ComOS · OAuth Scopes

ComOS OAuth Scopes

OAuth 2.0 probed

ComOS publishes 72 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the ComOS API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyCommerceAI AgentsMCPFederationPaymentsSelf-HostedOperating System

Scopes: 72 Flows: Method: probed

Scopes (72)

Scope	Description	Flows
orders:read	Read your orders and their status
orders:write	Place and update orders on your behalf
catalog:write	Create and edit catalog content (products, collections, prices)
catalog:read	Read your own full catalog and collections, including drafts
orders:refund	Refund and cancel paid orders — money goes back to the buyer (irreversible)
agents:read	List agents and read their run history
agents:admin	Run and administer autonomous agents
agents:tenant-operator:read	Read tenant-operator agent runs
agents:tenant-operator:run	Trigger tenant-operator agent runs
introspection:read	Read system introspection (confidence, coverage, corpus)
introspection:generate	Generate introspection content for review
tenants:write	Create, update, and suspend tenants
managers:write	Create manager accountability roots
managers:admin	Read the manager tree and perform manager operations
federation:apply	Apply to the federation as a manager root (self-admission)
nodes:write	Register your own computers as nodes on the network, and remove them
coms:redeem	Redeem Coms — move treasury value out (irreversible)
wallet:bind	Bind the wallet your redemptions are paid to (you sign to prove you control it)
processor:connect	Connect your own card-processor account so your card sales settle there (you complete the processor’s onboarding)
storefront:write	Author and publish your storefront page from your experience prompt
booking_page:write	Author, publish and configure your booking page from your experience prompt
tenant_style:write	Store and remove your tenant's own stylesheet and its images
workflows:write	Author and deploy automation workflows
workflows:read	Read workflow definitions and run history
workflows:run	Trigger workflow runs (priced acts)
marketing:read	Read campaigns, segments, and send history
marketing:write	Create and edit campaigns and segments
marketing:send	Send a marketing campaign to a segment (irreversible)
rentals:read	Read rental availability, asset condition, and your rentals with each renter's contact
rentals:assets:write	List and update returnable rental assets
rentals:rent	Check out, return, and cancel rentals
services:read	Read service capabilities and job status
services:quote	Request, submit, and negotiate service quotes
services:job	Manage service jobs and milestones
digital:read	Read digital licenses and entitlements
digital:licenses:write	List and update digital goods
digital:grant	Issue and revoke digital entitlements
storage:read	Read stored files and their metadata
storage:write	Upload, replace, and delete stored files
rendering:read	Preview your own pages under any theme and renderer
rendering:write	Register themes and renderers, and choose and publish how your pages look
rendering:prove	Record a theme proof run (ComOS's own prover; never granted to a person)
bookings:write	Create and manage bookings
bookings:read	Read bookings, providers, and availability
shipping:write	Buy labels and manage shipping configuration
email:send	Send email on your behalf
email:templates:write	Create and edit email templates
reviews:write	Submit and edit product reviews
reviews:moderate	Approve, reject, and flag reviews
prompts:submit	Submit prompts you wrote to the ComOS prompt library for review
support:write	Open and update support tickets
loyalty:write	Enroll members and adjust loyalty balances
offer:publish	Publish and withdraw offers
offer:subscribe	Subscribe to and unsubscribe from offers
customer:write	Create and update customer records
customer:read	Read your own customers and their consent
recommendations:write	Set and clear recommendation rules
consent:write	Record and revoke customer consent
integration:write	Configure third-party integrations and credentials
tax:nexus:write	Register and update tax nexus locations
tax:nexus:read	Read tax nexus locations and applied rates
governance:read	Read governance records, chains, and policies
governance:write	Record governance decisions and attestations
policies:write	Create and edit tenant policies
knowledge:write	Add and edit knowledge-base content
voice:write	Configure voice agents and prompts
journal:write	Append entries to the tenant journal
journal:read	Read the tenant journal
notifications:read	Read notifications and delivery status
notifications:write	Send and manage notifications
cohort:email:send	Send email on the cohort rail (irreversible)
llm:author	Run LLM authoring billed to your HQ

