Get entitlements state

Retrieves the effective entitlements for a customer or resource, including feature and credit entitlements.

Warning: This REST API endpoint lacks built-in client-side caching, fallback mechanisms, and low-latency guarantees. It is not recommended for hot-path entitlement checks. For production use, consider using the Stigg Node Server SDK with caching or the Sidecar for low-latency cached responses.

GET /api/v1/customers/{id}/entitlements

JavaScript

JavaScript

import Stigg from '@stigg/typescript';

const client = new Stigg({
  apiKey: process.env['STIGG_API_KEY'], // This is the default and can be omitted
});

const response = await client.v1.customers.retrieveEntitlements('x');

console.log(response.data);

200

{
  "data": {
    "entitlements": [
      {
        "isGranted": true,
        "type": "FEATURE",
        "accessDeniedReason": null,
        "feature": {
          "id": "feature-api-calls",
          "displayName": "API Calls",
          "featureType": "NUMBER",
          "featureStatus": "ACTIVE"
        },
        "usageLimit": 10000,
        "hasUnlimitedUsage": false,
        "resetPeriod": "MONTH",
        "currentUsage": 2500
      },
      {
        "isGranted": true,
        "type": "FEATURE",
        "accessDeniedReason": null,
        "feature": {
          "id": "feature-sso",
          "displayName": "Single Sign-On",
          "featureType": "BOOLEAN",
          "featureStatus": "ACTIVE"
        }
      }
    ],
    "accessDeniedReason": null
  }
}

Authorizations

X-API-KEY · string · header · required

Server API Key

Headers

X-ACCOUNT-ID · string

Account ID — optional when authenticating with a user JWT (Bearer token); falls back to the user's first membership. Ignored for API-key auth.

X-ENVIRONMENT-ID · string

Environment ID — required when authenticating with a user JWT (Bearer token) on environment-scoped endpoints. Ignored for API-key auth (env is intrinsic to the key).

Path Parameters

id · string · required

The unique identifier of the entity

Required string length: 1 - 255

Query Parameters

resourceId · string

Resource ID to scope entitlements to a specific resource

Maximum string length: 255

Response

200

application/json

The entitlements state including feature and credit entitlements, and an optional access denied reason.

Response object

data · CustomerEntitlementsState · object · required

The effective entitlements state for a customer or resource.

Show child attributes