---
title: "List permissions"
method: GET
path: "/v2/permissions"
tags: ["Permissions API"]
---

# List permissions

`GET /v2/permissions`

## Request

- Base URL: `https://api.mollie.com`
- URL: `https://api.mollie.com/v2/permissions`
- Auth: one of:
  - HTTP bearer
  - OAuth 2
    - Authorization code: `https://my.mollie.com/oauth2/authorize`
    - Token URL: `https://api.mollie.com/oauth2/tokens`

Retrieve a list of all permissions available to the current access token.

The results are **not** paginated.

> 🔑 Access with
>
> [Advanced access token](/reference/authentication)
>
> [OAuth access token](/reference/authentication)

## Response `200`

A list of permission objects.

- object
  - `count` integer, required: The number of items in this result set. If more items are available, a `_links.next` URL will be present in the result as well. The maximum number of items per result set is controlled by the `limit` property provided in the request. The default limit is 50 items.
  - `_embedded` object, required
    - `permissions` object[], required: An array of permission objects.
      - `resource` string, required: Indicates the response contains a permission object. Will always contain the string `permission` for this endpoint.
      - `id` string, required: The identifier uniquely referring to this permission. Example: `payments.read`.
      - `description` string, required: A short description of what kind of access the permission enables.
      - `granted` boolean, required: Whether this permission is granted to the app by the organization.
      - `_links` object, required: An object with several relevant URLs. Every URL object will contain an `href` and a `type` field.
        - `self` object, required: In v2 endpoints, URLs are commonly represented as objects with an `href` and `type` field.
          - `href` string, required: The actual URL string.
          - `type` string, required: The content type of the page or endpoint the URL points to.
  - `_links` object, required: An object with several relevant URLs. Every URL object will contain an `href` and a `type` field.
    - `self` object, required: The URL to the current set of items.
      - `href` string, required: The actual URL string.
      - `type` string, required: The content type of the page or endpoint the URL points to.
    - `documentation` object, required: In v2 endpoints, URLs are commonly represented as objects with an `href` and `type` field.
      - `href` string, required: The actual URL string.
      - `type` string, required: The content type of the page or endpoint the URL points to.

## Other responses

- `400`: The request contains issues. For example, if the specified `from` value is not a valid ID.
- `429`: Rate Limit has been reached.

---

[API](https://skmtc.dev/mollie/apis/mollie-connect.md) - [All operations](https://skmtc.dev/mollie/apis/mollie-connect/llms.txt) - [OpenAPI document](https://skmtc.dev/mollie/apis/mollie-connect/revisions/65271e79a786?raw)