open-vault/website/source/api/system/capabilities-self.html.md

layout	page_title	sidebar_current	description
api	/sys/capabilities-self - HTTP API	docs-http-system-capabilities-self	The `/sys/capabilities-self` endpoint is used to fetch the capabilities of client token on a given path.

/sys/capabilities-self

The /sys/capabilities-self endpoint is used to fetch the capabilities of a the supplied token.

Query Self Capabilities

This endpoint returns the capabilities of client token on the given path. The client token is the Vault token with which this API call is made.

Method	Path	Produces
POST	/sys/capabilities-self	200 application/json

Parameters

• path (string: <required>) – Specifies the path on which the client token's capabilities will be checked.

Sample Payload

{
  "path": "secret/foo"
}

Sample Request

$ curl \
    --header "X-Vault-Token: ..." \
    --request POST \
    --data payload.json \
    https://vault.rocks/v1/sys/capabilities-self

Sample Response

{
  "capabilities": ["read", "list"]
}