IBM API Connect · OAuth Scopes

IBM API Connect OAuth Scopes

OAuth 2.0 derived

IBM API Connect publishes 35 OAuth 2.0 scopes via the password, authorizationCode, implicit, and clientCredentials flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the IBM API Connect API on a user’s behalf.

Tokens are issued from /token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

API GatewayAPI ManagementDeveloper PortalDeveloper ToolsIBM
Scopes: 35 Flows: password, authorizationCode, implicit, clientCredentials Method: derived

OAuth endpoints

Authorization URL
/oauth2/authorize https://apimserver.example.com/api/oauth2/authorize https://apimserver.example.com/consumer-api/oauth2/authorize
Token URL
/token https://apimserver.example.com/api/token https://apimserver.example.com/consumer-api/token
Flows
passwordauthorizationCodeimplicitclientCredentials

Scopes (35)

ScopeDescriptionFlows
api-analytics:manage
api-analytics:view Create an Analytics object authorizationCode, clientCredentials, implicit, password
api-drafts:edit Clear the Draft objects, Create a Draft API object, Clear all Draft API objects in all collections, Clear the Draft API objects, Update the Draft API object by id, Delete the Draft API object by id, Update the Draft API object by name and version, Delete the Draft API object by name and version authorizationCode, clientCredentials, implicit, password
api-drafts:view List the Draft objects, List all Draft API objects in all collections, List the Draft API objects, Get the Draft API object by id, Get the Draft API object by name and version authorizationCode, clientCredentials, implicit, password
app-analytics:view View consumer analytics authorizationCode, clientCredentials, implicit, password
app:manage Create a Application object, Clear the Application objects, Update the Application object by name or id, Delete the Application object by name or id, Create a Application Credential object, Clear the Application Credential objects, Update the Application Credential object by name or id, Delete the Application Credential object by name or id, Create a Subscription object, Clear the Subscription objects, Update the Subscription object by name or id, Delete the Subscription object by name or id authorizationCode, password
app:manage:all Create a Application object, Clear the Application objects, Update the Application object by name or id, Delete the Application object by name or id, Create a Strategy object, Delete the Strategy object by name or id, Clear the Strategy objects, Update the Strategy object by name or id, Create a Application Credential object, Update the Application Credential object by name or id, Delete the Application Credential object by name or id, Create a Subscription object, Clear the Subscription objects, Update the Subscription object by name or id, Delete the Subscription object by name or id authorizationCode, clientCredentials, implicit, password
app:view List the Application objects, Get the Application object by name or id, List the Application Credential objects, Get the Application Credential object by name or id, List the Subscription objects, Get the Subscription object by name or id authorizationCode, password
app:view:all List the Application objects, Get the Application object by name or id, List the Strategy objects, Get the Strategy object by name or id, List the Application Credential objects, Get the Application Credential object by name or id, List the Subscription objects, Get the Subscription object by name or id authorizationCode, clientCredentials, implicit, password
approval:view List the Task objects, Get the Task object by name or id, Update the Task object by name or id, List the Task History objects, Get the Task History object by name or id authorizationCode, clientCredentials, implicit, password
child:create Create a Catalog object, Create a Space object authorizationCode, clientCredentials, implicit, password
child:manage Clear the Catalog objects, Update the Catalog object by name or id, Delete the Catalog object by name or id, Clear the Space objects, Update the Space object by name or id, Delete the Space object by name or id authorizationCode, clientCredentials, implicit, password
child:view List the Catalog objects, Get the Catalog object by name or id, List the Space objects, Get the Space object by name or id authorizationCode, clientCredentials, implicit, password
cloud:manage Update the Cloud Setting object, Update the User Registry Setting object, Update the Notification Style object, Create a Registration object, Clear the Registration objects, Update the Registration object by name or id, Delete the Registration object by name or id, Update the Webhook object by name or id authorizationCode, clientCredentials, implicit, password
