---
title: "List binding permission rules"
method: GET
path: "/toolkits/{toolkit_id}/credentials/{credential_id}/permissions"
tags: ["Toolkit Permissions"]
---

# List binding permission rules

`GET /toolkits/{toolkit_id}/credentials/{credential_id}/permissions`

List the fine-grained PBAC rules for a `(toolkit, credential)` binding.

## Path parameters

- `toolkit_id` string, required
- `credential_id` string, required

## Response `200`

Successful Response

- PermissionRuleListResponse — List of permission rules.
  - `data` PermissionRuleReadSchema[], required
    - `_comment` string, nullable
    - `_system` boolean
    - `effect` 'allow' | 'deny', required
    - `match_mode` 'regex' | 'prefix' | 'exact'
    - `methods` string[], nullable
    - `operations` string[], nullable
    - `path` string, nullable

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `422` — Unprocessable Entity
- `500` — Internal Server Error
- `503` — Service Unavailable

---

[API](https://skmtc.net/jentic/apis/jentic-control-plane-api.md) · [All operations](https://skmtc.net/jentic/apis/jentic-control-plane-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/jentic/jentic-control-plane-api/revisions/25c23e262a29/schema)