List explicit permission grants

Lists stored grants, including expired grants, without expanding membership or ownership. Use inspect for current effective access. A resource filter requires resource administration; workspace administrators can list their workspace and organization administrators can list the organization. Other callers see only grants assigned directly to themselves. Hosted app, delegated action, MCP and connector sessions are excluded.

GET/v1/permissions

betaauthenticatedorganization

When to use

Find explicit grants and their IDs, expiry and operations before changing access.

For agents

This is a stored-grant list, including expired entries. It does not expand membership, ownership or effective access; use permissions.inspect for that. A resource filter requires administration. Without it, administrators see their permitted workspace/organization scope; other callers see only their own direct grants.

Example

typescript

import { PermuteClient } from '@permute/sdk';

const orgClient = new PermuteClient({
  apiKey: process.env.PERMUTE_API_KEY!,
});

const result = await orgClient.permissions.list({ resourceId: "dbas_abcdefghijklmnopqrstuvwx" });

Response

json

{
  "data": {
    "items": [
      {
        "id": "perm_abcdefghijklmnopqrstuvwx",
        "principalType": "apiKey",
        "principalId": "apikey_example",
        "resourceId": "dbas_abcdefghijklmnopqrstuvwx",
        "resourceType": "database",
        "subResourceId": null,
        "level": "read",
        "operations": null,
        "organizationId": "org_abcdefghijklmnopqrstuvwx",
        "workspaceId": "wksp_abcdefghijklmnopqrstuvwx",
        "grantedBy": "user_abcdefghijklmnopqrstuvwx",
        "expiresAt": null,
        "createdAt": "2026-10-30T12:00:00.000Z",
        "updatedAt": "2026-10-30T12:00:00.000Z"
      }
    ]
  }
}