cloud:view Get the Cloud Setting object, Get the User Registry Setting object, Get the Notification Style object, List all Notification Template objects in all collections, List all Role Default objects in all collections, List the Registration objects, Get the Registration object by name or id, List the Webhook objects, Get the Webhook object by name or id authorizationCode, clientCredentials, implicit, password
consumer-org:manage Clear the Activation objects, Delete the Activation object by name or id, Create a Consumer Organization object, Clear the Consumer Organization objects, Update the Consumer Organization object by name or id, Delete the Consumer Organization object by name or id, Create a Payment Method object, Update the Payment Method object by name or id, Delete the Payment Method object by name or id authorizationCode, clientCredentials, implicit, password
consumer-org:view List the Activation objects, Get the Activation object by name or id, List the Consumer Organization objects, Get the Consumer Organization object by name or id, List the Payment Method objects, Get the Payment Method object by name or id authorizationCode, clientCredentials, implicit, password
engagement:manage
engagement:view View an engagement object authorizationCode, clientCredentials, implicit, password
my:manage Update the Me object, Delete the Me object authorizationCode, clientCredentials, implicit, password
my:view Get the Me object, List the My Permission objects, List the My Organization objects authorizationCode, clientCredentials, implicit, password
org:manage Create a My Organization object, Update the Organization object by name or id, Delete the Organization object by name or id, Create a Member Invitation object, Clear the Member Invitation objects, Delete the Member Invitation object by name or id, Clear the Member objects, Update the Member object by name or id, Delete the Member object by name or id, Create a Payment Method object, Update the Payment Method object by name or id, Delete the Payment Method object by name or id authorizationCode, clientCredentials, implicit, password
org:view List all Permission objects in all collections, Get the Organization object by name or id, Get the Group object by name or id, List the Member Invitation objects, Get the Member Invitation object by name or id, List the User Registry objects, Get the User Registry object by name or id, Get the User object by name or id, List the Associate objects, Get the Associate object by name or id, List the Member objects, Get the Member object by name or id, List the Role objects, Get the Role object by name or id, Get the Billing object by name or id, List the Billing objects, List the Payment Method objects, Get the Payment Method object by name or id, List the Payment Method Type objects, Get the Payment Method Type object by name or id authorizationCode, clientCredentials, implicit, password
product-drafts:edit Create a Draft Product object, Clear all Draft Product objects in all collections, Clear the Draft Product objects, Update the Draft Product object by id, Delete the Draft Product object by id, Update the Draft Product object by name and version, Delete the Draft Product object by name and version authorizationCode, clientCredentials, implicit, password
product-drafts:view List all Draft Product objects in all collections, List the Draft Product objects, Get the Draft Product object by id, Get the Draft Product object by name and version authorizationCode, clientCredentials, implicit, password
product:manage Clear all Product objects in all collections, Clear the Product objects, Update the Product object by id, Delete the Product object by id, Update the Product object by name and version, Delete the Product object by name and version, Update the API object by id, Update the API object by name and version authorizationCode, clientCredentials, implicit, password
product:stage
product:view List all Product objects in all collections, List the Product objects, Get the Product object by id, Get the Product object by name and version, List all API objects in all collections, List the API objects, Get the API object by id, Get the API object by name and version, Get the Plan object by id, Get the Plan object by name and version, List the Plan objects, List all Plan objects in all collections, Get the Quota object by id, Get the Quota object by name and version, List the Quota objects, List all Quota objects in all collections authorizationCode, clientCredentials, implicit, password
