Get the authenticated user's abilities
GET/users/me/abilities
Inspection endpoint returning the authenticated user's effective grant abilities plus their bypass scope. abilities is the list of typed GrantAbility objects ({ path, accessType }) the user holds; hasGrants is a convenience flag for a non-empty list. isPlatformAdmin and bypassOrgIds describe the scope under which grant checks are short-circuited.
To resolve specific capability checks in a single round-trip, use POST /users/me/abilities/check, which evaluates a named batch of { path, accessType, organizationId, requiredOrgRoleForBypass } checks and returns a boolean per key.
Responses
- 200
- 401
The user's effective abilities and bypass scope
Not authenticated