Contentstack · OAuth Scopes

Contentstack OAuth Scopes

OAuth 2.0 searched

Contentstack uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Headless CMSContent ManagementContent DeliveryDigital ExperiencePersonalizationGraphQLMCPSCIMComposable CommerceAI AgentsWebhookImage Delivery
Scopes: 0 Flows: Method: searched

Scopes (0)

Contentstack implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

10 scopes appear in the MCP tool catalogue but not on the published OAuth Scopes page — a gap between what the server requests and what the reference documents.

📄 Provider scope reference: https://www.contentstack.com/docs/developer-hub/oauth-scopes

Source

OAuth Scopes

Raw ↑ 
specification: API Commons OAuthScopes
specificationVersion: '0.1'
provider: Contentstack
providerId: contentstack
generated: '2026-09-17'
method: searched
source: https://www.contentstack.com/docs/developer-hub/oauth-scopes (HTTP 200, markdown twin, last_updated 2026-06-30)
  cross-checked against the scopes[] field of https://mcp.contentstack.com/<group>/tools
description: 'Contentstack OAuth 2.0 publishes a complete scope reference: 95 scopes documented on the OAuth Scopes
  page, of which 39 are additionally declared by the first-party MCP tool catalogue. Scope names follow a <resource>:<action>
  convention (cm.entry:write, launch.projects:read, personalize:manage) and the docs state which token type — user
  token or app token — each scope supports.'
docs: https://www.contentstack.com/docs/developer-hub/oauth-scopes
oauth_docs: https://www.contentstack.com/docs/developer-hub/contentstack-oauth
flow: authorization_code
token_types:
- user token
- app token
scope_count: 105
documented_count: 95
note: 10 scopes appear in the MCP tool catalogue but not on the published OAuth Scopes page — a gap between what
  the server requests and what the reference documents.
scopes:
- name: analytics:read
  group: Analytics
  documented: false
  used_by_mcp_tools: 8
- name: app.authorizations:manage
  group: Developer Hub / Marketplace apps
  documented: false
  used_by_mcp_tools: 1
- name: app.installations.management:write
  group: Developer Hub / Marketplace apps
  documented: false
  used_by_mcp_tools: 3
- name: app.installations:read
  group: Developer Hub / Marketplace apps
  documented: false
  used_by_mcp_tools: 1
- name: app.manifest:read
  group: Developer Hub / Marketplace apps
  documented: false
  used_by_mcp_tools: 4
- name: app.manifest:write
  group: Developer Hub / Marketplace apps
  documented: false
  used_by_mcp_tools: 4
- name: automationhub.automations:read
  group: Automation Hub
  documented: false
  used_by_mcp_tools: 2
- name: automationhub.automations:write
  group: Automation Hub
  documented: false
  used_by_mcp_tools: 2
- name: automationhub.projects.management:read
  group: Automation Hub
  documented: false
  used_by_mcp_tools: 2
- name: automationhub.projects.management:write
  group: Automation Hub
  documented: false
  used_by_mcp_tools: 3
- name: brand-kits:manage
  group: BrandKit
  description: Create, update, or delete Brand Kit and Voice Profile.
  documented: true
  used_by_mcp_tools: 8
- name: brand-kits:read
  group: BrandKit
  description: View Brand Kit(s) and Voice Profile(s).
  documented: true
  used_by_mcp_tools: 4
- name: cm.asset:publish
  group: Content Management
  description: Publish an asset
  documented: true
  used_by_mcp_tools: 1
- name: cm.asset:read
  group: Content Management
  description: View asset details
  documented: true
  used_by_mcp_tools: 6
- name: cm.asset:unpublish
  group: Content Management
  description: Unpublish an asset
  documented: true
  used_by_mcp_tools: 1
- name: cm.asset:write
  group: Content Management
  description: Create, update, remove RTE assets
  documented: true
  used_by_mcp_tools: 7
- name: cm.assets.management:read
  group: Content Management
  description: View all assets
  documented: true
  used_by_mcp_tools: 0
- name: cm.assets.management:write
  group: Content Management
  description: Create, update, remove assets
  documented: true
  used_by_mcp_tools: 0
- name: cm.assets.rt:read
  group: Content Management
  description: View all RTE assets
  documented: true
  used_by_mcp_tools: 0
- name: cm.assets:download
  group: Content Management
  description: Download assets