project:manage Create a Project object, Clear the Project objects, Update the Project object by name or id, Delete the Project object by name or id, Clear the Project File objects, Clear all Project File objects in all collections, Update the Project File object by id, Update the Project File object by name and version, Delete the Project File object by id, Delete the Project File object by name and version authorizationCode, clientCredentials, implicit, password
project:view List the Project objects, Get the Project object by name or id, List the Project File objects, List all Project File objects in all collections, Get the Project File object by id, Get the Project File object by name and version authorizationCode, clientCredentials, implicit, password
provider-org:manage Create an Organization Invitation object, Clear the Organization Invitation objects, Update the Organization Invitation object by name or id, Delete the Organization Invitation object by name or id, Create a Group object, Clear the Group objects, Update the Group object by name or id, Delete the Group object by name or id authorizationCode, clientCredentials, implicit, password
provider-org:view List the Organization Invitation objects, Get the Organization Invitation object by name or id, List the Group objects, Get the Group object by name or id authorizationCode, clientCredentials, implicit, password
published-product:view
webhook:manage Update the Webhook object by name or id authorizationCode, clientCredentials, implicit, password
webhook:view List the Webhook objects, Get the Webhook object by name or id authorizationCode, clientCredentials, implicit, password

Source

OAuth Scopes

Raw ↑
generated: '2026-10-29'
method: derived
source: openapi/ibm-api-connect-ai-assets-api-openapi.yml, openapi/ibm-api-connect-analytics-api-openapi.yml,
  openapi/ibm-api-connect-application-strategy-management-api-openapi.yml, openapi/ibm-api-connect-billing-management-api-openapi.yml,
  openapi/ibm-api-connect-catalog-management-api-openapi.yml, openapi/ibm-api-connect-catalog-resource-api-openapi.yml,
  openapi/ibm-api-connect-catalog-resources-api-openapi.yml, openapi/ibm-api-connect-catalog-settings-api-openapi.yml,
  openapi/ibm-api-connect-cloud-management-api-openapi.yml, openapi/ibm-api-connect-cloud-settings-api-openapi.yml,
  openapi/ibm-api-connect-compliance-api-openapi.yml, openapi/ibm-api-connect-consumer-analytics-api-openapi.yml,
  openapi/ibm-api-connect-consumer-management-api-openapi.yml, openapi/ibm-api-connect-data-sources-and-collectors-api-openapi.yml,
  openapi/ibm-api-connect-datapower-nano-gateway-api-porting-advisor-api-openapi.yml, openapi/ibm-api-connect-discovery-api-openapi.yml,
  openapi/ibm-api-connect-drafts-api-openapi.yml, openapi/ibm-api-connect-engagement-api-openapi.yml,
  openapi/ibm-api-connect-logging-specification-api-openapi.yml, openapi/ibm-api-connect-my-resources-api-openapi.yml,
  openapi/ibm-api-connect-oauth2-action-api-openapi.yml, openapi/ibm-api-connect-org-settings-api-openapi.yml,
  openapi/ibm-api-connect-organization-application-api-openapi.yml, openapi/ibm-api-connect-organization-management-api-openapi.yml,
  openapi/ibm-api-connect-organization-resources-api-openapi.yml, openapi/ibm-api-connect-organization-settings-api-openapi.yml,
  openapi/ibm-api-connect-plans-and-quotas-api-openapi.yml, openapi/ibm-api-connect-portal-api-openapi.yml,
  openapi/ibm-api-connect-products-and-apis-api-openapi.yml, openapi/ibm-api-connect-project-api-openapi.yml,
  openapi/ibm-api-connect-provider-management-api-openapi.yml, openapi/ibm-api-connect-reconstructed-apis-api-openapi.yml,
  openapi/ibm-api-connect-resource-service-status-api-openapi.yml, openapi/ibm-api-connect-rulesets-and-rules-api-openapi.yml,
  openapi/ibm-api-connect-settings-api-openapi.yml, openapi/ibm-api-connect-space-management-api-openapi.yml,
  openapi/ibm-api-connect-space-resource-api-openapi.yml, openapi/ibm-api-connect-space-resources-api-openapi.yml,
  openapi/ibm-api-connect-space-settings-api-openapi.yml, openapi/ibm-api-connect-user-api-openapi.yml,
  openapi/ibm-api-connect-user-management-api-openapi.yml, openapi/ibm-api-connect-validation-api-openapi.yml,
  openapi/ibm-api-connect-webhooks-api-openapi.yml
schemes:
- name: oauth
  source: openapi/ibm-api-connect-ai-assets-api-openapi.yml
  flows:
  - flow: password
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-analytics-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: https://apimserver.example.com/api/oauth2/authorize
  - flow: password
    tokenUrl: https://apimserver.example.com/api/token
  - flow: clientCredentials
    tokenUrl: https://apimserver.example.com/api/token
  - flow: authorizationCode
    authorizationUrl: https://apimserver.example.com/api/oauth2/authorize
    tokenUrl: https://apimserver.example.com/api/token
  description: API Manager API Token at either Cloud Admin or Provider scope as appropriate
    for each operation as defined by the x-auth-token attribute.
