Read the whole permission document Return every role and its permissions in one object.
GET /v1/apps/{appId}/rules
Deny by default; a user’s permissions are the union of their roles, so adding a role can only add permissions. Prefer roles.get for one role. revision identifies this document version; send it as baseRevision when replacing the document.
Requires the schema:read scope. Operation rules.get. MCP tool rules_get. CLI: grid82 rules get (npx grid82).
Path parameters
Name Type Required Description appIdstring yes
dataobject required
Show child attributes data. versionnumber required
data. rolesobject[] required items: 1–100 items
Show child attributes data.roles. idstring required pattern: ^[a-z][a-z0-9_]{0,62}$
data.roles. namestring required length: 1–120 chars
data.roles. descriptionstring length: ≤ 500 chars
data.roles. assistantMonthlyCreditsinteger range: 0–10000000
data.roles. interfaceenum<string> one of: assigned, own
data.roles. automationsenum<string> one of: none, own
data. permissionsobject[] required items: ≤ 100 items
Show child attributes data.permissions. rolestring required pattern: ^[a-z][a-z0-9_]{0,62}$
data.permissions. tablesstring | Record<string, object> required
data. revisionstring required
errorobject required
Show child attributes error. codeenum<string> required one of: not_found, forbidden, unauthenticated, validation_failed, conflict, rate_limited, payment_required, not_implemented, internal
error. messagestring required
error. detailsRecord<string, unknown>