GitBook · OAuth Scopes

GitBook OAuth Scopes

OAuth 2.0 derived

GitBook publishes 29 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the GitBook API on a user’s behalf.

Tokens are issued from https://oauth.gitbook.com/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

ContentDocumentationExperienceIntegrationPlatformSDK
Scopes: 29 Flows: authorizationCode Method: derived

OAuth endpoints

Authorization URL
https://oauth.gitbook.com/authorize
Token URL
https://oauth.gitbook.com/token
Flows
authorizationCode

Scopes (29)

ScopeDescriptionFlows
change-request:merge Merge change requests, publishing their changes to the space. Creating, editing and reviewing change requests only requires space:write. authorizationCode
integration:delete Unpublish integrations, permanently deleting them and every installation of them. authorizationCode
integration:installations:read Read integration installations and their configuration, which can include credentials for third-party services. authorizationCode
integration:installations:write Install and configure integrations on an organization, its spaces and its sites. authorizationCode
integration:publish Publish integrations, which can request their own permissions on your content, and route their events to a development tunnel. authorizationCode
integration:read Read integrations, their status and where they are installed. authorizationCode
openapi:read Read OpenAPI specifications. authorizationCode
openapi:write Create, update and delete OpenAPI specifications. authorizationCode
organization:ask Ask AI questions across an organization's content. authorizationCode
organization:members:read Read organization members, teams, invites and link invites. authorizationCode
organization:members:write Manage organization members, teams, invites and link invites. authorizationCode
organization:read Read the organizations you belong to, their settings and metadata, and their AI agent conversations. authorizationCode
organization:search Search across an organization's content. authorizationCode
organization:write Create organizations, and update organization settings and AI agent conversations. authorizationCode
site:ask Ask AI questions across a site's content. authorizationCode
site:auth:read Read how visitors authenticate on a site and its security configuration, including private share links. authorizationCode
site:auth:write Manage how visitors authenticate on a site and its security configuration, including private share links. authorizationCode
site:insights:read Read site analytics and insights, including the questions visitors asked Ask AI and the answers they received. authorizationCode
site:permissions:read Read the users and teams who have access to sites. authorizationCode
site:permissions:write Manage who has access to sites, including inviting users and teams. authorizationCode
site:publish Publish and unpublish sites, controlling their public exposure. authorizationCode
site:read Read sites and their settings, including navigation structure, linked spaces, customization, redirects, topics, AI configuration and documentation issues. authorizationCode
site:search Search across a site's content. authorizationCode
site:write Create, update and delete sites and their settings, including navigation structure (sections, linked spaces, external links), customization, redirects, topics and AI configuration. authorizationCode
space:permissions:read Read the users and teams who have access to spaces and collections. authorizationCode
space:permissions:write Manage who has access to spaces and collections, including inviting users and teams. authorizationCode
space:read Read spaces and their content, including pages, change requests and their reviews, comments, files and revision history. authorizationCode
space:write Create, update and delete spaces and their content, including change requests (create, edit, review), comments, and content imports and exports. Merging a change request also requires change-request:merge. authorizationCode
user:read Read your GitBook user profile. authorizationCode

Source

OAuth Scopes

Raw ↑
generated: '2026-10-05'
method: derived
source: openapi/gitbook-openapi.json
schemes:
- name: oauth
  source: openapi/gitbook-openapi.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://oauth.gitbook.com/authorize
    tokenUrl: https://oauth.gitbook.com/token
scopes:
- scope: change-request:merge
  description: Merge change requests, publishing their changes to the space. Creating, editing
    and reviewing change requests only requires space:write.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: integration:delete
  description: Unpublish integrations, permanently deleting them and every installation of them.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: integration:installations:read
  description: Read integration installations and their configuration, which can include credentials
    for third-party services.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: integration:installations:write
  description: Install and configure integrations on an organization, its spaces and its sites.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: integration:publish
  description: Publish integrations, which can request their own permissions on your content,
    and route their events to a development tunnel.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: integration:read
  description: Read integrations, their status and where they are installed.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: openapi:read
  description: Read OpenAPI specifications.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: openapi:write
  description: Create, update and delete OpenAPI specifications.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: organization:ask
  description: Ask AI questions across an organization's content.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: organization:members:read
  description: Read organization members, teams, invites and link invites.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: organization:members:write
  description: Manage organization members, teams, invites and link invites.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: organization:read
  description: Read the organizations you belong to, their settings and metadata, and their
    AI agent conversations.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: organization:search
  description: Search across an organization's content.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: organization:write
  description: Create organizations, and update organization settings and AI agent conversations.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: site:ask
  description: Ask AI questions across a site's content.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: site:auth:read
  description: Read how visitors authenticate on a site and its security configuration, including
    private share links.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: site:auth:write
  description: Manage how visitors authenticate on a site and its security configuration, including
    private share links.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: site:insights:read
  description: Read site analytics and insights, including the questions visitors asked Ask
    AI and the answers they received.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: site:permissions:read
  description: Read the users and teams who have access to sites.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: site:permissions:write
  description: Manage who has access to sites, including inviting users and teams.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: site:publish
  description: Publish and unpublish sites, controlling their public exposure.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: site:read
  description: Read sites and their settings, including navigation structure, linked spaces,
    customization, redirects, topics, AI configuration and documentation issues.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: site:search
  description: Search across a site's content.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: site:write
  description: Create, update and delete sites and their settings, including navigation structure
    (sections, linked spaces, external links), customization, redirects, topics and AI configuration.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: space:permissions:read
  description: Read the users and teams who have access to spaces and collections.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: space:permissions:write
  description: Manage who has access to spaces and collections, including inviting users and
    teams.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: space:read
  description: Read spaces and their content, including pages, change requests and their reviews,
    comments, files and revision history.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: space:write
  description: Create, update and delete spaces and their content, including change requests
    (create, edit, review), comments, and content imports and exports. Merging a change request
    also requires change-request:merge.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json
- scope: user:read
  description: Read your GitBook user profile.
  flows:
  - authorizationCode
  sources:
  - openapi/gitbook-openapi.json

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this
  • find_scopesBrowse and filter every scope set in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This scope set
curl "https://apis.io/api/v1/scopes/gitbook-scopes"
All oauth scopes
curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.