---
title: "List Permissions"
method: GET
path: "/x402/permissions"
tags: ["X402 - Permissions"]
---

# List Permissions

`GET /x402/permissions`

## Request

- Base URL: `https://api.sandbox.nevermined.app/api/v1`
- URL: `https://api.sandbox.nevermined.app/api/v1/x402/permissions`
- Auth: HTTP bearer

Retrieves paginated list of your delegated permissions.

## Query parameters

- `page` integer
- `offset` integer
- `scheme` 'nvm:erc4337' | 'nvm:card-delegation'

## Response `200`

List of permissions

- PaginatedPermissions: A page of permissions, as returned by `GET /x402/permissions`.
  - `permissions` PermissionSummary[], required: List of permissions associated with the subscriber
    - `permissionHash` string, required: Unique identifier of the permission (hash)
    - `scheme` 'nvm:erc4337' | 'nvm:card-delegation', required: Payment scheme identifier
    - `planId` string: No permission the API creates today carries one: the single write path (delegation.service.ts — permissionRepository.save) hardcodes `planId = null` as plan-agnostic, and the response builder maps `planId ?? undefined`, which `JSON.stringify` drops — so the key is ALWAYS absent, on both schemes. Retained because the column exists and older rows may carry a value.
    - `planName` string, required: Name of the payment plan. Always the empty string on permissions the API creates today — the write path hardcodes `planName` to it. The key is always emitted, which is why it stays in `required`.
    - `redemptionLimit` integer, nullable, required: Maximum number of redemptions allowed, or `null` for unlimited
    - `createdAt` string, date-time, required: Date when the permission was created
    - `status` 'Active' | 'Revoked' | 'Expired' | 'Exhausted', required: Current status of the permission
    - `delegationId` string, nullable, required: Linked delegation id, or `null` for permissions that are not delegation-linked
  - `totalResults` integer, required: Total number of permissions found
  - `page` integer, required: Current page number
  - `offset` integer, required: Number of results per page

## Other responses

- `401`: Unauthorized

---

[API](https://skmtc.dev/nevermined/apis/nevermined-api.md) · [All operations](https://skmtc.dev/nevermined/apis/nevermined-api/llms.txt) · [OpenAPI document](https://skmtc.dev/nevermined/apis/nevermined-api/revisions/cabbe618c80b?raw)