How to define all allowed actions for API endpoints?

Thanks for your help.