Resolve current Agent Tool permissions within all live participant ceilings.

GET

/api/admin/agent-grants/eligible-permissions

Code sample: Shell / cURL

curl --request GET \
  --url 'https://auth.example.com/api/admin/agent-grants/eligible-permissions?delegator_id=example' \
  --header 'Authorization: Bearer <token>'

Requires Agent Grant write permission. Returns only permissions referenced by the current immutable Tool catalog that remain within the authenticated grantor, selected delegator, optional Machine Principal, and tenant boundaries. The create endpoint repeats the checks.

Authorizations

• adminBearer
• adminSessionCookie

Parameters

Query Parameters

delegator_id

required

string

>= 1 characters <= 256 characters

principal_id

string

>= 1 characters <= 256 characters

Responses

200

Eligible fixed Phase 1 permission set.

Media type application/json

object

delegator_id

required

string

principal_id

required

string | null

permissions

required

Array<string>

unique items

Example ^generated

{
  "delegator_id": "example",
  "principal_id": "example",
  "permissions": [
    "example"
  ]
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

404

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}