Hugging Face Transformers · OAuth Scopes

Hugging Face Transformers OAuth Scopes

OAuth 2.0 searched

Hugging Face Transformers publishes 15 OAuth 2.0 scopes via the authorizationCode and deviceCode flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Hugging Face Transformers API on a user’s behalf.

Tokens are issued from https://huggingface.co/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Artificial IntelligenceComputer VisionDeep LearningMachine LearningNatural Language ProcessingOpen SourceTransformers

Scopes: 15 Flows: authorizationCode, deviceCode Method: searched

OAuth endpoints

Authorization URL
https://huggingface.co/oauth/authorize

Token URL
https://huggingface.co/oauth/token

Flows
authorizationCodedeviceCode

Scopes (15)

Scope	Description	Flows
openid	Get the ID token in addition to the access token.
profile	Get the user's profile information (username, avatar, etc.).
email	Get the user's email address.
read-billing	Know whether the user has a payment method set up.
read-repos	Get read access to the user's personal repos.
gated-repos	Get read access to the content of public gated repos the user has been granted access to. Does not grant access to private repos.
contribute-repos	Create repositories and access those created by this app; cannot access other repositories unless additional permissions are granted.
write-repos	Get write/read access to the user's personal repos.
manage-repos	Full access to the user's personal repos, including repo creation and deletion.
read-collections	Get read access to the user's personal collections.
write-collections	Write/read access to the user's personal collections, including creation and deletion.
inference-api	Access Inference Providers and make inference requests on behalf of the user.
jobs	Run jobs.
webhooks	Manage webhooks.
write-discussions	Open discussions and Pull Requests on behalf of the user and interact with discussions (reactions, comments, closing, etc.).

📄 Provider scope reference: https://huggingface.co/docs/hub/oauth

Source

OAuth Scopes

generated: '2026-06-20'
method: searched
source: openapi/hugging-face-transformers-openapi.json
docs: https://huggingface.co/docs/hub/oauth
notes: >-
  The Hub OpenAPI declares only http bearer (User Access Token) auth, but
  Hugging Face runs a full OAuth 2.0 / OIDC authorization server (Sign in with
  Hugging Face) whose scopes are documented at the docs URL above and whose
  discovery metadata is at /.well-known/openid-configuration. PKCE (S256) is
  supported; public apps may omit a client secret. Enterprise plans add
  RFC 8693 token exchange for keyless per-member token issuance.
schemes:
  - name: OAuth2 / OIDC
    source: https://huggingface.co/.well-known/openid-configuration
    issuer: https://huggingface.co
    flows:
      - flow: authorizationCode
        authorizationUrl: https://huggingface.co/oauth/authorize
        tokenUrl: https://huggingface.co/oauth/token
        pkce: S256
      - flow: deviceCode
        deviceAuthorizationUrl: https://huggingface.co/oauth/device
        tokenUrl: https://huggingface.co/oauth/token
    grant_types:
      - authorization_code
      - refresh_token
      - urn:ietf:params:oauth:grant-type:device_code
      - urn:ietf:params:oauth:grant-type:token-exchange
scopes:
  - scope: openid
    description: Get the ID token in addition to the access token.
  - scope: profile
    description: Get the user's profile information (username, avatar, etc.).
  - scope: email
    description: Get the user's email address.
  - scope: read-billing
    description: Know whether the user has a payment method set up.
  - scope: read-repos
    description: Get read access to the user's personal repos.
  - scope: gated-repos
    description: >-
      Get read access to the content of public gated repos the user has been
      granted access to. Does not grant access to private repos.
  - scope: contribute-repos
    description: >-
      Create repositories and access those created by this app; cannot access
      other repositories unless additional permissions are granted.
  - scope: write-repos
    description: Get write/read access to the user's personal repos.
  - scope: manage-repos
    description: >-
      Full access to the user's personal repos, including repo creation and
      deletion.
  - scope: read-collections
    description: Get read access to the user's personal collections.
  - scope: write-collections
    description: >-
      Write/read access to the user's personal collections, including creation
      and deletion.
  - scope: inference-api
    description: >-
      Access Inference Providers and make inference requests on behalf of the
      user.
  - scope: jobs
    description: Run jobs.
  - scope: webhooks
    description: Manage webhooks.
  - scope: write-discussions
    description: >-
      Open discussions and Pull Requests on behalf of the user and interact
      with discussions (reactions, comments, closing, etc.).