Grant environment access

Gives another account access to this environment of your private model. Every member and API key of that account can then mint tokens and start sessions on it. The request has no body, and repeating it is safe.

A grant on a public model changes nothing until the model is private. A session token can open a granted environment when its model scope names owner/name:environment. See Limit what a token can do.

Requires the account_admin role and Serve access.

PUT

projects

{proj_id}

environments

{env}

accounts

{account_id}

Grant environment access

curl --request PUT \
  --url https://api.reactor.inc/projects/{proj_id}/environments/{env}/accounts/{account_id} \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.reactor.inc/projects/{proj_id}/environments/{env}/accounts/{account_id}"

headers = {"Authorization": "Bearer <token>"}

response = requests.put(url, headers=headers)

print(response.text)

const options = {method: 'PUT', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.reactor.inc/projects/{proj_id}/environments/{env}/accounts/{account_id}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.reactor.inc/projects/{proj_id}/environments/{env}/accounts/{account_id}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PUT",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.reactor.inc/projects/{proj_id}/environments/{env}/accounts/{account_id}"

	req, _ := http.NewRequest("PUT", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.reactor.inc/projects/{proj_id}/environments/{env}/accounts/{account_id}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "model": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "name": "<string>"
  },
  "account": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "slug": "<string>",
    "name": "<string>"
  },
  "environments": [
    {
      "name": "<string>",
      "granted_by": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "granted_at": "2023-11-07T05:31:56Z"
    }
  ]
}

{
  "model": {
    "id": "7b3f1a2c-4d5e-4f60-8a1b-2c3d4e5f6a7b",
    "name": "your-org/your-model"
  },
  "account": {
    "id": "3c1d2e4f-5a6b-4c7d-8e9f-0a1b2c3d4e5f",
    "slug": "partner-co",
    "name": "Partner Co"
  },
  "environments": [
    {
      "name": "staging",
      "granted_by": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
      "granted_at": "2026-11-10T09:05:00Z"
    }
  ]
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

Authorizations

Authorization

string

header

required

A Reactor API key (rk_...), sent as Authorization: Bearer rk_.... Keep it on a server.

Path Parameters

proj_id

string<uuid>

required

The project's ID, a UUID. It is not the model's ID.

env

string

required

The environment's ID (a UUID) or its name, such as production. A name matches only a live environment; a deleted environment is reachable by its ID only.

account_id

string<uuid>

required

The ID of the account that gets or holds access. A member finds it with GET /me.

Response

The account already had access. The grant record.

model

object

required

Show child attributes

account

object

required

Show child attributes

environments

object[]

required

The environments of the model the account has access to.

Show child attributes

⌘I

Grant environment access

curl --request PUT \
  --url https://api.reactor.inc/projects/{proj_id}/environments/{env}/accounts/{account_id} \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.reactor.inc/projects/{proj_id}/environments/{env}/accounts/{account_id}"

headers = {"Authorization": "Bearer <token>"}

response = requests.put(url, headers=headers)

print(response.text)

const options = {method: 'PUT', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.reactor.inc/projects/{proj_id}/environments/{env}/accounts/{account_id}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.reactor.inc/projects/{proj_id}/environments/{env}/accounts/{account_id}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PUT",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.reactor.inc/projects/{proj_id}/environments/{env}/accounts/{account_id}"

	req, _ := http.NewRequest("PUT", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.reactor.inc/projects/{proj_id}/environments/{env}/accounts/{account_id}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "model": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "name": "<string>"
  },
  "account": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "slug": "<string>",
    "name": "<string>"
  },
  "environments": [
    {
      "name": "<string>",
      "granted_by": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "granted_at": "2023-11-07T05:31:56Z"
    }
  ]
}

{
  "model": {
    "id": "7b3f1a2c-4d5e-4f60-8a1b-2c3d4e5f6a7b",
    "name": "your-org/your-model"
  },
  "account": {
    "id": "3c1d2e4f-5a6b-4c7d-8e9f-0a1b2c3d4e5f",
    "slug": "partner-co",
    "name": "Partner Co"
  },
  "environments": [
    {
      "name": "staging",
      "granted_by": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
      "granted_at": "2026-11-10T09:05:00Z"
    }
  ]
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

Get started

SDK Reference

CLI Reference

Platform API Reference

Endpoints

Grant environment access

Authorizations

Path Parameters

Response