Synack · OAuth Scopes

Synack OAuth Scopes

OAuth 2.0 derived

Synack publishes 21 OAuth 2.0 scopes via the implicit flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Synack API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanySecurityPenetration TestingVulnerability ManagementAttack Surface ManagementCrowdsourced SecurityComplianceAPI

Scopes: 21 Flows: implicit Method: derived

OAuth endpoints

Authorization URL
login.synack.com

Flows
implicit

Scopes (21)

Scope	Description	Flows
asset_boss_lw	Grants per-listing write access to assets that may be modified by BOSS users.	implicit
asset_boss_ow	Grants organization-level access to assets owned by a particular organization that may be modified by BOSS users.	implicit
asset_client_lw	Grants listing-level to write seed groups and seeds.	implicit
asset_client_ow	Grants organization-level access to assets owned by a particular organization that may be modified by Client users.	implicit
asset_gr	Grants unrestricted read access to all assets. Except for credential data of cloud accout assets.	implicit
asset_gw	Grants unrestricted write access to all assets.	implicit
asset_lr	Grants per-listing read access for all types of assets.	implicit
asset_or	Grants organization-level read access for all types of assets owned by a particular organization.	implicit
asset_scan_gr	Grants unrestricted read access to all assets. Including credential data of cloud account assets.	implicit
asset_srt_lr	Grants per-listing read access to assets that may be read by SRTs.	implicit
asset_user_or	Grants user-level read access to asset stats that owned by a particular organization.	implicit
assetdiscovery_gr	Grants global-level to read seed groups and seeds.	implicit
assetdiscovery_lr	Grants listing-level to read seed groups and seeds.	implicit
assetdiscovery_or	Grants organization-level to read seed groups and seeds.	implicit
assetdiscovery_ow	Grants organization-level to create or modify seed groups and seeds.	implicit
tag_gr	Grants global-level to read tags.	implicit
tag_gw	Grants global-level to create or modify tags.	implicit
tag_lr
tag_lw
tag_or	Grants organization-level to read tags.	implicit
tag_ow	Grants organization-level to create or modify tags.	implicit

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-21'
method: derived
source: openapi/synack-asset-discovery-openapi.yaml, openapi/synack-asset-v2-openapi.yaml, openapi/synack-tagging-openapi.yaml,
  openapi/synack-vulns-openapi.yaml
schemes:
- name: OAuth2
  source: openapi/synack-asset-discovery-openapi.yaml
  flows:
  - flow: implicit
    authorizationUrl: login.synack.com
- name: OAuth2
  source: openapi/synack-asset-v2-openapi.yaml
  flows:
  - flow: implicit
    authorizationUrl: login.synack.com
- name: OAuth2
  source: openapi/synack-tagging-openapi.yaml
  flows:
  - flow: implicit
    authorizationUrl: login.synack.com
- name: OAuth2
  source: openapi/synack-vulns-openapi.yaml
  flows:
  - flow: implicit
    authorizationUrl: login.synack.com
scopes:
- scope: asset_boss_lw
  description: Grants per-listing write access to assets that may be modified by BOSS users.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-v2-openapi.yaml
  - openapi/synack-tagging-openapi.yaml
  - openapi/synack-vulns-openapi.yaml
- scope: asset_boss_ow
  description: Grants organization-level access to assets owned by a particular organization
    that may be modified by BOSS users.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-v2-openapi.yaml
  - openapi/synack-tagging-openapi.yaml
  - openapi/synack-vulns-openapi.yaml
- scope: asset_client_lw
  description: Grants listing-level to write seed groups and seeds.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-discovery-openapi.yaml
  - openapi/synack-asset-v2-openapi.yaml
  - openapi/synack-tagging-openapi.yaml
  - openapi/synack-vulns-openapi.yaml
- scope: asset_client_ow
  description: Grants organization-level access to assets owned by a particular organization
    that may be modified by Client users.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-v2-openapi.yaml
  - openapi/synack-tagging-openapi.yaml
  - openapi/synack-vulns-openapi.yaml
- scope: asset_gr
  description: Grants unrestricted read access to all assets. Except for credential data of
    cloud accout assets.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-v2-openapi.yaml
  - openapi/synack-tagging-openapi.yaml
  - openapi/synack-vulns-openapi.yaml
- scope: asset_gw
  description: Grants unrestricted write access to all assets.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-v2-openapi.yaml
  - openapi/synack-tagging-openapi.yaml
  - openapi/synack-vulns-openapi.yaml
- scope: asset_lr
  description: Grants per-listing read access for all types of assets.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-v2-openapi.yaml
  - openapi/synack-tagging-openapi.yaml
  - openapi/synack-vulns-openapi.yaml
- scope: asset_or
  description: Grants organization-level read access for all types of assets owned by a particular
    organization.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-v2-openapi.yaml
  - openapi/synack-tagging-openapi.yaml
  - openapi/synack-vulns-openapi.yaml
- scope: asset_scan_gr
  description: Grants unrestricted read access to all assets. Including credential data of cloud
    account assets.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-v2-openapi.yaml
  - openapi/synack-vulns-openapi.yaml
- scope: asset_srt_lr
  description: Grants per-listing read access to assets that may be read by SRTs.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-v2-openapi.yaml
  - openapi/synack-vulns-openapi.yaml
- scope: asset_user_or
  description: Grants user-level read access to asset stats that owned by a particular organization.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-v2-openapi.yaml
  - openapi/synack-vulns-openapi.yaml
- scope: assetdiscovery_gr
  description: Grants global-level to read seed groups and seeds.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-discovery-openapi.yaml
- scope: assetdiscovery_lr
  description: Grants listing-level to read seed groups and seeds.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-discovery-openapi.yaml
- scope: assetdiscovery_or
  description: Grants organization-level to read seed groups and seeds.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-discovery-openapi.yaml
- scope: assetdiscovery_ow
  description: Grants organization-level to create or modify seed groups and seeds.
  flows:
  - implicit
  sources:
  - openapi/synack-asset-discovery-openapi.yaml
- scope: tag_gr
  description: Grants global-level to read tags.
  flows:
  - implicit
  sources:
  - openapi/synack-tagging-openapi.yaml
- scope: tag_gw
  description: Grants global-level to create or modify tags.
  flows:
  - implicit
  sources:
  - openapi/synack-tagging-openapi.yaml
- scope: tag_lr
  sources:
  - openapi/synack-tagging-openapi.yaml
- scope: tag_lw
  sources:
  - openapi/synack-tagging-openapi.yaml
- scope: tag_or
  description: Grants organization-level to read tags.
  flows:
  - implicit
  sources:
  - openapi/synack-tagging-openapi.yaml
- scope: tag_ow
  description: Grants organization-level to create or modify tags.
  flows:
  - implicit
  sources:
  - openapi/synack-tagging-openapi.yaml