  documented: true
  used_by_mcp_tools: 0
- name: cm.audit-logs:read
  group: Content Management
  description: View all audit logs
  documented: true
  used_by_mcp_tools: 2
- name: cm.branch-aliases.management:read
  group: Content Management
  description: View all aliases
  documented: true
  used_by_mcp_tools: 2
- name: cm.branch-aliases.management:write
  group: Content Management
  description: Create, assign, delete a branch alias
  documented: true
  used_by_mcp_tools: 2
- name: cm.branches.management:read
  group: Content Management
  description: View all branches
  documented: true
  used_by_mcp_tools: 4
- name: cm.branches.management:write
  group: Content Management
  description: Create, delete a branch
  documented: true
  used_by_mcp_tools: 8
- name: cm.bulk-operations:delete
  group: Content Management
  description: Delete bulk operations
  documented: true
  used_by_mcp_tools: 0
- name: cm.bulk-operations:publish
  group: Content Management
  description: Publish bulk operations
  documented: true
  used_by_mcp_tools: 0
- name: cm.bulk-operations:unpublish
  group: Content Management
  description: Unpublish bulk operations
  documented: true
  used_by_mcp_tools: 0
- name: cm.bulk-operations:workflow
  group: Content Management
  description: Workflow bulk operations
  documented: true
  used_by_mcp_tools: 0
- name: cm.content-type:read
  group: Content Management
  description: View content type details
  documented: true
  used_by_mcp_tools: 3
- name: cm.content-types.management:read
  group: Content Management
  description: View all content types
  documented: true
  used_by_mcp_tools: 0
- name: cm.content-types.management:write
  group: Content Management
  description: Create, update, remove content types
  documented: true
  used_by_mcp_tools: 3
- name: cm.content-types:export
  group: Content Management
  description: Export content types
  documented: true
  used_by_mcp_tools: 1
- name: cm.content-types:import
  group: Content Management
  description: Import content types
  documented: true
  used_by_mcp_tools: 0
- name: cm.entries.management:read
  group: Content Management
  description: View all entries
  documented: true
  used_by_mcp_tools: 0
- name: cm.entries.management:write
  group: Content Management
  description: Create, update, remove entries
  documented: true
  used_by_mcp_tools: 0
- name: cm.entries:export
  group: Content Management
  description: Export entries
  documented: true
  used_by_mcp_tools: 0
- name: cm.entries:import
  group: Content Management
  description: Import entries
  documented: true
  used_by_mcp_tools: 0
- name: cm.entry.workflow:write
  group: Content Management
  description: Create a workflow for an entry
  documented: true
  used_by_mcp_tools: 0
- name: cm.entry:publish
  group: Content Management
  description: Publish an entry
  documented: true
  used_by_mcp_tools: 2
- name: cm.entry:read
  group: Content Management
  description: View details associated with an entry
  documented: true
  used_by_mcp_tools: 8
- name: cm.entry:unpublish
  group: Content Management
  description: Unpublish an entry
  documented: true
  used_by_mcp_tools: 1
- name: cm.entry:write
  group: Content Management
  description: Update details associated with an entry
  documented: true
  used_by_mcp_tools: 9
- name: cm.environments.management:read
  group: Content Management
  description: View all environments
  documented: true
  used_by_mcp_tools: 2
- name: cm.environments.management:write
  group: Content Management
  description: Create, update, remove environments
  documented: true
  used_by_mcp_tools: 3
- name: cm.extensions.management:read
  group: Content Management
  description: View all extensions
  documented: true
  used_by_mcp_tools: 0
- name: cm.extensions.management:write
  group: Content Management
  description: Create, update, remove extensions
  documented: true
  used_by_mcp_tools: 0
- name: cm.global-fields.management:read
  group: Content Management
  description: View all global fields
  documented: true
  used_by_mcp_tools: 3
- name: cm.global-fields.management:write
  group: Content Management
  description: Create, update, remove global fields
  documented: true
  used_by_mcp_tools: 3
- name: cm.global-fields:import
  group: Content Management
