> ## Documentation Index
> Fetch the complete documentation index at: https://docs.molesignal.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enterprise capabilities

> Feature-entitled API families in Enterprise Edition.

Enterprise Edition enables capabilities through names in the active signed license. An entitlement
does not bypass IAM permissions.

| Feature              | Representative routes                         | Additional authorization                                           |
| -------------------- | --------------------------------------------- | ------------------------------------------------------------------ |
| `agent`              | `/api/v1/agent/*`                             | `agent.use`, `agent.manage`, or `agent.approve`                    |
| `sso`                | `/api/v1/sso/providers`, `/api/v1/auth/sso/*` | Organization settings permissions and provider policy              |
| `federated_search`   | `/api/v1/clusters`, remote query fan-out      | `org.settings.read` / `org.settings.manage`, plus query permission |
| `domain_management`  | `/api/v1/domains`                             | `org.settings.read` / `org.settings.manage`                        |
| `profiling_enhanced` | `/api/v1/profiles/diff`                       | `streams.query`                                                    |
| `marketplace`        | `/api/v1/marketplace/*`                       | Marketplace signature or organization billing access               |

Missing feature entitlements normally return `403`. OpenSource Edition still provides core
observability, including standard profile intake and single-window flame graphs.

Use a system-scoped session to inspect the active feature list:

```http theme={null}
GET /api/v1/system/license
```

This requires `sys.licenses.read`. See [Enterprise license management](/en-US/licensing) for upload
and activation, or [compare all deployment models](/en-US/editions).