> ## Documentation index
> Fetch the complete documentation index at: https://developer.rhombus.com/llms.txt
> Use it to discover all available pages before exploring further.

# Find minimal state access controlled doors within the org

> Find minimal state access controlled doors within the org

```http
POST https://api2.rhombussystems.com/api/component/findMinimalStateAccessControlledDoors
```

EU organizations send the same request to `https://api2.eu.rhombussystems.com`.

## Authentication and parameters

- `x-auth-apikey` (header, required): Your Rhombus API key. Must be accompanied by the `x-auth-scheme` header set to `api-token` (or `partner-api-token` for partner endpoints).
- `Authorization` (header): instead of an API key, an OAuth access token (`Bearer <token>`) with the `read` scope.
- `x-auth-scheme` (header, string, default: `api-token`): Authentication scheme identifier. Use `api-token` or `partner-api-token` with the `x-auth-apikey` header, `api` or `partner-api` with `x-auth-apikey` plus a client certificate, `api-oauth-token` or `partner-api-oauth-token` with `x-auth-access-token`, and `federated-token` with `x-auth-ft`. A request with `Authorization: Bearer <token>` and no `x-auth-scheme` is treated as OAuth, and `federated-token` may also be sent as the `x-auth-scheme` and `x-auth-ft` query parameters. One of: `api-token`, `api`, `api-oauth-token`, `federated-token`, `partner-api-token`, `partner-api`, `partner-api-oauth-token`.
- `x-auth-org` (header, string<RUUID>): Client organization UUID (22-character RUUID), for partner credentials only. With it the call runs in that client organization with the partner support authority's role. Without it a partner credential runs as the partner organization, which outside the partner endpoints is deprecated (responses carry `Deprecation` and `Sunset: Tue, 05 Jan 2027 00:00:00 GMT`). A malformed value returns 400 `INVALID_AUTH_ORG`; a client organization the partner cannot access returns 403 `PARTNER_CLIENT_ACCESS_DENIED`.

## Request body

Content type: `application/json`

- `lastEvaluatedKey` (string | null)
- `maxPageSize` (integer<int32> | null)

## Response 200

OK. Content type: `application/json`

- `accessControlledDoors` (array<object> | null)
- `lastEvaluatedKey` (string | null)

## Errors

Also 400, 401, 403, 429, 500, 503 with the standard error body (`errorCode`, `errorMsg`): https://developer.rhombus.com/errors