- name: oauth
  source: openapi/ibm-api-connect-application-strategy-management-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-billing-management-api-openapi.yml
  flows:
  - flow: password
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-catalog-management-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-catalog-resource-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-catalog-resources-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-catalog-settings-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-cloud-management-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-cloud-settings-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-compliance-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-consumer-analytics-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: https://apimserver.example.com/consumer-api/oauth2/authorize
  - flow: password
    tokenUrl: https://apimserver.example.com/consumer-api/token
  - flow: clientCredentials
    tokenUrl: https://apimserver.example.com/consumer-api/token
  - flow: authorizationCode
    authorizationUrl: https://apimserver.example.com/consumer-api/oauth2/authorize
    tokenUrl: https://apimserver.example.com/consumer-api/token
  description: API Manager Consumer API Token at appropriate catalog scope.
- name: oauth
  source: openapi/ibm-api-connect-consumer-management-api-openapi.yml
  flows:
  - flow: password
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-data-sources-and-collectors-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-datapower-nano-gateway-api-porting-advisor-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-discovery-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-drafts-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-engagement-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: https://apimserver.example.com/api/oauth2/authorize
  - flow: password
    tokenUrl: https://apimserver.example.com/api/token
  - flow: clientCredentials
    tokenUrl: https://apimserver.example.com/api/token
  - flow: authorizationCode
    authorizationUrl: https://apimserver.example.com/api/oauth2/authorize
    tokenUrl: https://apimserver.example.com/api/token
  description: API Manager API Token at either Cloud Admin or Provider scope as appropriate
    for each operation as defined by the x-auth-token attribute.
- name: oauth
  source: openapi/ibm-api-connect-logging-specification-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-my-resources-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-oauth2-action-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-org-settings-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-organization-application-api-openapi.yml
  flows:
  - flow: password
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-organization-management-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-organization-resources-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-organization-settings-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-plans-and-quotas-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-portal-api-openapi.yml
  flows:
  - flow: password
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-products-and-apis-api-openapi.yml
  flows:
  - flow: password
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-project-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-provider-management-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-reconstructed-apis-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-resource-service-status-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-rulesets-and-rules-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-settings-api-openapi.yml
  flows:
  - flow: password
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-space-management-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-space-resource-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-space-resources-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-space-settings-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-user-api-openapi.yml
  flows:
  - flow: password
