---
title: "List what the caller may do on a secret provider"
method: GET
path: "/api/v1/secret_providers/{id}/capabilities"
tags: ["Secret providers"]
---

# List what the caller may do on a secret provider

`GET /api/v1/secret_providers/{id}/capabilities`

## Request

- Base URL: `https://pcp.example.com`
- URL: `https://pcp.example.com/api/v1/secret_providers/{id}/capabilities`
- Auth: HTTP bearer

## Path parameters

- `id` string, required

## Query parameters

- `organization_id` string, uuid

## Response `200`

OK

- ResourceCapabilitiesResponse: ResourceCapabilitiesResponse schema
  - `actions` string[]
  - `id` string, uuid
  - `resource` string

## Other responses

- `400`: Bad Request _(validation or deserialization error)_
- `401`: Missing, invalid or expired credentials
- `403`: The caller may not do this
- `500`: Internal Server Error _(panics)_
- `default`

---

[API](https://skmtc.dev/plakar/apis/plakar-control-plane-api-v1.md) - [All operations](https://skmtc.dev/plakar/apis/plakar-control-plane-api-v1/llms.txt) - [OpenAPI document](https://skmtc.dev/plakar/apis/plakar-control-plane-api-v1/revisions/2ac049494a01?raw)