Skip to content
Spacefast Docs
Esc
↑↓navigate↵open⌘Jpreview

List the grants that can act in a team

Returns user-owned grants across team members when their server-stored scope covers this team. Only team administrators can inspect this security ledger; service automation is excluded.

GET/v1/teams/{teamRef}/grants
Authorization
AuthorizationBearer token · headerrequired

Better Auth session, OAuth access token, OAuth client-credentials token, or sfm_ Space machine credential.

Path parameters
teamRefstringrequired
min length 1
Responses
200

Response for status 200

$schemastring<uri>

Canonical JSON Schema URL for this response body. The server also sends it in the Link: rel="describedby" response header.

dataobjectrequired
Show properties
grantsobject[]required
Show properties
Array of object
idstringrequired
namestringrequired
kindstringrequired
Allowed:agentappclihandoffapi-keymachine
clientNamestring
logoUristring
effectiveScopesstring[]required
scopesobject[]required
Show properties
Array of object
idstringrequired
labelstringrequired
elevatedUntilstring<date-time>
matches ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z))$
teamScopeobject | nullrequired
Show properties
Any of:
object
teamIdstringrequired
teamNamestringrequired
null
null
ownerobject
Show properties
idstringrequired
namestringrequired
emailstring<email>required
matches ^(?!\.)(?!.*\.\.)([A-Za-z0-9_'+\-\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$
teamNamestring
lastUsedAtstring<date-time> | nullrequired
Show properties
Any of:
string<date-time>
string<date-time>
null
null
lastUsedLabelstring
statusstringrequired
Allowed:activeexpiredrevoked
createdAtstring<date-time>required
matches ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z))$
expiresAtstring<date-time>required
matches ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z))$
default

Problem details (RFC 9457). Any 4xx/5xx response is one application/problem+json document.

$schemastring<uri>

Canonical JSON Schema URL for this response body. The server also sends it in the Link: rel="describedby" response header.

typestringrequired

Problem type URI resolving to the error docs page. The server derives it mechanically from code against the docs origin.

titlestringrequired

Short human-readable summary of the problem type. The server derives it mechanically from code.

statusintegerrequired

HTTP status code of this response, repeated in the body.

min -9007199254740991 · max 9007199254740991
detailstringrequired

Human-readable failure explanation for this occurrence.

codestringrequired

Stable snake_case error code naming the failed public contract.

pointerstring

RFC 6901 JSON Pointer into the failing request field, for example "/files/37/path", on validation failures.

detailsobject

Machine-readable context for the error code.

suggestionsstring[]

Actionable recovery steps safe to show in dashboards, SDKs, and CLI output.

nextstring[]

Copy-pasteable commands or API requests an agent can run next.

requestIdstringrequired

The request id to quote when contacting support.

Try it
Server
Authorization
Parameters
Request
curl -X GET 'https://api.spacefast.com/v1/teams/string/grants' \
  -H 'Authorization: Bearer YOUR_TOKEN'
Response
{
  "$schema": "http://example.com",
  "data": {
    "grants": [
      {
        "id": "string",
        "name": "string",
        "kind": "agent",
        "clientName": "string",
        "logoUri": "string",
        "effectiveScopes": [
          "string"
        ],
        "scopes": [
          {
            "id": "string",
            "label": "string",
            "elevatedUntil": "2019-08-24T14:15:22Z"
          }
        ],
        "teamScope": {
          "teamId": "string",
          "teamName": "string"
        },
        "owner": {
          "id": "string",
          "name": "string",
          "email": "user@example.com"
        },
        "teamName": "string",
        "lastUsedAt": "2019-08-24T14:15:22Z",
        "lastUsedLabel": "string",
        "status": "active",
        "createdAt": "2019-08-24T14:15:22Z",
        "expiresAt": "2019-08-24T14:15:22Z"
      }
    ]
  }
}