## OpenAPI

````yaml
openapi: 3.0.1
info:
  title: Rhombus API
  version: "1.0"
servers:
  - description: Production Server
    url: https://api2.rhombussystems.com
security:
  - ApiKeyAuth: []
paths:
  /api/component/findMinimalStateAccessControlledDoors:
    post:
      description: Find minimal state access controlled doors within the org
      operationId: findMinimalStateAccessControlledDoors
      parameters:
        - description: "Authentication scheme identifier. Use `api-token` or `partner-api-token` with the `x-auth-apikey` header, `api` or `partner-api` with `x-auth-apikey` plus a client certificate, `api-oauth-token` or `partner-api-oauth-token` with `x-auth-access-token`, and `federated-token` with `x-auth-ft`. A request with `Authorization: Bearer <token>` and no `x-auth-scheme` is treated as OAuth, and `federated-token` may also be sent as the `x-auth-scheme` and `x-auth-ft` query parameters."
          example: api-token
          in: header
          name: x-auth-scheme
          required: false
          schema:
            default: api-token
            enum:
              - api-token
              - api
              - api-oauth-token
              - federated-token
              - partner-api-token
              - partner-api
              - partner-api-oauth-token
            type: string
        - description: "Client organization UUID (22-character RUUID), for partner credentials only. With it the call runs in that client organization with the partner support authority's role. Without it a partner credential runs as the partner organization, which outside the partner endpoints is deprecated (responses carry `Deprecation` and `Sunset: Tue, 05 Jan 2027 00:00:00 GMT`). A malformed value returns 400 `INVALID_AUTH_ORG`; a client organization the partner cannot access returns 403 `PARTNER_CLIENT_ACCESS_DENIED`."
          in: header
          name: x-auth-org
          required: false
          schema:
            format: RUUID
            maxLength: 22
            minLength: 22
            type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/Component_FindMinimalStateAccessControlledDoorsWSRequest"
      responses:
        "200":
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Component_FindMinimalStateAccessControlledDoorsWSResponse"
          description: OK
        "400":
          $ref: "#/components/responses/BadRequest"
        "401":
          $ref: "#/components/responses/Unauthorized"
        "403":
          $ref: "#/components/responses/Forbidden"
        "429":
          $ref: "#/components/responses/TooManyRequests"
        "500":
          $ref: "#/components/responses/InternalServerError"
        "503":
          $ref: "#/components/responses/ServiceUnavailable"
      security:
        - ApiKeyAuth: []
        - oauth2:
            - read
      summary: Find minimal state access controlled doors within the org
      tags:
        - Component Webservice
components:
  schemas:
    Component_FindMinimalStateAccessControlledDoorsWSRequest:
      properties:
        lastEvaluatedKey:
          nullable: true
          type: string
        maxPageSize:
          format: int32
          nullable: true
          type: integer
      type: object
    Component_FindMinimalStateAccessControlledDoorsWSResponse:
      properties:
        accessControlledDoors:
          items:
            $ref: "#/components/schemas/Component_MinimalStateAccessControlledDoor"
          nullable: true
          type: array
        lastEvaluatedKey:
          nullable: true
          type: string
      type: object
    Component_MinimalStateAccessControlledDoor:
      properties:
        door:
          $ref: "#/components/schemas/AccessControlledDoorType"
        shadow:
          $ref: "#/components/schemas/AccessControlledDoorShadow"
      type: object
    AccessControlledDoorType:
      properties:
        ajarTimeSec:
          format: int32
          nullable: true
          type: integer
        apbMode:
          $ref: "#/components/schemas/AntiPassbackModeEnum"
        apbZoneId:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        aperioDoorExtensionComponent:
          $ref: "#/components/schemas/ComponentReferenceType"
        aperioDoorId:
          nullable: true
          type: string
        aperioGatewayComponent:
          $ref: "#/components/schemas/ComponentReferenceType"
        associatedCameras:
          items:
            description: RUUID with optional appended facet information
            example: AAAAAAAAAAAAAAAAAAAAAA.v0
            format: DeviceFacetUuid
            nullable: true
            type: string
          nullable: true
          type: array
          uniqueItems: true
        associatedFaceDetectionCameras:
          items:
            description: RUUID with optional appended facet information
            example: AAAAAAAAAAAAAAAAAAAAAA.v0
            format: DeviceFacetUuid
            nullable: true
            type: string
          nullable: true
          type: array
          uniqueItems: true
        buttonComponents:
          items:
            $ref: "#/components/schemas/ComponentReferenceType"
          nullable: true
          type: array
          uniqueItems: true
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        defaultAccessStateOriginator:
          $ref: "#/components/schemas/BaseEventOriginator"
        defaultAccessStateRequestedAtMillis:
          format: int64
          nullable: true
          type: integer
        defaultState:
          $ref: "#/components/schemas/AccessControlledDoorStateEnumType"
