University of Gothenburg OAuth Scopes

OAuth 2.0 derived

University of Gothenburg uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

UniversityHigher EducationEducationSwedenResearchResearch DataResearch RepositoryOpen DataLibraryOAI-PMHIdentity FederationLanguage TechnologyNatural Language ProcessingCorpus Linguistics

Scopes: 0 Flows: Method: derived

Scopes (0)

University of Gothenburg implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

📄 Provider scope reference:

Source

OAuth Scopes

# x-method: derived
# x-source-url: https://ws.spraakbanken.gu.se/docs/
# Written by API Evangelist for the api-evangelist/university-of-gothenburg repo on
# 2026-09-01. `x-method` uses the provenance-manifest vocabulary; the artifact's own
# `method:` key uses the enrichment-contract vocabulary. They are not in conflict.
generated: '2026-09-01'
method: derived
source: >-
  Derived from the `components.securitySchemes` and per-operation `security` blocks of the six
  Språkbanken Text OpenAPI documents in openapi/_original/, cross-checked against anonymous live
  probes on 2026-09-01.
description: >-
  Scope inventory. The honest headline is that the University of Gothenburg publishes NO named
  OAuth scopes anywhere. Four of the six contracts declare a security scheme; none of them
  enumerates scopes, and the OAuth2 password-bearer flow in Mink declares an empty `scopes`
  object. What exists instead is a coarse two-state model — anonymous read, or an authenticated
  principal with full write on their own resources — expressed below as observed access tiers
  rather than invented scope strings. Nothing here is a scope name the University publishes; do
  not read these ids as such.
x-no-published-scopes: true
tiers:
  - id: anonymous-read
    surfaces:
      - https://ws.spraakbanken.gu.se/ws/korp/v8
      - https://ws.spraakbanken.gu.se/ws/metadata/v3
      - https://ws.spraakbanken.gu.se/ws/sparv/v3
      - https://ws.spraakbanken.gu.se/ws/mink/v3
      - https://spraakbanken4.it.gu.se/karp/v7
      - https://spraakbanken4.it.gu.se/karps/v1
      - https://gupea.ub.gu.se/server/api
      - https://gupea.ub.gu.se/server/oai/request
    grants: >-
      Read every public corpus, lexicon, model, analysis and repository item. Verified by
      anonymous HTTP 200 on all eight surfaces on 2026-09-01.
    obtained_by: nothing — no registration, no key, no header
  - id: korp-protected-corpora
    surfaces: [https://ws.spraakbanken.gu.se/ws/korp/v8]
    scheme: basicAuth (HTTP Basic, declared globally in the Korp specification)
    grants: >-
      Query the corpora Korp reports as protected in its /info response. The corpus set is
      licence-restricted material, not a paid tier.
    obtained_by: >-
      NOT PUBLISHED. The specification declares the scheme but no issuance, application or
      contact flow for credentials is documented in it.
  - id: mink-resource-owner
    surfaces: [https://ws.spraakbanken.gu.se/ws/mink/v3]
    scheme: OAuth2PasswordBearer + APIKeyHeader (declared; `scopes` object is empty)
    grants: >-
      Create, upload to, configure, run, list, publish and delete YOUR OWN corpora and metadata
      resources — the 63-path write surface. Access is per-resource ownership, not per-scope.
    obtained_by: >-
      A Språkbanken Text account, which is a federated login through SWAMID/eduGAIN. This is the
      one place the institution's own identity federation is a prerequisite for calling its own API.
  - id: karp-editor
    surfaces: [https://spraakbanken4.it.gu.se/karp/v7]
    scheme: HTTPBearer + APIKeyQuery
    grants: Create, update, delete and diff entries in a lexical resource; read entry history.
    obtained_by: >-
      NOT PUBLISHED. Karp editing rights are granted internally to lexicographers; no public
      application route is documented in the specification.
  - id: sparv-job-submitter
    surfaces: [https://ws.spraakbanken.gu.se/ws/sparv/v3]
    scheme: ApiKeyAuth
    grants: Upload a corpus, run the annotation pipeline, download results, force cleanup.
    obtained_by: NOT PUBLISHED in the specification.
  - id: dspace-write
    surfaces: [https://gupea.ub.gu.se/server/api]
    scheme: DSpace JWT via the `authn` link advertised in the HAL root
    grants: Deposit and edit items in GUPEA.
    obtained_by: A University of Gothenburg library account. Staff surface, not a public API tier.

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/university-of-gothenburg-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.