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-user-management-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-validation-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
- name: oauth
  source: openapi/ibm-api-connect-webhooks-api-openapi.yml
  flows:
  - flow: implicit
    authorizationUrl: /oauth2/authorize
  - flow: password
    tokenUrl: /token
  - flow: clientCredentials
    tokenUrl: /token
  - flow: authorizationCode
    authorizationUrl: /oauth2/authorize
    tokenUrl: /token
scopes:
- scope: api-analytics:manage
  sources:
  - openapi/ibm-api-connect-analytics-api-openapi.yml
- scope: api-analytics:view
  description: Create an Analytics object
  flows:
  - authorizationCode
  - clientCredentials
  - implicit
  - password
  sources:
  - openapi/ibm-api-connect-analytics-api-openapi.yml
  - openapi/ibm-api-connect-engagement-api-openapi.yml
- scope: api-drafts:edit
  description: Clear the Draft objects, Create a Draft API object, Clear all Draft API objects
    in all collections, Clear the Draft API objects, Update the Draft API object by id, Delete
    the Draft API object by id, Update the Draft API object by name and version, Delete the
    Draft API object by name and version
  flows:
  - authorizationCode
  - clientCredentials
  - implicit
  - password
  sources:
  - openapi/ibm-api-connect-application-strategy-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resource-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resources-api-openapi.yml
  - openapi/ibm-api-connect-catalog-settings-api-openapi.yml
  - openapi/ibm-api-connect-cloud-management-api-openapi.yml
  - openapi/ibm-api-connect-cloud-settings-api-openapi.yml
  - openapi/ibm-api-connect-data-sources-and-collectors-api-openapi.yml
  - openapi/ibm-api-connect-datapower-nano-gateway-api-porting-advisor-api-openapi.yml
  - openapi/ibm-api-connect-discovery-api-openapi.yml
  - openapi/ibm-api-connect-drafts-api-openapi.yml
  - openapi/ibm-api-connect-logging-specification-api-openapi.yml
  - openapi/ibm-api-connect-my-resources-api-openapi.yml
  - openapi/ibm-api-connect-oauth2-action-api-openapi.yml
  - openapi/ibm-api-connect-org-settings-api-openapi.yml
  - openapi/ibm-api-connect-organization-management-api-openapi.yml
  - openapi/ibm-api-connect-organization-resources-api-openapi.yml
  - openapi/ibm-api-connect-organization-settings-api-openapi.yml
  - openapi/ibm-api-connect-plans-and-quotas-api-openapi.yml
  - openapi/ibm-api-connect-project-api-openapi.yml
  - openapi/ibm-api-connect-provider-management-api-openapi.yml
  - openapi/ibm-api-connect-reconstructed-apis-api-openapi.yml
  - openapi/ibm-api-connect-resource-service-status-api-openapi.yml
  - openapi/ibm-api-connect-space-management-api-openapi.yml
  - openapi/ibm-api-connect-space-resource-api-openapi.yml
  - openapi/ibm-api-connect-space-resources-api-openapi.yml
  - openapi/ibm-api-connect-space-settings-api-openapi.yml
  - openapi/ibm-api-connect-user-management-api-openapi.yml
  - openapi/ibm-api-connect-webhooks-api-openapi.yml
- scope: api-drafts:view
  description: List the Draft objects, List all Draft API objects in all collections, List the
    Draft API objects, Get the Draft API object by id, Get the Draft API object by name and
    version
  flows:
  - authorizationCode
  - clientCredentials
  - implicit
  - password
  sources:
  - openapi/ibm-api-connect-application-strategy-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resource-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resources-api-openapi.yml
  - openapi/ibm-api-connect-catalog-settings-api-openapi.yml
  - openapi/ibm-api-connect-cloud-management-api-openapi.yml
  - openapi/ibm-api-connect-cloud-settings-api-openapi.yml
  - openapi/ibm-api-connect-data-sources-and-collectors-api-openapi.yml
  - openapi/ibm-api-connect-datapower-nano-gateway-api-porting-advisor-api-openapi.yml
  - openapi/ibm-api-connect-discovery-api-openapi.yml
  - openapi/ibm-api-connect-drafts-api-openapi.yml
  - openapi/ibm-api-connect-logging-specification-api-openapi.yml
  - openapi/ibm-api-connect-my-resources-api-openapi.yml
