API referencePeople and roles
List roles, and the permissions a role can hold
GET
Needs People & roles.
bearerheader
AuthorizationBearer <token>An API token
Every role, and every permission grouped and worded for people
application/json- response
items*array<>permissions*array<>curl -X GET 'http://127.0.0.1:7777/admin/api/roles'Example Response
{ "items": [ { "id": "string", "name": "string", "builtIn": true, "permissions": [ "string" ], "people": 0 } ], "permissions": [ { "id": "string", "group": "string", "label": "string", "description": "string" } ]}Give a person a role PUT
Needs People & roles. It applies from their next request, tokens they already hold included. The last enabled Admin keeps Admin (409). From a browser session, send the page's CSRF token as `x-csrf`.
Make a role POST
Needs People & roles. Of `mcp.read` and `mcp.full` a role keeps one (full wins). An unknown permission is refused.