---
layout: "api"
page_title: "/sys/capabilities-self - HTTP API"
sidebar_current: "docs-http-system-capabilities-self"
description: |-
  The `/sys/capabilities-self` endpoint is used to fetch the capabilities of
  client token on a given path.
---

# `/sys/capabilities-self`

The `/sys/capabilities-self` endpoint is used to fetch the capabilities of a the
supplied token.

## Query Self Capabilities

This endpoint returns the capabilities of client token on the given path. The
client token is the Vault token with which this API call is made.

| Method   | Path                     | Produces               |
| :------- | :----------------------- | :--------------------- |
| `POST`   | `/sys/capabilities-self` | `200 application/json` |


### Parameters

- `path` `(string: <required>)` – Specifies the path on which the client token's
  capabilities will be checked.

### Sample Payload

```json
{
  "path": "secret/foo"
}
```

### Sample Request

```
$ curl \
    --header "X-Vault-Token: ..." \
    --request POST \
    --data payload.json \
    https://vault.rocks/v1/sys/capabilities-self
```

### Sample Response

```json
{
  "capabilities": ["read", "list"]
}
```