---
title: "Get Effective Tool Set"
method: GET
path: "/api/identities/{identity_id}/capability-access/effective-tools/{artifact_id}"
tags: ["capability-access"]
---

# Get Effective Tool Set

`GET /api/identities/{identity_id}/capability-access/effective-tools/{artifact_id}`

## Request

- Base URL: `https://app.thinqos.com` (the document declares no server; this is the origin it was published from)
- URL: `https://app.thinqos.com/api/identities/{identity_id}/capability-access/effective-tools/{artifact_id}`
- Auth: none declared

The tools ``identity_id`` may actually call on one connection (TOS-2706).

Answers "what does this role actually give them?" from the SAME
classification the call-time guard uses, so the number shown in the UI and
the number enforced at dispatch cannot drift.

Reads the durable ``connection_tool_catalog`` index rather than calling the
upstream server: this is a governance read that must be fast, must work
while the connector is down, and must never require the caller to hold the
connection's credential.

404 when the artifact is not live for the target identity -- a caller may
not enumerate a connection the identity cannot reach. Authorization is the
same self-or-owner rule as the rest of this router.

## Path parameters

- `identity_id` string, uuid, required
- `artifact_id` string, uuid, required

## Headers

- `x-impersonate-identity-id` string, nullable

## Response `200`

Successful Response

- EffectiveToolSetResponse
  - `identity_id` string, uuid, required
  - `artifact_id` string, uuid, required
  - `capability_role` string, required
  - `permitted_count` integer, required
  - `total_count` integer, required
  - `permitted_by_role` object
  - `tools` EffectiveToolItem[]
    - `tool_name` string, required
    - `tier` string, required
    - `permitted` boolean, required
    - `unclassified` boolean, required
  - `catalog_empty_reason` string, nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/thinqos/apis/thinqos-api.md) · [All operations](https://skmtc.dev/thinqos/apis/thinqos-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thinqos/apis/thinqos-api/revisions/5387b4ded614?raw)