{"scopes":[{"name":"capability:invoke","description":"Invoke capabilities via the gateway","required_by":["POST /api/v1/invoke","POST /api/v1/stream"]},{"name":"registry:read","description":"Read capabilities, apps, and registry metadata","required_by":["GET /api/v1/capabilities/:cap/resolve","GET /api/v1/capabilities","GET /api/v1/capabilities/:cap","GET /api/v1/capabilities/:cap/majors","GET /api/v1/apps","POST /api/v1/registry/export","GET /api/v1/apps/:app_key/agents","GET /api/v1/apps/:app_key/models","GET /api/v1/apps/:app_key/prompts","GET /api/v1/apps/:app_key/providers","GET /api/v1/apps/:app_key/workflows","GET /api/v1/apps/:app_key/tools","GET /api/v1/apps/:app_key/clients"]},{"name":"registry:admin","description":"Create, update, publish, and manage capabilities and apps","required_by":["POST /api/v1/apps","POST /api/v1/registry/upsert","POST /api/v1/registry/import","POST /api/v1/registry/publish","POST /api/v1/registry/deprecate","POST /api/v1/registry/disable","POST /api/v1/registry/set-default-major","POST /api/v1/apps/:app_key/agents","POST /api/v1/apps/:app_key/models","POST /api/v1/apps/:app_key/prompts","POST /api/v1/apps/:app_key/providers","POST /api/v1/apps/:app_key/workflows","POST /api/v1/apps/:app_key/tools","POST /api/v1/apps/:app_key/clients"]}]}