        directionRadians:
          format: float
          nullable: true
          type: number
        doorAuthFirstInStateOverride:
          $ref: "#/components/schemas/FirstInState"
        doorScheduleFirstInStateOverride:
          $ref: "#/components/schemas/FirstInState"
        doorStateOverride:
          $ref: "#/components/schemas/BaseAccessStateOverride"
        doorStateToScheduleUuidMap:
          additionalProperties:
            description: base 64 (url-safe) uuid string
            example: AAAAAAAAAAAAAAAAAAAAAA
            format: RUUID
            nullable: true
            type: string
          nullable: true
          type: object
        dpiComponents:
          items:
            $ref: "#/components/schemas/ComponentReferenceType"
          nullable: true
          type: array
          uniqueItems: true
        floorNumber:
          format: int32
          nullable: true
          type: integer
        forceAllReadersFirstInAuthRequiredLedFeedbackEnabled:
          nullable: true
          type: boolean
        forceAllReadersFirstInUnlockPendingLedFeedbackEnabled:
          nullable: true
          type: boolean
        forceAllReadersOtherReaderUnlockAudioFeedbackEnabled:
          nullable: true
          type: boolean
        forceAllReadersRemoteUnlockAudioFeedbackEnabled:
          nullable: true
          type: boolean
        forcedOpenEnabled:
          nullable: true
          type: boolean
        forcedOpenTimeSec:
          format: int32
          nullable: true
          type: integer
        geofenceEnabled:
          nullable: true
          type: boolean
        geofenceRadius:
          format: double
          nullable: true
          type: number
        latitude:
          format: double
          nullable: true
          type: number
        locationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        longitude:
          format: double
          nullable: true
          type: number
        name:
          nullable: true
          type: string
        nfcSecureDowngradeEnabled:
          nullable: true
          type: boolean
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        ownerDeviceUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        policyUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        privacyModeSupportEnabled:
          nullable: true
          type: boolean
        proximityUnlockSettings:
          $ref: "#/components/schemas/ProximityUnlockSettingsType"
        readerComponents:
          items:
            $ref: "#/components/schemas/ComponentReferenceType"
          nullable: true
          type: array
          uniqueItems: true
        relayComponents:
          items:
            $ref: "#/components/schemas/ComponentReferenceType"
          nullable: true
          type: array
          uniqueItems: true
        relockAfterOpenTimeMs:
          format: int32
          nullable: true
          type: integer
        remoteUnlockEnabled:
          nullable: true
          type: boolean
        rexComponents:
          items:
            $ref: "#/components/schemas/ComponentReferenceType"
          nullable: true
          type: array
          uniqueItems: true
        schlageDoorExtensionComponent:
          $ref: "#/components/schemas/ComponentReferenceType"
        schlageGatewayComponent:
          $ref: "#/components/schemas/ComponentReferenceType"
        schlageGatewayRs485Address:
          format: int32
          nullable: true
          type: integer
        schlageRs485Address:
          format: int32
          nullable: true
          type: integer
        sendExpiredIntentEvents:
          nullable: true
          type: boolean
        subLocationsHierarchyKey:
          description: |
            A sequence of one or more base 64 (url-safe) uuid substrings.
            These substrings are separated by dots (.).
          example: AAAAAAAAAAAAAAAAAAAAAA.AAAAAAAAAAAAAAAAAAAAAA.AAAAAAAAAAAAAAAAAAAAAA
          format: SubLocationsHierarchyKey
          nullable: true
          pattern: ^([A-Za-z0-9\-_]{22})([.][A-Za-z0-9\-_]{22})*$
          type: string
        subType:
          $ref: "#/components/schemas/AccessControlledDoorSubTypeEnum"
        type:
          $ref: "#/components/schemas/ComponentCompositeEnumType"
        unlockTimeSec:
          format: int32
          nullable: true
          type: integer
        unlockTimeSecRex:
          format: int32
          nullable: true
          type: integer
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        waveToUnlockSettings:
          $ref: "#/components/schemas/WaveToUnlockSettingsType"
      type: object
    AntiPassbackModeEnum:
      enum:
        - HARD_STRICT
        - HARD_PERMISSIVE
        - SOFT
        - NONE
      type: string
    ComponentReferenceType:
      properties:
        componentUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        deviceUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
      type: object
    BaseEventOriginator:
      discriminator:
        propertyName: type
      oneOf:
        - $ref: "#/components/schemas/SupportAuthorityEventOriginator"
        - $ref: "#/components/schemas/ApiTokenEventOriginator"
        - $ref: "#/components/schemas/UserEventOriginator"
        - $ref: "#/components/schemas/RuleEventOriginator"
        - $ref: "#/components/schemas/ComponentCompositeEventOriginator"
        - $ref: "#/components/schemas/GuestPassEventOriginator"
        - $ref: "#/components/schemas/DeviceServiceEventOriginator"
