List My Permissions

curl -X GET 'https://app.memorylake.ai/openapi/memorylake/admin/v1/me/permissions' \
  -H 'Authorization: Bearer sk_xxxxxx'

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "permissions": [
      "example"
    ],
    "role": "tenant_member",
    "scopes": [
      {
        "mode": "all",
        "resource_type": "example",
        "available_actions": [
          "example"
        ],
        "instance_only_actions": {
          "key": [
            "example"
          ]
        },
        "instances": [
          {
            "id": "bc572b050c9920425b5fd75681eccbb2",
            "actions": [],
            "effective_actions": [],
            "permission_level": "read",
            "shadowed_actions": [],
            "via_permission_level": false,
            "workspace_id": "0fa2d21dc175adc7a003e0b37f156cb1"
          }
        ],
        "restricted_by": [
          {
            "type": "role",
            "id": "7ea9bf65e6937c3c168bc7a2a0f6fbf2",
            "name": "Example name"
          }
        ]
      }
    ]
  }
}

curl -X GET 'https://app.memorylake.ai/openapi/memorylake/admin/v1/me/permissions' \
  -H 'Authorization: Bearer sk_xxxxxx'

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "permissions": [
      "example"
    ],
    "role": "tenant_member",
    "scopes": [
      {
        "mode": "all",
        "resource_type": "example",
        "available_actions": [
          "example"
        ],
        "instance_only_actions": {
          "key": [
            "example"
          ]
        },
        "instances": [
          {
            "id": "bc572b050c9920425b5fd75681eccbb2",
            "actions": [],
            "effective_actions": [],
            "permission_level": "read",
            "shadowed_actions": [],
            "via_permission_level": false,
            "workspace_id": "0fa2d21dc175adc7a003e0b37f156cb1"
          }
        ],
        "restricted_by": [
          {
            "type": "role",
            "id": "7ea9bf65e6937c3c168bc7a2a0f6fbf2",
            "name": "Example name"
          }
        ]
      }
    ]
  }
}

GET /openapi/memorylake/admin/v1/me/permissions

Returns what the caller (the key’s owner) may do in this team: every permission held, and per scopable resource type whether it reaches every instance or only the listed ones. A permission held for a resource type applies only to the instances that type’s scope allows. Any member may read their own permissions.

Permission required: none — any member’s key can call this

curl -X GET 'https://app.memorylake.ai/openapi/memorylake/admin/v1/me/permissions' \
  -H 'Authorization: Bearer sk_xxxxxx'

Response

object

Show My Permissions object

array

Every permission the caller holds, as <resource_type>:<action>

string

The caller’s role

array

Per scopable resource type: all = every instance; instances = only the listed ones

Show My Access Scope object

string

all = every instance; instances = only the listed ones

string

Resource type, e.g. memorylake:project (see GET /permission-catalog)

array

Read-only. Instance-level actions the member’s role grants for this type — the most a scope entry can allow.

object

Actions the caller holds only on the listed instances (granted through a permission level on them), keyed by action. Actions not listed here hold on every instance the caller reaches.

array

The instances, when mode is instances

Show Access Scope Instance object

string

Instance id, as returned by the data API

array

Actions allowed on this instance. Omit for every action the member’s role allows.

array

Read-only. The subset of actions the member’s CURRENT role still grants.

string

Read-only. The permission level, when via_permission_level is true. One of: read, write, manage.

array

Read-only. Actions stored here that the member’s current role no longer grants.

boolean

Read-only. The member reaches this instance through a permission level granted on it, not through this scope. May be echoed back on write; such instances are skipped.

string

Parent workspace of a project instance. Required when writing a project instance.

array

When mode is instances: what limits the caller — a role’s access scope or the caller’s own (personal)

Show Effective Source Ref object

string

role, access_group, or personal (a rule set on the member directly)

string

Role key or access group id; omitted for personal

string

Display name of the role or access group; omitted for personal

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "permissions": [
      "example"
    ],
    "role": "tenant_member",
    "scopes": [
      {
        "mode": "all",
        "resource_type": "example",
        "available_actions": [
          "example"
        ],
        "instance_only_actions": {
          "key": [
            "example"
          ]
        },
        "instances": [
          {
            "id": "bc572b050c9920425b5fd75681eccbb2",
            "actions": [],
            "effective_actions": [],
            "permission_level": "read",
            "shadowed_actions": [],
            "via_permission_level": false,
            "workspace_id": "0fa2d21dc175adc7a003e0b37f156cb1"
          }
        ],
        "restricted_by": [
          {
            "type": "role",
            "id": "7ea9bf65e6937c3c168bc7a2a0f6fbf2",
            "name": "Example name"
          }
        ]
      }
    ]
  }
}

Errors

Errors answer with success: false, a message and an error_code. See Error Codes for every code.

Status	Meaning
`401`	The API key is missing, invalid, disabled or expired
`403`	The key is not allowed to do this
`429`	Too many requests. Wait for the time in `Retry-After`
`500`	Server-side error

MemoryLake API

Memory Router API

Response

Errors

​Response

​Errors

Response

Errors