capability-access

Get Effective Tool Set

The tools identity_id may actually call on one connection (TOS-2706).

Answers "what does this role actually give them?" from the SAME classification the call-time guard uses, so the number shown in the UI and the number enforced at dispatch cannot drift.

Reads the durable connection_tool_catalog index rather than calling the upstream server: this is a governance read that must be fast, must work while the connector is down, and must never require the caller to hold the connection's credential.

404 when the artifact is not live for the target identity -- a caller may not enumerate a connection the identity cannot reach. Authorization is the same self-or-owner rule as the rest of this router.

get/api/identities/{identity_id}/capability-access/effective-tools/{artifact_id}

Request

  • Base URL: https://app.thinqos.com (the document declares no server; this is the origin it was published from)
  • URL: https://app.thinqos.com/api/identities/{identity_id}/capability-access/effective-tools/{artifact_id}
  • Auth: none declared

Path parameters

identity_idstring uuid required
artifact_idstring uuid required

Headers

x-impersonate-identity-idstring nullable

Response

Successful Response

identity_idstring uuid required
artifact_idstring uuid required
capability_rolestring required
permitted_countinteger required
total_countinteger required
permitted_by_roleobject
catalog_empty_reasonstring nullable

Changes

No recorded changes to this operation across all 3 revisions of this API.