Cerby · OAuth Scopes

Cerby OAuth Scopes

OAuth 2.0 searched

Cerby publishes 17 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the Cerby API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

IdentityAccess ManagementSecurityPassword ManagementProvisioningSCIMIdentity GovernanceNonfederated ApplicationsAutomationWebhooks

Scopes: 17 Flows: Method: searched

Scopes (17)

Scope	Description	Flows
Read activities	Enables reading activity data.
Read items	Enables reading account, secret, and collection data.
Read accounts	Enables reading account data.
Read secrets	Enables reading secret data.
Read users	Enables reading user and team data.
Read integrations	Enables reading integration and entitlement data.
Read automated jobs	Enables reading automated job data.
Read vaults	Enables reading vault data.
Read teams	Enables reading team data.
Write accounts	Enables writing account data.
Write secrets	Enables writing secret data.
Write users	Enables writing user data.
Write integrations	Enables writing integration and entitlement data.
Write automated jobs	Enables writing automated job data.
Write collections	Enables writing collection and subcollection data.
Write teams	Enables writing team data.
Delete teams	Enables deleting team data.

📄 Provider scope reference: https://help.cerby.com/developer-tools/cerby-api/generate-an-api-key

Source

OAuth Scopes

generated: '2026-08-09'
method: searched
source: https://developer.cerby.com/#authentication
docs: https://help.cerby.com/developer-tools/cerby-api/generate-an-api-key
scheme_type: apiKey
note: >-
  These are Cerby API KEY scopes, not OAuth 2.0 scopes. Cerby publishes no
  oauth2 security scheme and no authorization/token endpoint for its public API
  — authorization is a scope set attached to an X-API-Key at generation time,
  selected in the Cerby web app, and updatable afterwards. Scopes are recorded
  here because they are the provider's real, published authorization vocabulary.
  Display names are quoted verbatim from the developer portal; a machine
  identifier is recorded ONLY where Cerby published one.
schemes:
- name: CerbyApiKey
  type: apiKey
  in: header
  parameter_name: X-API-Key
  source: https://developer.cerby.com/#authentication
enforcement:
  missing_or_wrong_scope: 401
  insufficient_permission: 403
  note: >-
    Scopes are necessary but not sufficient. RBAC is enforced on top: a key only
    reaches items whose Owner role its creating user holds. All-Access Mode is
    not honored by the API.
scopes:
- scope: Read activities
  description: Enables reading activity data.
  access: read
- scope: Read items
  description: Enables reading account, secret, and collection data.
  access: read
- scope: Read accounts
  description: Enables reading account data.
  access: read
- scope: Read secrets
  description: Enables reading secret data.
  access: read
- scope: Read users
  description: Enables reading user and team data.
  access: read
- scope: Read integrations
  description: Enables reading integration and entitlement data.
  access: read
- scope: Read automated jobs
  identifier: read:automations
  description: Enables reading automated job data.
  access: read
  identifier_source: https://help.cerby.com/developer-tools/cerby-webhooks/implement-a-webhook-receiver
- scope: Read vaults
  description: Enables reading vault data.
  access: read
- scope: Read teams
  description: Enables reading team data.
  access: read
- scope: Write accounts
  description: Enables writing account data.
  access: write
- scope: Write secrets
  description: Enables writing secret data.
  access: write
- scope: Write users
  description: Enables writing user data.
  access: write
- scope: Write integrations
  description: Enables writing integration and entitlement data.
  access: write
- scope: Write automated jobs
  description: Enables writing automated job data.
  access: write
- scope: Write collections
  description: Enables writing collection and subcollection data.
  access: write
- scope: Write teams
  description: Enables writing team data.
  access: write
- scope: Delete teams
  description: Enables deleting team data.
  access: delete
summary:
  total: 17
  read: 9
  write: 7
  delete: 1
x-evidence:
- url: https://developer.cerby.com/
  http_status: 200
  fetched: '2026-08-09'