Loopio · OAuth Scopes

Loopio OAuth Scopes

OAuth 2.0 searched

Loopio publishes 52 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the Loopio API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyRFPProposalsResponse ManagementContent LibrarySales EnablementQuestionnairesComplianceCollaborationDocumentsWebhookSoftware-as-a-Service

Scopes: 52 Flows: Method: searched

Scopes (52)

Scope	Description	Flows
appLoopioManaged:delete
appLoopioManaged:read
appLoopioManaged:write
businessUnit:read
config.cloudStorage:read
contentIntegration:read
crm:delete
crm:read	List CRM opportunities linked to projects	authorizationCode, clientCredentials
crm:write	Link CRM opportunities to projects	authorizationCode, clientCredentials
customProjectField:delete
customProjectField:read
customProjectField:write
customer.info:read	View customer information	authorizationCode, clientCredentials
documentContent:read
file:delete	Delete files	authorizationCode, clientCredentials
file:read	Download files and view file information	authorizationCode, clientCredentials
file:write
library:delete	Delete Library Entries	authorizationCode, clientCredentials
library:read	List Library Entries and stacks, view Library Entries and Entry data	authorizationCode, clientCredentials
library:write	Create and update Library Entries and Entry data	authorizationCode, clientCredentials
mcp.prompts:all
mcp.resources:all
mcp.tools:all
mergeVariable:delete	Delete Merge Variables	authorizationCode, clientCredentials
mergeVariable:read	View Merge Variables	authorizationCode, clientCredentials
mergeVariable:write	Create/Edit Merge Variables	authorizationCode, clientCredentials
metrics:write
msDynamics:delete
msDynamics:read
msDynamics:write
notification.msDynamics:write
pitchPartner:all
project.participant:read	List participants of a project	authorizationCode, clientCredentials
project.participant:write	Update participant information	authorizationCode, clientCredentials
project:delete	Delete a Project	authorizationCode, clientCredentials
project:read	List Projects, view Project data and source documents	authorizationCode, clientCredentials
project:write	Create and update Projects, Project data, and source documents	authorizationCode, clientCredentials
role:read	List user assignable roles	authorizationCode, clientCredentials
salesforce:read
salesforce:write
scim.group:read
scim.group:write
scim.user:read
scim.user:write
unifiedAnswer:all
user:delete
user:read	List users, view user information	authorizationCode, clientCredentials
user:write	Update user information	authorizationCode, clientCredentials
webhook:delete	Delete webhook subscriptions	authorizationCode, clientCredentials
webhook:read	View webhook subscriptions	authorizationCode, clientCredentials
webhook:write	Create & edit webhook subscriptions	authorizationCode, clientCredentials
zendesk:write

📄 Provider scope reference: https://developer.loopio.com/docs/loopio-api/c56ffe1fdae3e-getting-started-with-the-loopio-api

