# GET /roles/effective

**Resource:** [Roles & Permissions](./roles.md)  
**MCP tool:** `get_effective_permissions`  
**Scopes:** `permissions:read`  
**Write operation:** no

Resolve a workspace member's live effective permissions (is_admin, scopes, data_scope) via the same engine RLS uses. Pass ?user_id=<uuid>; omit to resolve the calling key's creator. Use this to verify what a user can actually do.

## Parameters

| Name | In | Type | Required | Description |
|------|----|------|----------|-------------|
| `user_id` | query | string | no | UUID of the member to resolve; omit for the caller |

## Request example

```bash
curl   "https://api.trustpager.com/functions/v1/api/v1/roles/effective"   -H "Authorization: Bearer YOUR_API_KEY"
```

---
Base URL: `https://api.trustpager.com/functions/v1/api/v1` — Auth: `Authorization: Bearer YOUR_API_KEY`