---
title: "List the role catalog"
method: GET
path: "/identity/roles"
tags: ["identity", "access", "customer-session"]
---

# List the role catalog

`GET /identity/roles`

## Request

- Base URL: `https://api.stablesea.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.stablesea.com/identity/roles`
- Auth: none declared

Returns every preset role at its latest revision with its description and the capabilities it grants, each with its display group. The catalog is the same for every caller; what you hold and may assign is in your access summary. Requires a signed-in business session.

## Response `200`

OK

- AccessListRolesOutput
  - `data` AccessCatalogRole[], required
    - `capabilities` AccessRoleCapability[], required: Every capability the role grants, in catalog order.
      - `capability` 'payments_read' | 'payees_read' | 'payee_details_read' | 'investments_read' | 'automations_read' | 'reports_read' | 'statements_generate' | 'funds_deposit' | 'funds_withdraw' | 'assets_buy' | 'assets_sell' | 'bank_account_add' | 'bank_account_remove' | 'wallet_add' | 'automations_manage' | 'transfers_approve' | 'approval_controls_manage' | 'integrations_manage' | 'kyb_read' | 'kyb_edit' | 'kyb_submit' | 'documents_read' | 'documents_manage' | 'messages_read' | 'messages_send' | 'agreements_read' | 'agreements_sign' | 'audit_read' | 'members_read' | 'members_invite' | 'roles_manage' | 'networks_manage' | 'signers_manage' | 'api_keys_manage', required
      - `group` string, required: The capability's display group, such as Payments. It grants nothing.
    - `description` string, required
    - `id` string, required: A preset's name, such as admin, or a custom role's id.
    - `kind` 'preset' | 'custom', required
    - `name` string, required: The role's name as members read it.
    - `revision` integer, required: The role revision whose capabilities apply.

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `default`: Error response.

## Changes

- **2026-10-29** `e003c8a67b62`: 3 info
  - added the optional property `error/authorization` to the response with the `401` status
  - added the optional property `error/authorization` to the response with the `403` status
  - added the optional property `error/authorization` to the response with the `default` status
- **2026-10-29** `423f3ae9eca6`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/stablesea/apis/stable-sea-backend/changes/identity/roles/get.md)

---

[API](https://skmtc.dev/stablesea/apis/stable-sea-backend.md) - [All operations](https://skmtc.dev/stablesea/apis/stable-sea-backend/llms.txt) - [OpenAPI document](https://skmtc.dev/stablesea/apis/stable-sea-backend/revisions/772c80d83658?raw)