      properties:
        auditPrincipal:
          nullable: true
          type: string
        type:
          $ref: "#/components/schemas/EventOriginatorEnum"
      type: object
    SupportAuthorityEventOriginator:
      allOf:
        - properties:
            grantedToInternalEntityUuid:
              description: base 64 (url-safe) uuid string
              example: AAAAAAAAAAAAAAAAAAAAAA
              format: RUUID
              nullable: true
              type: string
            grantedToName:
              nullable: true
              type: string
            supportAuthorityUuid:
              description: base 64 (url-safe) uuid string
              example: AAAAAAAAAAAAAAAAAAAAAA
              format: RUUID
              nullable: true
              type: string
            supportUserEmail:
              nullable: true
              type: string
            supportUsername:
              nullable: true
              type: string
          type: object
      nullable: true
      properties:
        auditPrincipal:
          nullable: true
          type: string
        type:
          $ref: "#/components/schemas/EventOriginatorEnum"
      type: object
    EventOriginatorEnum:
      enum:
        - USER
        - SUPPORT_AUTHORITY
        - API_TOKEN
        - RULE
        - COMPONENT_COMPOSITE_EVENT
        - GUEST_PASS
        - DEVICE_SERVICE
        - UNKNOWN
      type: string
    ApiTokenEventOriginator:
      allOf:
        - properties:
            tokenName:
              nullable: true
              type: string
            tokenUuid:
              description: base 64 (url-safe) uuid string
              example: AAAAAAAAAAAAAAAAAAAAAA
              format: RUUID
              nullable: true
              type: string
          type: object
      nullable: true
      properties:
        auditPrincipal:
          nullable: true
          type: string
        type:
          $ref: "#/components/schemas/EventOriginatorEnum"
      type: object
    UserEventOriginator:
      allOf:
        - properties:
            userEmail:
              nullable: true
              type: string
            userUuid:
              description: base 64 (url-safe) uuid string
              example: AAAAAAAAAAAAAAAAAAAAAA
              format: RUUID
              nullable: true
              type: string
            username:
              nullable: true
              type: string
          type: object
      nullable: true
      properties:
        auditPrincipal:
          nullable: true
          type: string
        type:
          $ref: "#/components/schemas/EventOriginatorEnum"
      type: object
    RuleEventOriginator:
      allOf:
        - properties:
            ruleName:
              nullable: true
              type: string
            ruleUuid:
              description: base 64 (url-safe) uuid string
              example: AAAAAAAAAAAAAAAAAAAAAA
              format: RUUID
              nullable: true
              type: string
          type: object
      nullable: true
      properties:
        auditPrincipal:
          nullable: true
          type: string
        type:
          $ref: "#/components/schemas/EventOriginatorEnum"
      type: object
    ComponentCompositeEventOriginator:
      allOf:
        - properties:
            componentCompositeName:
              nullable: true
              type: string
            componentCompositeUuid:
              description: base 64 (url-safe) uuid string
              example: AAAAAAAAAAAAAAAAAAAAAA
              format: RUUID
              nullable: true
              type: string
            correlationId:
              nullable: true
              type: string
            eventUuid:
              description: base 64 (url-safe) uuid string
              example: AAAAAAAAAAAAAAAAAAAAAA
              format: RUUID
              nullable: true
              type: string
            originator:
              $ref: "#/components/schemas/BaseEventOriginator"
          type: object
      nullable: true
      properties:
        auditPrincipal:
          nullable: true
          type: string
        type:
          $ref: "#/components/schemas/EventOriginatorEnum"
      type: object
    GuestPassEventOriginator:
      allOf:
        - properties:
            guestPassName:
              nullable: true
              type: string
            guestPassUuid:
              description: base 64 (url-safe) uuid string
              example: AAAAAAAAAAAAAAAAAAAAAA
              format: RUUID
              nullable: true
              type: string
          type: object
      nullable: true
      properties:
        auditPrincipal:
          nullable: true
          type: string
        type:
          $ref: "#/components/schemas/EventOriginatorEnum"
      type: object
    DeviceServiceEventOriginator:
      allOf:
        - properties:
            deviceUuid:
              description: base 64 (url-safe) uuid string
              example: AAAAAAAAAAAAAAAAAAAAAA
              format: RUUID
              nullable: true
              type: string
            serviceName:
              nullable: true
              type: string
          type: object
      nullable: true
      properties:
        auditPrincipal:
          nullable: true
          type: string
        type:
          $ref: "#/components/schemas/EventOriginatorEnum"
      type: object
    AccessControlledDoorStateEnumType:
      enum:
        - UNLOCKED
        - ACCESS_CONTROLLED
      type: string
    FirstInState:
      properties:
        originator:
