Airbyte · OAuth Scopes

Airbyte OAuth Scopes

OAuth 2.0 searched

Airbyte publishes 2 OAuth 2.0 scopes via the clientCredentials flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Airbyte API on a user’s behalf.

Tokens are issued from https://api.airbyte.com/v1/applications/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Data IntegrationETLELTOpen SourceData PipelineConnectorsData
Scopes: 2 Flows: clientCredentials Method: searched

OAuth endpoints

Token URL
https://api.airbyte.com/v1/applications/token
Flows
clientCredentials

Scopes (2)

ScopeDescriptionFlows
openid Standard OpenID Connect scope; returned in the client_credentials token. clientCredentials
api Grants access to the Airbyte public API. Effective authorization is bound to the permissions of the user that owns the Application (workspace/organization RBAC), not to fine-grained OAuth scopes. clientCredentials

Source

OAuth Scopes

Raw ↑
generated: '2026-06-20'
method: searched
source: https://airbyte.com/.well-known/openid-configuration
docs: https://docs.airbyte.com/platform/using-airbyte/configuring-api-access
schemes:
- name: clientCredentials
  source: https://airbyte.com/.well-known/openid-configuration
  flows:
  - flow: clientCredentials
    tokenUrl: https://api.airbyte.com/v1/applications/token
scopes:
- scope: openid
  description: Standard OpenID Connect scope; returned in the client_credentials token.
  flows: [clientCredentials]
  sources: [https://airbyte.com/.well-known/openid-configuration]
- scope: api
  description: >-
    Grants access to the Airbyte public API. Effective authorization is bound to
    the permissions of the user that owns the Application (workspace/organization
    RBAC), not to fine-grained OAuth scopes.
  flows: [clientCredentials]
  sources: [https://airbyte.com/.well-known/openid-configuration]
notes: >-
  Airbyte exposes only the coarse OIDC scopes 'openid' and 'api'. Access is
  governed by workspace/organization RBAC roles attached to the Application's
  owning user rather than by granular API scopes.