# Read current plan limits and capability states

Launch state: **Live**. Agents can register at /auth.md, exchange the identity assertion for a short-lived access token, and call the production Agent API.

Contract status: **implemented**. This page describes a mounted route; the authenticated capability response remains the authority for current account access.

## Request

`GET /api/agent/v1/capabilities`

Operation ID: `getAgentCapabilities`

Send a short-lived access token obtained through [auth.md](https://neotask.ai/auth.md) for `https://neotask.ai/api/agent` in the `Authorization: Bearer` header. The token must include `neotask:catalog:read`.





## Response

The current account, plan, models, limits, capabilities, and operation access manifest. The JSON schema is `AgentCapabilitySnapshot` in [OpenAPI](https://neotask.ai/openapi.yaml).

- Capability states include available, claim_required, setup_required, plan_required, quota_exhausted, and other policy results.
- The operations array is derived from the same registry as OpenAPI and reports scopeGranted, current availability, reason, and idempotency requirements.
- A plan-required capability may include an upgrade object. checkoutUrl remains null until the server has created a safe checkout handoff.
- Capability results do not override operation-level plan, quota, model, approval, or security checks.

## Errors

| HTTP | Codes | Meaning | Next action |
|---:|---|---|---|
| 401 | `invalid_credential`, `principal_not_linked`, `registration_revoked`, `identity_conflict` | The bearer token or linked agent principal is invalid or inactive. | Register, refresh, or claim through the documented Auth.md flow, then retry with a new token. |
| 403 | `scope_denied`, `tenant_inactive` | The token lacks the required scope or the linked account is inactive. | Read the error code. Request the documented scope or ask the user to restore account access. |
| 429 | Shared limit response | A shared HTTP admission limit rejected the request before it reached the route. | Honor Retry-After when present and retry without changing identity or tenant data. |
| 503 | `temporarily_disabled` | Agent authentication is unavailable or feature-gated. | Do not bypass authentication. Retry only after the returned guidance or launch state changes. |

## Related resources

- [Agent API index](https://neotask.ai/docs/llms.txt)
- [OpenAPI JSON](https://neotask.ai/openapi.json)
- [Arazzo quickstart](https://neotask.ai/arazzo.yaml)
- [Knowledge manifest](https://neotask.ai/agent-public-contracts/v1/knowledge-manifest.json)