Contentstack · OAuth Scopes

Contentstack OAuth Scopes

OAuth 2.0 searched

Contentstack publishes 105 OAuth 2.0 scopes via the authorization_code flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Contentstack API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Headless CMSContent ManagementContent DeliveryDigital ExperiencePersonalizationGraphQLMCPSCIMComposable CommerceAI AgentsWebhookImage Delivery

Scopes: 105 Flows: authorization_code Method: searched

Scopes (105)

Scope	Description	Flows
analytics:read
app.authorizations:manage
app.installations.management:write
app.installations:read
app.manifest:read
app.manifest:write
automationhub.automations:read
automationhub.automations:write
automationhub.projects.management:read
automationhub.projects.management:write
brand-kits:manage	Create, update, or delete Brand Kit and Voice Profile.
brand-kits:read	View Brand Kit(s) and Voice Profile(s).
cm.asset:publish	Publish an asset
cm.asset:read	View asset details
cm.asset:unpublish	Unpublish an asset
cm.asset:write	Create, update, remove RTE assets
cm.assets.management:read	View all assets
cm.assets.management:write	Create, update, remove assets
cm.assets.rt:read	View all RTE assets
cm.assets:download	Download assets
cm.audit-logs:read	View all audit logs
cm.branch-aliases.management:read	View all aliases
cm.branch-aliases.management:write	Create, assign, delete a branch alias
cm.branches.management:read	View all branches
cm.branches.management:write	Create, delete a branch
cm.bulk-operations:delete	Delete bulk operations
cm.bulk-operations:publish	Publish bulk operations
cm.bulk-operations:unpublish	Unpublish bulk operations
cm.bulk-operations:workflow	Workflow bulk operations
cm.content-type:read	View content type details
cm.content-types.management:read	View all content types
cm.content-types.management:write	Create, update, remove content types
cm.content-types:export	Export content types
cm.content-types:import	Import content types
cm.entries.management:read	View all entries
cm.entries.management:write	Create, update, remove entries
cm.entries:export	Export entries
cm.entries:import	Import entries
cm.entry.workflow:write	Create a workflow for an entry
cm.entry:publish	Publish an entry
cm.entry:read	View details associated with an entry
cm.entry:unpublish	Unpublish an entry
cm.entry:write	Update details associated with an entry
cm.environments.management:read	View all environments
cm.environments.management:write	Create, update, remove environments
cm.extensions.management:read	View all extensions
cm.extensions.management:write	Create, update, remove extensions
cm.global-fields.management:read	View all global fields
cm.global-fields.management:write	Create, update, remove global fields
cm.global-fields:import	Export global fields
cm.labels.management:read	View all labels
cm.labels.management:write	Create, update, remove labels
cm.languages.management:read	View all languages
cm.languages.management:write	Create, update, remove languages
cm.publish-queue.management:read	View all publish queues
cm.publish-queue.management:write	Create, update, remove publish queues
cm.release:clone	Clone a release
cm.release:deploy	Deploy a release
cm.release:read	View details associated with a release
cm.release:write	Update details associated with a release
cm.releases.management:read	View all releases
cm.releases.management:write	Create, update, remove releases
cm.roles.management:read	View all roles
cm.roles.management:write	Create, update, remove roles
cm.stack.delivery-tokens:read	View delivery tokens associated with a stack
cm.stack.delivery-tokens:write	Create, update, remove delivery tokens in a stack
cm.stack.management-tokens:read	View management tokens associated with a stack
cm.stack.management-tokens:write	Create, update, remove management tokens in a stack
cm.stack.management:write	Update stack management properties
cm.stack.settings:read	Update stack settings
cm.stack.users:read	View users associated with a stack
cm.stack.users:write	Update user roles and user associations with a stack
cm.stack:share	Share stack invitation with users
cm.stack:unshare	Unshare stack invitations
cm.stacks.management:read	View all stacks
cm.stacks.management:write	Create, update, remove stacks
cm.taxonomies.management:read	View all taxonomies
cm.taxonomies.management:write	Create, update, delete taxonomies
cm.taxonomy.terms:read	View all terms of a taxonomy
cm.taxonomy.terms:write	Create, update, move, delete term(s) of a taxonomy
cm.webhook:read	View webhook details
cm.webhooks.management:read	View all webhooks
cm.webhooks.management:write	Create, update, remove webhooks
cm.webhooks:export	Export webhooks
cm.webhooks:import	Import webhooks
cm.workflows.management:read	View all workflows
cm.workflows.management:write	Create, update, remove workflows
cm.workflows.publishing-rules:read	View all workflow publishing rules
cm.workflows.publishing-rules:write	Create, update, remove workflow publishing rules
launch.projects:delete	This scope lets you delete resources
launch.projects:read	This scope lets you read resources
launch.projects:write	This scope lets you create and update resources
launch:manage	This scope lets you read, update, and manage resources
organization.logs:read	View organization logs
organization.ownership:write	Create, update of organization ownership
organization.roles:read	View organization level roles
organization.share:read	View details of organization invitations shared with users
organization.share:write	Update, remove organization invitation shares
organization:read	View details of an organization
organizations:read	View details of all organizations associated with the user
personalize:manage	Create, update, or delete Attribute, Audience, Experience, Event, and Experience Version, and update Experiences Priority.
personalize:read	View Attributes, Audiences, Events, Experiences, Experiences Priority, Analytics Summary, Time-series Analytics, Regions, Countries, and Cities.
user.assignments:read	View user assignments
user:read	View user details
user:write	Update user details

