permissions

Get My Capabilities In Tenant

List the capabilities the authenticated user has in a tenant.

Capabilities are tenant-scoped actions (as opposed to dataset permissions) and are the union of what the tenant and the caller’s roles in it grant. The tenant owner holds all of them.

The caller must belong to the tenant. A tenant they are not a member of and one that does not exist both answer 403, so the endpoint cannot be used to discover which tenant ids are real.

Intended for the client to decide which controls to show. It is not an authorization boundary on its own: every endpoint still enforces its own capability, since anyone who knows the URL can call it without the UI.

Path Parameters

tenant_id (UUID): The UUID of the tenant (find yours via GET /api/v1/permissions/tenants/me)

Response

Returns a JSON object: {“capabilities”: [“manage_users”, …]}.

Error Codes

403 Forbidden: Caller is not a member of the tenant, or it does not exist

GET

api

permissions

tenants

{tenant_id}

capabilities

Get My Capabilities In Tenant

curl --request GET \
  --url https://{tenant}.aws.cognee.ai/api/v1/permissions/tenants/{tenant_id}/capabilities/me \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://{tenant}.aws.cognee.ai/api/v1/permissions/tenants/{tenant_id}/capabilities/me"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

{
  "detail": [
    {
      "loc": [
        "<string>"
      ],
      "msg": "<string>",
      "type": "<string>",
      "input": "<unknown>",
      "ctx": {}
    }
  ]
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

tenant_id

string<uuid>

required

Response

Successful Response

⌘I

Get My Capabilities In Tenant

curl --request GET \
  --url https://{tenant}.aws.cognee.ai/api/v1/permissions/tenants/{tenant_id}/capabilities/me \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://{tenant}.aws.cognee.ai/api/v1/permissions/tenants/{tenant_id}/capabilities/me"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

{
  "detail": [
    {
      "loc": [
        "<string>"
      ],
      "msg": "<string>",
      "type": "<string>",
      "input": "<unknown>",
      "ctx": {}
    }
  ]
}

Getting Started

auth

add

cognify

memify

search

permissions

datasets

ontologies

settings

visualize

schema

skills

configuration

delete

validate

update

responses

llm

sync

users

checks

health

agent management

agent connections

activity

sessions

remember

recall

improve

forget

slack

integrations

Get My Capabilities In Tenant

Path Parameters

Response

Error Codes

Authorizations

Path Parameters

Response