members.permissions

What each current worker in a shop may do beyond their role: see_prices, see_costs, take_money, delete and manage_schedule. The owner sees everyone; anyone else sees only themselves. The owner always has every permission.


Who	Agents can call this
REST	`GET /v1/members/permissions`
MCP tool	`members_permissions`
Writes	no
Area	Shop

When to use it

What each current worker in a shop may do beyond their role: see_prices, see_costs, take_money, delete and manage_schedule. The owner sees everyone; anyone else sees only themselves.

What to tell the owner

Tell them what you found in plain words. Don't read back raw fields.

Input

Field	Type	Required
`shop_id`	string (uuid)	yes
`person_id`	string (uuid)	no

Example

GET https://doingwork.work/v1/members/permissions?shop_id=00000000-0000-4000-8000-000000000000

Output

Field	Type	Always there
`members`	array	yes
`members[].membership_id`	string (uuid)	yes
`members[].person_id`	string (uuid)	yes
`members[].display_name`	string	no
`members[].role`	string (one of owner, office, field)	yes
`members[].permissions`	object	yes
`members[].permissions.see_prices`	boolean	yes
`members[].permissions.see_costs`	boolean	yes
`members[].permissions.take_money`	boolean	yes
`members[].permissions.delete`	boolean	yes
`members[].permissions.manage_schedule`	boolean	yes
`members[].customized`	boolean	yes

{
  "members": [
    {
      "membership_id": "00000000-0000-4000-8000-000000000000",
      "person_id": "00000000-0000-4000-8000-000000000000",
      "role": "owner",
      "permissions": {
        "see_prices": true,
        "see_costs": true,
        "take_money": true,
        "delete": true,
        "manage_schedule": true
      },
      "customized": true
    }
  ]
}

Errors

Code	Status	What to do
`invalid_input`, `invalid_token`, `rate_limited`		Can happen on any call. See errors.