📄 Provider scope reference: https://www.contentstack.com/docs/developer-hub/oauth-scopes

Source

OAuth Scopes

specification: API Commons OAuthScopes
specificationVersion: '0.1'
provider: Contentstack
providerId: contentstack
generated: '2026-09-17'
method: searched
source: https://www.contentstack.com/docs/developer-hub/oauth-scopes (HTTP 200, markdown twin, last_updated 2026-06-30)
  cross-checked against the scopes[] field of https://mcp.contentstack.com/<group>/tools
description: 'Contentstack OAuth 2.0 publishes a complete scope reference: 95 scopes documented on the OAuth Scopes
  page, of which 39 are additionally declared by the first-party MCP tool catalogue. Scope names follow a <resource>:<action>
  convention (cm.entry:write, launch.projects:read, personalize:manage) and the docs state which token type — user
  token or app token — each scope supports.'
docs: https://www.contentstack.com/docs/developer-hub/oauth-scopes
oauth_docs: https://www.contentstack.com/docs/developer-hub/contentstack-oauth
flow: authorization_code
token_types:
- user token
- app token
scope_count: 105
documented_count: 95
note: 10 scopes appear in the MCP tool catalogue but not on the published OAuth Scopes page — a gap between what
  the server requests and what the reference documents.
scopes:
- name: analytics:read
  group: Analytics
  documented: false
  used_by_mcp_tools: 8
- name: app.authorizations:manage
  group: Developer Hub / Marketplace apps
  documented: false
  used_by_mcp_tools: 1
- name: app.installations.management:write
  group: Developer Hub / Marketplace apps
  documented: false
  used_by_mcp_tools: 3
- name: app.installations:read
  group: Developer Hub / Marketplace apps
  documented: false
  used_by_mcp_tools: 1
- name: app.manifest:read
  group: Developer Hub / Marketplace apps
  documented: false
  used_by_mcp_tools: 4
- name: app.manifest:write
  group: Developer Hub / Marketplace apps
  documented: false
  used_by_mcp_tools: 4
- name: automationhub.automations:read
  group: Automation Hub
  documented: false
  used_by_mcp_tools: 2
- name: automationhub.automations:write
  group: Automation Hub
  documented: false
  used_by_mcp_tools: 2
- name: automationhub.projects.management:read
  group: Automation Hub
  documented: false
  used_by_mcp_tools: 2
- name: automationhub.projects.management:write
  group: Automation Hub
  documented: false
  used_by_mcp_tools: 3
- name: brand-kits:manage
  group: BrandKit
  description: Create, update, or delete Brand Kit and Voice Profile.
  documented: true
  used_by_mcp_tools: 8
- name: brand-kits:read
  group: BrandKit
  description: View Brand Kit(s) and Voice Profile(s).
  documented: true
  used_by_mcp_tools: 4
- name: cm.asset:publish
  group: Content Management
  description: Publish an asset
  documented: true
  used_by_mcp_tools: 1
- name: cm.asset:read
  group: Content Management
  description: View asset details
  documented: true
  used_by_mcp_tools: 6
- name: cm.asset:unpublish
  group: Content Management
  description: Unpublish an asset
  documented: true
  used_by_mcp_tools: 1
- name: cm.asset:write
  group: Content Management
  description: Create, update, remove RTE assets
  documented: true
  used_by_mcp_tools: 7
- name: cm.assets.management:read
  group: Content Management
  description: View all assets
  documented: true
  used_by_mcp_tools: 0
- name: cm.assets.management:write
  group: Content Management
  description: Create, update, remove assets
  documented: true
  used_by_mcp_tools: 0
- name: cm.assets.rt:read
  group: Content Management
  description: View all RTE assets
  documented: true
  used_by_mcp_tools: 0
- name: cm.assets:download
  group: Content Management
  description: Download assets
  documented: true
  used_by_mcp_tools: 0
- name: cm.audit-logs:read
  group: Content Management
  description: View all audit logs
  documented: true
  used_by_mcp_tools: 2
- name: cm.branch-aliases.management:read
  group: Content Management
  description: View all aliases
  documented: true
  used_by_mcp_tools: 2
- name: cm.branch-aliases.management:write
  group: Content Management
