# Permission catalog

> Source: https://elaichi.ai/docs/api-reference/permissions/permission/listpermissions/

`GET /permission`

Resource: **Permission** · API: **Permissions**

## Response body

- **`result`** _(array<object>)_
  - **`name`** _(string)_
    Permission name, e.g. `member:manage` — this is what goes on a role.
  - **`label`** _(string)_
    Short human label.
  - **`description`** _(string)_
  - **`group`** _(string)_
    Display section for a role editor, e.g. `Connectors`.
  - **`high_trust`** _(boolean)_
    True when granting this permission lets its holder create something the organization’s own governance rules cannot bind afterwards — today only `connector:create`, whose connectors are governed by identity and not by the destination they dial (see docs/access-model.md §11). Always present; surface it wherever the permission is granted.
- **`next_cursor`** _(string,null)_
- **`prev_cursor`** _(string,null)_

## Code examples

### curl

```bash
curl -X GET 'https://api.elaichi.ai/permission' \
  -H 'Authorization: Bearer $ELAICHI_API_TOKEN' \
  -H 'Content-Type: application/json'
```

### JavaScript

```javascript
const response = await fetch('https://api.elaichi.ai/permission', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer ' + process.env.ELAICHI_API_TOKEN,
    'Content-Type': 'application/json',
  },
});

const data = await response.json();
console.log(data);
```

### Python

```python
import os
import requests

url = "https://api.elaichi.ai/permission"
headers = {
    "Authorization": f"Bearer {os.environ['ELAICHI_API_TOKEN']}",
    "Content-Type": "application/json",
}

response = requests.get(url, headers=headers)
print(response.json())
```