# Get service access impact

`GET https://api.instacloud.com/projects/{projectId}/services/{serviceId}/access/impact`

**Token scope:** `account` · `org` · `project` — read-only tokens allowed.

Preview what changing a service's public access would break, without changing anything. Postgres: closing public access (public=false) lists compute services that will lose the database (on the legacy compute plane, which cannot use the private network lane, or on insta-compute but still bound to the public DATABASE_URL) plus the external clients, CI and local development that will no longer be able to connect. Advisory only — the change is never blocked.

## Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `public` | query | `boolean` | yes | the access mode being considered |
| `projectId` | path | `string` | yes |  |
| `serviceId` | path | `string` | yes |  |

## Response 200

What changing a service's public access will break. Advisory: the change is never blocked on it.

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `warnings` | `string[]` | yes | human-readable consequences of the change, most specific first; empty when nothing breaks |
| `services` | `object[]` | yes | compute services bound to this database that will lose their connection |
| `services.id` | `string` | yes |  |
| `services.name` | `string` | yes | compute service name |
| `services.provider` | `"fly" \| "insta-compute"` | no | Compute plane actually backing a compute resource, derived from its provider_ref rather than its kind. Absent when it cannot be determined from the row — clients must then assert no provider rather than assume one from `kind`. |
| `services.envName` | `string` | yes | the env var the compute reads the database from |
| `services.sourceName` | `string` | yes | the credential it is bound to (DATABASE_URL \| DATABASE_PRIVATE_URL) |
| `services.reason` | `"provider-cannot-use-private-lane" \| "bound-to-public-url"` | yes | provider-cannot-use-private-lane: the compute runs on the legacy compute plane, which has no path to the private network lane. bound-to-public-url: an insta-compute service still bound to DATABASE_URL — rebind it to DATABASE_PRIVATE_URL and redeploy. |

## Response 400

Default Response

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `error` | `string` | yes |  |

## Response 404

Default Response

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `error` | `string` | yes |  |