Check Permissions
Lists permission actions and whether the calling credential is granted each one for a resource. Answers for whichever identity authenticated the request — a user session, an OAuth token, or an account or app API key — so it never describes who else can reach the resource.
Authorizations
An Account API key, account-scoped JWT, App API key, or user OAuth token. Prepend the key or token with Bearer, for example Bearer ***************************.
Headers
Pins the request to a dated API version.
"2026-08-13"
Query Parameters
Tag of the resource to check against: an account (biz_), product (prod_), experience (exp_), or app (app_). A resource the credential cannot see is reported as granted nothing rather than as an error.
Comma-separated permission actions to check, for example stats:read,payment:basic:read. Every action is returned when omitted.
Response
permissions listed

