Scope catalogue

GET
/scopes

Every scope in the vocabulary with its label, description, tier, and owning domain. Rendered from the same registry the product enforces, so this endpoint and the documentation cannot disagree.

Authorization

bearerAuth
AuthorizationBearer <token>

An API key from Settings > API access, sent as Authorization: Bearer sp_live_.... Send exactly one credential per request; a request carrying both a bearer token and a session cookie is rejected rather than resolved by precedence.

In: header

Response Body

application/json

application/json

curl -X GET "https://example.com/scopes"
{  "data": [    {      "key": "jobs:read",      "label": "string",      "description": "string",      "tier": "default",      "owningDomain": "string",      "minRole": "org:member",      "inWildcards": true    }  ]}

Last updated on