Session 1NF8B0IBHPOm

<path>/home/byk/.local/share/opencode/tool-output/tool_043860ce0001dHKJARbna8GGVi</path>
<type>file</type>
<content>
1: # Permissions required for GitHub Apps
2: 
3: For each permission granted to a GitHub App, these are the REST API endpoints that the app can use.
4: 
5: ## About GitHub App permissions
6: 
7: GitHub Apps are created with a set of permissions. Permissions define what resources the GitHub App can access via the API. For more information, see [Choosing permissions for a GitHub App](/en/apps/creating-github-apps/registering-a-github-app/choosing-permissions-for-a-github-app).
8: 
9: To help you choose the correct permissions, you will receive the `X-Accepted-GitHub-Permissions` header in the REST API response. The header will tell you what permissions are required in order to access the endpoint. For more information, see [Troubleshooting the REST API](/en/rest/using-the-rest-api/troubleshooting-the-rest-api#resource-not-accessible). ...

Found 1 matches
/home/byk/.local/share/opencode/tool-output/tool_043860ce0001dHKJARbna8GGVi:
  Line 1143: | `GET /repos/{owner}/{repo}/collaborators/{username}/permission` | read | UAT, IAT | ✗ |

<path>/home/byk/.local/share/opencode/tool-output/tool_043860ce0001dHKJARbna8GGVi</path>
<type>file</type>
<content>
1128: | `GET /repos/{owner}/{repo}/issues/{issue_number}/timeline` | read | UAT, IAT | ✓ |
1129: | `GET /repos/{owner}/{repo}/labels` | read | UAT, IAT | ✓ |
1130: | `GET /repos/{owner}/{repo}/labels/{name}` | read | UAT, IAT | ✓ |
1131: | `GET /repos/{owner}/{repo}/milestones` | read | UAT, IAT | ✓ |
1132: | `GET /repos/{owner}/{repo}/milestones/{milestone_number}` | read | UAT, IAT | ✓ |
1133: | `GET /repos/{owner}/{repo}/milestones/{milestone_number}/labels` | read | UAT, IAT | ✓ |
1134: 
1135: ## Repository permissions for "Metadata"
1136: 
1137: | Endpoint | Access | Tokens | Additional Permissions |
1138: |----------|--------|--------|------------------------|
1139: | `GET /orgs/{org}/repos` | read | UAT, IAT | ✗ |
1140: | `GET /repos/{owner}/{repo}` | read | UAT, IAT | ✗ |
1141: | `GET /repos/{owner}/{repo}/collaborators` | read | UAT, IAT | ✗ |
1142: | `GET ...

StatusCode: non 2xx status code (404 GET https://docs.github.com/en/rest/repos/collaborators#get-repository-permissions-for-a-user)

# REST API endpoints for collaborators

Use the REST API to manage collaborators for a repository.

> [!NOTE]
> Most endpoints use `Authorization: Bearer <YOUR-TOKEN>` and `Accept: application/vnd.github+json` headers, plus `X-GitHub-Api-Version: 2026-03-10`. Curl examples below omit these standard headers for brevity.

## List repository collaborators

```
GET /repos/{owner}/{repo}/collaborators
```

For organization-owned repositories, the list of collaborators includes outside collaborators, organization members that are direct collaborators, organization members with access through team memberships, organization members with access through default organization permissions, and organization owners.
The permissions hash returned in the response contains the base role permissions of the collaborator. The role_name is the highest role assigned to the collaborator after considering all sources of grants, including: repo, teams, organization, and enterprise. ...

# Choosing permissions for a GitHub App

The permissions of a GitHub App determine what the app can do with GitHub's APIs and what webhooks the app can receive.

## About GitHub App permissions

GitHub Apps don't have any permissions by default. When you register a GitHub App, you can select permissions for the app. The permissions that you select determine what the app can do with GitHub's APIs and what webhooks the app can subscribe to. You should select the minimum permissions required for the app.

Although GitHub Apps don't have any permissions by default, they do have implicit permissions to read public resources when acting on behalf of a user. When a user authorizes the app to act on their behalf, the GitHub App can use the resulting user access token to make requests to the REST API and the GraphQL API to read public resources. ...

---
title: REST API endpoints for collaborators
shortTitle: Collaborators
allowTitleToDifferFromFilename: true
intro: Use the REST API to manage collaborators for a repository.
versions: # DO NOT MANUALLY EDIT. CHANGES WILL BE OVERWRITTEN BY A 🤖
  fpt: '*'
  ghec: '*'
  ghes: '*'
autogenerated: rest
category:
  - Manage repositories and code
---



<!-- Content after this section is automatically generated -->