Scenario #9700: The Available Api Key Scopes Can Be Listed

GET /api/rbac/scopes lists the available named API-key endpoint-scopes and the endpoints each of them allows, e.g. to look up valid values for the scopes property when creating an API_KEY subject.

Fetch the available API-key endpoint-scopes

HTTP GET "/api/rbac/scopes" \
  -H "Authorization: Bearer $HSADMINNG_JWT_BEARER" \
  `# {` \
  `#   "sub" : "uuid<hsh-alex_superuser>"` \
  `# }`
=> status: 200 OK 
[ {
  "scope" : "rbac.subjects:sync",
  "allows" : [ "GET /api/rbac/subjects", "GET /api/rbac/subjects/{uuid}", "PUT /api/rbac/subjects/{uuid}", "POST /api/rbac/subjects/sync-report" ]
}, {
  "scope" : "*:read",
  "allows" : [ "GET /api/**" ]
} ]

---

generated on 2026-08-10 04:34:37 for branch HEAD