diff --git a/src/langbot/pkg/api/http/controller/groups/system.py b/src/langbot/pkg/api/http/controller/groups/system.py
index 97203e47b..12fc0afe3 100644
--- a/src/langbot/pkg/api/http/controller/groups/system.py
+++ b/src/langbot/pkg/api/http/controller/groups/system.py
@@ -28,15 +28,29 @@ SYSTEM_CAPABILITY_OPERATIONS = (
     'task.get',
     'knowledge_base.get',
     'knowledge_base.file.store',
+    'knowledge_base.retrieve',
     'file.document.upload',
     'plugin.install.github',
     'plugin.install.marketplace',
     'plugin.install.local',
     'plugin.upgrade',
     'plugin.get',
+    'plugin.list',
+    'plugin.config.get',
+    'plugin.logs',
+    'skill.list',
+    'skill.get',
+    'skill.files.list',
+    'skill.files.read',
+    'skill.preview',
     'skill.install.github',
     'skill.install.upload',
+    'mcp_server.list',
     'mcp_server.get',
+    'mcp_server.resources',
+    'mcp_server.resource_templates',
+    'mcp_server.resource_read',
+    'mcp_server.logs',
     'mcp_server.test',
 )
 
diff --git a/tests/integration/api/test_workspaces.py b/tests/integration/api/test_workspaces.py
index e41c3322a..2ad6d90c6 100644
--- a/tests/integration/api/test_workspaces.py
+++ b/tests/integration/api/test_workspaces.py
@@ -513,15 +513,29 @@ async def test_api_key_context_returns_bound_identity_without_workspace_permissi
             'task.get',
             'knowledge_base.get',
             'knowledge_base.file.store',
+            'knowledge_base.retrieve',
             'file.document.upload',
             'plugin.install.github',
             'plugin.install.marketplace',
             'plugin.install.local',
             'plugin.upgrade',
             'plugin.get',
+            'plugin.list',
+            'plugin.config.get',
+            'plugin.logs',
+            'skill.list',
+            'skill.get',
+            'skill.files.list',
+            'skill.files.read',
+            'skill.preview',
             'skill.install.github',
             'skill.install.upload',
+            'mcp_server.list',
             'mcp_server.get',
+            'mcp_server.resources',
+            'mcp_server.resource_templates',
+            'mcp_server.resource_read',
+            'mcp_server.logs',
             'mcp_server.test',
         ]
     )