Skip to main content
GET
List grantable role capabilities

Authorizations

Authorization
string
header
required

Runpod API key authentication. Generate an API key in the Runpod console and send it in the Authorization header as Bearer <api_key>. Keys are scoped to the permissions granted when created; requests may return 403 when a valid key lacks access to the requested resource or action.

Console sessions (Clerk JWTs) act for the signed-in user. To act for a team instead, also send X-Team-Id: <team_id>; it applies only when the user owns or belongs to that team, otherwise the request runs against the user's own account. API keys created inside a team already act for that team and do not need the header.

Query Parameters

family
string[]

Only return these capability families, matched exactly. Comma-separated; a family matching any listed value is returned. An empty value is ignored.

verb
string[]

Only return these verbs, matched exactly. Comma-separated. Each family lists only the requested verbs it has, and a family with none of them is left out. An empty value is ignored.

Response

OK

The capabilities a custom role can grant.

version
integer
required

Major version of the capability catalog.

Example:

1

families
object[]
required

Capability families, in catalog order.

Last modified on November 3, 2026