Lightfield · OAuth Scopes

Lightfield OAuth Scopes

OAuth 2.0 searched

Lightfield publishes 26 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the Lightfield API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyApplicationCRMSalesArtificial IntelligenceAgentsGo-To-MarketProductivitySoftware-as-a-Service

Scopes: 26 Flows: Method: searched

Scopes (26)

Scope	Description	Flows
accounts:create	Create accounts
accounts:update	Update accounts
accounts:read	Read accounts
contacts:create	Create contacts
contacts:update	Update contacts
contacts:read	Read contacts
opportunities:create	Create opportunities
opportunities:update	Update opportunities
opportunities:read	Read opportunities
meetings:create	Create meetings
meetings:update	Update meetings
meetings:read	Read meetings
tasks:create	Create tasks
tasks:update	Update tasks
tasks:read	Read tasks
notes:create	Create notes
notes:update	Update notes
notes:read	Read notes
lists:create	Create lists
lists:update	Update lists
lists:read	Read lists
files:create	Create, complete, and cancel file uploads
files:read	Read files and signed download URLs
emails:create	Send emails through connected mailboxes
emails:read	Read synced emails
members:read	Read members

📄 Provider scope reference: https://docs.lightfield.app/using-the-api/scopes/

Source

OAuth Scopes

generated: '2026-07-19'
method: searched
source: openapi/lightfield-openapi-original.yml
docs: https://docs.lightfield.app/using-the-api/scopes/
model: api-key-scopes
notes: >-
  Lightfield's REST API does not use OAuth 2 — the mechanical OAuth derivation over the OpenAPI
  found no oauth2 security scheme. Scopes are nonetheless a real, published permission surface:
  they are selected at API-key creation time and bound to the key, following an
  `<object>:<permission>` naming convention. A key's effective access is the intersection of its
  granted scopes and the roles of the admin who created it. Separately, the hosted MCP server at
  mcp.lightfield.app uses OAuth 2.1 with its own (much smaller) scope set — recorded below under
  oauth_scopes.
schemes:
- name: bearerAuth
  type: http
  scheme: bearer
  key_prefix: sk_lf_
  source: openapi/lightfield-openapi-original.yml
  scope_binding: at key creation (admin only)
  management_url: https://crm.lightfield.app/crm/settings/api-keys
scope_convention: '<object>:<create|update|read>'
scopes:
- scope: accounts:create
  description: Create accounts
- scope: accounts:update
  description: Update accounts
- scope: accounts:read
  description: Read accounts
- scope: contacts:create
  description: Create contacts
- scope: contacts:update
  description: Update contacts
- scope: contacts:read
  description: Read contacts
- scope: opportunities:create
  description: Create opportunities
- scope: opportunities:update
  description: Update opportunities
- scope: opportunities:read
  description: Read opportunities
- scope: meetings:create
  description: Create meetings
- scope: meetings:update
  description: Update meetings
- scope: meetings:read
  description: Read meetings
- scope: tasks:create
  description: Create tasks
- scope: tasks:update
  description: Update tasks
- scope: tasks:read
  description: Read tasks
- scope: notes:create
  description: Create notes
- scope: notes:update
  description: Update notes
- scope: notes:read
  description: Read notes
- scope: lists:create
  description: Create lists
- scope: lists:update
  description: Update lists
- scope: lists:read
  description: Read lists
- scope: files:create
  description: Create, complete, and cancel file uploads
- scope: files:read
  description: Read files and signed download URLs
- scope: emails:create
  description: Send emails through connected mailboxes
- scope: emails:read
  description: Read synced emails
- scope: members:read
  description: Read members
scope_count: 26
oauth_scopes:
  context: hosted MCP server (https://mcp.lightfield.app/mcp)
  issuer: https://api.stytch.lightfield.app
  metadata: well-known/lightfield-oauth-authorization-server.json
  scopes:
  - scope: openid
    description: OpenID Connect authentication
  - scope: offline_access
    description: Refresh-token issuance for long-lived agent sessions
enforcement:
  insufficient_scope_status: 403
  insufficient_scope_type: forbidden
guidance:
- Grant only the scopes an integration requires; restrict to read-only scopes where no mutation is
  needed.
- Create dedicated keys per integration so access can be revoked independently.
- Rotate keys periodically; revocation is immediate and permanent.

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/lightfield-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.