | no | Optional. Used to prevent deleting the policy when another request has updated it since it was retrieved. |
| name | string | yes | Required. The name of the platform policy to delete, in the format `projects/*/platforms/*/policies/*`. |

### Lists attestors. Returns `INVALID_ARGUMENT` if the project does not exist.
`GET https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-projects-attestors-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| pageSize | integer | no | Requested page size. The server may return fewer results than requested. If unspecified, the server will pick an appropriate default. |
| pageToken | string | no | A token identifying a page of results the server should return. Typically, this is the value of ListAttestorsResponse.next_page_token… |
| parent | string | yes | Required. The resource name of the project associated with the attestors, in the format `projects/*`. |

### Creates an attestor, and returns a copy of the new attestor. Returns `NOT_FOUND` if the project does not…
`POST https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-projects-attestors-create` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| attestorId | string | no | Required. The attestors ID. |
| parent | string | yes | Required. The parent of this attestor. |
| body | object | yes | JSON request body |

### Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not…
`GET https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-projects-policy-get-iam-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| options.requestedPolicyVersion | integer | no | Optional. The maximum policy version that will be used to format the policy. Valid values are 0, 1, and 3. Requests specifying an invalid… |
| resource | string | yes | REQUIRED: The resource for which the policy is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names)… |

### Sets the access control policy on the specified resource. Replaces any existing policy. Can return…
`POST https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-projects-policy-set-iam-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| resource | string | yes | REQUIRED: The resource for which the policy is being specified. See [Resource names](https://cloud.google.com/apis/design/resource_names)… |
| body | object | yes | JSON request body |

### Returns permissions that a caller has on the specified resource. If the resource does not exist, this will…
`POST https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-projects-policy-test-iam-permissions` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| resource | string | yes | REQUIRED: The resource for which the policy detail is being requested. See [Resource… |
| body | object | yes | JSON request body |

### Returns whether the given `Attestation` for the given image URI was signed by the given `Attestor`
`POST https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-projects-attestors-validate-attestation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| attestor | string | yes | Required. The resource name of the Attestor of the occurrence, in the format `projects/*/attestors/*`. |
| body | object | yes | JSON request body |

### Evaluates a Kubernetes object versus a GKE platform policy. Returns `NOT_FOUND` if the policy doesn't exist,…
`POST https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-projects-platforms-gke-policies-evaluate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. The name of the platform policy to evaluate in the format `projects/*/platforms/*/policies/*`. |
| body | object | yes | JSON request body |

### Lists platform policies owned by a project in the specified platform. Returns `INVALID_ARGUMENT` if the…
`GET https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-projects-platforms-policies-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| pageSize | integer | no | Requested page size. The server may return fewer results than requested. If unspecified, the server picks an appropriate default. |
| pageToken | string | no | A token identifying a page of results the server should return. Typically, this is the value of… |
| parent | string | yes | Required. The resource name of the platform associated with the platform policies using the format `projects/*/platforms/*`. |

### Creates a platform policy, and returns a copy of it. Returns `NOT_FOUND` if the project or platform doesn't…
`POST https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-projects-platforms-policies-create` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| parent | string | yes | Required. The parent of this platform policy. |
| policyId | string | no | Required. The platform policy ID. |
| body | object | yes | JSON request body |

## Example
```
curl "https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-systempolicy-get-policy" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Binary Authorization API API?
Create a free Apizie key, then send GET https://zieapi.vercel.app/v1/analytics:googleapis-binaryauthorization/binaryauthorization-systempolicy-get-policy with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Binary Authorization API API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Binary Authorization API itself also needs your own key from googleapis.com.

### Can AI agents use the Binary Authorization API API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key analytics:googleapis-binaryauthorization.

### What is the status of the Binary Authorization API API?
Needs your own provider key (bring your own key)