  description: Create, assign, delete a branch alias
  documented: true
  used_by_mcp_tools: 2
- name: cm.branches.management:read
  group: Content Management
  description: View all branches
  documented: true
  used_by_mcp_tools: 4
- name: cm.branches.management:write
  group: Content Management
  description: Create, delete a branch
  documented: true
  used_by_mcp_tools: 8
- name: cm.bulk-operations:delete
  group: Content Management
  description: Delete bulk operations
  documented: true
  used_by_mcp_tools: 0
- name: cm.bulk-operations:publish
  group: Content Management
  description: Publish bulk operations
  documented: true
  used_by_mcp_tools: 0
- name: cm.bulk-operations:unpublish
  group: Content Management
  description: Unpublish bulk operations
  documented: true
  used_by_mcp_tools: 0
- name: cm.bulk-operations:workflow
  group: Content Management
  description: Workflow bulk operations
  documented: true
  used_by_mcp_tools: 0
- name: cm.content-type:read
  group: Content Management
  description: View content type details
  documented: true
  used_by_mcp_tools: 3
- name: cm.content-types.management:read
  group: Content Management
  description: View all content types
  documented: true
  used_by_mcp_tools: 0
- name: cm.content-types.management:write
  group: Content Management
  description: Create, update, remove content types
  documented: true
  used_by_mcp_tools: 3
- name: cm.content-types:export
  group: Content Management
  description: Export content types
  documented: true
  used_by_mcp_tools: 1
- name: cm.content-types:import
  group: Content Management
  description: Import content types
  documented: true
  used_by_mcp_tools: 0
- name: cm.entries.management:read
  group: Content Management
  description: View all entries
  documented: true
  used_by_mcp_tools: 0
- name: cm.entries.management:write
  group: Content Management
  description: Create, update, remove entries
  documented: true
  used_by_mcp_tools: 0
- name: cm.entries:export
  group: Content Management
  description: Export entries
  documented: true
  used_by_mcp_tools: 0
- name: cm.entries:import
  group: Content Management
  description: Import entries
  documented: true
  used_by_mcp_tools: 0
- name: cm.entry.workflow:write
  group: Content Management
  description: Create a workflow for an entry
  documented: true
  used_by_mcp_tools: 0
- name: cm.entry:publish
  group: Content Management
  description: Publish an entry
  documented: true
  used_by_mcp_tools: 2
- name: cm.entry:read
  group: Content Management
  description: View details associated with an entry
  documented: true
  used_by_mcp_tools: 8
- name: cm.entry:unpublish
  group: Content Management
  description: Unpublish an entry
  documented: true
  used_by_mcp_tools: 1
- name: cm.entry:write
  group: Content Management
  description: Update details associated with an entry
  documented: true
  used_by_mcp_tools: 9
- name: cm.environments.management:read
  group: Content Management
  description: View all environments
  documented: true
  used_by_mcp_tools: 2
- name: cm.environments.management:write
  group: Content Management
  description: Create, update, remove environments
  documented: true
  used_by_mcp_tools: 3
- name: cm.extensions.management:read
  group: Content Management
  description: View all extensions
  documented: true
  used_by_mcp_tools: 0
- name: cm.extensions.management:write
  group: Content Management
  description: Create, update, remove extensions
  documented: true
  used_by_mcp_tools: 0
- name: cm.global-fields.management:read
  group: Content Management
  description: View all global fields
  documented: true
  used_by_mcp_tools: 3
- name: cm.global-fields.management:write
  group: Content Management
  description: Create, update, remove global fields
  documented: true
  used_by_mcp_tools: 3
- name: cm.global-fields:import
  group: Content Management
  description: Export global fields
  documented: true
  used_by_mcp_tools: 0
- name: cm.labels.management:read
  group: Content Management
  description: View all labels
  documented: true
  used_by_mcp_tools: 0
