List Permissions
Lists permission actions and whether the calling credential is granted each one for a resource. Answers for whichever identity authenticated the request — a user session, an OAuth token, or an account or app API key — so it never describes who else can reach the resource.
Authorizations
A company API key, company scoped JWT, app API key, or user OAuth token. You must prepend your key/token with the word 'Bearer', which will look like Bearer ***************************
Headers
Pins the request to a dated API version.
"2026-07-25"
Query Parameters
Tag of the resource to check against: an account (biz_), product (prod_), experience (exp_), or app (app_). A resource the credential cannot see is reported as granted nothing rather than as an error.
Comma-separated permission actions to check, for example stats:read,payment:basic:read. Every action is returned when omitted.
Response
permissions listed

