Skip to main content
Scopes limit what your application can do with an access token. Request them space-separated in the scope parameter of the authorization request. The user sees each one on the consent screen. Every endpoint states its required scope, and a request without it returns 403 Forbidden.

Available scopes

A write scope includes its read counterpart. Requesting project.webhooks.write also lets you list webhooks without requesting project.webhooks.read. user.* scopes apply to the authorizing user. project.* scopes apply to every project the user selected during authorization.