The feature and permission catalogue with plan availability (admin only)

GET 
/api/capabilities/catalog

Every feature with its group, dependencies, related quota keys and plan limit fields (doc 63 — referenced, never edited here), its permissions and surfaces, whether it is enabled for this tenant and, if the tenant may not have it, why (rollout, override, plan, requires:<parent>). Every permission with its group, feature, reserved flag and whether the tenant's plan makes it effective. Backs the role editor; gated like the permission catalogue (members.manage).

Responses

200

The catalogue.

401

Not authenticated. code: account_disabled means the member's seat was deactivated in this workspace: the session is over even though the token was not revoked (clients sign out and clean up).

403

Authenticated but not allowed.