---
title: "List permissions"
method: GET
path: "/v1/permissions"
tags: ["Permission"]
---

# List permissions

`GET /v1/permissions`

Returns the catalog of permissions that can be attached to company roles and
memberships. This is global reference data — it is **not company-scoped** and
does not require the `company-id` header (it is on the whitelist).

## Parameters

- `#/paths/~1v1~1users/get/parameters/1` — unresolved $ref
- `#/paths/~1v1~1users/get/parameters/2` — unresolved $ref
- `#/paths/~1v1~1users/get/parameters/3` — unresolved $ref
- `#/paths/~1v1~1users/get/parameters/4` — unresolved $ref

## Response `200`

Paginated list of permissions.

- Permission[]
  - `id` string, uuid, required
  - `name` string, required — Permission identifier, e.g. `cards_view`, `members_management`, `banking_transactions_authorize`.
  - `resource_type` string, nullable
  - `resource_id` string, nullable
  - `created_at` string, date-time
  - `updated_at` string, date-time

## Other responses

- `401` — Unauthorized

---

[API](https://skmtc.dev/cardda/apis/banking-api.md) · [All operations](https://skmtc.dev/cardda/apis/banking-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cardda/banking-api/revisions/ff1aeb3fda8b/schema)