# List all available permissions

> 🔒 **Private label — [contact sales](mailto:sales@boyahq.com).** Requires a private-label entitlement on your API client.

List all available permissions

Endpoint: GET /wallet-policies/permissions
Version: 2.0.0
Security: oauth2ClientCredentials

## Header parameters:

  - `business_id` (string, required)
    Business identifier for the request

## Response 200 fields (application/json):

  - `_id` (string, required)
    Permission MongoDB ID

  - `name` (string, required)
    Permission display name
    Example: View Balance

  - `slug` (string, required)
    Permission slug
    Example: view-balance

  - `description` (string, required)
    Permission description
    Example: See current and available balance

  - `category` (string, required)
    Permission category
    Enum: "READ", "TRANSACT", "ADMIN"

  - `requires_ownership` (boolean, required)
    Whether this is an owner-only permission

  - `createdAt` (string)
    Creation timestamp

  - `updatedAt` (string)
    Last update timestamp