---
title: "List plugin access grants"
method: GET
path: "/v1/plugins/{pluginId}/access"
tags: ["Plugins"]
---

# List plugin access grants

`GET /v1/plugins/{pluginId}/access`

Lists direct, team, and org-wide grants for a plugin.

## Path parameters

- `pluginId` string, typeid, required

## Response `200`

Plugin access grants returned successfully.

- PluginArchAccessGrantListResponse
  - `items` PluginArchAccessGrant[], required
    - `id` union, required
      - string, typeid — Den TypeID with 'coa_' prefix and a 26-character base32 suffix.
      - string, typeid — Den TypeID with 'pag_' prefix and a 26-character base32 suffix.
      - string, typeid — Den TypeID with 'mag_' prefix and a 26-character base32 suffix.
      - string, typeid — Den TypeID with 'cia_' prefix and a 26-character base32 suffix.
    - `orgMembershipId` string, typeid, nullable, required — Den TypeID with 'om_' prefix and a 26-character base32 suffix.
    - `teamId` string, typeid, nullable, required — Den TypeID with 'tem_' prefix and a 26-character base32 suffix.
    - `orgWide` boolean, required
    - `role` 'viewer' | 'editor' | 'manager', required
    - `createdByOrgMembershipId` string, typeid, required — Den TypeID with 'om_' prefix and a 26-character base32 suffix.
    - `createdAt` string, date-time, required
    - `removedAt` string, date-time, nullable, required
  - `nextCursor` string, nullable, required

## Other responses

- `400` — The plugin access path parameters were invalid.
- `401` — The caller must be signed in to manage plugin access.
- `403` — The caller lacks permission to manage plugin access.
- `404` — The plugin could not be found.

## Changes

- **2026-08-20** `93df40e2efd5` — 6 info
  - removed the pattern `^plg_.*` from the `path` request parameter `pluginId`
  - added `subschema #1, subschema #2, subschema #3, subschema #4` to the `items/items/id` response property `anyOf` list for the response status `200`
  - removed `subschema #1, subschema #2, subschema #3, subschema #4` from the `items/items/id` response property `anyOf` list for the response status `200`
  - the `items/items/createdByOrgMembershipId` response's property pattern `^om_.*` was removed for the status `200`
  - …2 more

[Change history](https://skmtc.dev/openworklabs/apis/den-api/changes/v1/plugins/:pluginId/access/get.md)

---

[API](https://skmtc.dev/openworklabs/apis/den-api.md) · [All operations](https://skmtc.dev/openworklabs/apis/den-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/openworklabs/den-api/revisions/fcbb34aa1702/schema)