  - openapi/ibm-api-connect-oauth2-action-api-openapi.yml
  - openapi/ibm-api-connect-org-settings-api-openapi.yml
  - openapi/ibm-api-connect-organization-management-api-openapi.yml
  - openapi/ibm-api-connect-organization-resources-api-openapi.yml
  - openapi/ibm-api-connect-organization-settings-api-openapi.yml
  - openapi/ibm-api-connect-plans-and-quotas-api-openapi.yml
  - openapi/ibm-api-connect-project-api-openapi.yml
  - openapi/ibm-api-connect-provider-management-api-openapi.yml
  - openapi/ibm-api-connect-reconstructed-apis-api-openapi.yml
  - openapi/ibm-api-connect-resource-service-status-api-openapi.yml
  - openapi/ibm-api-connect-space-management-api-openapi.yml
  - openapi/ibm-api-connect-space-resource-api-openapi.yml
  - openapi/ibm-api-connect-space-resources-api-openapi.yml
  - openapi/ibm-api-connect-space-settings-api-openapi.yml
  - openapi/ibm-api-connect-user-management-api-openapi.yml
  - openapi/ibm-api-connect-webhooks-api-openapi.yml
- scope: app-analytics:view
  description: View consumer analytics
  flows:
  - authorizationCode
  - clientCredentials
  - implicit
  - password
  sources:
  - openapi/ibm-api-connect-consumer-analytics-api-openapi.yml
- scope: app:manage
  description: Create a Application object, Clear the Application objects, Update the Application
    object by name or id, Delete the Application object by name or id, Create a Application
    Credential object, Clear the Application Credential objects, Update the Application Credential
    object by name or id, Delete the Application Credential object by name or id, Create a Subscription
    object, Clear the Subscription objects, Update the Subscription object by name or id, Delete
    the Subscription object by name or id
  flows:
  - authorizationCode
  - password
  sources:
  - openapi/ibm-api-connect-ai-assets-api-openapi.yml
  - openapi/ibm-api-connect-billing-management-api-openapi.yml
  - openapi/ibm-api-connect-consumer-management-api-openapi.yml
  - openapi/ibm-api-connect-organization-application-api-openapi.yml
  - openapi/ibm-api-connect-portal-api-openapi.yml
  - openapi/ibm-api-connect-products-and-apis-api-openapi.yml
  - openapi/ibm-api-connect-settings-api-openapi.yml
  - openapi/ibm-api-connect-user-api-openapi.yml
- scope: app:manage:all
  description: Create a Application object, Clear the Application objects, Update the Application
    object by name or id, Delete the Application object by name or id, Create a Strategy object,
    Delete the Strategy object by name or id, Clear the Strategy objects, Update the Strategy
    object by name or id, Create a Application Credential object, Update the Application Credential
    object by name or id, Delete the Application Credential object by name or id, Create a Subscription
    object, Clear the Subscription objects, Update the Subscription object by name or id, Delete
    the Subscription object by name or id
  flows:
  - authorizationCode
  - clientCredentials
  - implicit
  - password
  sources:
  - openapi/ibm-api-connect-application-strategy-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resource-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resources-api-openapi.yml
  - openapi/ibm-api-connect-catalog-settings-api-openapi.yml
  - openapi/ibm-api-connect-cloud-management-api-openapi.yml
  - openapi/ibm-api-connect-cloud-settings-api-openapi.yml
  - openapi/ibm-api-connect-consumer-management-api-openapi.yml
  - openapi/ibm-api-connect-datapower-nano-gateway-api-porting-advisor-api-openapi.yml
  - openapi/ibm-api-connect-drafts-api-openapi.yml
  - openapi/ibm-api-connect-logging-specification-api-openapi.yml
  - openapi/ibm-api-connect-my-resources-api-openapi.yml
  - openapi/ibm-api-connect-oauth2-action-api-openapi.yml
  - openapi/ibm-api-connect-org-settings-api-openapi.yml
  - openapi/ibm-api-connect-organization-management-api-openapi.yml
  - openapi/ibm-api-connect-organization-resources-api-openapi.yml
  - openapi/ibm-api-connect-organization-settings-api-openapi.yml
  - openapi/ibm-api-connect-plans-and-quotas-api-openapi.yml
  - openapi/ibm-api-connect-project-api-openapi.yml
