{
  "format_version": 1,
  "slug": "concepts/capabilities",
  "lang": "en",
  "last_updated": "2026-10-12T14:19:13Z",
  "translations": [],
  "url": "https://wiki.aythuros.com/concepts/capabilities/",
  "json_url": "https://wiki.aythuros.com/concepts/capabilities/index.json",
  "title": "Capabilities and app permissions",
  "description": "Understand the public authority model native AythurOS applications use to access protected platform resources.",
  "section": "concepts",
  "type": "concept",
  "audience": [
    "app-developer"
  ],
  "status": "preview",
  "since": null,
  "platforms": [
    "aether",
    "void"
  ],
  "answers": [
    "What is a capability?",
    "How do AythurOS app permissions work?",
    "Does knowing a resource name grant access?"
  ],
  "related": [
    "developers"
  ],
  "tags": [
    "security",
    "permissions",
    "capabilities"
  ],
  "breadcrumbs": [
    {
      "name": "Home",
      "url": "/"
    },
    {
      "name": "Concepts",
      "url": null
    },
    {
      "name": "Capabilities and app permissions",
      "url": null
    }
  ],
  "headings": [
    {
      "level": 2,
      "id": "quick-answer",
      "text": "Quick answer"
    },
    {
      "level": 2,
      "id": "what-application-developers-need-to-know",
      "text": "What application developers need to know"
    }
  ],
  "related_pages": [
    {
      "slug": "developers",
      "title": "Native app development",
      "url": "https://wiki.aythuros.com/developers/",
      "json_url": "https://wiki.aythuros.com/developers/index.json"
    }
  ],
  "markdown": "\n# Capabilities and app permissions\n\nA native AythurOS application receives explicit authority for protected resources rather than gaining broad access simply because it is running.\n\n## Quick answer\n\nA capability represents permission to perform specific operations on a particular resource or service. Possessing a path, identifier, or resource name does not by itself grant authority.\n\nApplications should request only the access required for the task they are performing.\n\n## What application developers need to know\n\nUse the public SDK APIs for protected operations. Those APIs expose the permission and capability behavior that applications are expected to handle.\n\nApplications must be prepared for access to be unavailable, denied, revoked, or otherwise constrained by the platform.\n\nThe exact APIs and user-facing permission flows will be documented in the developer reference as they become stable.\n"
}