---
title: "List Scopes"
method: GET
path: "/rbac/scopes"
tags: ["rbac"]
---

# List Scopes

`GET /rbac/scopes`

## Request

- Base URL: `https://platform.tracecat.com/api`
- URL: `https://platform.tracecat.com/api/rbac/scopes`
- Auth: one of:
  - API key in cookie `fastapiusersauth`
  - HTTP bearer

List scopes available to the organization.

Requires: org:rbac:read scope

## Query parameters

- `include_system` boolean: Include system/registry scopes
- `source` 'platform' | 'custom': Source/ownership of a scope definition.

## Response `200`

Successful Response

- ScopeList: Response schema for listing scopes.
  - `items` ScopeRead[], required
    - `id` string, uuid, required
    - `name` string, required
    - `resource` string, required
    - `action` string, required
    - `description` string, nullable
    - `source` 'platform' | 'custom', required: Source/ownership of a scope definition.
    - `source_ref` string, nullable
    - `organization_id` string, uuid, nullable
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
  - `total` integer, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tracecat/apis/tracecat-api.md) - [All operations](https://skmtc.dev/tracecat/apis/tracecat-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tracecat/apis/tracecat-api/revisions/2efdda25045f?raw)