API and MCP
Permissions
What a person may do in your organization and each of its projects
Get a person's permissions
GET /api/v1/org/{orgId}/user/{userId}/permission
Credentials: Dashboard sign-in only. API tokens are refused.
Everything one member of this organization is allowed to do: their organization permissions in orgPermissions, and in projectPermissions their permissions on each project they hold any on, keyed by project id. You may look up yourself; looking up anyone else requires org:manage_teams. Only a dashboard session may call this, never an API token.
Parameters
| Name | In | Type | Description |
|---|---|---|---|
orgId required | path | string (uuid) | The organization's id. |
userId required | path | string (uuid) |
Responses
| Status | Description | Body |
|---|---|---|
200 | The person's permissions in the organization and its projects. | UserPermissions |
401 | The token is missing, expired, revoked or of the wrong kind. | Error |
403 | You asked about someone other than yourself without holding org:manage_teams. | Error |
404 | No person with this id is a member of your organization. | Error |
500 | A fault on our side. | Error |
Example
curl -X GET "https://api.spicelabs.io/api/v1/org/<orgId>/user/<userId>/permission" \
-H "Authorization: Bearer $SPICE_API_TOKEN"