List Accessible Subjects
Returns all subjects the tenant can access via active grants from other tenants,
including the latest snapshot header for each (if read_latest scope is held).
The calling principal must have allow_counterparty_access: true on their
principal access record. This flag defaults to false and must be explicitly
enabled by a human account_admin via PUT /v1/tenants/{tenant_id}/principals/{principal_id}.
Principals without the flag receive 403 even if the tenant holds active grants.
Per-principal flag required
The calling principal must haveallow_counterparty_access: true set on their
principal access record. This flag is false by default and must be explicitly
enabled by a human account_admin using
Add or Update Principal.
Principals without the flag receive 403 Forbidden even if the tenant holds
active grants. This is a per-principal gate — granting counterparty access to
the tenant does not automatically grant it to all principals within that tenant.
Enabling the flag
account_admin. Service account
and AI agent callers are rejected with 422 regardless of their tenancy role.Authorizations
Firebase Auth JWT issued by Google Identity Platform.
Obtain a token by signing in at your app domain and calling
firebase.auth().currentUser.getIdToken().
Path Parameters
Tenant identifier.
Response
Accessible subject list.