3GPP · OAuth Scopes

3GPP OAuth Scopes

OAuth 2.0 derived

3GPP publishes 6 OAuth 2.0 scopes via the clientCredentials flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the 3GPP API on a user’s behalf.

Tokens are issued from {tokenUrl}.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

TelecommunicationsGlobalStandardsStandards BodyNetwork APIs5GNetwork ExposureNEFSCEFCAPIFService Based ArchitectureOpenAPIOSSNetwork Functions6G

Scopes: 6 Flows: clientCredentials Method: derived

OAuth endpoints

Token URL
{tokenUrl} {nrfApiRoot}/oauth2/token

Flows
clientCredentials

Scopes (6)

Scope	Description	Flows
3gpp-vfl-inference	Access to the VFLInference API	clientCredentials
nnef-akma:gpsi-access	Return GPSI in the AKMA Application Key information for the UE.	clientCredentials
nnwdaf-analyticsinfo	Access to the Nnwdaf_AnalyticsInfo API	clientCredentials
nnwdaf-eventssubscription	Access to the Nnwdaf_EventsSubscription API	clientCredentials
npcf-policyauthorization	Access to the Npcf_PolicyAuthorization API	clientCredentials
npcf-smpolicycontrol	Access to the Npcf_SMPolicyControl API	clientCredentials

📄 Provider scope reference: https://www.3gpp.org/ftp/Specs/archive/29_series/29.510/

