Better Stack · OAuth Scopes

Better Stack OAuth Scopes

OAuth 2.0 probed

Better Stack uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

ObservabilityUptime MonitoringIncidentsLogsMonitoringStatus PagesOn-CallError TrackingOpenTelemetryModel Context Protocol
Scopes: 0 Flows: Method: probed

Scopes (0)

Better Stack implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

📄 Provider scope reference: https://betterstack.com/docs/getting-started/integrations/mcp/

Source

OAuth Scopes

Raw ↑ 
generated: '2026-09-04'
method: probed
source: >-
  https://betterstack.com/.well-known/oauth-authorization-server (RFC 8414, HTTP 200) and
  https://mcp.betterstack.com/.well-known/oauth-protected-resource (RFC 9728, HTTP 200),
  both fetched 2026-09-04 and saved verbatim under well-known/.
docs: https://betterstack.com/docs/getting-started/integrations/mcp/
provider: Better Stack
providerId: betterstack
authorization_server: https://betterstack.com
issuer: https://betterstack.com
authorization_endpoint: https://betterstack.com/oauth/authorize
token_endpoint: https://betterstack.com/oauth/token
registration_endpoint: https://betterstack.com/oauth/register
dynamic_client_registration: true
grant_types_supported: [authorization_code, refresh_token]
code_challenge_methods_supported: [S256]
token_endpoint_auth_methods_supported: [none]
protected_resources:
- resource: https://mcp.betterstack.com
  resource_name: Better Stack MCP Server
  bearer_methods_supported: [header]
scopes:
- name: read
  description: Read access to Better Stack resources. Declared in both the authorization-server
    metadata and the MCP protected-resource metadata; Better Stack publishes no finer-grained
    description of what it covers.
  source: /.well-known/oauth-authorization-server
- name: write
  description: Write access to Better Stack resources. Declared in both discovery documents;
    no per-product or per-resource narrowing is offered.
  source: /.well-known/oauth-authorization-server
coverage:
  scope_count: 2
  granularity: coarse
  note: >-
    Two scopes cover a ~106-tool agent surface spanning uptime monitoring, incident management,
    on-call paging, status pages, ClickHouse query execution over telemetry, dashboards, error
    triage and team-member administration. `write` grants an agent the ability to page an
    on-call engineer, delete a dashboard and remove a team member with the same token. The only
    real narrowing Better Stack offers is not a scope at all — it is the X-MCP-Tools-Only /
    X-MCP-Tools-Except header allowlist documented for the MCP server.
rest_api_note: >-
  These scopes apply to the OAuth surface (the MCP server) only. The Uptime v2, Telemetry v1
  and Errors v1 REST APIs authenticate with static bearer tokens that carry no scope at all —
  a token is either global or team-scoped, and within its team it is unrestricted.

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this
  • find_scopesBrowse and filter every scope set in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This scope set 
curl "https://apis.io/api/v1/scopes/betterstack-scopes"
All oauth scopes 
curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.