  description: Export global fields
  documented: true
  used_by_mcp_tools: 0
- name: cm.labels.management:read
  group: Content Management
  description: View all labels
  documented: true
  used_by_mcp_tools: 0
- name: cm.labels.management:write
  group: Content Management
  description: Create, update, remove labels
  documented: true
  used_by_mcp_tools: 0
- name: cm.languages.management:read
  group: Content Management
  description: View all languages
  documented: true
  used_by_mcp_tools: 1
- name: cm.languages.management:write
  group: Content Management
  description: Create, update, remove languages
  documented: true
  used_by_mcp_tools: 0
- name: cm.publish-queue.management:read
  group: Content Management
  description: View all publish queues
  documented: true
  used_by_mcp_tools: 2
- name: cm.publish-queue.management:write
  group: Content Management
  description: Create, update, remove publish queues
  documented: true
  used_by_mcp_tools: 0
- name: cm.release:clone
  group: Content Management
  description: Clone a release
  documented: true
  used_by_mcp_tools: 1
- name: cm.release:deploy
  group: Content Management
  description: Deploy a release
  documented: true
  used_by_mcp_tools: 1
- name: cm.release:read
  group: Content Management
  description: View details associated with a release
  documented: true
  used_by_mcp_tools: 3
- name: cm.release:write
  group: Content Management
  description: Update details associated with a release
  documented: true
  used_by_mcp_tools: 3
- name: cm.releases.management:read
  group: Content Management
  description: View all releases
  documented: true
  used_by_mcp_tools: 0
- name: cm.releases.management:write
  group: Content Management
  description: Create, update, remove releases
  documented: true
  used_by_mcp_tools: 0
- name: cm.roles.management:read
  group: Content Management
  description: View all roles
  documented: true
  used_by_mcp_tools: 0
- name: cm.roles.management:write
  group: Content Management
  description: Create, update, remove roles
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.delivery-tokens:read
  group: Content Management
  description: View delivery tokens associated with a stack
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.delivery-tokens:write
  group: Content Management
  description: Create, update, remove delivery tokens in a stack
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.management-tokens:read
  group: Content Management
  description: View management tokens associated with a stack
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.management-tokens:write
  group: Content Management
  description: Create, update, remove management tokens in a stack
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.management:write
  group: Content Management
  description: Update stack management properties
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.settings:read
  group: Content Management
  description: Update stack settings
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.users:read
  group: Content Management
  description: View users associated with a stack
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack.users:write
  group: Content Management
  description: Update user roles and user associations with a stack
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack:share
  group: Content Management
  description: Share stack invitation with users
  documented: true
  used_by_mcp_tools: 0
- name: cm.stack:unshare
  group: Content Management
  description: Unshare stack invitations
  documented: true
  used_by_mcp_tools: 0
- name: cm.stacks.management:read
  group: Content Management
  description: View all stacks
  documented: true
  used_by_mcp_tools: 0
- name: cm.stacks.management:write
  group: Content Management
  description: Create, update, remove stacks
  documented: true
  used_by_mcp_tools: 0
- name: cm.taxonomies.management:read
  group: Content Management
  description: View all taxonomies
  documented: true
  used_by_mcp_tools: 3
- name: cm.taxonomies.management:write
  group: Content Management
  description: Create, update, delete taxonomies
  documented: true
  used_by_mcp_tools: 3
- name: cm.taxonomy.terms:read
  group: Content Management
  description: View all terms of a taxonomy
