Thoropass · OAuth Scopes

Thoropass OAuth Scopes

OAuth 2.0 searched

Thoropass publishes 24 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Thoropass API on a user’s behalf.

Tokens are issued from https://api.thoropass.com/oauth/token/.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyFintechComplianceCompliance AutomationAuditSecurityCybersecurityGRCSOC 2MCP

Scopes: 24 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://app.thoropass.com/partner-api

Token URL
https://api.thoropass.com/oauth/token/

Flows
authorizationCode

Scopes (24)

Scope	Description	Flows
alertConfiguration:read	Read compliance monitoring alert configurations
alertConfiguration:write	Manage compliance monitoring alert configurations
alertEvent:read	Read triggered monitoring alert events
alertEvent:write	Manage/acknowledge monitoring alert events
integrationUser:read	Read integration (service) user records
integrationUser:write	Manage integration (service) user records
device:read	Read managed device / endpoint inventory
device:write	Manage device / endpoint inventory records
changeRequest:read	Read change requests
changeRequest:write	Create or update change requests
training:read	Read security-awareness training records
training:write	Manage security-awareness training records
vulnerabilityScanConfiguration:read	Read vulnerability-scan configurations
vulnerabilityScanConfiguration:write	Manage vulnerability-scan configurations
vulnerabilityScan:read	Read vulnerability scans
vulnerabilityScan:write	Trigger or manage vulnerability scans
vulnerability:read	Read discovered vulnerabilities
vulnerability:write	Manage / triage discovered vulnerabilities
audit:read	Read audit records and audit lifecycle state
audit:write	Manage audit records and audit lifecycle
evidenceRequest:read	Read auditor evidence requests
evidenceRequest:write	Fulfill / respond to auditor evidence requests
globalControl:read	Read the global control library
mcp:invoke	Invoke tools on the Thoropass hosted MCP server

📄 Provider scope reference: https://docs.thoropass.com/mcp

Source

OAuth Scopes

generated: '2026-07-21'
method: searched
source: https://api.thoropass.com/.well-known/oauth-authorization-server
docs: https://docs.thoropass.com/mcp
schemes:
- name: OAuth2
  source: https://api.thoropass.com/.well-known/oauth-authorization-server
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.thoropass.com/partner-api
    tokenUrl: https://api.thoropass.com/oauth/token/
scopes:
- {scope: 'alertConfiguration:read',  description: Read compliance monitoring alert configurations}
- {scope: 'alertConfiguration:write', description: Manage compliance monitoring alert configurations}
- {scope: 'alertEvent:read',          description: Read triggered monitoring alert events}
- {scope: 'alertEvent:write',         description: Manage/acknowledge monitoring alert events}
- {scope: 'integrationUser:read',     description: Read integration (service) user records}
- {scope: 'integrationUser:write',    description: Manage integration (service) user records}
- {scope: 'device:read',              description: Read managed device / endpoint inventory}
- {scope: 'device:write',             description: Manage device / endpoint inventory records}
- {scope: 'changeRequest:read',       description: Read change requests}
- {scope: 'changeRequest:write',      description: Create or update change requests}
- {scope: 'training:read',            description: Read security-awareness training records}
- {scope: 'training:write',           description: Manage security-awareness training records}
- {scope: 'vulnerabilityScanConfiguration:read',  description: Read vulnerability-scan configurations}
- {scope: 'vulnerabilityScanConfiguration:write', description: Manage vulnerability-scan configurations}
- {scope: 'vulnerabilityScan:read',   description: Read vulnerability scans}
- {scope: 'vulnerabilityScan:write',  description: Trigger or manage vulnerability scans}
- {scope: 'vulnerability:read',        description: Read discovered vulnerabilities}
- {scope: 'vulnerability:write',       description: Manage / triage discovered vulnerabilities}
- {scope: 'audit:read',                description: Read audit records and audit lifecycle state}
- {scope: 'audit:write',               description: Manage audit records and audit lifecycle}
- {scope: 'evidenceRequest:read',      description: Read auditor evidence requests}
- {scope: 'evidenceRequest:write',     description: Fulfill / respond to auditor evidence requests}
- {scope: 'globalControl:read',        description: Read the global control library}
- {scope: 'mcp:invoke',                description: Invoke tools on the Thoropass hosted MCP server}