---
title: "List capability catalog"
method: GET
path: "/v2/api-keys/capabilities"
tags: ["API keys"]
---

# List capability catalog

`GET /v2/api-keys/capabilities`

Returns the capability catalog: the set of permission domains that can be granted to an API key. Each entry includes the domain id, display name, group, allowed project scopes, and the read / write verb sets resolved at authorize() time. Drives the permissions UI in the dashboard.

## Response `200`

OK

- ListCapabilitiesResponse
  - `domains` Domain[], required — Full capability catalog. Order is stable: workspace-admin first, then platform, then gateway.
    - `id` string — Stable domain identifier (e.g. "api-key", "budget"). Used as the key in ManagementKey.access and as the verb prefix in resolved permissions (e.g. budget.list, budget.view, budget.create).
    - `display_name` string — Human-readable label for the dashboard.
    - `group` integer — Logical group used by the UI to render this entry.
    - `readable` boolean — Whether this domain can be granted read access.
    - `writable` boolean — Whether this domain can be granted write access.

---

[API](https://skmtc.net/orq-ai/apis/orq-ai-api.md) · [All operations](https://skmtc.net/orq-ai/apis/orq-ai-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/orq-ai/orq-ai-api/versions/1072e5ba28ab/schema)