🔍
Strapi Permission Validator
Validate API tokens and user role permissions for Strapi instance
Configuration
Strapi Instance URL
*
Enter strapi url
✓ Using admin credentials from .env file
Change Credentials
Admin Email
*
Admin Password
*
▶
Advanced Configuration
Restricted Permissions
delete deleteAccount destroy deleteRole
Enter one permission per line (default: delete, deleteAccount, destroy)
Role-Specific Permissions (JSON)
{ "Public": { "allowed": [ "plugin::stb-users.auth.callback", "plugin::stb-users.auth.connect", "plugin::stb-users.stb-users.googleOneTabLogin", "plugin::stb-users.stb-users.googleOneTabCallback", "plugin::users-permissions.auth.callback", "plugin::users-permissions.auth.connect" ], "restricted": [] }, "Authenticated": { "allowed": [ "me", "create", "count", "find", "findOne", "changePassword" ], "restricted": [] } }
Optional: Define allowed/restricted permissions for specific roles in JSON format
Run Validation
▶
Running validation...
Validation Results
📥
Download Excel