---
title: "List capability catalog"
method: GET
path: "/v2/api-keys/capabilities"
tags: ["API keys"]
---

# List capability catalog

`GET /v2/api-keys/capabilities`

Returns the capability catalog: the set of permission domains that can be granted to an API key. Each entry includes the domain id, display name, group, allowed project scopes, and the read / write verb sets resolved at authorize() time. Drives the permissions UI in the dashboard.

## Response `200`

OK

- ListCapabilitiesResponse
  - `domains` Domain[], required — Full capability catalog. Order is stable: workspace-admin first, then platform, then gateway.
    - `id` string — Stable domain identifier (e.g. "agent", "chat_completions"). Used as the key in ApiKey.access and as the verb prefix in resolved permissions (e.g. agent.list, agent.view, agent.create).
    - `display_name` string — Human-readable label for the dashboard.
    - `group` 'DOMAIN_GROUP_WORKSPACE_ADMIN' | 'DOMAIN_GROUP_PLATFORM' | 'DOMAIN_GROUP_GATEWAY'
    - `allowed_scopes` ScopeMode[] — Project scopes this domain may be granted under. A workspace- admin domain like `member` is typically SCOPE_MODE_ALL only.
    - `readable` boolean — Whether this domain can be granted read access.
    - `writable` boolean — Whether this domain can be granted write access.
    - `extra_write_verbs` string[] — Additional full verb names granted only with write access. This is additive to the standard group-derived verbs and intentionally does not affect read access (e.g. "insights.run").

## Changes

> 256 revisions in range; 71 not diffed.

- **2026-08-24** `addad33219df` — 1 breaking, 3 warning, 2 info
  - the `domains/items/group` response's property type/format changed from `integer`/`enum` to `string`/`` for status `200`
  - added the new `DOMAIN_GROUP_GATEWAY` enum value to the `domains/items/group` response property for the response status `200`
  - added the new `DOMAIN_GROUP_PLATFORM` enum value to the `domains/items/group` response property for the response status `200`
  - added the new `DOMAIN_GROUP_WORKSPACE_ADMIN` enum value to the `domains/items/group` response property for the response status `200`
  - …2 more
- **2026-08-21** `1586760a252f` — 1 breaking, 2 warning, 3 info
  - the `domains/items/group` response's property type/format changed from `string`/`` to `integer`/`enum` for status `200`
  - removed the optional property `domains/items/allowed_scopes` from the response with the `200` status
  - removed the optional property `domains/items/extra_write_verbs` from the response with the `200` status
  - removed the `DOMAIN_GROUP_GATEWAY` enum value from the `domains/items/group` response property for the response status `200`
  - …2 more
- …earlier changes not shown

[Full history](https://skmtc.dev/orq-ai/apis/orq-ai-api/changes/v2/api-keys/capabilities/get.md)

---

[API](https://skmtc.dev/orq-ai/apis/orq-ai-api.md) · [All operations](https://skmtc.dev/orq-ai/apis/orq-ai-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/orq-ai/orq-ai-api/revisions/66b8a4902911/schema)