          $ref: "#/components/schemas/BaseEventOriginator"
        requestedAtMillis:
          format: int64
          nullable: true
          type: integer
        state:
          $ref: "#/components/schemas/FirstInStatusEnum"
      type: object
    FirstInStatusEnum:
      enum:
        - REQUIRED
        - SATISFIED
      type: string
    BaseAccessStateOverride:
      discriminator:
        propertyName: type
      properties:
        originator:
          $ref: "#/components/schemas/BaseEventOriginator"
        requestedAtMillis:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/ManualAccessStateChangeEnum"
      type: object
    ManualAccessStateChangeEnum:
      enum:
        - DOOR_STATE_OVERRIDE
        - CANCELLED_DOOR_STATE_OVERRIDE
      type: string
    ProximityUnlockSettingsType:
      properties:
        credCooldownSec:
          format: int32
          nullable: true
          type: integer
        enabled:
          nullable: true
          type: boolean
        exitResetsCooldown:
          nullable: true
          type: boolean
        holdUnlocked:
          nullable: true
          type: boolean
        holdUnlockedEventIntervalSec:
          format: int32
          nullable: true
          type: integer
        maxHoldUnlockedTimeSec:
          format: int32
          nullable: true
          type: integer
        minHoldUnlockedTimeSec:
          format: int32
          nullable: true
          type: integer
        minRSSIThreshold:
          format: int32
          nullable: true
          type: integer
      type: object
    AccessControlledDoorSubTypeEnum:
      enum:
        - RHOMBUS
        - APERIO
        - APERIO_RS485
        - SCHLAGE_R485
      type: string
    ComponentCompositeEnumType:
      enum:
        - AccessControlledDoor
        - AccessControlledElevator
        - AccessControlledElevatorLanding
      type: string
    WaveToUnlockSettingsType:
      properties:
        awaitAuthDurationMs:
          format: int32
          nullable: true
          type: integer
        enabled:
          nullable: true
          type: boolean
        minRSSIThreshold:
          format: int32
          nullable: true
          type: integer
        showAwaitIntentFeedback:
          nullable: true
          type: boolean
        treatNfcAsIntent:
          nullable: true
          type: boolean
      type: object
    AccessControlledDoorShadow:
      properties:
        authFirstIn:
          $ref: "#/components/schemas/FirstInShadow"
        componentCompositeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        ownerDeviceUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        scheduleFirstIn:
          $ref: "#/components/schemas/FirstInShadow"
        state:
          $ref: "#/components/schemas/AccessStateShadow"
        type:
          $ref: "#/components/schemas/ComponentCompositeShadowEnum"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
      type: object
    FirstInShadow:
      properties:
        originator:
          $ref: "#/components/schemas/BaseEventOriginator"
        source:
          $ref: "#/components/schemas/FirstInSourceEnum"
        state:
          $ref: "#/components/schemas/FirstInFirmwareStatusEnum"
        stateUpdateEventTimestampMs:
          format: int64
          nullable: true
          type: integer
      type: object
    FirstInSourceEnum:
      enum:
        - CONFIG_MANUAL_OVERRIDE
        - CONFIG_REQUIREMENT_CHANGE
        - CONFIG_MEMBERSHIP
        - SCHEDULED_RESET
        - LOCAL_BADGE_EVENT
        - LOCKDOWN
        - UNKNOWN
      type: string
    FirstInFirmwareStatusEnum:
      enum:
        - DISABLED
        - NOT_CONFIGURED
        - REQUIRED
        - SATISFIED
        - UNKNOWN
      type: string
    AccessStateShadow:
      properties:
        originator:
          $ref: "#/components/schemas/BaseEventOriginator"
        source:
          $ref: "#/components/schemas/AccessStateSourceEnum"
        state:
          $ref: "#/components/schemas/AccessControlledDoorStateEnumType"
        stateUpdateEventTimestampMs:
          format: int64
          nullable: true
          type: integer
      type: object
    AccessStateSourceEnum:
      enum:
        - DEFAULT_STATE
        - SCHEDULE
        - SCHEDULE_EXCEPTION
        - FIRST_IN
        - DOOR_STATE_OVERRIDE
        - LOCKDOWN
        - PRIVACY
        - UNKNOWN
      type: string
    ComponentCompositeShadowEnum:
      enum:
        - AccessControlledDoorShadow
        - AccessControlledElevatorLandingShadow
      type: string
  securitySchemes:
    ApiKeyAuth:
      description: Your Rhombus API key. Must be accompanied by the `x-auth-scheme` header set to `api-token` (or `partner-api-token` for partner endpoints).
      in: header
      name: x-auth-apikey
      type: apiKey
    oauth2:
      description: 'OAuth 2.0 authorization code flow with PKCE (`S256`). Send the access token as `Authorization: Bearer <token>`. Each operation lists the scopes it requires; a token without them is refused 403 with `WWW-Authenticate: Bearer error="insufficient_scope"`.'
      flows:
        authorizationCode:
          authorizationUrl: https://console.rhombus.com/oauth/authorize
          refreshUrl: https://auth-web.rhombussystems.com/oauth/token
          scopes:
            physical: Unlock doors and elevators, lockdown, alarms, speakers and robots
            read: View cameras, footage and settings
            write: Change settings and data
          tokenUrl: https://auth-web.rhombussystems.com/oauth/token
      type: oauth2
````