  - openapi/ibm-api-connect-provider-management-api-openapi.yml
  - openapi/ibm-api-connect-resource-service-status-api-openapi.yml
  - openapi/ibm-api-connect-space-management-api-openapi.yml
  - openapi/ibm-api-connect-space-resource-api-openapi.yml
  - openapi/ibm-api-connect-space-resources-api-openapi.yml
  - openapi/ibm-api-connect-space-settings-api-openapi.yml
  - openapi/ibm-api-connect-user-management-api-openapi.yml
  - openapi/ibm-api-connect-webhooks-api-openapi.yml
- scope: app:view
  description: List the Application objects, Get the Application object by name or id, List
    the Application Credential objects, Get the Application Credential object by name or id,
    List the Subscription objects, Get the Subscription object by name or id
  flows:
  - authorizationCode
  - password
  sources:
  - openapi/ibm-api-connect-ai-assets-api-openapi.yml
  - openapi/ibm-api-connect-billing-management-api-openapi.yml
  - openapi/ibm-api-connect-consumer-management-api-openapi.yml
  - openapi/ibm-api-connect-organization-application-api-openapi.yml
  - openapi/ibm-api-connect-portal-api-openapi.yml
  - openapi/ibm-api-connect-products-and-apis-api-openapi.yml
  - openapi/ibm-api-connect-settings-api-openapi.yml
  - openapi/ibm-api-connect-user-api-openapi.yml
- scope: app:view:all
  description: List the Application objects, Get the Application object by name or id, List
    the Strategy objects, Get the Strategy object by name or id, List the Application Credential
    objects, Get the Application Credential object by name or id, List the Subscription objects,
    Get the Subscription object by name or id
  flows:
  - authorizationCode
  - clientCredentials
  - implicit
  - password
  sources:
  - openapi/ibm-api-connect-application-strategy-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resource-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resources-api-openapi.yml
  - openapi/ibm-api-connect-catalog-settings-api-openapi.yml
  - openapi/ibm-api-connect-cloud-management-api-openapi.yml
  - openapi/ibm-api-connect-cloud-settings-api-openapi.yml
  - openapi/ibm-api-connect-consumer-management-api-openapi.yml
  - openapi/ibm-api-connect-datapower-nano-gateway-api-porting-advisor-api-openapi.yml
  - openapi/ibm-api-connect-drafts-api-openapi.yml
  - openapi/ibm-api-connect-logging-specification-api-openapi.yml
  - openapi/ibm-api-connect-my-resources-api-openapi.yml
  - openapi/ibm-api-connect-oauth2-action-api-openapi.yml
  - openapi/ibm-api-connect-org-settings-api-openapi.yml
  - openapi/ibm-api-connect-organization-management-api-openapi.yml
  - openapi/ibm-api-connect-organization-resources-api-openapi.yml
  - openapi/ibm-api-connect-organization-settings-api-openapi.yml
  - openapi/ibm-api-connect-plans-and-quotas-api-openapi.yml
  - openapi/ibm-api-connect-project-api-openapi.yml
  - openapi/ibm-api-connect-provider-management-api-openapi.yml
  - openapi/ibm-api-connect-resource-service-status-api-openapi.yml
  - openapi/ibm-api-connect-space-management-api-openapi.yml
  - openapi/ibm-api-connect-space-resource-api-openapi.yml
  - openapi/ibm-api-connect-space-resources-api-openapi.yml
  - openapi/ibm-api-connect-space-settings-api-openapi.yml
  - openapi/ibm-api-connect-user-management-api-openapi.yml
  - openapi/ibm-api-connect-webhooks-api-openapi.yml
- scope: approval:view
  description: List the Task objects, Get the Task object by name or id, Update the Task object
    by name or id, List the Task History objects, Get the Task History object by name or id
  flows:
  - authorizationCode
  - clientCredentials
  - implicit
  - password
  sources:
  - openapi/ibm-api-connect-application-strategy-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resource-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resources-api-openapi.yml
  - openapi/ibm-api-connect-catalog-settings-api-openapi.yml
  - openapi/ibm-api-connect-cloud-management-api-openapi.yml
  - openapi/ibm-api-connect-cloud-settings-api-openapi.yml
  - openapi/ibm-api-connect-datapower-nano-gateway-api-porting-advisor-api-openapi.yml
  - openapi/ibm-api-connect-drafts-api-openapi.yml