  documented: true
  used_by_mcp_tools: 5
- name: cm.taxonomy.terms:write
  group: Content Management
  description: Create, update, move, delete term(s) of a taxonomy
  documented: true
  used_by_mcp_tools: 4
- name: cm.webhook:read
  group: Content Management
  description: View webhook details
  documented: true
  used_by_mcp_tools: 0
- name: cm.webhooks.management:read
  group: Content Management
  description: View all webhooks
  documented: true
  used_by_mcp_tools: 0
- name: cm.webhooks.management:write
  group: Content Management
  description: Create, update, remove webhooks
  documented: true
  used_by_mcp_tools: 0
- name: cm.webhooks:export
  group: Content Management
  description: Export webhooks
  documented: true
  used_by_mcp_tools: 0
- name: cm.webhooks:import
  group: Content Management
  description: Import webhooks
  documented: true
  used_by_mcp_tools: 0
- name: cm.workflows.management:read
  group: Content Management
  description: View all workflows
  documented: true
  used_by_mcp_tools: 2
- name: cm.workflows.management:write
  group: Content Management
  description: Create, update, remove workflows
  documented: true
  used_by_mcp_tools: 0
- name: cm.workflows.publishing-rules:read
  group: Content Management
  description: View all workflow publishing rules
  documented: true
  used_by_mcp_tools: 1
- name: cm.workflows.publishing-rules:write
  group: Content Management
  description: Create, update, remove workflow publishing rules
  documented: true
  used_by_mcp_tools: 0
- name: launch.projects:delete
  group: Launch
  description: This scope lets you delete resources
  documented: true
  used_by_mcp_tools: 2
- name: launch.projects:read
  group: Launch
  description: This scope lets you read resources
  documented: true
  used_by_mcp_tools: 15
- name: launch.projects:write
  group: Launch
  description: This scope lets you create and update resources
  documented: true
  used_by_mcp_tools: 10
- name: launch:manage
  group: Launch
  description: This scope lets you read, update, and manage resources
  documented: true
  used_by_mcp_tools: 0
- name: organization.logs:read
  group: Organization
  description: View organization logs
  documented: true
  used_by_mcp_tools: 0
- name: organization.ownership:write
  group: Organization
  description: Create, update of organization ownership
  documented: true
  used_by_mcp_tools: 0
- name: organization.roles:read
  group: Organization
  description: View organization level roles
  documented: true
  used_by_mcp_tools: 0
- name: organization.share:read
  group: Organization
  description: View details of organization invitations shared with users
  documented: true
  used_by_mcp_tools: 0
- name: organization.share:write
  group: Organization
  description: Update, remove organization invitation shares
  documented: true
  used_by_mcp_tools: 0
- name: organization:read
  group: Organization
  description: View details of an organization
  documented: true
  used_by_mcp_tools: 0
- name: organizations:read
  group: Organization
  description: View details of all organizations associated with the user
  documented: true
  used_by_mcp_tools: 0
- name: personalize:manage
  group: Personalize
  description: Create, update, or delete Attribute, Audience, Experience, Event, and Experience Version, and update
    Experiences Priority.
  documented: true
  used_by_mcp_tools: 12
- name: personalize:read
  group: Personalize
  description: View Attributes, Audiences, Events, Experiences, Experiences Priority, Analytics Summary, Time-series
    Analytics, Regions, Countries, and Cities.
  documented: true
  used_by_mcp_tools: 12
- name: user.assignments:read
  group: Other
  description: View user assignments
  documented: true
  used_by_mcp_tools: 0
- name: user:read
  group: Other
  description: View user details
  documented: true
  used_by_mcp_tools: 0
- name: user:write
  group: Other
  description: Update user details
  documented: true
  used_by_mcp_tools: 0

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this
  • find_scopesBrowse and filter every scope set in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This scope set 
curl "https://apis.io/api/v1/scopes/contentstack-scopes"
All oauth scopes 
curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.