---
title: "Get Organization Entitlements"
method: GET
path: "/organization/entitlements"
tags: ["organization"]
---

# Get Organization Entitlements

`GET /organization/entitlements`

## Request

- Base URL: `https://platform.tracecat.com/api`
- URL: `https://platform.tracecat.com/api/organization/entitlements`
- Auth: one of:
  - API key in cookie `fastapiusersauth`
  - HTTP bearer

Get the effective entitlements for the current organization.

## Response `200`

Successful Response

- EffectiveEntitlements: Effective feature entitlements for an organization. Values are resolved from org overrides falling back to tier defaults.
  - `custom_registry` boolean: Whether custom registry repositories are enabled
  - `git_sync` boolean: Whether git sync is enabled
  - `agent_addons` boolean: Whether add-on agent capabilities are enabled (agent folders, tags, and case agent runs)
  - `case_addons` boolean: Whether add-on case capabilities are enabled (dropdowns, durations, tasks, triggers)
  - `rbac_addons` boolean: Whether RBAC add-ons are enabled (custom roles, groups, and assignments)
  - `service_accounts` boolean: Whether service accounts for API key access are enabled
  - `workspace_chat` boolean: Whether Workspace Chat is enabled
  - `multi_workspace` boolean: Whether multiple workspaces per organization are enabled
  - `watchtower` boolean: Whether Watchtower agent monitoring is enabled (agent sessions, tool-call telemetry, and controls)
  - `external_secret_stores` boolean: Whether workspace secrets may reference external secret stores such as AWS Secrets Manager
  - `agent_channels` boolean: Whether agent channels are enabled (agent approvals and interactions via Slack and Microsoft Teams)
  - `semantic_search` boolean: Whether semantic (vector) search over table columns is enabled
  - `forms` boolean: Whether workflow forms are enabled
  - `tunnels` boolean: Whether workspaces may route actions through private network tunnels such as Pangolin
  - `agent_runtime_preview` boolean: Whether agent backends other than the built-in one may be listed, used to create or fork agent sessions, and used to run new turns in existing sessions

---

[API](https://skmtc.dev/tracecat/apis/tracecat-api.md) - [All operations](https://skmtc.dev/tracecat/apis/tracecat-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tracecat/apis/tracecat-api/revisions/2efdda25045f?raw)