> ## Documentation Index
> Fetch the complete documentation index at: https://www.c1.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Check Inference Vault Access

> CheckInferenceVaultAccess reports whether the Edge's runtime service
 principal can open secrets in a Vault, using the same check Update runs
 on inference targets, and returns the entitlement that grants it.



## OpenAPI

````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples get /api/v1/apps/{app_id}/edges/{id}/inference/vault-access
openapi: 3.1.0
info:
  description: The C1 API is a HTTP API for managing C1 resources.
  title: C1 API
  version: 0.1.0-alpha
servers:
  - description: The C1 API server for the current tenant.
    url: https://{tenantDomain}.conductor.one
    variables:
      tenantDomain:
        default: example
        description: The domain of the tenant to use for this request.
security:
  - bearerAuth: []
    oauth: []
paths:
  /api/v1/apps/{app_id}/edges/{id}/inference/vault-access:
    get:
      tags:
        - Edge
      summary: Check Inference Vault Access
      description: |-
        CheckInferenceVaultAccess reports whether the Edge's runtime service
         principal can open secrets in a Vault, using the same check Update runs
         on inference targets, and returns the entitlement that grants it.
      operationId: c1.api.edge.v1.EdgeService.CheckInferenceVaultAccess
      parameters:
        - in: path
          name: app_id
          required: true
          schema:
            description: The appId field.
            type: string
        - in: path
          name: id
          required: true
          schema:
            description: Edge identifier.
            type: string
        - in: query
          name: vault_boundary_id
          schema:
            description: The vaultBoundaryId field.
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/c1.api.edge.v1.EdgeServiceCheckInferenceVaultAccessResponse
          description: >-
            EdgeServiceCheckInferenceVaultAccessResponse reports the same Vault
            grant
             check Update runs before saving an inference route.
components:
  schemas:
    c1.api.edge.v1.EdgeServiceCheckInferenceVaultAccessResponse:
      description: >-
        EdgeServiceCheckInferenceVaultAccessResponse reports the same Vault
        grant
         check Update runs before saving an inference route.
      properties:
        granted:
          description: The granted field.
          type: boolean
        openSecretEntitlementId:
          description: >-
            The Vault's OpenSecret entitlement on the C1 app. Empty when reason
            is
             VAULT_NOT_FOUND.
          type: string
        reason:
          description: The reason field.
          enum:
            - EDGE_INFERENCE_VAULT_ACCESS_REASON_UNSPECIFIED
            - EDGE_INFERENCE_VAULT_ACCESS_REASON_GRANTED
            - EDGE_INFERENCE_VAULT_ACCESS_REASON_NOT_GRANTED
            - EDGE_INFERENCE_VAULT_ACCESS_REASON_NO_RUNTIME_PRINCIPAL
            - EDGE_INFERENCE_VAULT_ACCESS_REASON_VAULT_NOT_FOUND
          type: string
          x-speakeasy-unknown-values: allow
        runtimeServicePrincipalId:
          description: |-
            The Edge's runtime service principal. Empty when reason is
             NO_RUNTIME_PRINCIPAL.
          type: string
      title: Edge Service Check Inference Vault Access Response
      type: object
      x-speakeasy-name-override: EdgeServiceCheckInferenceVaultAccessResponse
  securitySchemes:
    bearerAuth:
      scheme: bearer
      type: http
    oauth:
      description: >-
        This API uses OAuth2 with the Client Credential flow.

        Client Credentials must be sent in the BODY, not the headers.

        For an example of how to implement this, refer to the
        [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187)
        function.
      flows:
        clientCredentials:
          scopes: {}
          tokenUrl: /auth/v1/token
      type: oauth2

````