Onshape · OAuth Scopes

Onshape OAuth Scopes

OAuth 2.0 searched

Onshape publishes 24 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Onshape API on a user’s behalf.

Tokens are issued from /oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyCADPLMProduct Data ManagementEngineeringManufacturingDesignCloudDeveloper Tools

Scopes: 24 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
/oauth/authorize

Token URL
/oauth/token

Flows
authorizationCode

Scopes (24)

Scope	Description	Flows
OAuth2Delete	Application can delete your documents and workspaces	authorizationCode
OAuth2Internal	Application is Onshape Internal	authorizationCode
OAuth2Purchase	Application can request purchases on your behalf	authorizationCode
OAuth2Read	Application can read your documents	authorizationCode
OAuth2ReadPII	Application can read your profile information	authorizationCode
OAuth2Share	Application can share and unshare documents on your behalf	authorizationCode
OAuth2Write	Application can write to your documents	authorizationCode
PLMIntegration	PLM automation can invoke limited operations	authorizationCode
document.create	Atlas Application can create a document	authorizationCode
document.delete	Atlas Application can delete a document	authorizationCode
document.edit	Atlas Application can edit a document	authorizationCode
document.read	Atlas Application can read a document	authorizationCode
enterprise.create	Atlas Application can create an enterprise	authorizationCode
enterprise.delete	Atlas Application can delete an enterprise	authorizationCode
enterprise.edit	Atlas Application can edit an enterprise	authorizationCode
enterprise.member.create	Atlas Application can create an enterprise member	authorizationCode
enterprise.member.delete	Atlas Application can delete a member from an enterprise	authorizationCode
enterprise.member.edit	Atlas Application can edit the details of an enterprise member	authorizationCode
enterprise.member.read	Atlas Application can read the details of an enterprise member	authorizationCode
enterprise.read	Atlas Application can read from an enterprise	authorizationCode
webhook.create	Atlas Application can create a webhook on behalf of the logged-in user	authorizationCode
webhook.delete	Atlas Application can delete a webhook on behalf of the logged-in user	authorizationCode
webhook.edit	Atlas Application can edit a webhook on behalf of the logged-in user	authorizationCode
webhook.read	Atlas Application can read a webhook on behalf of the logged-in user	authorizationCode

📄 Provider scope reference: https://onshape-public.github.io/docs/auth/oauth/

Source

OAuth Scopes

generated: '2026-07-20'
method: searched
source: openapi/onshape-openapi-original.json
docs: https://onshape-public.github.io/docs/auth/oauth/
schemes:
- name: OAuth2
  source: openapi/onshape-openapi-original.json
  flows:
  - flow: authorizationCode
    authorizationUrl: /oauth/authorize
    tokenUrl: /oauth/token
  description: Use OAuth 2.0 to authenticate requests.
scopes:
- scope: OAuth2Delete
  description: Application can delete your documents and workspaces
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: OAuth2Internal
  description: Application is Onshape Internal
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: OAuth2Purchase
  description: Application can request purchases on your behalf
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: OAuth2Read
  description: Application can read your documents
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: OAuth2ReadPII
  description: Application can read your profile information
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: OAuth2Share
  description: Application can share and unshare documents on your behalf
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: OAuth2Write
  description: Application can write to your documents
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: PLMIntegration
  description: PLM automation can invoke limited operations
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: document.create
  description: Atlas Application can create a document
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: document.delete
  description: Atlas Application can delete a document
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: document.edit
  description: Atlas Application can edit a document
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: document.read
  description: Atlas Application can read a document
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: enterprise.create
  description: Atlas Application can create an enterprise
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: enterprise.delete
  description: Atlas Application can delete an enterprise
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: enterprise.edit
  description: Atlas Application can edit an enterprise
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: enterprise.member.create
  description: Atlas Application can create an enterprise member
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: enterprise.member.delete
  description: Atlas Application can delete a member from an enterprise
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: enterprise.member.edit
  description: Atlas Application can edit the details of an enterprise member
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: enterprise.member.read
  description: Atlas Application can read the details of an enterprise member
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: enterprise.read
  description: Atlas Application can read from an enterprise
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: webhook.create
  description: Atlas Application can create a webhook on behalf of the logged-in user
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: webhook.delete
  description: Atlas Application can delete a webhook on behalf of the logged-in user
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: webhook.edit
  description: Atlas Application can edit a webhook on behalf of the logged-in user
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json
- scope: webhook.read
  description: Atlas Application can read a webhook on behalf of the logged-in user
  flows:
  - authorizationCode
  sources:
  - openapi/onshape-openapi-original.json