const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.factify.com/v1/documents/{document_id}/capabilities', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"attach_policy": true,
"comment_private": true,
"comment_public": true,
"copy_content": true,
"create_version": true,
"export": true,
"grant_access": true,
"list_versions": true,
"manage_access": true,
"open": true,
"screenshot": true,
"trash": true,
"view": true,
"view_analytics": true,
"view_leads": true,
"view_timeline": true
}Get the caller's capabilities on a document
Returns the caller’s per-action permission booleans for a document
without loading the full document payload. Use this as a lightweight
replacement for the v1alpha inspectAccess endpoint when only the
permission set is needed (e.g. rendering the share modal, gating
toolbar actions).
Each field is true when the caller has that permission, false
when denied, or absent when the evaluation was skipped (e.g.
SpiceDB infra error). Absent means “unknown”, not “denied”.
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.factify.com/v1/documents/{document_id}/capabilities', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"attach_policy": true,
"comment_private": true,
"comment_public": true,
"copy_content": true,
"create_version": true,
"export": true,
"grant_access": true,
"list_versions": true,
"manage_access": true,
"open": true,
"screenshot": true,
"trash": true,
"view": true,
"view_analytics": true,
"view_leads": true,
"view_timeline": true
}Documentation Index
Fetch the complete documentation index at: https://developers.factify.com/llms.txt
Use this file to discover all available pages before exploring further.
Authorizations
Bearer authentication using a factapi-issued API key
(ffy_<env>_<base32_uuid><base62_random>). Cookie-based
sessions are accepted automatically by user-facing endpoints
but are not surfaced as an OpenAPI auth scheme.
Path Parameters
Document ID
"doc_01h2xcejqtf2nbrexx3vqjhp41"
Response
OK
Permissions the authenticated user has on a document. Each field is optional; absent means the capability is not known or not evaluated.