DocSend · OAuth Scopes

DocSend OAuth Scopes

OAuth 2.0 searched

DocSend publishes 5 OAuth 2.0 scopes via the authorizationCode and clientCredentials flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the DocSend API on a user’s behalf.

Tokens are issued from https://docsend.com/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyEnterpriseDocument SharingSales EnablementAnalyticsData RoomE-SignatureMCPDropbox

Scopes: 5 Flows: authorizationCode, clientCredentials Method: searched

OAuth endpoints

Authorization URL
https://docsend.com/oauth/authorize

Token URL
https://docsend.com/oauth/token

Flows
authorizationCodeclientCredentials

Scopes (5)

Scope	Description	Flows
documents:read	Read access to DocSend documents and the links that share them.	authorizationCode, clientCredentials
spaces:read	Read access to DocSend Spaces (virtual data rooms) and their contents.	authorizationCode, clientCredentials
spaces:write	Write access to DocSend Spaces (virtual data rooms) — the only write scope DocSend advertises on this resource.	authorizationCode, clientCredentials
analytics:read	Read access to DocSend viewer analytics (visits, page-by-page engagement).	authorizationCode, clientCredentials
contacts:read	Read access to DocSend contacts / visitors captured against shared links.	authorizationCode, clientCredentials

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-14'
method: searched
source: >-
  scopes_supported in https://docsend.com/.well-known/oauth-authorization-server and
  https://mcp.docsend.com/.well-known/oauth-authorization-server, plus scopes_supported in
  https://docsend.com/.well-known/oauth-protected-resource/mcp and the scope="..." value in
  the WWW-Authenticate challenge returned by https://docsend.com/mcp
docs: null
docs_note: >-
  DocSend publishes no readable scope/permission reference page. www.docsend.com and
  help.docsend.com return HTTP 403 (Cloudflare bot challenge) to non-browser clients, so
  the scope descriptions below are honest readings of the scope names themselves against
  DocSend's product vocabulary, not copy from a provider scopes page.
schemes:
- name: OAuth2
  source: well-known/docsend-oauth-authorization-server.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://docsend.com/oauth/authorize
    tokenUrl: https://docsend.com/oauth/token
  - flow: clientCredentials
    tokenUrl: https://docsend.com/oauth/token
scopes:
- scope: documents:read
  description: Read access to DocSend documents and the links that share them.
  access: read
  domain: documents
  flows: [authorizationCode, clientCredentials]
  sources:
  - well-known/docsend-oauth-authorization-server.json
  - well-known/docsend-oauth-protected-resource-mcp.json
- scope: spaces:read
  description: Read access to DocSend Spaces (virtual data rooms) and their contents.
  access: read
  domain: spaces
  flows: [authorizationCode, clientCredentials]
  sources:
  - well-known/docsend-oauth-authorization-server.json
  - well-known/docsend-oauth-protected-resource-mcp.json
- scope: spaces:write
  description: >-
    Write access to DocSend Spaces (virtual data rooms) — the only write scope DocSend
    advertises on this resource.
  access: write
  domain: spaces
  flows: [authorizationCode, clientCredentials]
  sources:
  - well-known/docsend-oauth-authorization-server.json
  - well-known/docsend-oauth-protected-resource-mcp.json
- scope: analytics:read
  description: Read access to DocSend viewer analytics (visits, page-by-page engagement).
  access: read
  domain: analytics
  flows: [authorizationCode, clientCredentials]
  sources:
  - well-known/docsend-oauth-authorization-server.json
  - well-known/docsend-oauth-protected-resource-mcp.json
- scope: contacts:read
  description: Read access to DocSend contacts / visitors captured against shared links.
  access: read
  domain: contacts
  flows: [authorizationCode, clientCredentials]
  sources:
  - well-known/docsend-oauth-authorization-server.json
  - well-known/docsend-oauth-protected-resource-mcp.json
resource:
  identifier: https://docsend.com/mcp
  authorization_servers: [https://docsend.com]
  bearer_methods_supported: [header]
changes_since_last_round:
  checked: '2026-08-14'
  previous: '2026-07-18'
  removed: [mcp:read, mcp:write]
  added: [documents:read, spaces:read, spaces:write, analytics:read, contacts:read]
  notes: >-
    The coarse mcp:read / mcp:write pair recorded on 2026-07-18 no longer appears in any
    DocSend discovery document or in the live WWW-Authenticate challenge. It has been
    replaced by five resource-scoped scopes.

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/docsend-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.