> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lojou.app/llms.txt
> Use this file to discover all available pages before exploring further.

# List available scopes and which of them your token has

> Introspection endpoint: returns every scope the API supports, the
endpoints each scope unlocks, and (implicitly, via which ones you
can call) what your current token is authorized for. Useful for
debugging a `403 insufficient_scope` response, or for building an
app that adapts to whatever permissions the seller granted it.




## OpenAPI

````yaml /openapi.yaml get /v1/scopes
openapi: 3.1.0
info:
  title: Lojou API
  version: 1.0.0
  description: |
    Official reference for the Lojou `/v1` API — everything a developer needs
    to create products, process orders, manage plans, and receive webhooks
    from a Lojou store.
servers:
  - url: https://api.lojou.app
    description: Production
security:
  - bearerAuth: []
tags:
  - name: Health
  - name: OAuth
  - name: User
  - name: Products
  - name: Plans
  - name: Orders
  - name: Customers
  - name: Files
  - name: Webhooks
  - name: Discounts
  - name: Affiliates
paths:
  /v1/scopes:
    get:
      tags:
        - User
      summary: List available scopes and which of them your token has
      description: |
        Introspection endpoint: returns every scope the API supports, the
        endpoints each scope unlocks, and (implicitly, via which ones you
        can call) what your current token is authorized for. Useful for
        debugging a `403 insufficient_scope` response, or for building an
        app that adapts to whatever permissions the seller granted it.
      operationId: getV1Scopes
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ScopesResponse'
              example:
                status: success
                message: Scopes fetched successfully.
                data:
                  total_scopes: 17
                  scopes:
                    - scope: orders.read
                      resource: orders
                      access: read
                      endpoints:
                        - method: GET
                          path: /v1/orders
                        - method: GET
                          path: /v1/orders/{id}
                      endpoints_count: 2
        '401':
          $ref: '#/components/responses/UnauthorizedError'
components:
  schemas:
    ScopesResponse:
      type: object
      properties:
        status:
          type: string
          example: success
        message:
          type: string
        data:
          type: object
          properties:
            total_scopes:
              type: integer
            scopes:
              type: array
              items:
                type: object
                properties:
                  scope:
                    type: string
                    example: orders.read
                  resource:
                    type: string
                    example: orders
                  access:
                    type: string
                    enum:
                      - read
                      - write
                  endpoints:
                    type: array
                    items:
                      type: object
                      properties:
                        method:
                          type: string
                        path:
                          type: string
                  endpoints_count:
                    type: integer
    ErrorResponse:
      type: object
      properties:
        status:
          type: string
          example: error
        message:
          type: string
      additionalProperties: true
  responses:
    UnauthorizedError:
      description: Unauthorized
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
          example:
            status: error
            message: Unauthorized user.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: |
        Send an API key or an OAuth access token in the `Authorization` header
        as a Bearer token. See [Authentication](/authentication) for details.

````