Check Permissions Returns the tenant's allowed entitlements so callers can gate features before making any API writes. Auth — App Token + secret (sandbox only) This skill talks to the public Sumsub API and signs each request per the authentication reference. The full how-it-works writeup lives in the skill — read it if you hit . ⚠️ Sandbox tokens only. Do not accept or use a production App Token here. If the user offers one, refuse and ask them to generate a sandbox pair at <https://cockpit.sumsub.com/checkus/devSpace/appTokens (toggle the workspace to Sandbox first, then Create ). Token + se…