Source

OAuth Scopes

generated: '2026-07-25'
method: derived
source: openapi/3gpp-ts29122-assessionwithqos.yml, openapi/3gpp-ts29122-chargeableparty.yml, openapi/3gpp-ts29122-cpprovisioning.yml,
  openapi/3gpp-ts29122-devicetriggering.yml, openapi/3gpp-ts29122-ecrcontrol.yml, openapi/3gpp-ts29122-gmdviambmsbymb2.yml,
  openapi/3gpp-ts29122-gmdviambmsbyxmb.yml, openapi/3gpp-ts29122-monitoringevent.yml, openapi/3gpp-ts29122-msisdnlessmosms.yml,
  openapi/3gpp-ts29122-nidd.yml, openapi/3gpp-ts29122-npconfiguration.yml, openapi/3gpp-ts29122-pfdmanagement.yml,
  openapi/3gpp-ts29122-racsparameterprovisioning.yml, openapi/3gpp-ts29122-reportingnetworkstatus.yml, openapi/3gpp-ts29122-resourcemanagementofbdt.yml,
  openapi/3gpp-ts29222-capif-api-invoker-management-api.yml, openapi/3gpp-ts29512-npcf-smpolicycontrol.yml, openapi/3gpp-ts29514-npcf-policyauthorization.yml,
  openapi/3gpp-ts29520-nnwdaf-analyticsinfo.yml, openapi/3gpp-ts29520-nnwdaf-eventssubscription.yml, openapi/3gpp-ts29522-5glanparameterprovision.yml,
  openapi/3gpp-ts29522-acsparameterprovision.yml, openapi/3gpp-ts29522-addressingparamprovision.yml, openapi/3gpp-ts29522-aiot.yml,
  openapi/3gpp-ts29522-akma.yml, openapi/3gpp-ts29522-aminfluence.yml, openapi/3gpp-ts29522-ampolicyauthorization.yml,
  openapi/3gpp-ts29522-analyticsexposure.yml, openapi/3gpp-ts29522-applyingbdtpolicy.yml, openapi/3gpp-ts29522-asti.yml,
  openapi/3gpp-ts29522-caginfoparamprovision.yml, openapi/3gpp-ts29522-datareporting.yml, openapi/3gpp-ts29522-datareportingprovisioning.yml,
  openapi/3gpp-ts29522-dnaimapping.yml, openapi/3gpp-ts29522-easdeployment.yml, openapi/3gpp-ts29522-ecsaddress.yml,
  openapi/3gpp-ts29522-ecsaddressprovision.yml, openapi/3gpp-ts29522-groupparametersprovisioning.yml, openapi/3gpp-ts29522-imseventexposure.yml,
  openapi/3gpp-ts29522-imsparamprovision.yml, openapi/3gpp-ts29522-imssessionmanagement.yml, openapi/3gpp-ts29522-iptvconfiguration.yml,
  openapi/3gpp-ts29522-lpiparameterprovision.yml, openapi/3gpp-ts29522-mbsgroupmsgdelivery.yml, openapi/3gpp-ts29522-mbssession.yml,
  openapi/3gpp-ts29522-mbstmgi.yml, openapi/3gpp-ts29522-mbsuserdataingestsession.yml, openapi/3gpp-ts29522-mbsuserservice.yml,
  openapi/3gpp-ts29522-memberueselectionassistance.yml, openapi/3gpp-ts29522-molcsnotify.yml, openapi/3gpp-ts29522-mseventexposure.yml,
  openapi/3gpp-ts29522-niddconfigurationtrigger.yml, openapi/3gpp-ts29522-pdtqpolicynegotiation.yml, openapi/3gpp-ts29522-rslppiparametersprovisioning.yml,
  openapi/3gpp-ts29522-serviceparameter.yml, openapi/3gpp-ts29522-sliceparamprovision.yml, openapi/3gpp-ts29522-timesyncexposure.yml,
  openapi/3gpp-ts29522-trafficinfluence.yml, openapi/3gpp-ts29522-uavflightassistance.yml, openapi/3gpp-ts29522-ueaddress.yml,
  openapi/3gpp-ts29522-ueid.yml, openapi/3gpp-ts29522-vflinference.yml, openapi/3gpp-ts29522-vflnfdiscovery.yml,
  openapi/3gpp-ts29522-vfltraining.yml
docs: https://www.3gpp.org/ftp/Specs/archive/29_series/29.510/
notes:
- 'Scope strings in 3GPP are the service API name itself (for example nnwdaf-analyticsinfo, npcf-smpolicycontrol,
  3gpp-vfl-inference): an access token is granted for a named network function service rather than for a fine grained
  permission. TS 29.510 clause 6.3 defines the NRF Nnrf_AccessToken service that issues them; TS 29.222 defines
  the CAPIF equivalent for northbound consumers.'
- Most oauth2 securitySchemes in the estate declare an empty scopes map and carry the scope in the operation security
  requirement instead, so the six scopes captured here are the ones the OpenAPI documents state explicitly, not
  the full set an operator will enforce.
- One additional scope, nnef-akma:gpsi-access, shows the finer grained form 3GPP uses when a single service exposes
  a privacy sensitive field.
schemes:
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-assessionwithqos.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-chargeableparty.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-cpprovisioning.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-devicetriggering.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-ecrcontrol.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-gmdviambmsbymb2.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-gmdviambmsbyxmb.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-monitoringevent.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-msisdnlessmosms.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-nidd.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-npconfiguration.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-pfdmanagement.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-racsparameterprovisioning.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-reportingnetworkstatus.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29122-resourcemanagementofbdt.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29222-capif-api-invoker-management-api.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2Clientcredentials
  source: openapi/3gpp-ts29512-npcf-smpolicycontrol.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{nrfApiRoot}/oauth2/token'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29514-npcf-policyauthorization.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{nrfApiRoot}/oauth2/token'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29520-nnwdaf-analyticsinfo.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{nrfApiRoot}/oauth2/token'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29520-nnwdaf-eventssubscription.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{nrfApiRoot}/oauth2/token'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-5glanparameterprovision.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-acsparameterprovision.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-addressingparamprovision.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-aiot.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-akma.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-aminfluence.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-ampolicyauthorization.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-analyticsexposure.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-applyingbdtpolicy.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-asti.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-caginfoparamprovision.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-datareporting.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-datareportingprovisioning.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-dnaimapping.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-easdeployment.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-ecsaddress.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-ecsaddressprovision.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-groupparametersprovisioning.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-imseventexposure.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-imsparamprovision.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-imssessionmanagement.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-iptvconfiguration.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-lpiparameterprovision.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-mbsgroupmsgdelivery.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-mbssession.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-mbstmgi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-mbsuserdataingestsession.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-mbsuserservice.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-memberueselectionassistance.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-molcsnotify.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-mseventexposure.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-niddconfigurationtrigger.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-pdtqpolicynegotiation.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-rslppiparametersprovisioning.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-serviceparameter.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-sliceparamprovision.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-timesyncexposure.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-trafficinfluence.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-uavflightassistance.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-ueaddress.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-ueid.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-vflinference.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{nrfApiRoot}/oauth2/token'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-vflnfdiscovery.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
- name: oAuth2ClientCredentials
  source: openapi/3gpp-ts29522-vfltraining.yml
  flows:
  - flow: clientCredentials
    tokenUrl: '{tokenUrl}'
scopes:
- scope: 3gpp-vfl-inference
  description: Access to the VFLInference API
  flows:
  - clientCredentials
  sources:
  - openapi/3gpp-ts29522-vflinference.yml
- scope: nnef-akma:gpsi-access
  description: Return GPSI in the AKMA Application Key information for the UE.
  flows:
  - clientCredentials
  sources:
  - openapi/3gpp-ts29522-akma.yml
- scope: nnwdaf-analyticsinfo
  description: Access to the Nnwdaf_AnalyticsInfo API
  flows:
  - clientCredentials
  sources:
  - openapi/3gpp-ts29520-nnwdaf-analyticsinfo.yml
- scope: nnwdaf-eventssubscription
  description: Access to the Nnwdaf_EventsSubscription API
  flows:
  - clientCredentials
  sources:
  - openapi/3gpp-ts29520-nnwdaf-eventssubscription.yml
- scope: npcf-policyauthorization
  description: Access to the Npcf_PolicyAuthorization API
  flows:
  - clientCredentials
  sources:
  - openapi/3gpp-ts29514-npcf-policyauthorization.yml
- scope: npcf-smpolicycontrol
  description: Access to the Npcf_SMPolicyControl API
  flows:
  - clientCredentials
  sources:
  - openapi/3gpp-ts29512-npcf-smpolicycontrol.yml

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/3gpp-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.