Look up the macaroon permissions required by an LND RPC

A read-only integration can encounter a permission error even when its token works on another method. Map the failing gRPC URI to the permissions declared by the target daemon.

Look up the precise URI

On the target LND instance, query the permission registry with an operator credential authorized to read it. Use the fully qualified gRPC method name, including the leading slash.

lncli listpermissions | jq '.method_permissions["/lnrpc.Lightning/ListChannels"]'

Compare the requirement with the integration

Inspect the returned entity and action pairs for the method. A missing map entry can mean the caller used the REST path or a method absent from this daemon. The registry describes server requirements. It does not reveal the actual restrictions or caveats baked into the application's token.

lightning.engineering list-permissions