- name: cm.labels.management:write
  group: Content Management
  description: Create, update, remove labels
  documented: true
  used_by_mcp_tools: 0
- name: cm.languages.management:read
  group: Content Management
  description: View all languages
  documented: true
  used_by_mcp_tools: 1
- name: cm.languages.management:write
  group: Content Management
  description: Create, update, remove languages
  documented: true
  used_by_mcp_tools: 0
- name: cm.publish-queue.management:read
  group: Content Management
  description: View all publish queues
  documented: true
  used_by_mcp_tools: 2
- name: cm.publish-queue.management:write
  group: Content Management
  description: Create, update, remove publish queues
  documented: true
  used_by_mcp_tools: 0
- name: cm.release:clone
  group: Content Management
  description: Clone a release
  documented: true
  used_by_mcp_tools: 1
- name: cm.release:deploy
  group: Content Management
  description: Deploy a release
  documented: true
  used_by_mcp_tools: 1
- name: cm.release:read
  group: Content Management
  description: View details associated with a release
  documented: true
  used_by_mcp_tools: 3
- name: cm.release:write
  group: Content Management
  description: Update details associated with a release
  documented: true
  used_by_mcp_tools: 3
- name: cm.releases.management:read
  group: Content Management
  description: View all releases
  documented: true
  used_by_mcp_tools: 0
- name: cm.releases.management:write
  group: Content Management
  description: Create, update, remove releases
  documented: true
  used_by_mcp_tools: 0
- name: cm.roles.management:read
  group: Content Management
  description: View all roles
  documented: true
  used_by_mcp_tools: 0
- name: cm.roles.management:write
  group: Content Management
  description: Create, update, remove roles
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.delivery-tokens:read
  group: Content Management
  description: View delivery tokens associated with a stack
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.delivery-tokens:write
  group: Content Management
  description: Create, update, remove delivery tokens in a stack
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.management-tokens:read
  group: Content Management
  description: View management tokens associated with a stack
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.management-tokens:write
  group: Content Management
  description: Create, update, remove management tokens in a stack
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.management:write
  group: Content Management
  description: Update stack management properties
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.settings:read
  group: Content Management
  description: Update stack settings
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.users:read
  group: Content Management
  description: View users associated with a stack
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.users:write
  group: Content Management
  description: Update user roles and user associations with a stack
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack:share
  group: Content Management
  description: Share stack invitation with users
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack:unshare
  group: Content Management
  description: Unshare stack invitations
  documented: true
  used_by_mcp_tools: 0
- name: cm.stacks.management:read
  group: Content Management
  description: View all stacks
  documented: true
  used_by_mcp_tools: 0
- name: cm.stacks.management:write
  group: Content Management
  description: Create, update, remove stacks
  documented: true
  used_by_mcp_tools: 0
- name: cm.taxonomies.management:read
  group: Content Management
  description: View all taxonomies
  documented: true
  used_by_mcp_tools: 3
- name: cm.taxonomies.management:write
  group: Content Management
  description: Create, update, delete taxonomies
  documented: true
  used_by_mcp_tools: 3
- name: cm.taxonomy.terms:read
  group: Content Management
  description: View all terms of a taxonomy
