read.internal.instance_extensions

What this instance LOADED at boot (bundled + its own directory) and what failed to load, with the reason. failed means a manifest that would not read, or a module a manifest declares and the directory does not ship — an action module is imported on its FIRST RUN, not at boot, so one that is present and throws on import is not visible here (it fails at the invocation; the readiness gate scans its source before traffic). Internal face only. Not extension_health, which is the per-tenant dead-letter of extension invocations.

• Surface: GET /v1/read/internal/instance_extensions · MCP tool read.internal.instance_extensions
• Auth: ★ Internal read (operator) — a tenant credential is REQUIRED; requires the extensions.read scope. The tenant is resolved from the CALLER’s identity, never from store. Personal fields come back MASKED for an actor without pii.read (the shape is unchanged).

Params (JSON Schema)

{
  "properties": {},
  "type": "object"
}

Result (200)

Open (unknown) — this capability does not declare an output schema.

Errors

validation_failed (400) · not_found (404) · unauthorized (401) · forbidden (403)