---
title: "Get the caller's entitlements, key scopes, and feature readiness"
method: GET
path: "/capabilities"
tags: ["Capabilities"]
---

# Get the caller's entitlements, key scopes, and feature readiness

`GET /capabilities`

## Request

- Base URL: `https://developers.ozav.io/v2`
- URL: `https://developers.ozav.io/v2/capabilities`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

Returns the two authorization axes for the presented key - the
organization's `entitlements` and the key's `scopes` - plus the resolved
`environment` and a per-feature readiness map (`live`, `beta`,
`coming_soon`). Call it first in any integration and branch on the access
it reports rather than hard-coding assumptions. Requires only a valid key
(any entitlement, no specific scope).

## Response `200`

The two authorization axes and per-feature availability.

- object
  - `entitlements` string[]: Products enabled for the organization (e.g. liquidity, compliance, customers, cards, custody, self_custody, kyc_reliance).
  - `scopes` string[]: Scopes granted to the presented API key.
  - `environment` 'test' | 'live': Which environment the presented key resolves to - `test` (sandbox) or `live` (production).
  - `features` object: Per-feature readiness, keyed by feature name. Each value is one of `live` (generally available), `beta` (available to design partners, may need enablement), or `coming_soon` (defined, and its write operations are refused).
  - `jurisdictions` object: Where OZAV onboards customers, decided by declared residence and place of registration - never by nationality alone. `refused` is enforced at creation: a customer whose tax identity or address is issued there is rejected with `422 JURISDICTION_NOT_SERVED`. `enhanced_due_diligence` is accepted, with longer review and further evidence requested. Anywhere else is served, subject to name screening and a risk-based decision. Absence from both lists means you may proceed; it is not by itself a guarantee of acceptance.
    - `refused` string[]
    - `enhanced_due_diligence` string[]

## Other responses

- `401`: Missing or invalid API key.

---

[API](https://skmtc.dev/ozav/apis/ozav-api.md) - [All operations](https://skmtc.dev/ozav/apis/ozav-api/llms.txt) - [OpenAPI document](https://skmtc.dev/ozav/apis/ozav-api/revisions/4133dc2109d7?raw)