Brand.ai · OAuth Scopes

Brand.ai OAuth Scopes

OAuth 2.0 probed

Brand.ai publishes 13 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Brand.ai API on a user’s behalf.

Tokens are issued from https://app.brand.ai/api/auth/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyBrand ManagementArtificial IntelligenceMarketingSaaSBrand Operating SystemAI AgentsDesignModel Context ProtocolBrand GovernanceBrand Intelligence

Scopes: 13 Flows: authorizationCode Method: probed

OAuth endpoints

Authorization URL
https://app.brand.ai/api/auth/oauth2/authorize

Token URL
https://app.brand.ai/api/auth/oauth2/token

Flows
authorizationCode

Scopes (13)

Scope	Description	Flows
openid	OpenID Connect — request an ID token.	authorizationCode
profile	Standard OIDC profile claims (name, given_name, family_name, picture).
email	Standard OIDC email + email_verified claims.
offline_access	Issue a refresh token so the client can act without the user present.
mcp:identify	Identify the calling MCP client to the Brand.ai MCP server.
brands:read	Read the brands (brandspaces) available to the authorizing user.
brand_rules:read	Read the machine-readable brand rules produced by Brand Foundation.
brand_checks:read	Read Brand Check validation results and reports.
brand_checks:write	Run a Brand Check — submit content for validation against brand rules.
artifacts:read	Read brand artifacts / assets in the library.
artifacts:write	Create or update brand artifacts / assets.
projects:write	Create or update Projects (briefs, research, team workspaces).
help:read	Read Brand.ai product help / guidance content.

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-13'
method: probed
source: https://app.brand.ai/.well-known/oauth-authorization-server
docs: null
note: >-
  Derived from Brand.ai's own live RFC 8414 authorization server metadata, not from
  an OpenAPI (Brand.ai publishes none) and not from documentation (Brand.ai publishes
  no developer docs). The `scopes_supported` array is the provider's own published
  claim about its authorization surface. Descriptions below are NOT provider-supplied
  — Brand.ai publishes no scope reference page — so each carries an explicit
  description_source so a reader can tell the scope STRING (provider-published) from
  the gloss (ours, read against Brand.ai's own product vocabulary on brand.ai/product/
  and brand.ai/brand-os/). The scope names map cleanly onto the marketed Brand OS /
  Brand Studio objects: Brands, Brand Rules (the "machine-readable rules" of Brand
  Foundation), Brand Check, Artifacts and Projects.
schemes:
- name: OAuth2
  type: oauth2
  source: https://app.brand.ai/.well-known/oauth-authorization-server
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.brand.ai/api/auth/oauth2/authorize
    tokenUrl: https://app.brand.ai/api/auth/oauth2/token
    refreshUrl: https://app.brand.ai/api/auth/oauth2/token
    pkce: S256
scopes:
- scope: openid
  description: OpenID Connect — request an ID token.
  description_source: standard
  flows: [authorizationCode]
- scope: profile
  description: Standard OIDC profile claims (name, given_name, family_name, picture).
  description_source: standard
- scope: email
  description: Standard OIDC email + email_verified claims.
  description_source: standard
- scope: offline_access
  description: Issue a refresh token so the client can act without the user present.
  description_source: standard
- scope: mcp:identify
  description: Identify the calling MCP client to the Brand.ai MCP server.
  description_source: apievangelist-gloss
- scope: brands:read
  description: Read the brands (brandspaces) available to the authorizing user.
  description_source: apievangelist-gloss
- scope: brand_rules:read
  description: Read the machine-readable brand rules produced by Brand Foundation.
  description_source: apievangelist-gloss
- scope: brand_checks:read
  description: Read Brand Check validation results and reports.
  description_source: apievangelist-gloss
- scope: brand_checks:write
  description: Run a Brand Check — submit content for validation against brand rules.
  description_source: apievangelist-gloss
- scope: artifacts:read
  description: Read brand artifacts / assets in the library.
  description_source: apievangelist-gloss
- scope: artifacts:write
  description: Create or update brand artifacts / assets.
  description_source: apievangelist-gloss
- scope: projects:write
  description: Create or update Projects (briefs, research, team workspaces).
  description_source: apievangelist-gloss
- scope: help:read
  description: Read Brand.ai product help / guidance content.
  description_source: apievangelist-gloss
summary:
  scope_count: 13
  standard_oidc: 4
  product_scopes: 9
  read_write_split:
    read: 5
    write: 3
  asymmetry_note: >-
    brands and brand_rules are read-only (no :write scope is offered) while
    brand_checks, artifacts and projects are writable — the authorization model
    lets an agent produce and validate work but not rewrite the brand definition
    itself. projects has a :write scope with no matching :read scope.
x-evidence:
- url: https://app.brand.ai/.well-known/oauth-authorization-server
  http_status: 200
  fetched: '2026-08-13'