  documented: true
  used_by_mcp_tools: 5
- name: cm.taxonomy.terms:write
  group: Content Management
  description: Create, update, move, delete term(s) of a taxonomy
  documented: true
  used_by_mcp_tools: 4
- name: cm.webhook:read
  group: Content Management
  description: View webhook details
  documented: true
  used_by_mcp_tools: 0
- name: cm.webhooks.management:read
  group: Content Management
  description: View all webhooks
  documented: true
  used_by_mcp_tools: 0
- name: cm.webhooks.management:write
  group: Content Management
  description: Create, update, remove webhooks
  documented: true
  used_by_mcp_tools: 0
- name: cm.webhooks:export
  group: Content Management
  description: Export webhooks
  documented: true
  used_by_mcp_tools: 0
- name: cm.webhooks:import
  group: Content Management
  description: Import webhooks
  documented: true
  used_by_mcp_tools: 0
- name: cm.workflows.management:read
  group: Content Management
  description: View all workflows
  documented: true
  used_by_mcp_tools: 2
- name: cm.workflows.management:write
  group: Content Management
  description: Create, update, remove workflows
  documented: true
  used_by_mcp_tools: 0
- name: cm.workflows.publishing-rules:read
  group: Content Management
  description: View all workflow publishing rules
  documented: true
  used_by_mcp_tools: 1
- name: cm.workflows.publishing-rules:write
  group: Content Management
  description: Create, update, remove workflow publishing rules
  documented: true
  used_by_mcp_tools: 0
- name: launch.projects:delete
  group: Launch
  description: This scope lets you delete resources
  documented: true
  used_by_mcp_tools: 2
- name: launch.projects:read
  group: Launch
  description: This scope lets you read resources
  documented: true
  used_by_mcp_tools: 15
- name: launch.projects:write
  group: Launch
  description: This scope lets you create and update resources
  documented: true
  used_by_mcp_tools: 10
- name: launch:manage
  group: Launch
  description: This scope lets you read, update, and manage resources
  documented: true
  used_by_mcp_tools: 0
- name: organization.logs:read
  group: Organization
  description: View organization logs
  documented: true
  used_by_mcp_tools: 0
- name: organization.ownership:write
  group: Organization
  description: Create, update of organization ownership
  documented: true
  used_by_mcp_tools: 0
- name: organization.roles:read
  group: Organization
  description: View organization level roles
  documented: true
  used_by_mcp_tools: 0
- name: organization.share:read
  group: Organization
  description: View details of organization invitations shared with users
  documented: true
  used_by_mcp_tools: 0
- name: organization.share:write
  group: Organization
  description: Update, remove organization invitation shares
  documented: true
  used_by_mcp_tools: 0
- name: organization:read
  group: Organization
  description: View details of an organization
  documented: true
  used_by_mcp_tools: 0
- name: organizations:read
  group: Organization
  description: View details of all organizations associated with the user
  documented: true
  used_by_mcp_tools: 0
- name: personalize:manage
  group: Personalize
  description: Create, update, or delete Attribute, Audience, Experience, Event, and Experience Version, and update
    Experiences Priority.
  documented: true
  used_by_mcp_tools: 12
- name: personalize:read
  group: Personalize
  description: View Attributes, Audiences, Events, Experiences, Experiences Priority, Analytics Summary, Time-series
    Analytics, Regions, Countries, and Cities.
  documented: true
  used_by_mcp_tools: 12
- name: user.assignments:read
  group: Other
  description: View user assignments
  documented: true
  used_by_mcp_tools: 0
- name: user:read
  group: Other
  description: View user details
  documented: true
  used_by_mcp_tools: 0
- name: user:write
  group: Other
  description: Update user details
  documented: true
  used_by_mcp_tools: 0

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/contentstack-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.