Get Partner Capabilities

Returns the partner capability configuration for the authenticated user, including whether token management is enabled and which scopes are allowed for self-service token derivation. Requires Privy authentication (Bearer token).

GET /auth/api-tokens/capabilities

Get partner capabilities

cURL

curl --request GET \
  --url https://api.limitless.exchange/auth/api-tokens/capabilities \
  --header 'X-API-Key: <api-key>'

200

{
  "partnerProfileId": 42,
  "tokenManagementEnabled": true,
  "allowedScopes": [
    "trading",
    "account_creation",
    "delegated_signing"
  ]
}

Requires Privy authentication (Bearer token). HMAC and API key auth are not accepted for this endpoint.

This endpoint returns whether token management is enabled for your partner account and which scopes you can request when deriving tokens.

If no capability row exists for your profile, tokenManagementEnabled defaults to false and allowedScopes defaults to an empty array. Contact [e-mail] to get partner capabilities enabled.

Authorizations

X-API-Key · string · header · required

API key for programmatic access. Generate at limitless.exchange -> profile menu -> Api keys.

Response

200

application/json

Partner capability configuration

partnerProfileId · integer · required

Partner profile ID

Example:

42

tokenManagementEnabled · boolean · required

Whether the partner can manage tokens via self-service endpoints

Example:

true

allowedScopes · enum<string>[] · required

Scopes the partner is allowed to request when deriving tokens

Available options: trading, account_creation, delegated_signing

Example:

[
  "trading",
  "account_creation",
  "delegated_signing"
]