📄 Provider scope reference: https://comos-federation.com/security

Source

OAuth Scopes

generated: '2026-11-04'
method: probed
source: https://comos-federation.com/.well-known/mcp/server-card.json
docs: https://comos-federation.com/security
note: The OpenAPI declares no securitySchemes; the 72 scopes are read from the MCP server card authentication.oauth2.scopes block. The card says read-only catalog and inventory access needs no scope.
scopes:
- name: orders:read
  description: Read your orders and their status
- name: orders:write
  description: Place and update orders on your behalf
- name: catalog:write
  description: Create and edit catalog content (products, collections, prices)
- name: catalog:read
  description: Read your own full catalog and collections, including drafts
- name: orders:refund
  description: Refund and cancel paid orders — money goes back to the buyer (irreversible)
- name: agents:read
  description: List agents and read their run history
- name: agents:admin
  description: Run and administer autonomous agents
- name: agents:tenant-operator:read
  description: Read tenant-operator agent runs
- name: agents:tenant-operator:run
  description: Trigger tenant-operator agent runs
- name: introspection:read
  description: Read system introspection (confidence, coverage, corpus)
- name: introspection:generate
  description: Generate introspection content for review
- name: tenants:write
  description: Create, update, and suspend tenants
- name: managers:write
  description: Create manager accountability roots
- name: managers:admin
  description: Read the manager tree and perform manager operations
- name: federation:apply
  description: Apply to the federation as a manager root (self-admission)
- name: nodes:write
  description: Register your own computers as nodes on the network, and remove them
- name: coms:redeem
  description: Redeem Coms — move treasury value out (irreversible)
- name: wallet:bind
  description: Bind the wallet your redemptions are paid to (you sign to prove you control it)
- name: processor:connect
  description: Connect your own card-processor account so your card sales settle there (you complete the processor’s onboarding)
- name: storefront:write
  description: Author and publish your storefront page from your experience prompt
- name: booking_page:write
  description: Author, publish and configure your booking page from your experience prompt
- name: tenant_style:write
  description: Store and remove your tenant's own stylesheet and its images
- name: workflows:write
  description: Author and deploy automation workflows
- name: workflows:read
  description: Read workflow definitions and run history
- name: workflows:run
  description: Trigger workflow runs (priced acts)
- name: marketing:read
  description: Read campaigns, segments, and send history
- name: marketing:write
  description: Create and edit campaigns and segments
- name: marketing:send
  description: Send a marketing campaign to a segment (irreversible)
- name: rentals:read
  description: Read rental availability, asset condition, and your rentals with each renter's contact
- name: rentals:assets:write
  description: List and update returnable rental assets
- name: rentals:rent
  description: Check out, return, and cancel rentals
- name: services:read
  description: Read service capabilities and job status
- name: services:quote
  description: Request, submit, and negotiate service quotes
- name: services:job
  description: Manage service jobs and milestones
- name: digital:read
  description: Read digital licenses and entitlements
- name: digital:licenses:write
  description: List and update digital goods
- name: digital:grant
  description: Issue and revoke digital entitlements
- name: storage:read
  description: Read stored files and their metadata
- name: storage:write
  description: Upload, replace, and delete stored files
- name: rendering:read
  description: Preview your own pages under any theme and renderer
- name: rendering:write
  description: Register themes and renderers, and choose and publish how your pages look
- name: rendering:prove
  description: Record a theme proof run (ComOS's own prover; never granted to a person)
- name: bookings:write
  description: Create and manage bookings
- name: bookings:read
  description: Read bookings, providers, and availability
- name: shipping:write
  description: Buy labels and manage shipping configuration
- name: email:send
  description: Send email on your behalf
- name: email:templates:write
  description: Create and edit email templates
- name: reviews:write
  description: Submit and edit product reviews
- name: reviews:moderate
  description: Approve, reject, and flag reviews
- name: prompts:submit
  description: Submit prompts you wrote to the ComOS prompt library for review
- name: support:write
  description: Open and update support tickets
- name: loyalty:write
  description: Enroll members and adjust loyalty balances
- name: offer:publish
  description: Publish and withdraw offers
- name: offer:subscribe
  description: Subscribe to and unsubscribe from offers
- name: customer:write
  description: Create and update customer records
- name: customer:read
  description: Read your own customers and their consent
- name: recommendations:write
  description: Set and clear recommendation rules
- name: consent:write
  description: Record and revoke customer consent
- name: integration:write
  description: Configure third-party integrations and credentials
- name: tax:nexus:write
  description: Register and update tax nexus locations
- name: tax:nexus:read
  description: Read tax nexus locations and applied rates
- name: governance:read
  description: Read governance records, chains, and policies
- name: governance:write
  description: Record governance decisions and attestations
- name: policies:write
  description: Create and edit tenant policies
- name: knowledge:write
  description: Add and edit knowledge-base content
- name: voice:write
  description: Configure voice agents and prompts
- name: journal:write
  description: Append entries to the tenant journal
- name: journal:read
  description: Read the tenant journal
- name: notifications:read
  description: Read notifications and delivery status
- name: notifications:write
  description: Send and manage notifications
- name: cohort:email:send
  description: Send email on the cohort rail (irreversible)
- name: llm:author
  description: Run LLM authoring billed to your HQ

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/comos-federation-com-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.