Competitor Tracker & Co. OAuth Scopes

generated: '2026-11-04'
method: searched
source: https://competitortracker.io/docs/scopes-and-permissions/
docs: https://competitortracker.io/docs/scopes-and-permissions/
description: >-
  A read endpoint wants the matching :read scope, a write endpoint the matching :write. The required
  scope and required organization role for each endpoint are shown on its API reference page. Missing
  scope returns 403 InsufficientScope; too-low role returns 403 InsufficientRole.
scopes:
- {name: openid, group: sign-in (OAuth2 only), description: Sign-in. Issues an id_token.}
- {name: email, group: sign-in (OAuth2 only), description: Puts the user's email on the id_token.}
- {name: profile, group: sign-in (OAuth2 only), description: Puts the user's name on the id_token.}
- {name: mcp, group: sign-in (OAuth2 only), description: Lets an MCP client act on the user's behalf.}
- {name: 'competitors:read', group: tracked data, description: Read the competitors you track.}
- {name: 'competitors:write', group: tracked data, description: 'Add, change and remove tracked competitors.'}
- {name: 'labels:read', group: tracked data, description: Read labels.}
- {name: 'labels:write', group: tracked data, description: 'Create, change and delete labels.'}
- {name: 'snapshots:read', group: tracked data, description: Read snapshots.}
- {name: 'pages:read', group: tracked data, description: Read tracked pages.}
- {name: 'changes:read', group: tracked data, description: Read detected changes.}
- {name: 'account:read', group: your account, description: Read your own profile and account settings.}
- {name: 'account:write', group: your account, description: Update your own profile and account settings.}
- {name: 'billing:read', group: your account, description: Read the coin balance and transaction history.}
- {name: 'org:read', group: organization administration, description: Read organization settings.}
- {name: 'org:write', group: organization administration, description: 'Manage organization settings: rename, ownership, deletion.', grantable_by: admin or owner}
- {name: 'members:read', group: organization administration, description: Read members., grantable_by: admin or owner}
- {name: 'members:write', group: organization administration, description: Manage member roles., grantable_by: admin or owner}
- {name: 'invites:read', group: organization administration, description: Read invitations., grantable_by: admin or owner}
- {name: 'invites:write', group: organization administration, description: Create and revoke invitations., grantable_by: admin or owner}
- {name: 'dispatches:read', group: organization administration, description: Read dispatch settings and delivery history.}
- {name: 'dispatches:write', group: organization administration, description: 'Manage notifications, recipients and webhooks.', grantable_by: admin or owner}
roles:
- {name: member, description: Day-to-day work on the organization's tracked data.}
- {name: admin, description: Everything a member can, plus operations that change organization configuration or destructively affect shared resources.}
- {name: owner, description: 'Everything an admin can, plus organization-lifecycle operations: transferring ownership and deleting the organization.'}