Note: Version numbers are bumped because a new web service is added into the Mobile app service and also in the module. Create a course with a teacher and a student. Create a couple of external tool activities. Hide one of the activities. Enable "Mobile services": Plugins ► Web Services ► Mobile Create a Token for the teacher and the student: Click on Site administration ► Plugins ► Web services ► Manage tokens Next, you can do a couple of CURL REST call simulating a WS client with the teacher and the student user You need to replace the wstoken and the URL of your moodle instance: curl 'http://localhost/m/stable_master/webservice/rest/server.php?moodlewsrestformat=json' --data 'wsfunction=mod_lti_get_ltis_by_courses&wstoken=ffbe3a3002f235bf9d01fd9369e10b66' --compressed | python -m "json.tool" Confirm that As student you only see the visible external tool activity, and you see all the external tool configuration settings except the one reserved for managers (you should see only: id, coursemodule, course, name, intro, introformat, launchcontainer, showtitlelaunch, showdescriptionlaunch, icon, secureicon) As a teacher you see all the external tool activities and all the settings You can also specify which courses to retrieve, (replace courseids..5 with a valid number in this request) curl 'http://localhost/m/stable_master/webservice/rest/server.php?moodlewsrestformat=json' --data 'courseids%5B0%5D=5&wsfunction=mod_lti_get_ltis_by_courses&wstoken=ffbe3a3002f235bf9d01fd9369e10b66' --compressed | python -m "json.tool" If you use a course id where you are not enrolled, you will receive a warning "No access rights in course context"