# permissions operations

MCP tools and operation permissions for permissions.

Generated from the shared operation catalog. Use [the JSON catalog](https://bytesmap.com/docs/reference/operations.json) for complete input schemas. Required dependency checks can be stricter than the resource permission listed below.

## workspace_list

List workspaces available to the verified caller. A bound API key only sees its workspace.

- **HTTP:** `GET /api/permissions/workspaces`
- **SDK:** `client.permissions.listWorkspaces(input)`
- **Access:** identity
- **Effect annotation:** Read-only

See the JSON schema for this input contract.

## workspace_metadata_read

Read the current workspace name, type and member count under the verified caller context. Does not switch workspaces or change access.

- **HTTP:** `GET /api/permissions/org-meta`
- **SDK:** `client.permissions.orgMeta(input)`
- **Access:** workspace
- **Effect annotation:** Read-only

See the JSON schema for this input contract.

## workspace_resources_list

List resources of one type with the caller’s effective permissions. Returns only accessible resource labels and granted actions; does not grant access.

- **HTTP:** `GET /api/permissions/resources`
- **SDK:** `client.permissions.listResources(input)`
- **Access:** workspace
- **Effect annotation:** Read-only

| Input | Requirement | Description |
| --- | --- | --- |
| `type` | Required | See schema |