Roboflow · OAuth Scopes

Roboflow OAuth Scopes

OAuth 2.0 searched

Roboflow publishes 67 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Roboflow API on a user’s behalf.

Tokens are issued from https://app.roboflow.com/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Computer VisionMachine LearningArtificial IntelligenceObject DetectionImage AnnotationModel TrainingInferenceMLOpsEdge AIDatasets
Scopes: 67 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://app.roboflow.com/oauth/authorize
Token URL
https://app.roboflow.com/oauth/token
Flows
authorizationCode

Scopes (67)

ScopeDescriptionFlows
workspace:read Read workspace details, list projects authorizationCode
project:create Create projects authorizationCode
project:read Read project details authorizationCode
project:update Update project settings authorizationCode
workflow:create Create Workflows authorizationCode
workflow:read Read Workflows authorizationCode
workflow:update Update Workflows authorizationCode
folder:create Create project folders authorizationCode
folder:read Read project folders authorizationCode
folder:update Update project folders authorizationCode
folder:delete Delete project folders authorizationCode
image:create Upload images authorizationCode
image:read Read and download images authorizationCode
image:tag Add and remove image tags authorizationCode
image:annotate Create and update annotations authorizationCode
model:infer Run inference authorizationCode
model:deploy Deploy models authorizationCode
model:manage Manage model settings authorizationCode
model-eval:read Read model evaluation results authorizationCode
device:read Read devices authorizationCode
device:update Update device settings authorizationCode
vision-events:read Read vision events authorizationCode
vision-events:write Create vision events authorizationCode
vision-events:manage Manage vision event use cases authorizationCode
workspace-stats:read Read workspace statistics authorizationCode
batch:create authorizationCode
batch:read Read batches authorizationCode
batch:admin-read authorizationCode
batch:update authorizationCode
batch:delete authorizationCode
version:create Create dataset versions authorizationCode
version:read Read dataset versions authorizationCode
version:update Update dataset versions authorizationCode
training-job:create Start training jobs authorizationCode
annotation-job:create Create annotation jobs authorizationCode
annotation-job:read Read annotation jobs authorizationCode
annotation-job:update authorizationCode
annotation-job:submit-review authorizationCode
annotation-job:review authorizationCode
annotation-job:return-edits authorizationCode
annotation-job:accept authorizationCode
annotation-job:delete-annotations authorizationCode
annotation-job:delete authorizationCode
video-inference-job:create Create video inference jobs authorizationCode
video-inference-job:read Read video inference jobs authorizationCode
integration:create Create integrations authorizationCode
integration:delete Delete integrations authorizationCode
credentials:create Create credentials authorizationCode
credentials:read Read credentials authorizationCode
credentials:update Update credentials authorizationCode
credentials:delete Delete credentials authorizationCode
api-key:read authorizationCode
api-key:create authorizationCode
api-key:update authorizationCode
api-key:revoke authorizationCode
datasource:bucket-mirror:read authorizationCode
datasource:bucket-mirror:write authorizationCode
datasource:bucket-mirror:trigger authorizationCode
data-staging:read Read staged data authorizationCode
data-staging:write Write staged data authorizationCode
data-staging:delete Delete staged data authorizationCode
batch-processing:read Read batch jobs authorizationCode
batch-processing:trigger Trigger batch processing authorizationCode
openid Required. Returns a stable user ID in the sub claim. authorizationCode
profile Read the user's display name and avatar. authorizationCode
email Read the user's email address. authorizationCode
offline_access Issue a refresh token so the app can keep access after the user leaves. authorizationCode

📄 Provider scope reference: https://docs.roboflow.com/reference/authentication/authentication/sign-in-with-roboflow-getting-started#available-scopes

