---
title: "List permissions"
method: GET
path: "/v1/permissions"
tags: ["Permission"]
---

# List permissions

`GET /v1/permissions`

## Request

- Base URL: `https://api.cardda.com`
- URL: `https://api.cardda.com/v1/permissions`
- Auth: HTTP bearer

Returns the catalog of permissions that can be attached to company roles and
memberships. This is global reference data — it is **not company-scoped** and
does not require the `company-id` header (it is on the whitelist).

## Parameters

- `#/paths/~1v1~1users/get/parameters/1` (unresolved $ref)
- `#/paths/~1v1~1users/get/parameters/2` (unresolved $ref)
- `#/paths/~1v1~1users/get/parameters/3` (unresolved $ref)
- `#/paths/~1v1~1users/get/parameters/4` (unresolved $ref)

## Response `200`

Paginated list of permissions.

- Permission[]
  - `id` string, uuid, required
  - `name` string, required: Permission identifier, e.g. `cards_view`, `members_management`, `banking_transactions_authorize`.
  - `resource_type` string, nullable
  - `resource_id` string, nullable
  - `created_at` string, date-time
  - `updated_at` string, date-time

## Other responses

- `401`: Unauthorized

---

[API](https://skmtc.dev/cardda/apis/organization-api.md) - [All operations](https://skmtc.dev/cardda/apis/organization-api/llms.txt) - [OpenAPI document](https://skmtc.dev/cardda/apis/organization-api/revisions/32a4430278a8?raw)