Stack Exchange · OAuth Scopes

Stack Exchange OAuth Scopes

OAuth 2.0 derived

Stack Exchange publishes 4 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Stack Exchange API on a user’s behalf.

Tokens are issued from https://stackoverflow.com/oauth/access_token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Q&ADeveloper CommunityKnowledge GraphStack OverflowStack ExchangeReputationTagsCommunityMCPAI Grounding

Scopes: 4 Flows: authorizationCode Method: derived

OAuth endpoints

Authorization URL
https://stackoverflow.com/oauth

Token URL
https://stackoverflow.com/oauth/access_token

Flows
authorizationCode

Scopes (4)

Scope	Description	Flows
no_expiry	Issue a token that never expires.	authorizationCode
private_info	Access endpoints that return personal information.	authorizationCode
read_inbox	Access the authenticated user's inbox.	authorizationCode
write_access	Vote, post, comment, flag, accept on the user's behalf.	authorizationCode

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-11'
method: derived
source: openapi/stackexchange-api-v2-3.yaml
schemes:
- name: oauth2
  source: openapi/stackexchange-api-v2-3.yaml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://stackoverflow.com/oauth
    tokenUrl: https://stackoverflow.com/oauth/access_token
  description: |-
    OAuth 2.0 explicit or implicit flow. Apps register on stackapps.com.
    Read methods do not require auth; write methods require `write_access`.
    `private_info` is needed for /me/notifications, /me/inbox, and similar
    private surfaces. `no_expiry` issues tokens that never expire.
scopes:
- scope: no_expiry
  description: Issue a token that never expires.
  flows:
  - authorizationCode
  sources:
  - openapi/stackexchange-api-v2-3.yaml
- scope: private_info
  description: Access endpoints that return personal information.
  flows:
  - authorizationCode
  sources:
  - openapi/stackexchange-api-v2-3.yaml
- scope: read_inbox
  description: Access the authenticated user's inbox.
  flows:
  - authorizationCode
  sources:
  - openapi/stackexchange-api-v2-3.yaml
- scope: write_access
  description: Vote, post, comment, flag, accept on the user's behalf.
  flows:
  - authorizationCode
  sources:
  - openapi/stackexchange-api-v2-3.yaml

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/stackexchange-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.