---
title: "Authenticated admin permissions"
method: GET
path: "/permissions"
tags: ["Admin Menu"]
---

# Authenticated admin permissions

`GET /permissions`

## Request

- Base URL: `http://localhost:8000/api/admin`
- URL: `http://localhost:8000/api/admin/permissions`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/bagisto/apis/bagisto-admin-api/docs/permissions/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns the effective permission set for the authenticated token: `permissionType` (`all` / `custom` / `same_as_web`) and the granted `permissions` keys (capped by the admin's role). `permissionType: "all"` returns `permissions: ["*"]` (full access). Use this to gate UI actions without trial-and-error 403s.

## Response `200`

The token's effective permissions.

## Other responses

- `401`: Missing or invalid admin token.

---

[API](https://skmtc.dev/bagisto/apis/bagisto-admin-api.md) - [All operations](https://skmtc.dev/bagisto/apis/bagisto-admin-api/llms.txt) - [OpenAPI document](https://skmtc.dev/bagisto/apis/bagisto-admin-api/revisions/3198f11be70f?raw)