Skip to main content
GET
JavaScript

Authorizations

Authorization
string
header
required

A company API key, company scoped JWT, app API key, or user OAuth token. You must prepend your key/token with the word 'Bearer', which will look like Bearer ***************************

Headers

Api-Version-Date
string

Pins the request to a dated API version.

Example:

"2026-07-25"

Query Parameters

resource_id
string
required

Tag of the resource to check against: an account (biz_), product (prod_), experience (exp_), or app (app_). A resource the credential cannot see is reported as granted nothing rather than as an error.

actions
string

Comma-separated permission actions to check, for example stats:read,payment:basic:read. Every action is returned when omitted.

Response

permissions listed

data
object[]
required