Source

OAuth Scopes

generated: '2026-08-25'
method: searched
source: https://api.loopio.com/.well-known/oauth-authorization-server
docs: https://developer.loopio.com/docs/loopio-api/c56ffe1fdae3e-getting-started-with-the-loopio-api
derived_from:
- openapi/loopio-openapi.yaml
- well-known/loopio-oauth-authorization-server.json
scheme: loopio_auth
flows:
- authorizationCode
- clientCredentials
token_endpoint: https://api.loopio.com/oauth2/access_token
authorization_endpoint: https://api.loopio.com/oauth2/authorize
delimiter: space (URL-encoded as +)
counts:
  declared_in_openapi: 22
  advertised_by_authorization_server: 51
  applied_to_operations: 26
  advertised_but_not_in_openapi: 30
notes:
- The authorization server advertises 51 scopes; the published OpenAPI declares only 22. The 30 extra
  scopes describe surfaces Loopio operates but does not document in the public contract.
- Scopes are fixed at App creation time and cannot be edited afterwards.
- businessUnit:write is applied to bulkAssignBusinessUnitUsers but is NOT declared in the securityScheme
  scopes map — an in-spec inconsistency.
scopes:
- scope: appLoopioManaged:delete
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: appLoopioManaged:read
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: appLoopioManaged:write
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: businessUnit:read
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: config.cloudStorage:read
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: contentIntegration:read
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: crm:delete
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: crm:read
  description: List CRM opportunities linked to projects
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 1
  operations:
  - listCRMProjects
- scope: crm:write
  description: Link CRM opportunities to projects
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 1
  operations:
  - createOpportunityLink
- scope: customProjectField:delete
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 1
  operations:
  - deleteCustomProjectField
- scope: customProjectField:read
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 2
  operations:
  - getCustomProjectField
  - listCustomProjectFields
- scope: customProjectField:write
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 2
  operations:
  - createCustomProjectField
  - updateCustomProjectField
- scope: customer.info:read
  description: View customer information
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: false
  operation_count: 2
  operations:
  - getCustomer
  - getCustomerActiveLanguages
- scope: documentContent:read
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: file:delete
  description: Delete files
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 1
  operations:
  - deleteFile
- scope: file:read
  description: Download files and view file information
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 1
  operations:
  - showFile
- scope: file:write
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: library:delete
  description: Delete Library Entries
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 1
  operations:
  - deleteLibraryEntry
- scope: library:read
  description: List Library Entries and stacks, view Library Entries and Entry data
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 7
  operations:
  - getLibraryEntry
  - getLibraryEntryFiles
  - getLibraryEntryHistories
  - getLibraryEntryHistory
  - getTags
  - listLibraryEntries
  - listStacks
- scope: library:write
  description: Create and update Library Entries and Entry data
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 6
  operations:
  - bulkCreateLibraryEntries
  - createLibraryEntry
  - deleteLibraryEntryAttachment
  - replaceLibraryEntryAttachment
  - updateLibraryEntry
  - uploadLibraryEntryAttachment
- scope: mcp.prompts:all
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: mcp.resources:all
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: mcp.tools:all
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: mergeVariable:delete
  description: Delete Merge Variables
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 1
  operations:
  - deleteMergeVariable
- scope: mergeVariable:read
  description: View Merge Variables
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 4
  operations:
  - getMergeVariable
  - getMergeVariableHistory
  - getMergeVariableValuesForProject
  - listMergeVariables
- scope: mergeVariable:write
  description: Create/Edit Merge Variables
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 3
  operations:
  - createMergeVariable
  - setMergeVariableValuesForProject
  - updateMergeVariable
- scope: metrics:write
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: msDynamics:delete
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: msDynamics:read
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: msDynamics:write
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: notification.msDynamics:write
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: pitchPartner:all
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: project.participant:read
  description: List participants of a project
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 1
  operations:
  - getProjectParticipants
- scope: project.participant:write
  description: Update participant information
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 1
  operations:
  - updateProjectParticipants
- scope: project:delete
  description: Delete a Project
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 1
  operations:
  - deleteProject
- scope: project:read
  description: List Projects, view Project data and source documents
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 15
  operations:
  - getCustomProjectFieldValuesForProject
  - getMergeVariableValuesForProject
  - getProject
  - getProjectEntry
  - getProjectEntryAttachments
  - getProjectSection
  - getProjectSubQuestion
  - getProjectSummary
  - getProjectSummaryList
  - listProjectEntries
  - listProjectSections
  - listProjectSourceDocuments
  - listProjectSubSections
  - listProjectTemplates
  - listProjects
- scope: project:write
  description: Create and update Projects, Project data, and source documents
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 18
  operations:
  - addProjectSourceDocument
  - createProject
  - createProjectEntry
  - createProjectFromTemplate
  - createProjectSection
  - createProjectSubSection
  - deleteProjectEntry
  - deleteProjectEntryAttachment
  - deleteProjectSection
  - deleteProjectSubSection
  - replaceProjectEntryAttachment
  - setCustomProjectFieldValuesForProject
  - setMergeVariableValuesForProject
  - updateProject
  - updateProjectEntry
  - updateProjectSection
  - updateProjectSubSection
  - uploadProjectEntryAttachment
- scope: role:read
  description: List user assignable roles
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 2
  operations:
  - getRole
  - listRoles
- scope: salesforce:read
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: salesforce:write
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: scim.group:read
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: scim.group:write
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: scim.user:read
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: scim.user:write
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: unifiedAnswer:all
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: user:delete
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0
- scope: user:read
  description: List users, view user information
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 5
  operations:
  - getTeam
  - getUser
  - identifyUser
  - listTeams
  - listUsers
- scope: user:write
  description: Update user information
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 7
  operations:
  - bulkAssignRole
  - bulkAssignUsersToTeams
  - bulkRemoveUsers
  - bulkResendActivationEmail
  - bulkUserDisableByEmail
  - createUser
  - updateUser
- scope: webhook:delete
  description: Delete webhook subscriptions
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 1
  operations:
  - cancelWebhookSubscription
- scope: webhook:read
  description: View webhook subscriptions
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 2
  operations:
  - getWebhookSubscription
  - listWebhookSubscriptions
- scope: webhook:write
  description: Create & edit webhook subscriptions
  flows:
  - authorizationCode
  - clientCredentials
  in_openapi: true
  advertised_by_authorization_server: true
  operation_count: 3
  operations:
  - createWebhookSubscription
  - refreshWebhookSigningSecret
  - updateWebhookSubscription
- scope: zendesk:write
  in_openapi: false
  advertised_by_authorization_server: true
  operation_count: 0

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/loopio-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.