---
title: "List the Permission Catalog"
method: GET
path: "/api_keys/permissions"
tags: ["API Keys"]
---

# List the Permission Catalog

`GET /api_keys/permissions`

Lists the catalog of permission actions that can be granted to users, apps, and API keys — the source for the dashboard's permission pickers. Small and returned in full on one page.

## Response `200`

permission catalog listed

- object
  - `data` Permission[], required
    - `action` string, required — The permission action's identifier, for example `company:basic:read`.
    - `allowed_on_api_key` boolean, required — Whether an API key can be granted the permission.
    - `allowed_on_app` boolean, required — Whether an app can request and be granted the permission.
    - `allowed_on_user` boolean, required — Whether the permission can be granted to user tokens.
    - `category` string, nullable, required — The category the action is grouped under, or `null` when uncategorized.
    - `description` string, required — What granting the action allows.
    - `granted_to_system_roles` string[], required
    - `name` string, required — Human-readable name of the action.
  - `page_info` object, required
    - `end_cursor` string, nullable, required
    - `has_next_page` boolean, required
    - `has_previous_page` boolean, required
    - `start_cursor` string, nullable, required

## Other responses

- `401` — Unauthorized

---

[API](https://skmtc.net/whop/apis/whop-api.md) · [All operations](https://skmtc.net/whop/apis/whop-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/whop/whop-api/versions/866821546d67/schema)