Reachdesk · OAuth Scopes

Reachdesk OAuth Scopes

OAuth 2.0 probed

Reachdesk uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Corporate GiftingDirect MailSwagB2BSales EnablementCustomer SuccessMarketing AutomationGifting PlatformRewardsMCPAI AgentsOpenAPI

Scopes: 0 Flows: Method: probed

Scopes (0)

Reachdesk implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-13'
method: probed
source: https://app.reachdesk.com/.well-known/oauth-authorization-server
docs: null
description: >-
  Reachdesk publishes exactly two OAuth scopes, and they belong to its remote MCP
  server rather than to its REST API. They are read from the provider's own RFC
  8414 authorization-server metadata and its RFC 9728 protected-resource metadata,
  which agree. The REST API has no scope model at all — it authenticates with a
  single organization-wide API token that carries every permission the
  organization has.
authorization_server: https://app.reachdesk.com
resource: https://app.reachdesk.com
surface: mcp
scope_count: 2
scopes:
  - name: mcp:tools.user.read
    description: >-
      Read access to MCP tools acting on behalf of the authenticated Reachdesk
      user. Description is inferred from the scope name — Reachdesk publishes the
      scope string with no human-readable description and no scopes reference page.
      Advertised in both scopes_supported lists.
    access: read
    documented_description: false
  - name: mcp:tools.user.write
    description: >-
      Write access to MCP tools acting on behalf of the authenticated Reachdesk
      user. Description inferred from the scope name; not documented by the
      provider.
    access: write
    documented_description: false
grant_types:
  - authorization_code
  - client_credentials
  - refresh_token
pkce: S256
dynamic_client_registration: true
notes:
  - >-
    The `user` segment in both scope names indicates tools are scoped to the
    calling user, which mirrors the REST API's `sender` field (a send is always
    made on behalf of a platform user).
  - >-
    No scopes/permissions reference page exists on reachdesk.readme.io or in the
    Reachdesk knowledge base. method is `probed` rather than `searched` for exactly
    that reason: these values come from a machine-readable endpoint, not from docs.
  - >-
    The REST API's OpenAPI declares a single apiKey security scheme with no scopes.
    Nothing here applies to https://app.reachdesk.com/api/v2.

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/reachdesk-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.