Read CertOps Tier 1 capability flags for a workspace

GET 
/api/v1/workspaces/:id/certops/capabilities

Cloud-only; no core counterpart. Plan-derived agentsEnabled/controllersEnabled/renewalsEnabled status read for the Agents/Renewals dashboard tabs. Gated on auth and workspace membership only (no plan/role/frozen-workspace check), so a Free-plan or frozen workspace can still see why a capability is unavailable instead of receiving a blanket 402/403.

Request

Responses

200

Capability flags for this workspace's resolved plan

401

Unauthorized

403

Forbidden

404

Workspace not found, or the caller is not a member