Source

OAuth Scopes

Raw ↑ 
generated: '2026-08-02'
method: searched
source: https://app.roboflow.com/.well-known/oauth-authorization-server
docs: https://docs.roboflow.com/reference/authentication/authentication/sign-in-with-roboflow-getting-started#available-scopes
notes: Scope list harvested verbatim from the live RFC 8414 authorization-server metadata; descriptions
  taken from the published "Available Scopes" table in the Sign in with Roboflow docs. Scopes present
  in the metadata but absent from the docs table carry no description rather than an invented one.
schemes:
- name: Sign in with Roboflow (OAuth 2.1 / OIDC)
  source: well-known/roboflow-oauth-authorization-server.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.roboflow.com/oauth/authorize
    tokenUrl: https://app.roboflow.com/oauth/token
    pkce:
    - S256
    refresh: true
scope_count: 67
mcp_scope_count: 55
scopes:
- scope: workspace:read
  description: Read workspace details, list projects
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: project:create
  description: Create projects
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: project:read
  description: Read project details
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: project:update
  description: Update project settings
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: workflow:create
  description: Create Workflows
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: workflow:read
  description: Read Workflows
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: workflow:update
  description: Update Workflows
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: folder:create
  description: Create project folders
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: folder:read
  description: Read project folders
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: folder:update
  description: Update project folders
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: folder:delete
  description: Delete project folders
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: image:create
  description: Upload images
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: image:read
  description: Read and download images
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: image:tag
  description: Add and remove image tags
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: image:annotate
  description: Create and update annotations
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: model:infer
  description: Run inference
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: model:deploy
  description: Deploy models
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: model:manage
  description: Manage model settings
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: model-eval:read
  description: Read model evaluation results
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: device:read
  description: Read devices
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: device:update
  description: Update device settings
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: vision-events:read
  description: Read vision events
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: vision-events:write
  description: Create vision events
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: vision-events:manage
  description: Manage vision event use cases
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: workspace-stats:read
  description: Read workspace statistics
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: batch:create
  description: null
  flows:
  - authorizationCode
  mcp_server: false
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: batch:read
  description: Read batches
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: batch:admin-read
  description: null
  flows:
  - authorizationCode
  mcp_server: false
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: batch:update
  description: null
  flows:
  - authorizationCode
  mcp_server: false
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: batch:delete
  description: null
  flows:
  - authorizationCode
  mcp_server: false
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: version:create
  description: Create dataset versions
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: version:read
  description: Read dataset versions
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: version:update
  description: Update dataset versions
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: training-job:create
  description: Start training jobs
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: annotation-job:create
  description: Create annotation jobs
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: annotation-job:read
  description: Read annotation jobs
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: annotation-job:update
  description: null
  flows:
  - authorizationCode
  mcp_server: false
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: annotation-job:submit-review
  description: null
  flows:
  - authorizationCode
  mcp_server: false
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: annotation-job:review
  description: null
  flows:
  - authorizationCode
  mcp_server: false
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: annotation-job:return-edits
  description: null
  flows:
  - authorizationCode
  mcp_server: false
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: annotation-job:accept
  description: null
  flows:
  - authorizationCode
  mcp_server: false
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: annotation-job:delete-annotations
  description: null
  flows:
  - authorizationCode
  mcp_server: false
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: annotation-job:delete
  description: null
  flows:
  - authorizationCode
  mcp_server: false
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: video-inference-job:create
  description: Create video inference jobs
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: video-inference-job:read
  description: Read video inference jobs
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: integration:create
  description: Create integrations
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: integration:delete
  description: Delete integrations
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: credentials:create
  description: Create credentials
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: credentials:read
  description: Read credentials
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: credentials:update
  description: Update credentials
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: credentials:delete
  description: Delete credentials
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: api-key:read
  description: null
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: api-key:create
  description: null
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: api-key:update
  description: null
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: api-key:revoke
  description: null
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: datasource:bucket-mirror:read
  description: null
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: datasource:bucket-mirror:write
  description: null
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: datasource:bucket-mirror:trigger
  description: null
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: data-staging:read
  description: Read staged data
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: data-staging:write
  description: Write staged data
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: data-staging:delete
  description: Delete staged data
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: batch-processing:read
  description: Read batch jobs
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: batch-processing:trigger
  description: Trigger batch processing
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: openid
  description: Required. Returns a stable user ID in the sub claim.
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: profile
  description: Read the user's display name and avatar.
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: email
  description: Read the user's email address.
  flows:
  - authorizationCode
  mcp_server: true
  sources:
  - well-known/roboflow-oauth-authorization-server.json
- scope: offline_access
  description: Issue a refresh token so the app can keep access after the user leaves.
  flows:
  - authorizationCode
  mcp_server: false
  sources:
  - well-known/roboflow-oauth-authorization-server.json