diff --git a/src/langbot/pkg/api/http/controller/groups/system.py b/src/langbot/pkg/api/http/controller/groups/system.py
index 2d612be50..3d8bc9dc0 100644
--- a/src/langbot/pkg/api/http/controller/groups/system.py
+++ b/src/langbot/pkg/api/http/controller/groups/system.py
@@ -43,11 +43,17 @@ SYSTEM_CAPABILITY_OPERATIONS = (
     'plugin.get',
     'plugin.list',
     'plugin.config.get',
+    'plugin.config.update',
     'plugin.logs',
+    'plugin.delete',
     'skill.list',
     'skill.get',
+    'skill.create',
+    'skill.update',
+    'skill.delete',
     'skill.files.list',
     'skill.files.read',
+    'skill.files.write',
     'skill.preview',
     'skill.install.github',
     'skill.install.upload',
diff --git a/tests/integration/api/test_workspaces.py b/tests/integration/api/test_workspaces.py
index b3d798bbf..0421a7365 100644
--- a/tests/integration/api/test_workspaces.py
+++ b/tests/integration/api/test_workspaces.py
@@ -528,11 +528,17 @@ async def test_api_key_context_returns_bound_identity_without_workspace_permissi
             'plugin.get',
             'plugin.list',
             'plugin.config.get',
+            'plugin.config.update',
             'plugin.logs',
+            'plugin.delete',
             'skill.list',
             'skill.get',
+            'skill.create',
+            'skill.update',
+            'skill.delete',
             'skill.files.list',
             'skill.files.read',
+            'skill.files.write',
             'skill.preview',
             'skill.install.github',
             'skill.install.upload',