---
title: "List Roles"
method: GET
path: "/roles"
tags: ["tenants"]
---

# List Roles

`GET /roles`

## Request

- Base URL: `https://api.instruxi.dev/api/v1/enforcer`
- URL: `https://api.instruxi.dev/api/v1/enforcer/roles`
- Auth: one of:
  - API key in header `Authorization`
  - API key in header `X-API-Key`

The static role catalog (built-in + custom), open to ANY authenticated caller with no admin gate — this is the "populate a role picker" read, distinct from adminListRoles (GET /admin/roles) which serves the same rows behind the tenant_read admin gate for role administration. Small and unpaginated: total is the full row count and limit/offset describe the single page returned.

## Response `200`

OK

- InternalDeliveryHttpHandlerRolePageResponse
  - `data` EnforcerV3InternalDomainRoleRole[]
    - `admin_managed` boolean
    - `created_at` string
    - `cross_tenant` boolean: Capability grants (additive; all false = baseline-only, like "user").
    - `description` string
    - `id` string
    - `mpp_ops` boolean: MPPOps: read-only MPP deposit-intent operator views (migration 000129).
    - `name` string
    - `slug` string
    - `tenant_manage` boolean
    - `tenant_read` boolean
    - `tenant_write` boolean
    - `updated_at` string
  - `limit` integer
  - `offset` integer
  - `success` boolean
  - `total` integer

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `500`: Internal Server Error

---

[API](https://skmtc.dev/instruxi/apis/enforcer-api.md) · [All operations](https://skmtc.dev/instruxi/apis/enforcer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/instruxi/apis/enforcer-api/revisions/fa82bc1becc0?raw)