codai · OAuth Scopes

codai OAuth Scopes

OAuth 2.0 searched

codai publishes 9 OAuth 2.0 scopes via the authorizationCode and deviceCode flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the codai API on a user’s behalf.

Tokens are issued from https://auth.codai.ro/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyArtificial IntelligenceCode GenerationDeveloper ToolsLLM GatewayOpenAI-CompatibleModel RoutingRomania

Scopes: 9 Flows: authorizationCode, deviceCode Method: searched

OAuth endpoints

Authorization URL
https://auth.codai.ro/auth

Token URL
https://auth.codai.ro/token

Flows
authorizationCodedeviceCode

Scopes (9)

Scope	Description	Flows
email	See your email address	authorizationCode, deviceCode
inference	Run AI inference through your codai account	authorizationCode, deviceCode
keys:manage	Create and manage codai API keys on your behalf	authorizationCode, deviceCode
mcp	Use codai tools and memory from an MCP client	authorizationCode, deviceCode
offline_access	Stay signed in on this device	authorizationCode, deviceCode
openid	Verify your codai identity	authorizationCode, deviceCode
profile	See your name and profile picture	authorizationCode, deviceCode
subscriptions:read	Read your codai subscription plan	authorizationCode, deviceCode
usage:read	Read your codai usage statistics	authorizationCode, deviceCode

📄 Provider scope reference: https://docs.codai.ro/docs/auth/scopes

Source

OAuth Scopes

generated: '2026-11-04'
method: searched
source: https://docs.codai.ro/docs/auth/scopes
schemes:
- name: oauth2
  source: openapi/codai-ro-auth-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://auth.codai.ro/auth
    tokenUrl: https://auth.codai.ro/token
  - flow: deviceCode
    tokenUrl: https://auth.codai.ro/token
  description: codai OpenID Connect provider. PKCE `S256` required on the authorization
    code flow.
scopes:
- scope: email
  description: See your email address
  flows:
  - authorizationCode
  - deviceCode
  sources:
  - openapi/codai-ro-auth-openapi.yml
  unlocks: Claims email, email_verified.
- scope: inference
  description: Run AI inference through your codai account
  flows:
  - authorizationCode
  - deviceCode
  sources:
  - openapi/codai-ro-auth-openapi.yml
  unlocks: Lets the access token mint a gateway key at /connect/key. Resource https://ai.codai.ro/v1.
- scope: keys:manage
  description: Create and manage codai API keys on your behalf
  flows:
  - authorizationCode
  - deviceCode
  sources:
  - openapi/codai-ro-auth-openapi.yml
  unlocks: Also entitles /connect/key.
- scope: mcp
  description: Use codai tools and memory from an MCP client
  flows:
  - authorizationCode
  - deviceCode
  sources:
  - openapi/codai-ro-auth-openapi.yml
  unlocks: Only against resource https://ai.codai.ro/mcp; the access token becomes
    an RS256 JWT the gateway verifies locally.
- scope: offline_access
  description: Stay signed in on this device
  flows:
  - authorizationCode
  - deviceCode
  sources:
  - openapi/codai-ro-auth-openapi.yml
  unlocks: A rotating refresh token — issued only if the client also has the refresh_token
    grant.
- scope: openid
  description: Verify your codai identity
  flows:
  - authorizationCode
  - deviceCode
  sources:
  - openapi/codai-ro-auth-openapi.yml
  unlocks: Required. Claims sub, role, sid.
- scope: profile
  description: See your name and profile picture
  flows:
  - authorizationCode
  - deviceCode
  sources:
  - openapi/codai-ro-auth-openapi.yml
  unlocks: Claims name, picture.
- scope: subscriptions:read
  description: Read your codai subscription plan
  flows:
  - authorizationCode
  - deviceCode
  sources:
  - openapi/codai-ro-auth-openapi.yml
  unlocks: Resource scope on https://ai.codai.ro/v1.
- scope: usage:read
  description: Read your codai usage statistics
  flows:
  - authorizationCode
  - deviceCode
  sources:
  - openapi/codai-ro-auth-openapi.yml
  unlocks: Resource scope on https://ai.codai.ro/v1.
docs: https://docs.codai.ro/docs/auth/scopes
resources:
- resource: https://ai.codai.ro/v1
  default: true
  scopes:
  - inference
  - keys:manage
  - usage:read
  - subscriptions:read
  token: Opaque, 1 h
- resource: https://ai.codai.ro/mcp
  scopes:
  - mcp
  token: RS256 JWT, 1 h, aud = the resource, carries role
canonical_request: openid email profile inference keys:manage
note: Resource indicators per RFC 8707 (resource parameter, default https://ai.codai.ro/v1).
  Scopes list and consent texts read from the docs scopes page.

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/codai-ro-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.