List capabilities for a website

GET

/api/v1/capabilities

const url = 'https://api.inside.chat/api/v1/capabilities?website_id=example';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url 'https://api.inside.chat/api/v1/capabilities?website_id=example' \
  --header 'Authorization: Bearer <token>'

Required scopes: –
Data access: –
MCP tool: capabilities_list

List currently granted read and reviewed write operations for one explicitly granted website. Native target and integration checks still apply.

Authorizations

installation_token
oauth_client_credentials

Parameters

Query Parameters

website_id

required

string

/^web_[0-9]{1,20}_[1-9][0-9]{0,18}$/

An explicitly granted website.

Responses

200

Authorized result. Projection depends on current scopes and data policy.

application/json

object

website_id

required

string

/^web_[0-9]{1,20}_[1-9][0-9]{0,18}$/

native_commands_paused

required

True while INSIDE pauses native commands for this website. Only operation_get remains listed.

boolean

operations

required

Array<object>

object

name

required

Operation and MCP tool name.

string

method

required

string

path

required

Path template with :parameter placeholders.

string

fields

required

Array<string>

required_scopes

required

Array<string>

data_access

required

Array<string>

Allowed values: message_content pii internal_notes

discovery

required

boolean

description

required

string

restriction_dimensions

required

Array<string>

Allowed values: channel_ids team_ids subsite_ids

mutation

required

boolean

idempotency_required

required

boolean

author_mapping_required

required

boolean

Example

{
  "operations": [
    {
      "data_access": [
        "message_content"
      ],
      "restriction_dimensions": [
        "channel_ids"
      ]
    }
  ]
}

400

Invalid, duplicate or unsupported request parameters.

401

Missing, expired or revoked installation credential.

404

Resource not found or not permitted by current authority.

422

The requested capability is not available for application installations.

429

Per-app quota exceeded.

Headers

Retry-After

integer

>= 1

503

Enrollment, native service or required authority is unavailable.