GitHub Enterprise OAuth Scopes

name: GitHub Enterprise OAuth scopes
generated: '2026-11-12'
method: searched
source: https://docs.github.com/en/enterprise-cloud@latest/apps/oauth-apps/building-oauth-apps/scopes-for-oauth-apps
docs: https://docs.github.com/en/enterprise-cloud@latest/apps/oauth-apps/building-oauth-apps/scopes-for-oauth-apps
scopes:
- name: repo:status
  description: Grants read/write access to commit statuses in public, private, and internal repositories. This scope is only necessary to grant other users or services access to private repository commit
    statuses *without* granting access to the code.
- name: repo_deployment
  description: Grants access to [deployment statuses](/en/enterprise-cloud@latest/rest/repos#deployments) for public and private repositories. This scope is only necessary to grant other users or services
    access to deployment statuses, *without* granting access to the code.
- name: public_repo
  description: Limits access to public repositories. That includes read/write access to code, commit statuses, repository projects, collaborators, and deployment statuses for public repositories and organizations.
    Also required for starring public repositories.
- name: repo:invite
  description: Grants accept/decline abilities for invitations to collaborate on a repository. This scope is only necessary to grant other users or services access to invites *without* granting access to
    the code.
- name: security_events
  description: 'Grants: <br/> read and write access to security events in the [code scanning API](/en/enterprise-cloud@latest/rest/code-scanning)<br/> read and write access to security events in the [secret
    scanning API](/en/enterprise-cloud@latest/rest/secret-scanning) <br/> This scope is only necessary to grant other users or services access to security events *without* granting access to the code.'
- name: write:repo_hook
  description: Grants read, write, and ping access to hooks in public, private, or internal repositories.
- name: read:repo_hook
  description: Grants read and ping access to hooks in public, private, or internal repositories.
- name: write:org
  description: Read and write access to organization membership and organization projects.
- name: read:org
  description: Read-only access to organization membership, organization projects, and team membership.
- name: write:public_key
  description: Create, list, and view details for public keys.
- name: read:public_key
  description: List and view details for public keys.
- name: read:user
  description: Grants access to read a user's profile data.
- name: user:email
  description: Grants read access to a user's email addresses.
- name: user:follow
  description: Grants access to follow or unfollow other users.
- name: read:project
  description: Grants read only access to user and organization projects.
- name: write:gpg_key
  description: Create, list, and view details for GPG keys.
- name: read:gpg_key
  description: List and view details for GPG keys.
- name: manage_runners:enterprise
  description: Gives full control over self-hosted runners within the enterprise. For more information, see [Self-hosted runners](/en/enterprise-cloud@latest/actions/concepts/runners/self-hosted-runners).
- name: manage_billing:enterprise
  description: Read and write enterprise billing data. For more information, see [REST API endpoints for billing](/en/enterprise-cloud@latest/rest/billing).
- name: read:enterprise
  description: Read all data on an enterprise profile. Does not include profile data of enterprise members or organizations.