  - openapi/ibm-api-connect-logging-specification-api-openapi.yml
  - openapi/ibm-api-connect-my-resources-api-openapi.yml
  - openapi/ibm-api-connect-oauth2-action-api-openapi.yml
  - openapi/ibm-api-connect-org-settings-api-openapi.yml
  - openapi/ibm-api-connect-organization-management-api-openapi.yml
  - openapi/ibm-api-connect-organization-resources-api-openapi.yml
  - openapi/ibm-api-connect-organization-settings-api-openapi.yml
  - openapi/ibm-api-connect-plans-and-quotas-api-openapi.yml
  - openapi/ibm-api-connect-project-api-openapi.yml
  - openapi/ibm-api-connect-provider-management-api-openapi.yml
  - openapi/ibm-api-connect-resource-service-status-api-openapi.yml
  - openapi/ibm-api-connect-space-management-api-openapi.yml
  - openapi/ibm-api-connect-space-resource-api-openapi.yml
  - openapi/ibm-api-connect-space-resources-api-openapi.yml
  - openapi/ibm-api-connect-space-settings-api-openapi.yml
  - openapi/ibm-api-connect-user-management-api-openapi.yml
  - openapi/ibm-api-connect-webhooks-api-openapi.yml
- scope: child:create
  description: Create a Catalog object, Create a Space object
  flows:
  - authorizationCode
  - clientCredentials
  - implicit
  - password
  sources:
  - openapi/ibm-api-connect-application-strategy-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resource-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resources-api-openapi.yml
  - openapi/ibm-api-connect-catalog-settings-api-openapi.yml
  - openapi/ibm-api-connect-cloud-management-api-openapi.yml
  - openapi/ibm-api-connect-cloud-settings-api-openapi.yml
  - openapi/ibm-api-connect-datapower-nano-gateway-api-porting-advisor-api-openapi.yml
  - openapi/ibm-api-connect-drafts-api-openapi.yml
  - openapi/ibm-api-connect-logging-specification-api-openapi.yml
  - openapi/ibm-api-connect-my-resources-api-openapi.yml
  - openapi/ibm-api-connect-oauth2-action-api-openapi.yml
  - openapi/ibm-api-connect-org-settings-api-openapi.yml
  - openapi/ibm-api-connect-organization-management-api-openapi.yml
  - openapi/ibm-api-connect-organization-resources-api-openapi.yml
  - openapi/ibm-api-connect-organization-settings-api-openapi.yml
  - openapi/ibm-api-connect-plans-and-quotas-api-openapi.yml
  - openapi/ibm-api-connect-project-api-openapi.yml
  - openapi/ibm-api-connect-provider-management-api-openapi.yml
  - openapi/ibm-api-connect-resource-service-status-api-openapi.yml
  - openapi/ibm-api-connect-space-management-api-openapi.yml
  - openapi/ibm-api-connect-space-resource-api-openapi.yml
  - openapi/ibm-api-connect-space-resources-api-openapi.yml
  - openapi/ibm-api-connect-space-settings-api-openapi.yml
  - openapi/ibm-api-connect-user-management-api-openapi.yml
  - openapi/ibm-api-connect-webhooks-api-openapi.yml
- scope: child:manage
  description: Clear the Catalog objects, Update the Catalog object by name or id, Delete the
    Catalog object by name or id, Clear the Space objects, Update the Space object by name or
    id, Delete the Space object by name or id
  flows:
  - authorizationCode
  - clientCredentials
  - implicit
  - password
  sources:
  - openapi/ibm-api-connect-application-strategy-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-management-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resource-api-openapi.yml
  - openapi/ibm-api-connect-catalog-resources-api-openapi.yml
  - openapi/ibm-api-connect-catalog-settings-api-openapi.yml
  - openapi/ibm-api-connect-cloud-management-api-openapi.yml
  - openapi/ibm-api-connect-cloud-settings-api-openapi.yml
  - openapi/ibm-api-connect-datapower-nano-gateway-api-porting-advisor-api-openapi.yml
  - openapi/ibm-api-connect-drafts-api-openapi.yml


# --- truncated at 32 KB (74 KB total) ---
# Full source: https://artifacts.apis.io/ibm-api-connect/scopes/ibm-api-connect-scopes.yml

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this
  • find_scopesBrowse and filter every scope set in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This scope set
curl "https://apis.io/api/v1/scopes/ibm-api-connect-scopes"
All oauth scopes
curl "https://apis.io/api/v1/scopes?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.