What the signed-in member may have and do (evaluated)

GET 
/api/me/capabilities

The one capability answer the panel, the mobile app and the API share (doc 66). Features are evaluated in order — platform rollout, the operator's per-tenant override, the tenant's plan, the tenant's own choice, dependencies. Permissions are the member's effective set with every permission of a disabled feature removed. surfaces says, for every menu item, route, settings tab and mobile tab, whether this member may open it; clients show and hide from it and never re-derive it.

Every authenticated response carries X-Capabilities-Version; when it differs from version here, refetch.

Responses

200

The evaluated capabilities.

401

Not authenticated. code: account_disabled means the member's seat was deactivated in this workspace: the session is over even though the token was not revoked (clients sign out and clean up).